[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 10.530632] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 12.914255] random: sshd: uninitialized urandom read (32 bytes read) [ 13.148615] random: sshd: uninitialized urandom read (32 bytes read) [ 13.330638] random: crng init done Warning: Permanently added '10.128.0.195' (ECDSA) to the list of known hosts. 2019/08/12 15:18:56 parsed 1 programs 2019/08/12 15:18:57 executed programs: 0 [ 24.054554] audit: type=1400 audit(1565623139.758:5): avc: denied { associate } for pid=2074 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 2019/08/12 15:19:02 executed programs: 196 2019/08/12 15:19:07 executed programs: 536 2019/08/12 15:19:12 executed programs: 891 2019/08/12 15:19:17 executed programs: 1244 2019/08/12 15:19:22 executed programs: 1593 2019/08/12 15:19:27 executed programs: 1946 2019/08/12 15:19:32 executed programs: 2288 2019/08/12 15:19:37 executed programs: 2634 2019/08/12 15:19:42 executed programs: 2982 2019/08/12 15:19:47 executed programs: 3323 2019/08/12 15:19:52 executed programs: 3665 2019/08/12 15:19:57 executed programs: 4017 2019/08/12 15:20:02 executed programs: 4358 2019/08/12 15:20:07 executed programs: 4700 2019/08/12 15:20:12 executed programs: 5042 2019/08/12 15:20:17 executed programs: 5382 2019/08/12 15:20:22 executed programs: 5725 INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes 2019/08/12 15:20:27 executed programs: 6058 [ 285.858984] INFO: task syz-executor.2:28429 blocked for more than 140 seconds. [ 285.866404] Not tainted 4.9.189+ #20 [ 285.871343] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.879625] syz-executor.2 D28736 28429 2081 0x80000000 [ 285.885446] 0000000000000083 ffff8801c86917c0 ffff8801d4148000 ffff8801db621000 [ 285.893876] ffff8801c733df00 ffff8801db621018 ffff8801d848fba0 ffffffff828176ae [ 285.902274] 0000000041b58ab3 ffff8801c86917c0 00ff8801d848faf0 ffff8801db6218f0 [ 285.910672] Call Trace: [ 285.913260] [<000000008240d9a3>] ? __schedule+0x6ce/0x1f10 [ 285.919343] [<00000000665ca566>] ? io_schedule_timeout+0x390/0x390 [ 285.925767] [<000000008b5d21c7>] ? mark_held_locks+0xb1/0x100 [ 285.932248] [<00000000d4ad4bd3>] ? _raw_spin_unlock_irq+0x28/0x60 [ 285.938583] [<000000001a2f7f26>] ? rwsem_down_read_failed+0x253/0x3e0 [ 285.945644] [<00000000df82ac85>] schedule+0x92/0x1c0 [ 285.951151] [<00000000e0fa49b9>] rwsem_down_read_failed+0x258/0x3e0 [ 285.957660] [<00000000ff8baa72>] ? rt_mutex_futex_unlock+0x10/0x10 [ 285.964457] [<000000009467b7a2>] call_rwsem_down_read_failed+0x18/0x30 [ 285.971552] [<000000003932bb06>] down_read+0x52/0xb0 [ 285.976761] [<00000000e0c5ec88>] ? do_exit+0x3b7/0x2aa0 [ 285.983219] [<00000000e0c5ec88>] do_exit+0x3b7/0x2aa0 [ 285.988512] [<00000000d8a5ca29>] ? trace_hardirqs_off+0xd/0x10 [ 