[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 18.779878] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 24.640692] random: sshd: uninitialized urandom read (32 bytes read) [ 24.980952] random: sshd: uninitialized urandom read (32 bytes read) [ 25.721929] random: sshd: uninitialized urandom read (32 bytes read) [ 138.012954] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.54' (ECDSA) to the list of known hosts. [ 143.406278] random: sshd: uninitialized urandom read (32 bytes read) executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 143.514751] EXT4-fs (sda1): re-mounted. Opts: [ 143.519848] EXT4-fs (sda1): re-mounted. Opts: [ 143.525649] EXT4-fs (sda1): re-mounted. Opts: [ 143.530477] EXT4-fs (sda1): re-mounted. Opts: [ 143.535242] EXT4-fs (sda1): re-mounted. Opts: [ 143.539988] EXT4-fs (sda1): re-mounted. Opts: [ 143.544863] EXT4-fs (sda1): re-mounted. Opts: [ 143.549843] EXT4-fs (sda1): re-mounted. Opts: [ 143.554597] EXT4-fs (sda1): re-mounted. Opts: [ 143.560409] EXT4-fs (sda1): re-mounted. Opts: executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 168.040028] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz-executor107:4487] [ 168.047960] Modules linked in: [ 168.051148] irq event stamp: 19141612 [ 168.054958] hardirqs last enabled at (19141611): [] d_walk+0x80f/0xc80 [ 168.063270] hardirqs last disabled at (19141612): [] interrupt_entry+0xb5/0xf0 [ 168.072194] softirqs last enabled at (19140862): [] __do_softirq+0x778/0xaf5 [ 168.081025] softirqs last disabled at (19140855): [] irq_exit+0x1d1/0x200 [ 168.089508] CPU: 0 PID: 4487 Comm: syz-executor107 Not tainted 4.17.0-rc4+ #14 [ 168.097551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.106903] RIP: 0010:__sanitizer_cov_trace_pc+0xa/0x50 [ 168.112256] RSP: 0018:ffff8801adfaf9e8 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 168.119974] RAX: ffff8801ad894040 RBX: 0000000000000001 RCX: ffffffff81c69cfc [ 168.127234] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000001 [ 168.134494] RBP: ffff8801adfafb78 R08: ffff8801ad894040 R09: ffffed003b5c46c2 [ 168.141756] R10: ffffed003b5c46c2 R11: ffff8801dae23613 R12: 00000000000002f6 [ 168.149038] R13: dffffc0000000000 R14: ffff8801a9ad4720 R15: ffff8801adfafb50 [ 168.156306] FS: 0000000001459880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 168.164522] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.170397] CR2: 000000000146a918 CR3: 00000001adc75000 CR4: 00000000001406f0 [ 168.177758] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 168.185019] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 168.192278] Call Trace: [ 168.194865] ? d_walk+0x6f2/0xc80 [ 168.198928] ? d_shrink_del+0x3b0/0x3b0 [ 168.202897] ? dget_parent+0x680/0x680 [ 168.206779] ? shrink_dentry_list+0x5a8/0x7c0 [ 168.211274] ? is_subdir+0x480/0x480 [ 168.214989] ? write_comp_data+0x1b/0x70 [ 168.219051] shrink_dcache_parent+0x179/0x230 [ 168.223547] ? path_has_submounts+0x1a0/0x1a0 [ 168.228040] ? down_write+0x87/0x120 [ 168.231751] ? vfs_rmdir+0xe0/0x470 [ 168.235378] ? down_read+0x1b0/0x1b0 [ 168.239088] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 168.244620] ? security_inode_rmdir+0xf4/0x130 [ 168.249197] vfs_rmdir+0x202/0x470 [ 168.252735] do_rmdir+0x523/0x610 [ 168.256193] ? __ia32_sys_mkdir+0x80/0x80 [ 168.260345] ? exit_to_usermode_loop+0x87/0x310 [ 168.265015] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 168.270549] ? exit_to_usermode_loop+0x1ef/0x310 [ 168.275305] ? do_syscall_64+0x92/0x800 [ 168.279281] __x64_sys_rmdir+0x36/0x40 [ 168.283167] do_syscall_64+0x1b1/0x800 [ 168.287053] ? syscall_return_slowpath+0x5c0/0x5c0 [ 168.291977] ? syscall_return_slowpath+0x30f/0x5c0 [ 168.296906] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 168.302270] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 168.307115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 168.312298] RIP: 0033:0x4411f7 [ 168.315479] RSP: 002b:00007ffc205be7b8 EFLAGS: 00000207 