Warning: Permanently added '10.128.0.201' (ECDSA) to the list of known hosts. executing program [ 321.192943] audit: type=1400 audit(1560834043.453:36): avc: denied { map } for pid=7858 comm="syz-executor014" path="/root/syz-executor014331539" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 467.706648] INFO: task syz-executor014:7859 blocked for more than 140 seconds. [ 467.714147] Not tainted 4.19.52 #24 [ 467.718380] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.726349] syz-executor014 D26976 7859 7856 0x00000004 [ 467.732199] Call Trace: [ 467.734958] __schedule+0x80d/0x1c70 [ 467.738757] ? pci_mmcfg_check_reserved+0x170/0x170 [ 467.743827] ? autoremove_wake_function+0x160/0x160 [ 467.748925] schedule+0x92/0x1c0 [ 467.752408] request_wait_answer+0x42f/0x7c0 [ 467.756891] ? fuse_copy_one+0x180/0x180 [ 467.761032] ? finish_wait+0x260/0x260 [ 467.764973] ? kasan_check_read+0x11/0x20 [ 467.769249] ? do_raw_spin_unlock+0x57/0x270 [ 467.773678] __fuse_request_send+0x128/0x1d0 [ 467.778145] fuse_request_send+0x60/0xa0 [ 467.782218] fuse_simple_request+0x2f6/0x720 [ 467.786712] fuse_lookup_name+0x275/0x670 [ 467.790875] ? fuse_valid_type+0xb0/0xb0 [ 467.794941] ? mutex_lock_nested+0x16/0x20 [ 467.799305] fuse_lookup+0xeb/0x3e0 [ 467.802946] ? fuse_lookup_name+0x670/0x670 [ 467.807383] ? __lockdep_init_map+0x10c/0x5b0 [ 467.811990] __lookup_slow+0x279/0x500 [ 467.815879] ? vfs_unlink+0x500/0x500 [ 467.819756] ? __lock_acquire+0x2365/0x48f0 [ 467.824102] lookup_slow+0x58/0x80 [ 467.827707] walk_component+0x747/0x2000 [ 467.831785] ? inode_permission+0xb4/0x560 [ 467.836072] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 467.841686] ? path_init+0x18f0/0x18f0 [ 467.845589] ? walk_component+0x2000/0x2000 [ 467.849991] ? kasan_kmalloc+0x80/0xf0 [ 467.853895] path_lookupat.isra.0+0x1f5/0x8d0 [ 467.858514] ? path_parentat.isra.0+0x160/0x160 [ 467.863264] ? cache_grow_end+0xa4/0x190 [ 467.867399] ? find_held_lock+0x35/0x130 [ 467.871474] ? cache_grow_end+0xa4/0x190 [ 467.875589] filename_lookup+0x1b0/0x410 [ 467.879732] ? filename_parentat.isra.0+0x410/0x410 [ 467.884776] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 467.890457] ? __phys_addr_symbol+0x30/0x70 [ 467.894805] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 467.899938] ? __check_object_size+0x3d/0x42f [ 467.904478] ? strncpy_from_user+0x21b/0x2d0 [ 467.908995] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 467.914773] ? getname_flags+0x277/0x5b0 [ 467.918973] user_path_at_empty+0x43/0x50 [ 467.923126] vfs_statx+0x129/0x200 [ 467.926749] ? vfs_statx_fd+0xc0/0xc0 [ 467.930630] ? security_file_permission+0x89/0x230 [ 467.935557] __do_sys_newstat+0xa4/0x130 [ 467.939697] ? cp_new_stat+0x5f0/0x5f0 [ 467.943597] ? vfs_read+0x358/0x3d0 [ 467.947483] ? __x64_sys_futex+0x40d/0x590 [ 467.951735] ? ksys_read+0x1f1/0x2d0 [ 467.955590] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 467.960490] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 467.965257] ? do_syscall_64+0x26/0x620 [ 467.969362] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 467.974807] ? do_syscall_64+0x26/0x620 [ 467.978906] ? lockdep_hardirqs_on+0x415/0x5d0 [ 467.983505] __x64_sys_newstat+0x54/0x80 [ 467.987629] do_syscall_64+0xfd/0x620 [ 467.991439] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 467.996680] RIP: 0033:0x445b79 [ 467.999892] Code: Bad RIP value. [ 468.003242] RSP: 002b:00007f735b782db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 468.011039] RAX: ffffffffffffffda RBX: 00000000006dac28 RCX: 0000000000445b79 [ 468.018361] RDX: 0000000000000031 RSI: 0000000000000000 RDI: 0000000020000580 [ 468.025710] RBP: 00000000006dac20 R08: 0000000000000000 R09: 0000000000000000 [ 