audit_printk_skb: 6 callbacks suppressed audit: type=1400 audit(1537486955.339:125): avc: denied { sys_admin } for pid=2092 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1537486955.339:126): avc: denied { sys_admin } for pid=2092 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1537486956.329:127): avc: denied { net_admin } for pid=2092 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 INFO: task syz-executor3:14257 blocked for more than 140 seconds. Not tainted 4.9.128+ #93 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor3 D28856 14257 2098 0x00000002 ffff8801936fdf00 ffff8801a652bc80 ffff8801d764ac00 ffff880194e28000 ffff8801db621018 ffff880194da77a8 ffffffff8277ee02 0000000000000000 ffff8801936fe7b0 ffffed00326dfcf5 00ff8801936fdf00 ffff8801db6218f0 Call Trace: [] schedule+0x7f/0x1b0 kernel/sched/core.c:3553 [] schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3586 [] __mutex_lock_common kernel/locking/mutex.c:582 [inline] [] mutex_lock_nested+0x326/0x870 kernel/locking/mutex.c:621 [] tty_release+0xa88/0xd00 drivers/tty/tty_io.c:1933 [] __fput+0x263/0x700 fs/file_table.c:208 [] ____fput+0x15/0x20 fs/file_table.c:244 [] task_work_run+0x10c/0x180 kernel/task_work.c:116 [] exit_task_work include/linux/task_work.h:21 [inline] [] do_exit+0x787/0x2750 kernel/exit.c:833 [] do_group_exit+0x111/0x300 kernel/exit.c:937 [] get_signal+0x4e1/0x1460 kernel/signal.c:2321 [] do_signal+0x95/0x1b00 arch/x86/kernel/signal.c:807 [] exit_to_usermode_loop+0x10e/0x150 arch/x86/entry/common.c:157 [] prepare_exit_to_usermode arch/x86/entry/common.c:191 [inline] [] syscall_return_slowpath arch/x86/entry/common.c:260 [inline] [] do_syscall_64+0x35d/0x480 arch/x86/entry/common.c:287 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [] rcu_read_unlock include/linux/rcupdate.h:927 [inline] #0: (rcu_read_lock){......}, at: [] rcu_lock_break kernel/hung_task.c:143 [inline] #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:177 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x310/0xa20 kernel/hung_task.c:239 #1: (tasklist_lock){.+.?..}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 1 lock held by rsyslogd/1896: #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 fs/file.c:781 2 locks held by getty/2023: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+.+.}, at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142 1 lock held by syz-executor3/14257: #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xa88/0xd00 drivers/tty/tty_io.c:1933 1 lock held by syz-executor3/14330: #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xa88/0xd00 drivers/tty/tty_io.c:1933 1 lock held by syz-executor3/14557: #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xa88/0xd00 drivers/tty/tty_io.c:1933 1 lock held by syz-executor3/15160: #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xa88/0xd00 drivers/tty/tty_io.c:1933 1 lock held by syz-executor3/15291: #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xa88/0xd00 drivers/tty/tty_io.c:1933 1 lock held by syz-executor5/18077: #0: (tty_mutex){+.+.+.}, at: [] ptmx_open+0xf7/0x310 drivers/tty/pty.c:753 1 lock held by syz-executor5/18092: #0: (tty_mutex){+.+.+.}, at: [] ptmx_open+0xf7/0x310 drivers/tty/pty.c:753 1 lock held by init/18082: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2125 1 lock held by init/18083: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2125 1 lock held by init/18084: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2125 1 lock held by init/18085: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2125 1 lock held by init/18086: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2125 1 lock held by init/18087: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2047 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2125 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.128+ #93 ffff8801d98ffd08 ffffffff81af2469 0000000000000000 0000000000000001 0000000000000001 0000000000000001 ffffffff810967d0 ffff8801d98ffd40 ffffffff81afd1c9 0000000000000001 0000000000000000 0000000000000003 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold.0+0x48/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x12c/0x151 lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6ad/0xa20 kernel/hung_task.c:239 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 6912 Comm: syz-executor1 Not tainted 4.9.128+ #93 task: ffff8801d1d04740 task.stack: ffff8801a80f8000 RIP: 0010:[] c [] __bpf_prog_run+0x2b7d/0x54b0 kernel/bpf/core.c:606 RSP: 0018:ffff8801a80ff940 EFLAGS: 00000246 RAX: ffffffff8138062d RBX: dffffc0000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8137db73 RDI: ffffffff8288ce38 RBP: ffff8801a80ffca8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801a80ffc80 R13: ffffffff8288c840 R14: ffffc9000f04e038 R15: 00000000000000bf FS: 00007f69c3ed7700(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000070b1b4 CR3: 00000001c7d57000 CR4: 00000000001606b0 Stack: ffff8801d1d04fe0c 00000000d1d05010c 1ffff1003501ff2cc ffff8801d1d04ff0c 0000000041b58ab3c ffffffff82c325f8c ffffffff8137dab0c ffffffff82c30c68c ffffffff811ff5f0c ffff8801d1d05010c ffff8801d1d04fe8c 0000000000000046c Call Trace: [] seccomp_run_filters kernel/seccomp.c:200 [inline] [] __seccomp_filter+0x14c/0xc80 kernel/seccomp.c:589 [] __secure_computing+0xa6/0x290 kernel/seccomp.c:692 [] syscall_trace_enter+0x550/0xd20 arch/x86/entry/common.c:117 [] do_syscall_64+0x2bc/0x480 arch/x86/entry/common.c:273 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: ce8 c03 c80 c3c c18 c00 c0f c85 c6c c28 c00 c00 c4b c8b c8c cfc c40 cfd cff cff c48 c89 cf0 c49 c83 cc6 c08 c48 cd3 ce8 c49 c89 c84 cd4 c40 cfd cff cff ce9 c41 cd5 cff cff c c0e c94 cf8 cff c49 c8d c7e c01 c48 c89 cf8 c48 c89 cfa c48 cc1 ce8 c03 c83 ce2 c