[....] Starting periodic command[ 71.387706][ T27] audit: type=1800 audit(1567849616.688:32): pid=10162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0
scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Starting mcstransd:
[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Debian GNU/Linux 7 syzkaller ttyS0
syzkaller login: [ 76.162657][ T27] kauditd_printk_skb: 2 callbacks suppressed
[ 76.162672][ T27] audit: type=1400 audit(1567849621.468:35): avc: denied { map } for pid=10340 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
Warning: Permanently added '10.128.0.175' (ECDSA) to the list of known hosts.
[ 232.069184][ T27] audit: type=1400 audit(1567849777.368:36): avc: denied { map } for pid=10352 comm="syz-executor716" path="/root/syz-executor716384698" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[ 232.105308][T10353] IPVS: ftp: loaded support on port[0] = 21
[ 232.152249][T10353] chnl_net:caif_netlink_parms(): no params data found
[ 232.174690][T10353] bridge0: port 1(bridge_slave_0) entered blocking state
[ 232.182118][T10353] bridge0: port 1(bridge_slave_0) entered disabled state
[ 232.189825][T10353] device bridge_slave_0 entered promiscuous mode
[ 232.197151][T10353] bridge0: port 2(bridge_slave_1) entered blocking state
[ 232.204401][T10353] bridge0: port 2(bridge_slave_1) entered disabled state
[ 232.212256][T10353] device bridge_slave_1 entered promiscuous mode
[ 232.225862][T10353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 232.236501][T10353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 232.252004][T10353] team0: Port device team_slave_0 added
[ 232.258492][T10353] team0: Port device team_slave_1 added
[ 232.313734][T10353] device hsr_slave_0 entered promiscuous mode
[ 232.372143][T10353] device hsr_slave_1 entered promiscuous mode
[ 232.417389][T10353] bridge0: port 2(bridge_slave_1) entered blocking state
[ 232.424616][T10353] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 232.431994][T10353] bridge0: port 1(bridge_slave_0) entered blocking state
[ 232.439187][T10353] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 232.465147][T10353] 8021q: adding VLAN 0 to HW filter on device bond0
[ 232.475921][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 232.495036][ T3014] bridge0: port 1(bridge_slave_0) entered disabled state
[ 232.502896][ T3014] bridge0: port 2(bridge_slave_1) entered disabled state
[ 232.510600][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 232.520757][T10353] 8021q: adding VLAN 0 to HW filter on device team0
[ 232.529897][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 232.538383][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state
[ 232.545556][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 232.562392][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 232.570821][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state
[ 232.577898][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 232.585902][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 232.594993][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 232.604168][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