468.033101] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dac2c [ 468.040413] R13: 00007ffee7f1630f R14: 00007f735b7839c0 R15: 20c49ba5e353f7cf [ 468.047767] INFO: task syz-executor014:7861 blocked for more than 140 seconds. [ 468.055135] Not tainted 4.19.52 #24 [ 468.059393] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 468.067474] syz-executor014 D28632 7861 7856 0x00000004 [ 468.073103] Call Trace: [ 468.075684] __schedule+0x80d/0x1c70 [ 468.079467] ? pci_mmcfg_check_reserved+0x170/0x170 [ 468.084492] ? rwsem_down_write_failed+0x764/0xc30 [ 468.089482] ? _raw_spin_unlock_irq+0x28/0x90 [ 468.094001] ? lockdep_hardirqs_on+0x415/0x5d0 [ 468.098684] schedule+0x92/0x1c0 [ 468.102081] rwsem_down_write_failed+0x774/0xc30 [ 468.106908] ? rwsem_down_read_failed+0x3c0/0x3c0 [ 468.111802] call_rwsem_down_write_failed+0x17/0x30 [ 468.116896] ? call_rwsem_down_write_failed+0x17/0x30 [ 468.122095] ? __lock_acquire+0x2365/0x48f0 [ 468.126400] down_write+0x53/0x90 [ 468.129926] ? fuse_reverse_inval_entry+0xaf/0x6d0 [ 468.134872] fuse_reverse_inval_entry+0xaf/0x6d0 [ 468.139689] ? lock_acquire+0x1ea/0x3f0 [ 468.143678] ? fuse_update_attributes+0xd0/0xd0 [ 468.148436] fuse_dev_do_write+0xd44/0x25a0 [ 468.152822] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 468.158430] ? futex_wait_queue_me+0x414/0x600 [ 468.163023] ? handle_futex_death.part.0+0x250/0x250 [ 468.168209] ? lock_pi_update_atomic+0x120/0x120 [ 468.172983] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 468.178226] ? fuse_dev_read+0x1f0/0x1f0 [ 468.182354] ? futex_wait+0x482/0x5e0 [ 468.186153] ? __lock_acquire+0x6eb/0x48f0 [ 468.190461] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 468.195489] ? futex_wake+0x179/0x4d0 [ 468.199363] ? memset+0x32/0x40 [ 468.202667] fuse_dev_write+0x158/0x1f0 [ 468.206720] ? fuse_dev_splice_write+0xae0/0xae0 [ 468.211494] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 468.217173] ? iov_iter_init+0xc6/0x1f0 [ 468.221178] __vfs_write+0x587/0x810 [ 468.224882] ? kernel_read+0x120/0x120 [ 468.228921] ? __inode_security_revalidate+0xda/0x120 [ 468.234132] ? selinux_file_permission+0x92/0x550 [ 468.239036] ? security_file_permission+0x89/0x230 [ 468.243986] ? rw_verify_area+0x118/0x360 [ 468.248193] vfs_write+0x20c/0x560 [ 468.251748] ksys_write+0x14f/0x2d0 [ 468.255418] ? __ia32_sys_read+0xb0/0xb0 [ 468.259545] ? do_syscall_64+0x26/0x620 [ 468.263532] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 468.268961] ? do_syscall_64+0x26/0x620 [ 468.272948] __x64_sys_write+0x73/0xb0 [ 468.276889] do_syscall_64+0xfd/0x620 [ 468.280762] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 468.285956] RIP: 0033:0x445b79 [ 468.289265] Code: Bad RIP value. [ 468.292634] RSP: 002b:00007f735b740db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 468.300395] RAX: ffffffffffffffda RBX: 00000000006dac48 RCX: 0000000000445b79 [ 468.307711] RDX: 000000000000002e RSI: 0000000020000000 RDI: 0000000000000003 [ 468.314971] RBP: 00000000006dac40 R08: 0000000000000000 R09: 0000000000000000 [ 468.322425] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dac4c [ 468.329771] R13: 00007ffee7f1630f R14: 00007f735b7419c0 R15: 20c49ba5e353f7cf [ 468.337170] [ 468.337170] Showing all locks held in the system: [ 468.343638] 1 lock held by khungtaskd/1033: [ 468.348402] #0: 0000000079a1f957 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 468.357162] 2 locks held by rsyslogd/7710: [ 468.361413] #0: 00000000f1eb65be (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 468.369452] #1: 00000000de96d753 (&rq->lock){-.-.