[ 42.777531] audit: type=1800 audit(1568680219.425:30): pid=7709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 48.152030] kauditd_printk_skb: 4 callbacks suppressed [ 48.152044] audit: type=1400 audit(1568680224.855:35): avc: denied { map } for pid=7884 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.85' (ECDSA) to the list of known hosts. [ 217.823242] audit: type=1400 audit(1568680394.525:36): avc: denied { map } for pid=7896 comm="syz-executor816" path="/root/syz-executor816077451" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 217.844177] IPVS: ftp: loaded support on port[0] = 21 [ 217.921974] chnl_net:caif_netlink_parms(): no params data found [ 217.957614] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.964503] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.972475] device bridge_slave_0 entered promiscuous mode [ 217.980307] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.987209] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.994321] device bridge_slave_1 entered promiscuous mode [ 218.010579] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.020835] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.038428] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 218.046338] team0: Port device team_slave_0 added [ 218.052073] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 218.059334] team0: Port device team_slave_1 added [ 218.064941] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 218.072520] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 218.153395] device hsr_slave_0 entered promiscuous mode [ 218.231549] device hsr_slave_1 entered promiscuous mode [ 218.272415] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 218.279708] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 218.296865] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.303538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.310527] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.316986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.349523] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 218.357340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.367116] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 218.376566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.397274] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.405592] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.413724] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 218.425121] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 218.431611] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.442272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.450368] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.456839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.467152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.475418] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.482113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.501065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.510545] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.520360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.534385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.546123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.558064] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 218.564691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.572183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.586158] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready executing program [ 218.597092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.621181] rcu: INFO: rcu_preempt self-detected stall on CPU [ 323.627477] rcu: 0-...!: (1 GPs behind) idle=7b6/1/0x4000000000000002 softirq=15030/15031 fqs=2 [ 323.637397] rcu: (t=10501 jiffies g=6169 q=88) [ 323.642215] rcu: rcu_preempt kthread starved for 10498 jiffies! g6169 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 323.652865] rcu: RCU grace-period kthread stack dump: [ 323.658049] rcu_preempt I29104 10 2 0x80000000 [ 323.663731] Call Trace: [ 323.666450] __schedule+0x866/0x1dc0 [ 323.670298] ? pci_mmcfg_check_reserved+0x170/0x170 [ 323.675318] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 323.680679] ? lockdep_hardirqs_on+0x415/0x5d0 [ 323.685315] ? trace_hardirqs_on+0x67/0x220 [ 323.689640] schedule+0x92/0x1c0 [ 323.693029] schedule_timeout+0x4db/0xfc0 [ 323.697377] ? usleep_range+0x170/0x170 [ 323.701356] ? trace_hardirqs_on+0x67/0x220 [ 323.705771] ? kasan_check_read+0x11/0x20 [ 323.709971] ? __next_timer_interrupt+0x1a0/0x1a0 [ 323.714868] ? prepare_to_swait_exclusive+0x120/0x120 [ 323.720087] rcu_gp_kthread+0xd5c/0x2190 [ 323.724163] ? rcu_blocking_is_gp+0x90/0x90 [ 323.728483] ? trace_hardirqs_on+0x67/0x220 [ 323.732803] ? kasan_check_read+0x11/0x20 [ 323.736950] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 323.742218] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 323.747787] ? __kthread_parkme+0xfb/0x1b0 [ 323.752047] kthread+0x354/0x420 [ 323.755511] ? rcu_blocking_is_gp+0x90/0x90 [ 323.759842] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 323.765379] ret_from_fork+0x24/0x30 [ 323.769221] NMI backtrace for cpu 0 [ 323.772854] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.19.73 #0 [ 323.779248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.788592] Call Trace: [ 323.791177] [ 323.793351] dump_stack+0x172/0x1f0 [ 323.796974] nmi_cpu_backtrace.cold+0x63/0xa4 [ 323.801504] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 323.806427] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 323.811701] arch_trigger_cpumask_backtrace+0x14/0x20 [ 323.816940] rcu_dump_cpu_stacks+0x189/0x1d5 [ 323.821426] ? wake_up_process+0x10/0x20 [ 323.825527] rcu_check_callbacks.cold+0x5e3/0xd90 [ 323.830369] ? trace_hardirqs_off+0x62/0x220 [ 323.834801] update_process_times+0x32/0x80 [ 323.839255] tick_sched_handle+0xa2/0x190 [ 323.843401] tick_sched_timer+0x47/0x130 [ 323.847465] __hrtimer_run_queues+0x33b/0xdc0 [ 323.851956] ? tick_sched_do_timer+0x1b0/0x1b0 [ 323.856537] ? hrtimer_fixup_activate+0x30/0x30 [ 323.861197] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 323.866602] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 323.873354] hrtimer_interrupt+0x314/0x770 [ 323.877598] smp_apic_timer_interrupt+0x111/0x550 [ 323.882445] apic_timer_interrupt+0xf/0x20 [ 323.886677] [ 323.888934] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x50 [ 323.894459] Code: e9 ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 48 8b 75 08 65 48 8b 04 25 40 ee 01 00 65 8b 15 18 8b 96 7e <81> e2 00 01 1f 00 75 2b 8b 90 d0 12 00 00 83 fa 02 75 20 48 8b 88 [ 323.913462] RSP: 0018:ffff8880aa236988 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 323.921184] RAX: ffff8880aa226240 RBX: ffff888097bd7978 RCX: ffffffff858ebe8e [ 323.928453] RDX: 0000000000000301 RSI: ffffffff858ebd1b RDI: ffff888097bd7980 [ 323.935721] RBP: ffff8880aa236988 R08: ffff8880aa226240 R09: 0000000000000006 [ 323.943189] R10: ffff8880aa226bb0 R11: 00000000fae3766c R12: dffffc0000000000 [ 323.950458] R13: ffff888097bd76c0 R14: ffff888097bd7a00 R15: ffff888097bd7a10 [ 323.957813] ? hhf_dequeue+0x65e/0xa00 [ 323.961711] ? hhf_dequeue+0x4eb/0xa00 [ 323.965598] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 323.971132] hhf_dequeue+0x4eb/0xa00 [ 323.974889] __qdisc_run+0x1e7/0x1960 [ 323.978785] __dev_queue_xmit+0x165c/0x2fe0 [ 323.983153] ? deliver_clone+0x61/0xc0 [ 323.987042] ? br_flood+0x5fa/0x710 [ 323.990660] ? br_handle_frame_finish+0xf72/0x1510 [ 323.995678] ? netdev_pick_tx+0x300/0x300 [ 323.999876] ? run_ksoftirqd+0x8e/0x110 [ 324.003841] ? smpboot_thread_fn+0x6a3/0xa30 [ 324.008343] ? kthread+0x354/0x420 [ 324.011897] ? entry_SYSCALL_64_after_hwframe+0xbc/0xbe [ 324.017283] ? __lock_is_held+0xb6/0x140 [ 324.021351] dev_queue_xmit+0x18/0x20 [ 324.025179] ? dev_queue_xmit+0x18/0x20 [ 324.029177] br_dev_queue_push_xmit+0x405/0x5d0 [ 324.033952] ? br_nf_dev_queue_xmit+0x38c/0x1610 [ 324.038720] br_nf_dev_queue_xmit+0x365/0x1610 [ 324.043306] br_nf_post_routing+0x76f/0x12f0 [ 324.047740] ? find_inlist_lock.constprop.0+0x22a/0x230 [ 324.053192] ? br_nf_dev_queue_xmit+0x1610/0x1610 [ 324.058028] ? ipv6_skip_exthdr+0x5b0/0x5c0 [ 