executing program
[ 232.613877][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 232.624793][T10353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 232.636348][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 232.645348][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 232.659468][T10353] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 337.721715][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[ 337.728362][ C1] rcu: 1-...!: (1 GPs behind) idle=b8e/0/0x3 softirq=12119/12122 fqs=6
[ 337.736749][ C1] (t=10500 jiffies g=10289 q=55)
[ 337.741762][ C1] rcu: rcu_preempt kthread starved for 10480 jiffies! g10289 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[ 337.753095][ C1] rcu: RCU grace-period kthread stack dump:
[ 337.758962][ C1] rcu_preempt I29520 10 2 0x80004000
[ 337.765275][ C1] Call Trace:
[ 337.768632][ C1] __schedule+0x755/0x1580
[ 337.773043][ C1] ? __sched_text_start+0x8/0x8
[ 337.777888][ C1] schedule+0xd9/0x260
[ 337.781938][ C1] schedule_timeout+0x486/0xc50
[ 337.786777][ C1] ? rwlock_bug.part.0+0x90/0x90
[ 337.791698][ C1] ? usleep_range+0x170/0x170
[ 337.796365][ C1] ? trace_hardirqs_on+0x67/0x240
[ 337.801368][ C1] ? __kasan_check_read+0x11/0x20
[ 337.806373][ C1] ? __next_timer_interrupt+0x1a0/0x1a0
[ 337.811895][ C1] ? swake_up_one+0x60/0x60
[ 337.816381][ C1] rcu_gp_kthread+0x9b2/0x18c0
[ 337.821131][ C1] ? rcu_barrier+0x310/0x310
[ 337.825698][ C1] ? trace_hardirqs_on+0x67/0x240
[ 337.830699][ C1] ? __kasan_check_read+0x11/0x20
[ 337.835795][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 337.842019][ C1] ? __kthread_parkme+0x108/0x1c0
[ 337.847020][ C1] ? __kasan_check_read+0x11/0x20
[ 337.852022][ C1] kthread+0x361/0x430
[ 337.856068][ C1] ? rcu_barrier+0x310/0x310
[ 337.860646][ C1] ? kthread_cancel_delayed_work_sync+0x20/0x20
[ 337.866869][ C1] ret_from_fork+0x24/0x30
[ 337.871447][ C1] NMI backtrace for cpu 1
[ 337.875765][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.3.0-rc7+ #0
[ 337.882848][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 337.892888][ C1] Call Trace:
[ 337.896157][ C1]
[ 337.899072][ C1] dump_stack+0x172/0x1f0
[ 337.903393][ C1] nmi_cpu_backtrace.cold+0x70/0xb2
[ 337.908576][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 337.914810][ C1] ? lapic_can_unplug_cpu.cold+0x45/0x45
[ 337.920430][ C1] nmi_trigger_cpumask_backtrace+0x23b/0x28b
[ 337.926389][ C1] arch_trigger_cpumask_backtrace+0x14/0x20
[ 337.932266][ C1] rcu_dump_cpu_stacks+0x183/0x1cf
[ 337.937358][ C1] rcu_sched_clock_irq.cold+0x4dd/0xc13
[ 337.942887][ C1] ? raise_softirq+0x138/0x340
[ 337.947638][ C1] update_process_times+0x32/0x80
[ 337.952643][ C1] tick_sched_handle+0xa2/0x190
[ 337.957492][ C1] tick_sched_timer+0x53/0x140
[ 337.962239][ C1] __hrtimer_run_queues+0x364/0xe40
[ 337.967417][ C1] ? tick_sched_do_timer+0x1b0/0x1b0
[ 337.972684][ C1] ? hrtimer_start_range_ns+0xcb0/0xcb0
[ 337.978221][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 337.983918][ C1] ? ktime_get_update_offsets_now+0x2d3/0x440
[ 337.989972][ C1] hrtimer_interrupt+0x314/0x770