ORIG_RAX: 0000000000000054 [ 168.323184] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00000000004411f7 [ 168.330448] RDX: 0000000000000000 RSI: 00000000006cd858 RDI: 00007ffc205bf8a0 [ 168.337716] RBP: 00007ffc205bf8a0 R08: 0000000000000000 R09: 0000000000000001 [ 168.344989] R10: 0000000000000005 R11: 0000000000000207 R12: 000000000145a8a0 [ 168.352258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.359530] Code: 72 1b 49 83 c1 01 4a 89 7c 10 e0 4a 89 74 10 e8 4a 89 54 10 f0 4a 89 4c d8 20 4c 89 08 5d c3 66 90 55 65 48 8b 04 25 c0 ed 01 00 <65> 8b 15 af bf 88 7e 48 89 e5 81 e2 00 01 1f 00 48 8b 75 08 75 [ 168.378900] Sending NMI from CPU 0 to CPUs 1: [ 168.383395] NMI backtrace for cpu 1 [ 168.383405] CPU: 1 PID: 4486 Comm: syz-executor107 Not tainted 4.17.0-rc4+ #14 [ 168.383409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.383424] RIP: 0010:__sanitizer_cov_trace_pc+0xa/0x50 [ 168.383428] RSP: 0018:ffff8801ade479e8 EFLAGS: 00000293 [ 168.383435] RAX: ffff8801ad88a000 RBX: ffff8801a9adef30 RCX: ffffffff81c693a8 [ 168.383440] RDX: 0000000000000000 RSI: ffffffff81c6943a RDI: 0000000000000005 [ 168.383445] RBP: ffff8801ade47b78 R08: ffff8801ad88a000 R09: ffffed0035356e20 [ 168.383450] R10: ffffed0035356e20 R11: ffff8801a9ab7103 R12: ffff8801a9ab7180 [ 168.383455] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8801ade47b50 [ 168.383461] FS: 0000000001459880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 168.383466] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.383471] CR2: 000000000146a918 CR3: 00000001add3d000 CR4: 00000000001406e0 [ 168.383478] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 168.383483] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 168.383484] Call Trace: [ 168.383495] ? d_walk+0x329/0xc80 [ 168.383504] ? d_shrink_del+0x3b0/0x3b0 [ 168.383512] ? dget_parent+0x680/0x680 [ 168.383520] ? shrink_dentry_list+0x5a8/0x7c0 [ 168.383531] ? retint_kernel+0x10/0x10 [ 168.383539] ? is_subdir+0x480/0x480 [ 168.383547] ? shrink_dcache_parent+0x199/0x230 [ 168.383556] ? __sanitizer_cov_trace_pc+0x1/0x50 [ 168.383565] shrink_dcache_parent+0x179/0x230 [ 168.383574] ? path_has_submounts+0x1a0/0x1a0 [ 168.383582] ? down_write+0x87/0x120 [ 168.383590] ? vfs_rmdir+0xe0/0x470 [ 168.383597] ? down_read+0x1b0/0x1b0 [ 168.383606] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 168.383617] ? security_inode_rmdir+0xf4/0x130 [ 168.383625] vfs_rmdir+0x202/0x470 [ 168.383634] do_rmdir+0x523/0x610 [ 168.383644] ? __ia32_sys_mkdir+0x80/0x80 [ 168.383659] ? exit_to_usermode_loop+0x87/0x310 [ 168.383669] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 168.383677] ? exit_to_usermode_loop+0x1ef/0x310 [ 168.383686] ? do_syscall_64+0x92/0x800 [ 168.383695] __x64_sys_rmdir+0x36/0x40 [ 168.383703] do_syscall_64+0x1b1/0x800 [ 168.383712] ? syscall_return_slowpath+0x5c0/0x5c0 [ 168.383721] ? syscall_return_slowpath+0x30f/0x5c0 [ 168.383731] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 168.383740] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 168.383750] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 168.383756] RIP: 0033:0x4411f7 [ 168.383760] RSP: 002b:00007ffc205be7b8 EFLAGS: 00000207 ORIG_RAX: 0000000000000054 [ 168.383767] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00000000004411f7 [ 168.383771] RDX: 0000000000000000 RSI: 00000000006cd858 RDI: 00007ffc205bf8a0 [ 168.383775] RBP: 00007ffc205bf8a0 R08: 0000000000000000 R09: 0000000000000001 [ 168.383780] R10: 0000000000000005 R11: 0000000000000207 R12: 000000000145a8a0 [ 168.383784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.383788] Code: 72 1b 49 83 c1 01 4a 89 7c 10 e0 4a 89 74 10 e8 4a 89 54 10 f0 4a 89 4c d8 20 4c 89 08 5d c3 66 90 55 65 48 8b 04 25 c0 ed 01 00 <65> 8b 15 af bf 88 7e 48 89 e5 81 e2 00 01 1f 00 48 8b 75 08 75 [ 168.384406] Kernel panic - not syncing: softlockup: hung tasks [ 168.687811] CPU: 0 PID: 4487 Comm: syz-executor107 Tainted: G L 4.17.0-rc4+ #14 [ 