285.994978] [<00000000671250f4>] ? _flat_send_IPI_mask+0x7b/0xb0 [ 286.001655] [<00000000b8852297>] ? debug_lockdep_rcu_enabled.part.0+0x60/0x60 [ 286.009408] [<00000000bd01035f>] ? release_task+0x14a0/0x14a0 [ 286.015405] [<0000000068140467>] ? native_smp_send_reschedule+0x6a/0xa0 [ 286.022674] [<00000000fd6c0af6>] ? kick_process+0xef/0x180 [ 286.028400] [<00000000d4ad4bd3>] ? _raw_spin_unlock_irq+0x28/0x60 [ 286.035114] [<00000000031f5cae>] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 286.042299] [<0000000053005bb0>] do_group_exit+0x111/0x300 [ 286.048031] [<0000000047e2aaa0>] SyS_exit_group+0x1d/0x20 [ 286.054056] [<00000000a402b05f>] ? do_group_exit+0x300/0x300 [ 286.060275] [<000000003794ab50>] do_syscall_64+0x1ad/0x5c0 [ 286.065998] [<00000000b41b43fc>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 286.073284] [ 286.073284] Showing all locks held in the system: [ 286.079982] 2 locks held by khungtaskd/24: [ 286.084214] #0: (rcu_read_lock){......}, at: [<0000000031cc86aa>] watchdog+0x14b/0xaf0 [ 286.093001] #1: (tasklist_lock){.+.+..}, at: [<0000000014ecd20f>] debug_show_all_locks+0x7f/0x21f [ 286.102803] 2 locks held by getty/2033: [ 286.106769] #0: (&tty->ldisc_sem){++++++}, at: [<000000005bdacfdd>] ldsem_down_read+0x33/0x40 [ 286.116171] #1: (&ldata->atomic_read_lock){+.+.+.}, at: [<00000000ecd39b4b>] n_tty_read+0x1fe/0x1820 [ 286.126194] 1 lock held by syz-executor.2/28429: [ 286.130960] #0: (&mm->mmap_sem){++++++}, at: [<00000000e0c5ec88>] do_exit+0x3b7/0x2aa0 [ 286.139767] 1 lock held by syz-executor.2/28436: [ 286.144521] #0: (&mm->mmap_sem){++++++}, at: [<00000000e0c5ec88>] do_exit+0x3b7/0x2aa0 [ 286.153292] [ 286.154907] ============================================= [ 286.154907] [ 286.163194] NMI backtrace for cpu 1 [ 286.166834] CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.189+ #20 [ 286.173324] ffff8801d98d7cc8 ffffffff81b64a91 0000000000000001 0000000000000000 [ 286.181402] 0000000000000001 ffffffff81099a01 dffffc0000000000 ffff8801d98d7d00 [ 286.189467] ffffffff81b6fd2c 0000000000000001 0000000000000000 0000000000000001 [ 286.197535] Call Trace: [ 286.200122] [<000000005cd85f74>] dump_stack+0xc1/0x120 [ 286.205491] [<00000000b23a6b35>] ? irq_force_complete_move+0x231/0x300 [ 286.212275] [<000000007183f431>] nmi_cpu_backtrace.cold+0x47/0x87 [ 286.218606] [<0000000093098cc8>] ? irq_force_complete_move+0x300/0x300 [ 286.225383] [<00000000051862b1>] nmi_trigger_cpumask_backtrace+0x124/0x155 [ 286.232492] [<000000009836f9e5>] arch_trigger_cpumask_backtrace+0x14/0x20 [ 286.239510] [<000000004e384a25>] watchdog+0x670/0xaf0 [ 286.244821] [<0000000031cc86aa>] ? watchdog+0x14b/0xaf0 [ 286.250277] [<00000000031f5cae>] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 286.257128] [<00000000f6699f00>] ? hungtask_pm_notify+0x60/0x60 [ 