[ 337.994953][ C1] smp_apic_timer_interrupt+0x160/0x610
[ 338.000480][ C1] apic_timer_interrupt+0xf/0x20
[ 338.005420][ C1] RIP: 0010:__list_del_entry_valid+0xb3/0xf5
[ 338.011401][ C1] Code: 75 53 49 8b 14 24 4c 39 f2 0f 85 99 00 00 00 49 8d 7d 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 24 <49> 8b 55 08 4c 39 f2 0f 85 aa 00 00 00 41 5c b8 01 00 00 00 41 5d
[ 338.030995][ C1] RSP: 0018:ffff8880ae909010 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[ 338.039410][ C1] RAX: dffffc0000000000 RBX: ffff88808c064338 RCX: ffffffff85c65b39
[ 338.047366][ C1] RDX: 1ffff1101180c87b RSI: ffffffff85c66006 RDI: ffff88808c0643d8
[ 338.055421][ C1] RBP: ffff8880ae909028 R08: ffff8880a98d6340 R09: 0000000000000000
[ 338.063373][ C1] R10: fffffbfff134afaf R11: ffff8880a98d6340 R12: ffff88808c0643d0
[ 338.071332][ C1] R13: ffff88808c0643d0 R14: ffff88808c064338 R15: 0000000000000000
[ 338.079321][ C1] ? apic_timer_interrupt+0xa/0x20
[ 338.084501][ C1] ? hhf_dequeue+0xb9/0xa20
[ 338.089001][ C1] ? hhf_dequeue+0x586/0xa20
[ 338.093577][ C1] hhf_dequeue+0x5c5/0xa20
[ 338.098026][ C1] __qdisc_run+0x1e7/0x19d0
[ 338.102563][ C1] ? dev_queue_xmit+0x18/0x20
[ 338.107233][ C1] __dev_queue_xmit+0x16f1/0x3650
[ 338.112246][ C1] ? __local_bh_enable_ip+0x15a/0x270
[ 338.117597][ C1] ? netdev_core_pick_tx+0x2f0/0x2f0
[ 338.122874][ C1] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 338.129128][ C1] ? br_nf_post_routing+0xd73/0x1d30
[ 338.134424][ C1] ? br_forward_finish+0x235/0x400
[ 338.139514][ C1] ? __kasan_check_read+0x11/0x20
[ 338.144529][ C1] ? __dev_queue_xmit+0x2b15/0x3650
[ 338.149709][ C1] dev_queue_xmit+0x18/0x20
[ 338.154190][ C1] ? dev_queue_xmit+0x18/0x20
[ 338.158844][ C1] br_dev_queue_push_xmit+0x3f3/0x5c0
[ 338.164256][ C1] ? nf_hook_slow+0xf0/0x1e0
[ 338.168829][ C1] br_forward_finish+0xfa/0x400
[ 338.173656][ C1] ? br_dev_queue_push_xmit+0x5c0/0x5c0
[ 338.179178][ C1] ? br_fdb_add.cold+0x8c/0x8c
[ 338.183923][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 338.189620][ C1] ? nf_hook_slow+0xf0/0x1e0
[ 338.194190][ C1] __br_forward+0x641/0xb00
[ 338.198673][ C1] ? br_forward_finish+0x400/0x400
[ 338.203765][ C1] ? br_dev_queue_push_xmit+0x5c0/0x5c0
[ 338.209300][ C1] deliver_clone+0x61/0xc0
[ 338.213705][ C1] maybe_deliver+0x2c7/0x390
[ 338.218273][ C1] br_flood+0x13a/0x3d0
[ 338.222467][ C1] br_dev_xmit+0x98c/0x15a0
[ 338.226952][ C1] ? br_poll_controller+0x10/0x10
[ 338.231956][ C1] ? netif_skb_features+0x6c2/0xb90
[ 338.237162][ C1] ? netdev_set_sb_channel+0xe0/0xe0
[ 338.242427][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 338.248670][ C1] ? validate_xmit_xfrm+0x43c/0xf10
[ 338.253860][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 338.260093][ C1] dev_hard_start_xmit+0x1a3/0x9c0
[ 338.265187][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 338.271408][ C1] __dev_queue_xmit+0x2b15/0x3650
[ 338.276412][ C1] ? __nf_conntrack_find_get+0xa97/0x13a0
[ 338.282124][ C1] ? netdev_core_pick_tx+0x2f0/0x2f0
[ 338.287448][ C1] ? __ip_finish_output+0x5fc/0xb90
[ 338.292627][ C1] ? __kasan_check_read+0x11/0x20