168.696551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.705897] Call Trace: [ 168.708474] [ 168.710642] dump_stack+0x1b9/0x294 [ 168.714269] ? dump_stack_print_info.cold.2+0x52/0x52 [ 168.719460] ? printk_safe_log_store+0x260/0x260 [ 168.724217] panic+0x22f/0x4de [ 168.727408] ? add_taint.cold.5+0x16/0x16 [ 168.731557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 168.737097] ? watchdog_timer_fn.cold.5+0xe2/0x126 [ 168.742032] ? watchdog_timer_fn.cold.5+0xd9/0x126 [ 168.746960] watchdog_timer_fn.cold.5+0xf3/0x126 [ 168.751717] __hrtimer_run_queues+0x3e3/0x10a0 [ 168.756308] ? watchdog+0x30/0x30 [ 168.759759] ? hrtimer_start_range_ns+0xd10/0xd10 [ 168.764604] ? pvclock_read_flags+0x160/0x160 [ 168.769099] ? kvm_clock_read+0x25/0x30 [ 168.773072] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 168.778086] ? ktime_get_update_offsets_now+0x3d3/0x5c0 [ 168.783451] ? do_timer+0x50/0x50 [ 168.786903] ? rcu_nmi_exit+0xd7/0x2b0 [ 168.790796] ? do_raw_spin_lock+0xc1/0x200 [ 168.795031] hrtimer_interrupt+0x2f3/0x750 [ 168.799271] smp_apic_timer_interrupt+0x15d/0x710 [ 168.804111] ? smp_call_function_single_interrupt+0x650/0x650 [ 168.809996] ? _raw_spin_lock+0x32/0x40 [ 168.813970] ? _raw_spin_unlock+0x22/0x30 [ 168.818122] ? handle_edge_irq+0x330/0x870 [ 168.822357] ? task_prio+0x50/0x50 [ 168.825917] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 168.830766] apic_timer_interrupt+0xf/0x20 [ 168.835645] [ 168.837894] RIP: 0010:__sanitizer_cov_trace_pc+0xa/0x50 [ 168.843248] RSP: 0018:ffff8801adfaf9e8 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 168.850956] RAX: ffff8801ad894040 RBX: 0000000000000001 RCX: ffffffff81c69cfc [ 168.858229] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000001 [ 168.865489] RBP: ffff8801adfafb78 R08: ffff8801ad894040 R09: ffffed003b5c46c2 [ 168.872751] R10: ffffed003b5c46c2 R11: ffff8801dae23613 R12: 00000000000002f6 [ 168.880012] R13: dffffc0000000000 R14: ffff8801a9ad4720 R15: ffff8801adfafb50 [ 168.887298] ? d_walk+0xbdc/0xc80 [ 168.890753] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 168.896297] ? d_walk+0x6f2/0xc80 [ 168.899752] ? d_shrink_del+0x3b0/0x3b0 [ 168.903726] ? dget_parent+0x680/0x680 [ 168.907612] ? shrink_dentry_list+0x5a8/0x7c0 [ 168.912118] ? is_subdir+0x480/0x480 [ 168.915835] ? write_comp_data+0x1b/0x70 [ 168.919901] shrink_dcache_parent+0x179/0x230 [ 168.924399] ? path_has_submounts+0x1a0/0x1a0 [ 168.928895] ? down_write+0x87/0x120 [ 168.932606] ? vfs_rmdir+0xe0/0x470 [ 168.936230] ? down_read+0x1b0/0x1b0 [ 168.939942] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 168.945477] ? security_inode_rmdir+0xf4/0x130 [ 168.950073] vfs_rmdir+0x202/0x470 [ 168.953625] do_rmdir+0x523/0x610 [ 168.957078] ? __ia32_sys_mkdir+0x80/0x80 [ 168.961236] ? exit_to_usermode_loop+0x87/0x310 [ 168.965915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 168.971543] ? exit_to_usermode_loop+0x1ef/0x310 [ 168.976300] ? do_syscall_64+0x92/0x800 [ 168.980274] __x64_sys_rmdir+0x36/0x40 [ 168.984159] do_syscall_64+0x1b1/0x800 [ 168.988044] ? syscall_return_slowpath+0x5c0/0x5c0 [ 168.992972] ? syscall_return_slowpath+0x30f/0x5c0 [ 168.997906] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 169.003273] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 169.008126] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.013308] RIP: 0033:0x4411f7 [ 169.016490] RSP: 002b:00007ffc205be7b8 EFLAGS: 00000207 ORIG_RAX: 0000000000000054 [ 169.024196] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00000000004411f7 [ 169.031461] RDX: 0000000000000000 RSI: 00000000006cd858 RDI: 00007ffc205bf8a0 [ 169.038722] RBP: 00007ffc205bf8a0 R08: 0000000000000000 R09: 0000000000000001 [ 169.045984] R10: 0000000000000005 R11: 0000000000000207 R12: 000000000145a8a0 [ 169.053247] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.061218] Dumping ftrace buffer: [ 169.064992] (ftrace buffer empty) [ 169.068684] Kernel Offset: disabled [ 169.072303] Rebooting in 86400 seconds..