[ 70.542516][ T26] audit: type=1800 audit(1568334835.029:31): pid=10228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[ 70.582828][ T26] audit: type=1800 audit(1568334835.029:32): pid=10228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0
Starting mcstransd:
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Debian GNU/Linux 7 syzkaller ttyS0
Warning: Permanently added '10.128.0.51' (ECDSA) to the list of known hosts.
syzkaller login: [ 77.775292][ T26] kauditd_printk_skb: 3 callbacks suppressed
[ 77.775306][ T26] audit: type=1400 audit(1568334842.349:36): avc: denied { map } for pid=10419 comm="syz-executor672" path="/root/syz-executor672652049" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[ 77.810276][T10420] IPVS: ftp: loaded support on port[0] = 21
[ 77.852703][T10420] chnl_net:caif_netlink_parms(): no params data found
[ 77.874860][T10420] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.881997][T10420] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.889688][T10420] device bridge_slave_0 entered promiscuous mode
[ 77.897019][T10420] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.904144][T10420] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.911886][T10420] device bridge_slave_1 entered promiscuous mode
[ 77.925396][T10420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 77.935548][T10420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 77.950781][T10420] team0: Port device team_slave_0 added
[ 77.958502][T10420] team0: Port device team_slave_1 added
[ 78.006163][T10420] device hsr_slave_0 entered promiscuous mode
[ 78.074631][T10420] device hsr_slave_1 entered promiscuous mode
[ 78.130566][T10420] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.137686][T10420] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 78.145015][T10420] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.152052][T10420] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 78.177554][T10420] 8021q: adding VLAN 0 to HW filter on device bond0
[ 78.187916][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 78.207092][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.214599][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 78.222340][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 78.233128][T10420] 8021q: adding VLAN 0 to HW filter on device team0
[ 78.242327][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 78.250888][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.258083][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 78.268527][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 78.277704][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.284800][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 78.302928][T10420] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 78.313404][T10420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 78.326003][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 78.334764][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 78.343090][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 78.351513][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 78.360084][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 78.367694][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
executing program
[ 78.382929][T10420] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 183.454342][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[ 183.460973][ C0] rcu: 0-...!: (1 GPs behind) idle=2c6/1/0x4000000000000002 softirq=11099/11100 fqs=11
[ 183.470835][ C0] (t=10500 jiffies g=10157 q=45)
[ 183.475840][ C0] rcu: rcu_preempt kthread starved for 10478 jiffies! g10157 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[ 183.486997][ C0] rcu: RCU grace-period kthread stack dump:
[ 183.492865][ C0] rcu_preempt R running task 29688 10 2 0x80004000
[ 183.500756][ C0] Call Trace:
[ 183.504040][ C0] __schedule+0x755/0x1580
[ 183.508445][ C0] ? __sched_text_start+0x8/0x8
[ 183.513281][ C0] schedule+0xd9/0x260
[ 183.517341][ C0] schedule_timeout+0x486/0xc50
[ 183.522172][ C0] ? rwlock_bug.part.0+0x90/0x90
[ 183.527090][ C0] ? usleep_range+0x170/0x170
[ 183.531743][ C0] ? trace_hardirqs_on+0x67/0x240
[ 183.536747][ C0] ? __kasan_check_read+0x11/0x20
[ 183.541888][ C0] ? __next_timer_interrupt+0x1a0/0x1a0
[ 183.547425][ C0] ? swake_up_one+0x60/0x60
[ 183.551927][ C0] rcu_gp_kthread+0x9b2/0x18c0
[ 183.556681][ C0] ? rcu_barrier+0x310/0x310
[ 183.561271][ C0] ? trace_hardirqs_on+0x67/0x240
[ 183.566275][ C0] ? __kasan_check_read+0x11/0x20
[ 183.571300][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 183.577526][ C0] ? __kthread_parkme+0x108/0x1c0
[ 183.582551][ C0] ? __kasan_check_read+0x11/0x20
[ 183.587570][ C0] kthread+0x361/0x430
[ 183.591630][ C0] ? rcu_barrier+0x310/0x310