286.263282] [<000000005b3e8634>] kthread+0x278/0x310 [ 286.268477] [<00000000410ec34a>] ? kthread_park+0xa0/0xa0 [ 286.274108] [<00000000ac8f6fe8>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 286.280870] [<00000000c4a2535d>] ? _raw_spin_unlock_irq+0x39/0x60 [ 286.287196] [<00000000678f4f16>] ? finish_task_switch+0x1e5/0x660 [ 286.293522] [<000000007b5439e2>] ? finish_task_switch+0x1b7/0x660 [ 286.299845] [<00000000a39ff6f7>] ? __switch_to_asm+0x41/0x70 [ 286.305735] [<000000009a1f8de0>] ? __switch_to_asm+0x35/0x70 [ 286.311628] [<00000000a39ff6f7>] ? __switch_to_asm+0x41/0x70 [ 286.317535] [<00000000410ec34a>] ? kthread_park+0xa0/0xa0 [ 286.323164] [<00000000410ec34a>] ? kthread_park+0xa0/0xa0 [ 286.328796] [<000000008ffbdb5d>] ret_from_fork+0x5c/0x70 [ 286.334440] Sending NMI from CPU 1 to CPUs 0: [ 286.339327] NMI backtrace for cpu 0 [ 286.342963] CPU: 0 PID: 28446 Comm: syz-executor.2 Not tainted 4.9.189+ #20 [ 286.350048] task: 00000000adfb916d task.stack: 00000000e18836a8 [ 286.356098] RIP: 0010:[] c [<0000000024a4219d>] lock_is_held+0x3e/0x140 [ 286.364493] RSP: 0018:ffff8801d9e07a98 EFLAGS: 00000202 [ 286.369934] RAX: 0000000000000007 RBX: ffff8801ca0f17c0 RCX: 1ffffffff063fb70 [ 286.377263] RDX: 0000000000000000 RSI: 000000000000026c RDI: ffff8801ca0f206c [ 286.384572] RBP: ffff8801d9e07ab0 R08: 0000000000000000 R09: ffff8801ca0f2090 [ 286.391838] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff830d5820 [ 286.399122] R13: 000000000000026c R14: 0000000000000000 R15: ffff8801ca0ecf60 [ 286.406441] FS: 00007fe9d848f700(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 [ 286.414666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.420543] CR2: 00000000014fad58 CR3: 00000001d5387000 CR4: 00000000001606b0 [ 286.427823] Stack: [ 286.429964] 0000000000000000c ffffffff82a51c00c 000000000000026cc ffff8801d9e07ae8c [ 286.438184] ffffffff8116a3eac ffff8801ca0f17c0c ffffffff82a51c00c 000000000000026cc [ 286.446894] 0000000000000000c ffff8801ca0ecf60c ffff8801d9e07b28c ffffffff8116a535c [ 286.455120] Call Trace: [ 286.457688] [<00000000df5676d0>] ___might_sleep+0x1ca/0x280 [ 286.463477] [<000000004ea821df>] __might_sleep+0x95/0x1a0 [ 286.469090] [<000000008b5d21c7>] ? mark_held_locks+0xb1/0x100 [ 286.475052] [<0000000060c967dd>] mutex_lock_nested+0x87/0x920 [ 286.481028] [<00000000031f5cae>] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 286.487873] [<000000003fb5229a>] ? __mutex_unlock_slowpath+0x223/0x3e0 [ 286.494623] [<00000000b3d56bba>] ? mutex_trylock+0x3f0/0x3f0 [ 286.500508] [<0000000017c70817>] ? __ww_mutex_lock_interruptible+0x1530/0x1530 [ 286.508046] [<000000000ae0327d>] ? perf_mmap+0x618/0x1580 [ 286.513668] [<00000000db95eb55>] perf_mmap+0x4d9/0x1580 [ 286.519111] [<00000000ec01e64a>] mmap_region+0x7e7/0xfa0 [ 286.524630] [<00000000206edc12>] do_mmap+0x539/0xbc0 [ 286.529804] [<00000000f249f2dc>] vm_mmap_pgoff+0x179/0x1c0 [ 286.535521] [<0000000046b3a03c>] ? vma_is_stack_for_current+0xa0/0xa0 [ 286.542174] [<000000008bfa46f4>] ? __fget+0x22f/0x370 [ 286.547458] [<00000000e75288cd>] SyS_mmap_pgoff+0xfa/0x1b0 [ 286.554402] [<0000000017ff4f0b>] ? align_vdso_addr+0x60/0x60 [ 286.560283] [<000000008e3ff629>] SyS_mmap+0x16/0x20 [ 286.565370] [<000000003794ab50>] do_syscall_64+0x1ad/0x5c0 [ 286.571065] [<00000000b41b43fc>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 286.578069] Code: c89 cfc c53 c65 c48 c8b c1c c25 c00 c7e c01 c00 c48 c8d cbb cac c08 c00 c00 c48 c89 cfa c48 cc1 cea c03 c0f cb6 c14 c02 c48 c89 cf8 c83 ce0 c07 c83 cc0 c03 c38 cd0 c7c c08 c<84> cd2 c0f c85 cd4 c00 c00 c00 c8b c83 cac c08 c00 c00 c85 cc0 c0f c85 cb6 c00 c00 c [ 286.611137] Kernel panic - not syncing: hung_task: blocked tasks [ 286.617305] CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.189+ #20 [ 286.623799] ffff8801d98d7c60 ffffffff81b64a91 ffff8801c8691700 ffffffff82a7ae00 [ 286.631844] 00000000ffffffff 0000000000000001 dffffc0000000000 ffff8801d98d7d40 [ 286.639899] ffffffff813fdb4a 0000000041b58ab3 ffffffff82e31d5a ffffffff813fd971 [ 286.647987] Call Trace: [ 286.650570] [<000000005cd85f74>] dump_stack+0xc1/0x120 [ 286.655937] [<000000008570379b>] panic+0x1d9/0x3bd [ 286.660958] [<000000009bad3742>] ? add_taint.cold+0x16/0x16 [ 286.666772] [<0000000093098cc8>] ? irq_force_complete_move+0x300/0x300 [ 286.673536] [<0000000040332928>] ? ___preempt_schedule+0x16/0x18 [ 286.679774] [<00000000a2e45b6e>] ? nmi_trigger_cpumask_backtrace+0x135/0x155 [ 286.688714] [<00000000ec1a4151>] ? nmi_trigger_cpumask_backtrace+0x13f/0x155 [ 286.695995] [<0000000090a1b466>] watchdog+0x681/0xaf0 [ 286.701278] [<0000000031cc86aa>] ? watchdog+0x14b/0xaf0 [ 286.706739] [<00000000031f5cae>] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 286.713592] [<00000000f6699f00>] ? hungtask_pm_notify+0x60/0x60 [ 286.719746] [<000000005b3e8634>] kthread+0x278/0x310 [ 286.724952] [<00000000410ec34a>] ? kthread_park+0xa0/0xa0 [ 286.730587] [<00000000ac8f6fe8>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 286.737350] [<00000000c4a2535d>] ? _raw_spin_unlock_irq+0x39/0x60 [ 286.743676] [<00000000678f4f16>] ? finish_task_switch+0x1e5/0x660 [ 286.749999] [<000000007b5439e2>] ? finish_task_switch+0x1b7/0x660 [ 286.756350] [<00000000a39ff6f7>] ? __switch_to_asm+0x41/0x70 [ 286.762240] [<000000009a1f8de0>] ? __switch_to_asm+0x35/0x70 [ 286.768129] [<00000000a39ff6f7>] ? __switch_to_asm+0x41/0x70 [ 286.774018] [<00000000410ec34a>] ? kthread_park+0xa0/0xa0 [ 286.779647] [<00000000410ec34a>] ? kthread_park+0xa0/0xa0 [ 286.785276] [<000000008ffbdb5d>] ret_from_fork+0x5c/0x70 [ 286.791157] Kernel Offset: disabled [ 286.794862] Rebooting in 86400 seconds..