}, at: do_syslog+0xa6d/0x1690 [ 468.377047] 2 locks held by getty/7832: [ 468.381010] #0: 0000000039fec607 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 468.389345] #1: 000000009ac432e4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 468.398361] 2 locks held by getty/7833: [ 468.402315] #0: 0000000093e089fe (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 468.410741] #1: 0000000045b9fd21 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 468.419672] 2 locks held by getty/7834: [ 468.423628] #0: 000000005f9d69ea (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 468.431983] #1: 00000000e39969ed (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 468.440996] 2 locks held by getty/7835: [ 468.444951] #0: 00000000b7dfcbc7 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 468.453400] #1: 00000000859d12db (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 468.462334] 2 locks held by getty/7836: [ 468.466298] #0: 00000000048e4e52 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 468.474652] #1: 00000000d9553838 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 468.483772] 2 locks held by getty/7837: [ 468.487840] #0: 00000000a2d2918d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 468.496142] #1: 0000000072c8acd7 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 468.505127] 2 locks held by getty/7838: [ 468.509176] #0: 00000000f4396991 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 468.517530] #1: 00000000c537132f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 468.526417] 2 locks held by syz-executor014/7859: [ 468.531474] #0: 0000000058d0b455 (&type->i_mutex_dir_key#6){++++}, at: lookup_slow+0x4a/0x80 [ 468.542187] #1: 000000002d9bb59e (&fi->mutex){+.+.}, at: fuse_lock_inode+0xba/0xf0 [ 468.550300] 2 locks held by syz-executor014/7861: [ 468.555135] #0: 00000000210ec71c (&fc->killsb){.+.+}, at: fuse_dev_do_write+0x1f86/0x25a0 [ 468.564121] #1: 0000000058d0b455 (&type->i_mutex_dir_key#6){++++}, at: fuse_reverse_inval_entry+0xaf/0x6d0 [ 468.574137] [ 468.575754] ============================================= [ 468.575754] [ 468.582921] NMI backtrace for cpu 1 [ 468.586618] CPU: 1 PID: 1033 Comm: khungtaskd Not tainted 4.19.52 #24 [ 468.593184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.602525] Call Trace: [ 468.605290] dump_stack+0x172/0x1f0 [ 468.608922] nmi_cpu_backtrace.cold+0x63/0xa4 [ 468.613463] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 468.618392] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 468.623669] arch_trigger_cpumask_backtrace+0x14/0x20 [ 468.628861] watchdog+0x9df/0xee0 [ 468.632467] kthread+0x354/0x420 [ 468.635836] ? reset_hung_task_detector+0x30/0x30 [ 468.640690] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 468.646304] ret_from_fork+0x24/0x30 [ 468.650171] Sending NMI from CPU 1 to CPUs 0: [ 468.654772] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0xe/0x10 [ 468.655693] Kernel panic - not syncing: hung_task: blocked tasks [ 468.668468] CPU: 1 PID: 1033 Comm: khungtaskd Not tainted 4.19.52 #24 [ 468.675116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.684457] Call Trace: [ 468.687044] dump_stack+0x172/0x1f0 [ 468.690725] panic+0x263/0x507 [ 468.693908] ? __warn_printk+0xf3/0xf3 [ 468.697790] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 468.702795] ? printk_safe_flush+0xf2/0x140 [ 468.707101] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 468.712628] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 468.717546] ? nmi_trigger_cpumask_backtrace+0x16e/0x1f8 [ 468.722998] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 468.728453] watchdog+0x9f0/0xee0 [ 468.731900] kthread+0x354/0x420 [ 468.735262] ? reset_hung_task_detector+0x30/0x30 [ 468.740100] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 468.745693] ret_from_fork+0x24/0x30 [ 468.750616] Kernel Offset: disabled [ 468.754307] Rebooting in 86400 seconds..