[ 183.596214][ C0] ? kthread_cancel_delayed_work_sync+0x20/0x20
[ 183.602436][ C0] ret_from_fork+0x24/0x30
[ 183.606839][ C0] NMI backtrace for cpu 0
[ 183.611148][ C0] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.3.0-rc8+ #0
[ 183.618492][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 183.628543][ C0] Workqueue: ipv6_addrconf addrconf_dad_work
[ 183.634506][ C0] Call Trace:
[ 183.637765][ C0] <IRQ>
[ 183.640596][ C0] dump_stack+0x172/0x1f0
[ 183.644906][ C0] nmi_cpu_backtrace.cold+0x70/0xb2
[ 183.650084][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 183.656307][ C0] ? lapic_can_unplug_cpu.cold+0x45/0x45
[ 183.661926][ C0] nmi_trigger_cpumask_backtrace+0x23b/0x28b
[ 183.667893][ C0] arch_trigger_cpumask_backtrace+0x14/0x20
[ 183.673772][ C0] rcu_dump_cpu_stacks+0x183/0x1cf
[ 183.678884][ C0] rcu_sched_clock_irq.cold+0x4dd/0xc13
[ 183.684429][ C0] ? raise_softirq+0x138/0x340
[ 183.689354][ C0] update_process_times+0x32/0x80
[ 183.694363][ C0] tick_sched_handle+0xa2/0x190
[ 183.699196][ C0] tick_sched_timer+0x53/0x140
[ 183.703941][ C0] __hrtimer_run_queues+0x364/0xe40
[ 183.709116][ C0] ? tick_sched_do_timer+0x1b0/0x1b0
[ 183.714383][ C0] ? hrtimer_start_range_ns+0xcb0/0xcb0
[ 183.719908][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 183.725641][ C0] ? ktime_get_update_offsets_now+0x2d3/0x440
[ 183.731703][ C0] hrtimer_interrupt+0x314/0x770
[ 183.736996][ C0] smp_apic_timer_interrupt+0x160/0x610
[ 183.742541][ C0] apic_timer_interrupt+0xf/0x20
[ 183.747454][ C0] </IRQ>
[ 183.750539][ C0] RIP: 0010:write_comp_data+0x1e/0x70
[ 183.755904][ C0] Code: 48 89 34 d1 48 89 11 5d c3 0f 1f 00 65 4c 8b 04 25 40 fe 01 00 65 8b 05 b8 88 8f 7e a9 00 01 1f 00 75 51 41 8b 80 f0 12 00 00 <83> f8 03 75 45 49 8b 80 f8 12 00 00 45 8b 80 f4 12 00 00 4c 8b 08
[ 183.775492][ C0] RSP: 0018:ffff8880a98df3e0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[ 183.783896][ C0] RAX: 0000000000000000 RBX: ffff88808be859b8 RCX: ffffffff85c66051
[ 183.791846][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000001
[ 183.799796][ C0] RBP: ffff8880a98df3e8 R08: ffff8880a98d4300 R09: 0000000000000000
[ 183.807746][ C0] R10: fffffbfff134afaf R11: ffff8880a98d4300 R12: dffffc0000000000
[ 183.815696][ C0] R13: ffff88808be856c0 R14: 0000000000000001 R15: 0000000000000000
[ 183.823664][ C0] ? hhf_dequeue+0x5d1/0xa20
[ 183.828239][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 183.834458][ C0] hhf_dequeue+0x5d1/0xa20
[ 183.838860][ C0] __qdisc_run+0x1e7/0x19d0
[ 183.843357][ C0] ? dev_queue_xmit+0x18/0x20
[ 183.848031][ C0] __dev_queue_xmit+0x16f1/0x3650
[ 183.853036][ C0] ? ndisc_constructor+0x1a5/0xb40
[ 183.858131][ C0] ? netdev_core_pick_tx+0x2f0/0x2f0
[ 183.863410][ C0] ? ip6_finish_output2+0x1034/0x2520
[ 183.868763][ C0] ? __kasan_check_read+0x11/0x20
[ 183.873769][ C0] ? lock_downgrade+0x920/0x920
[ 183.878603][ C0] dev_queue_xmit+0x18/0x20
[ 183.883085][ C0] ? dev_queue_xmit+0x18/0x20
[ 183.887743][ C0] neigh_resolve_output+0x5a5/0x970
[ 183.892923][ C0] ip6_finish_output2+0x1034/0x2520
[ 183.898101][ C0] ? ip6_mtu+0x2e6/0x460
[ 183.902322][ C0] ? ip6_forward_finish+0x530/0x530
[ 183.907498][ C0] ? lock_downgrade+0x920/0x920
[ 183.912325][ C0] ? ip6_mtu+0x16f/0x460
[ 183.916583][ C0] __ip6_finish_output+0x444/0xa50
[ 183.921673][ C0] ? __ip6_finish_output+0x444/0xa50
[ 183.926938][ C0] ip6_finish_output+0x38/0x1f0
[ 183.931767][ C0] ip6_output+0x235/0x7c0
[ 183.936077][ C0] ? ip6_finish_output+0x1f0/0x1f0
[ 183.941188][ C0] ? __ip6_finish_output+0xa50/0xa50
[ 183.946473][ C0] ? ndisc_send_skb+0x803/0x1450
[ 183.951396][ C0] ndisc_send_skb+0xf29/0x1450
[ 183.956143][ C0] ? nf_hook.constprop.0+0x560/0x560
[ 183.961415][ C0] ? skb_set_owner_w+0x21b/0x320
[ 183.966347][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 183.972048][ C0] ndisc_send_ns+0x3a9/0x850
[ 183.976620][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 183.982839][ C0] ? ndisc_netdev_event+0x4e0/0x4e0
[ 183.988042][ C0] ? addrconf_dad_work+0xac4/0x1150
[ 183.993244][ C0] ? trace_hardirqs_on+0x67/0x240
[ 183.998272][ C0] ? addrconf_dad_work+0xac4/0x1150
[ 184.003454][ C0] addrconf_dad_work+0xb88/0x1150
[ 184.008465][ C0] ? addrconf_dad_completed+0xbb0/0xbb0
[ 184.014004][ C0] ? lock_acquire+0x190/0x410
[ 184.018664][ C0] ? trace_hardirqs_on+0x67/0x240
[ 184.023670][ C0] process_one_work+0x9af/0x1740
[ 184.028593][ C0] ? pwq_dec_nr_in_flight+0x320/0x320
[ 184.033958][ C0] ? lock_acquire+0x190/0x410
[ 184.038621][ C0] worker_thread+0x98/0xe40
[ 184.043133][ C0] ? trace_hardirqs_on+0x67/0x240
[ 184.048151][ C0] kthread+0x361/0x430
[ 184.052212][ C0] ? process_one_work+0x1740/0x1740
[ 184.057392][ C0] ? kthread_cancel_delayed_work_sync+0x20/0x20
[ 184.063620][ C0] ret_from_fork+0x24/0x30