[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [ 10.657748] random: sshd: uninitialized urandom read (32 bytes read) [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 11.503889] random: crng init done Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.72' (ECDSA) to the list of known hosts. 2019/06/08 09:34:52 parsed 1 programs 2019/06/08 09:34:54 executed programs: 0 syzkaller login: [ 50.886915] audit: type=1400 audit(1559986495.637:5): avc: denied { associate } for pid=2090 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 2019/06/08 09:34:59 executed programs: 261 2019/06/08 09:35:04 executed programs: 615 2019/06/08 09:35:09 executed programs: 967 2019/06/08 09:35:14 executed programs: 1308 2019/06/08 09:35:19 executed programs: 1663 2019/06/08 09:35:24 executed programs: 2017 2019/06/08 09:35:29 executed programs: 2361 2019/06/08 09:35:34 executed programs: 2709 2019/06/08 09:35:39 executed programs: 3068 2019/06/08 09:35:44 executed programs: 3426 2019/06/08 09:35:49 executed programs: 3774 2019/06/08 09:35:54 executed programs: 4138 INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes [ 285.821819] INFO: task syz-executor.0:20696 blocked for more than 140 seconds. [ 285.829251] Not tainted 4.9.180+ #4 [ 285.833679] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.841747] syz-executor.0 D28744 20696 2079 0x80000000 [ 285.847513] 0000000000000083 ffff8801cb03df00 0000000000000000 ffff8801db621000 [ 285.855703] ffff8801cf61c740 ffff8801db621018 ffff8801c8f1fba0 ffffffff8280924e [ 285.863901] 0000000041b58ab3 ffff8801cb03df00 00ff8801c8f1faf0 ffff8801db6218f0 [ 285.872064] Call Trace: [ 285.874654] [<00000000e236aa8e>] ? __schedule+0x6ce/0x1f10 [ 285.880358] [<000000004c2a3de1>] ? io_schedule_timeout+0x390/0x390 [ 285.886961] [<0000000062d7d08e>] ? mark_held_locks+0xb1/0x100 [ 285.893135] [<00000000ac614c31>] ? _raw_spin_unlock_irq+0x28/0x60 [ 285.899460] [<000000006c6899db>] ? rwsem_down_read_failed+0x253/0x3e0 [ 285.908355] [<00000000e3c79803>] schedule+0x92/0x1c0 [ 285.913735] [<00000000d9611372>] rwsem_down_read_failed+0x258/0x3e0 [ 285.920231] [<0000000018f5661d>] ? rt_mutex_futex_unlock+0x10/0x10 [ 285.926753] [<00000000adb863e2>] call_rwsem_down_read_failed+0x18/0x30 [ 285.933602] [<000000008078ba03>] down_read+0x52/0xb0 [ 285.938794] [<0000000057279c13>] ? do_exit+0x3b7/0x2aa0 [ 285.944373] [<0000000057279c13>] do_exit+0x3b7/0x2aa0 [ 285.949655] [<00000000835ded65>] ? trace_hardirqs_off+0xd/0x10 [ 285.955824] [<000000000dfdb8d8>] ? _flat_send_IPI_mask+0x7b/0xb0 [ 285.962144] [<0000000060022833>] ? debug_lockdep_rcu_enabled.part.0+0x40/0x60 [ 285.969507] [<00000000c636b335>] ? release_task+0x14a0/0x14a0 [ 285.975625] [<000000005e32d69f>] ? native_smp_send_reschedule+0x6a/0xa0 [ 285.982602] [<000000004b0844be>] ? kick_process+0xef/0x180 [ 285.988320] [<00000000ac614c31>] ? _raw_spin_unlock_irq+0x28/0x60 [ 285.994777] [<00000000e09d22e3>] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 286.001704] [<000000003395324f>] do_group_exit+0x111/0x300 [ 286.007430] [<000000007008cba0>] SyS_exit_group+0x1d/0x20 [ 286.013227] [<000000000689e2aa>] ? do_group_exit+0x300/0x300 [ 286.019115] [<00000000700f599f>] do_syscall_64+0x1ad/0x5c0 [ 286.025001] [<0000000041edea08>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 286.033133] [ 286.033133] Showing all locks held in the system: [ 286.039456] 2 locks held by khungtaskd/24: [ 286.043992] #0: (rcu_read_lock){......}, at: [<00000000662547c2>] watchdog+0x14b/0xaf0 [ 286.052783] #1: (tasklist_lock){.+.+..