324.062360] ? br_nf_pre_routing_finish_bridge+0xaa0/0xaa0 [ 324.068032] nf_hook_slow+0xbc/0x1e0 [ 324.071746] br_forward_finish+0x215/0x400 [ 324.075979] ? br_dev_queue_push_xmit+0x5d0/0x5d0 [ 324.080837] ? br_fdb_add.cold+0x8a/0x8a [ 324.084901] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 324.089912] ? nf_hook_slow+0xf0/0x1e0 [ 324.093807] br_nf_hook_thresh+0x2e9/0x370 [ 324.098038] ? br_dev_queue_push_xmit+0x5d0/0x5d0 [ 324.102891] ? setup_pre_routing+0x470/0x470 [ 324.107296] ? find_held_lock+0x35/0x130 [ 324.111357] ? br_dev_queue_push_xmit+0x5d0/0x5d0 [ 324.116203] br_nf_forward_finish+0x356/0x700 [ 324.120712] ? br_dev_queue_push_xmit+0x5d0/0x5d0 [ 324.125552] br_nf_forward_ip+0x6b4/0x17c0 [ 324.129788] ? br_nf_forward_finish+0x700/0x700 [ 324.134567] ? refcount_inc_not_zero_checked+0x147/0x200 [ 324.140022] ? br_nf_hook_thresh+0x370/0x370 [ 324.144435] nf_hook_slow+0xbc/0x1e0 [ 324.148174] __br_forward+0x393/0xb30 [ 324.151993] ? br_forward_finish+0x400/0x400 [ 324.156405] ? br_dev_queue_push_xmit+0x5d0/0x5d0 [ 324.161263] deliver_clone+0x61/0xc0 [ 324.164970] br_flood+0x5fa/0x710 [ 324.168426] br_handle_frame_finish+0xf72/0x1510 [ 324.173179] ? br_handle_local_finish+0x20/0x20 [ 324.177863] ? __lock_is_held+0xb6/0x140 [ 324.181921] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 324.186931] ? nf_hook_slow+0xf0/0x1e0 [ 324.190820] br_nf_hook_thresh+0x2e9/0x370 [ 324.195065] ? br_handle_local_finish+0x20/0x20 [ 324.199732] ? setup_pre_routing+0x470/0x470 [ 324.204138] ? br_handle_local_finish+0x20/0x20 [ 324.208808] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 324.216222] br_nf_pre_routing_finish_ipv6+0x6ed/0xd70 [ 324.221496] ? br_handle_local_finish+0x20/0x20 [ 324.226163] ? kasan_check_read+0x11/0x20 [ 324.230312] br_nf_pre_routing_ipv6+0x4a5/0x8ca [ 324.234977] ? br_validate_ipv6+0xb90/0xb90 [ 324.239299] ? br_nf_pre_routing_finish.cold+0x11d/0x11d [ 324.244747] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 324.250339] ? skb_pull_rcsum+0x164/0x340 [ 324.255449] br_nf_pre_routing+0x1016/0x159c [ 324.259857] ? br_nf_pre_routing_finish+0x1960/0x1960 [ 324.265047] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 324.270576] ? ebt_broute+0x127/0x190 [ 324.274534] nf_hook_slow+0xbc/0x1e0 [ 324.278362] br_handle_frame+0x985/0x1480 [ 324.282517] ? br_handle_frame_finish+0x1510/0x1510 [ 324.287534] ? br_handle_local_finish+0x20/0x20 [ 324.292206] ? br_handle_frame_finish+0x1510/0x1510 [ 324.297234] __netif_receive_skb_core+0xac1/0x3570 [ 324.302160] ? __lock_acquire+0x6ee/0x49c0 [ 324.306432] ? __kasan_slab_free+0x102/0x150 [ 324.310888] ? kasan_slab_free+0xe/0x10 [ 324.314977] ? kmem_cache_free+0x86/0x260 [ 324.319129] ? dst_destroy+0x29e/0x3c0 [ 324.323022] ? __do_softirq+0x25c/0x921 [ 324.326997] ? netif_receive_skb+0x2d0/0x2d0 [ 324.331449] ? mark_held_locks+0x100/0x100 [ 324.335691] ? __lock_acquire+0x6ee/0x49c0 [ 324.339935] ? process_backlog+0x482/0x7a0 [ 324.344175] __netif_receive_skb_one_core+0xa8/0x1a0 [ 324.349282] ? __netif_receive_skb_one_core+0xa8/0x1a0 [ 324.354560] ? __netif_receive_skb_core+0x3570/0x3570 [ 324.359750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 324.365322] ? check_preemption_disabled+0x48/0x290 [ 324.370335] ? lock_acquire+0x16f/0x3f0 [ 324.374400] __netif_receive_skb+0x2c/0x1d0 [ 324.378722] process_backlog+0x23a/0x7a0 [ 324.382779] ? net_rx_action+0x27b/0x1070 [ 324.386923] ? lockdep_hardirqs_on+0x19b/0x5d0 [ 324.391518] net_rx_action+0x4f5/0x1070 [ 324.395496] ? napi_complete_done+0x500/0x500 [ 324.400050] ? sched_clock+0x2e/0x50 [ 324.403971] __do_softirq+0x25c/0x921 [ 324.407775] ? pci_mmcfg_check_reserved+0x170/0x170 [ 324.412822] ? takeover_tasklets+0x7b0/0x7b0 [ 324.417229] run_ksoftirqd+0x8e/0x110 [ 324.421025] smpboot_thread_fn+0x6a3/0xa30 [ 324.425345] ? sort_range+0x30/0x30 [ 324.428986] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 324.434622] ? __kthread_parkme+0xfb/0x1b0 [ 324.438856] kthread+0x354/0x420 [ 324.442238] ? sort_range+0x30/0x30 [ 324.445860] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 324.451423] ret_from_fork+0x24/0x30