}, at: [<000000002931da6b>] debug_show_all_locks+0x7f/0x21f [ 286.062500] 2 locks held by getty/2026: [ 286.066466] #0: (&tty->ldisc_sem){++++++}, at: [<00000000d8ecd42a>] ldsem_down_read+0x33/0x40 [ 286.075888] #1: (&ldata->atomic_read_lock){+.+...}, at: [<00000000d906e554>] n_tty_read+0x1fe/0x1820 [ 286.085899] 1 lock held by syz-executor.0/20696: [ 286.090638] #0: (&mm->mmap_sem){++++++}, at: [<0000000057279c13>] do_exit+0x3b7/0x2aa0 [ 286.099401] 1 lock held by syz-executor.0/20699: [ 286.104160] #0: (&mm->mmap_sem){++++++}, at: [<0000000057279c13>] do_exit+0x3b7/0x2aa0 [ 286.112965] [ 286.114579] ============================================= [ 286.114579] [ 286.121845] NMI backtrace for cpu 0 [ 286.125478] CPU: 0 PID: 24 Comm: khungtaskd Not tainted 4.9.180+ #4 [ 286.131869] ffff8801d98d7cc8 ffffffff81b577f1 0000000000000000 0000000000000000 [ 286.139912] 0000000000000000 ffffffff81099901 dffffc0000000000 ffff8801d98d7d00 [ 286.147967] ffffffff81b62a8c 0000000000000000 0000000000000000 0000000000000000 [ 286.156120] Call Trace: [ 286.158705] [<00000000cb845d0a>] dump_stack+0xc1/0x120 [ 286.164063] [<000000000c8c2dfa>] ? irq_force_complete_move+0x251/0x300 [ 286.170808] [<00000000dfcadf79>] nmi_cpu_backtrace.cold+0x47/0x87 [ 286.177124] [<00000000ab10b202>] ? irq_force_complete_move+0x300/0x300 [ 286.183962] [<000000001e6d11b6>] nmi_trigger_cpumask_backtrace+0x124/0x155 [ 286.191062] [<00000000703c9bac>] arch_trigger_cpumask_backtrace+0x14/0x20 [ 286.198163] [<00000000d49213e8>] watchdog+0x670/0xaf0 [ 286.203435] [<00000000662547c2>] ? watchdog+0x14b/0xaf0 [ 286.208878] [<00000000e09d22e3>] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 286.215708] [<0000000062068b7b>] ? hungtask_pm_notify+0x60/0x60 [ 286.221845] [<0000000099017571>] kthread+0x278/0x310 [ 286.227039] [<00000000ae0d654b>] ? kthread_park+0xa0/0xa0 [ 286.232660] [<000000009e694aa7>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 286.239407] [<0000000058b975df>] ? _raw_spin_unlock_irq+0x39/0x60 [ 286.245730] [<0000000093b29aad>] ? finish_task_switch+0x1e5/0x660 [ 286.252050] [<0000000075667680>] ? finish_task_switch+0x1b7/0x660 [ 286.258364] [<00000000492e8ceb>] ? __switch_to_asm+0x41/0x70 [ 286.264258] [<00000000293df078>] ? __switch_to_asm+0x35/0x70 [ 286.270132] [<00000000492e8ceb>] ? __switch_to_asm+0x41/0x70 [ 286.276008] [<00000000ae0d654b>] ? kthread_park+0xa0/0xa0 [ 286.281622] [<00000000ae0d654b>] ? kthread_park+0xa0/0xa0 [ 286.287233] [<00000000dfe4919e>] ret_from_fork+0x5c/0x70 [ 286.292851] Sending NMI from CPU 0 to CPUs 1: [ 286.297661] NMI backtrace for cpu 1 [ 286.301299] CPU: 1 PID: 20710 Comm: syz-executor.0 Not tainted 4.9.180+ #4 [ 286.308292] task: 0000000068ad7c69 task.stack: 0000000096cc1746 [ 286.314350] RIP: 0010:[] c [<000000005bafc41f>] preempt_count_add+0xd1/0x1c0 [ 286.323168] RSP: 0018:ffff8801c7577b18 EFLAGS: 00000246 [ 286.328598] RAX: 0000000000000000 RBX: ffffffff8280d133 RCX: 0000000000000000 [ 286.335867] RDX: 0000000000000000 RSI: 000000000000026c RDI: ffff8801ca66a970 [ 286.343125] RBP: ffff8801c7577b28 R08: 0000000000000000 R09: ffff8801ca66a090 [ 286.350384] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801ca6697c0 [ 286.357647] R13: ffff8801cff86060 R14: ffffffff813dfd89 R15: ffff8801cff86060 [ 286.364915] FS: 00007f91ba633700(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 [ 286.373143] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.379101] CR2: 0000000001968a00 CR3: 00000001c8512000 CR4: 00000000001606b0 [ 286.386360] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.393630] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.400884] Stack: [ 286.403017] dffffc0000000000c 0000000000000000c ffff8801c7577c28c ffffffff8280d133c [ 286.411229] 0000000000000246c 1ffff10038eaef70c ffffffff8120b485c 0000000000000003c [ 286.419446] ffff8801cff86060c ffff8801c7577bb0c 1ffff10038eaef72c ffff8801c7577c18c [ 286.427658] Call Trace: [ 286.430227] [<000000005c04e8fa>] mutex_lock_nested+0xa3/0x920 [ 286.436179] [<00000000e09d22e3>] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 286.442999] [<00000000e72b9cc8>] ? mutex_trylock+0x3f0/0x3f0 [ 286.448873] [<0000000064f9857d>] ? __ww_mutex_lock_interruptible+0x1530/0x1530 [ 286.456305] [<000000007725a5cf>] perf_mmap+0x4d9/0x1580 [ 286.461747] [<00000000421fd6e9>] mmap_region+0x7e7/0xfa0 [ 286.467270] [<000000006b35aa62>] do_mmap+0x539/0xbc0 [ 286.472449] [<00000000ee3441b9>] vm_mmap_pgoff+0x179/0x1c0 [ 286.478145] [<000000009618503a>] ? vma_is_stack_for_current+0xa0/0xa0 [ 286.484797] [<00000000c8b96252>] ? __fget+0x22f/0x370 [ 286.490059] [<00000000fb2a40cf>] SyS_mmap_pgoff+0xfa/0x1b0 [ 286.495755] [<00000000873ac499>] ? align_vdso_addr+0x60/0x60 [ 286.501623] [<000000005484fc6b>] SyS_mmap+0x16/0x20 [ 286.506709] [<00000000700f599f>] do_syscall_64+0x1ad/0x5c0 [ 286.512416] [<0000000041edea08>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 286.519335] Code: c41 c39 cc4 c74 c05 c5b c41 c5c c5d cc3 c48 c8b c5d c08 c48 c89 cdf ce8 c74 ca2 c0a c00 c85 cc0 c75 c39 c65 c4c c8b c24 c25 c00 c7e c01 c00 c49 c8d cbc c24 cb0 c11 c00 c00 c<48> cb8 c00 c00 c00 c00 c00 cfc cff cdf c48 c89 cfa c48 cc1 cea c03 c80 c3c c02 c00 c [ 286.550604] Kernel panic - not syncing: hung_task: blocked tasks [ 286.556772] CPU: 0 PID: 24 Comm: khungtaskd Not tainted 4.9.180+ #4 [ 286.563169] ffff8801d98d7c60 ffffffff81b577f1 ffff8801cb03df00 ffffffff82a7abc0 [ 286.571216] 00000000ffffffff 0000000000000000 dffffc0000000000 ffff8801d98d7d40 [ 286.579264] ffffffff813fd2fa 0000000041b58ab3 ffffffff82e30d0a ffffffff813fd121 [ 286.587315] Call Trace: [ 286.589895] [<00000000cb845d0a>] dump_stack+0xc1/0x120 [ 286.595302] [<00000000cadb8149>] panic+0x1d9/0x3bd [ 286.600425] [<00000000eac3ab93>] ? add_taint.cold+0x16/0x16 [ 286.606214] [<00000000ab10b202>] ? irq_force_complete_move+0x300/0x300 [ 286.612959] [<00000000acffe12b>] ? ___preempt_schedule+0x16/0x18 [ 286.619185] [<00000000dbb1df31>] ? nmi_trigger_cpumask_backtrace+0x135/0x155 [ 286.626452] [<00000000facf7d12>] ? nmi_trigger_cpumask_backtrace+0x13f/0x155 [ 286.633720] [<00000000c3ce61a7>] watchdog+0x681/0xaf0 [ 286.638990] [<00000000662547c2>] ? watchdog+0x14b/0xaf0 [ 286.644538] [<00000000e09d22e3>] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 286.651371] [<0000000062068b7b>] ? hungtask_pm_notify+0x60/0x60 [ 286.657506] [<0000000099017571>] kthread+0x278/0x310 [ 286.662686] [<00000000ae0d654b>] ? kthread_park+0xa0/0xa0 [ 286.668300] [<000000009e694aa7>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 286.675046] [<0000000058b975df>] ? _raw_spin_unlock_irq+0x39/0x60 [ 286.681369] [<0000000093b29aad>] ? finish_task_switch+0x1e5/0x660 [ 286.687686] [<0000000075667680>] ? finish_task_switch+0x1b7/0x660 [ 286.694000] [<00000000492e8ceb>] ? __switch_to_asm+0x41/0x70 [ 286.699877] [<00000000293df078>] ? __switch_to_asm+0x35/0x70 [ 286.705750] [<00000000492e8ceb>] ? __switch_to_asm+0x41/0x70 [ 286.711630] [<00000000ae0d654b>] ? kthread_park+0xa0/0xa0 [ 286.717247] [<00000000ae0d654b>] ? kthread_park+0xa0/0xa0 [ 286.722861] [<00000000dfe4919e>] ret_from_fork+0x5c/0x70 [ 286.728427] Kernel Offset: disabled [ 286.732045] Rebooting in 86400 seconds..