[ 338.297630][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 338.303850][ C1] ? lock_downgrade+0x920/0x920
[ 338.308680][ C1] ? lock_acquire+0x190/0x410
[ 338.313335][ C1] ? __ip_finish_output+0x5fc/0xb90
[ 338.318512][ C1] dev_queue_xmit+0x18/0x20
[ 338.323086][ C1] ? dev_queue_xmit+0x18/0x20
[ 338.327743][ C1] ip_finish_output2+0x1726/0x2570
[ 338.332872][ C1] ? nf_ct_deliver_cached_events+0x23d/0x6e0
[ 338.338835][ C1] ? ip_frag_next+0x910/0x910
[ 338.343505][ C1] ? __kasan_check_read+0x11/0x20
[ 338.348510][ C1] __ip_finish_output+0x5fc/0xb90
[ 338.353523][ C1] ? __ip_finish_output+0x5fc/0xb90
[ 338.358698][ C1] ? audit_alloc_mark+0x430/0x500
[ 338.363702][ C1] ip_finish_output+0x38/0x1f0
[ 338.368447][ C1] ip_output+0x21f/0x640
[ 338.372668][ C1] ? ip_mc_output+0xf40/0xf40
[ 338.377327][ C1] ? __ip_finish_output+0xb90/0xb90
[ 338.382504][ C1] ? __kasan_check_read+0x11/0x20
[ 338.387529][ C1] ip_local_out+0xbb/0x190
[ 338.391979][ C1] igmpv3_sendpack+0x1b5/0x2c0
[ 338.396896][ C1] igmp_ifc_timer_expire+0x687/0xa00
[ 338.402162][ C1] ? call_timer_fn+0xe0/0x780
[ 338.406820][ C1] call_timer_fn+0x1ac/0x780
[ 338.411389][ C1] ? __ip_mc_dec_group+0x520/0x520
[ 338.416479][ C1] ? msleep_interruptible+0x150/0x150
[ 338.421835][ C1] ? trace_hardirqs_on+0x67/0x240
[ 338.426841][ C1] ? __kasan_check_read+0x11/0x20
[ 338.431865][ C1] ? __ip_mc_dec_group+0x520/0x520
[ 338.436957][ C1] ? __ip_mc_dec_group+0x520/0x520
[ 338.442045][ C1] run_timer_softirq+0x697/0x17a0
[ 338.447050][ C1] ? add_timer+0x930/0x930
[ 338.451445][ C1] ? kvm_clock_read+0x18/0x30
[ 338.456100][ C1] ? kvm_sched_clock_read+0x9/0x20
[ 338.461189][ C1] ? sched_clock+0x2e/0x50
[ 338.465584][ C1] ? sched_clock_cpu+0x1b/0x1b0
[ 338.470441][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 338.476669][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 338.482889][ C1] __do_softirq+0x262/0x98c
[ 338.487380][ C1] ? sched_clock_cpu+0x1b/0x1b0
[ 338.492213][ C1] irq_exit+0x19b/0x1e0
[ 338.496358][ C1] smp_apic_timer_interrupt+0x1a3/0x610
[ 338.501885][ C1] apic_timer_interrupt+0xf/0x20
[ 338.506795][ C1]
[ 338.509714][ C1] RIP: 0010:native_safe_halt+0xe/0x10
[ 338.515066][ C1] Code: 38 73 6e fa eb 8a 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d 24 1b 4a 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 14 1b 4a 00 fb f4 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 ee 32 22 fa e8 39
[ 338.534657][ C1] RSP: 0018:ffff8880a98e7d68 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
[ 338.543050][ C1] RAX: 1ffffffff11a5e8d RBX: ffff8880a98d6340 RCX: 1ffffffff134b5ee
[ 338.551006][ C1] RDX: dffffc0000000000 RSI: ffffffff8177f14e RDI: ffffffff873e050c
[ 338.559042][ C1] RBP: ffff8880a98e7d98 R08: ffff8880a98d6340 R09: ffffed101531ac69
[ 338.567008][ C1] R10: ffffed101531ac68 R11: ffff8880a98d6347 R12: dffffc0000000000
[ 338.574958][ C1] R13: ffffffff89a57d78 R14: 0000000000000000 R15: 0000000000000001
[ 338.582921][ C1] ? trace_hardirqs_on+0x5e/0x240
[ 338.587938][ C1] ? default_idle+0x1c/0x360
[ 338.592525][ C1] ? default_idle+0x4e/0x360
[ 338.597099][ C1] arch_cpu_idle+0xa/0x10
[ 338.601407][ C1] default_idle_call+0x84/0xb0
[ 338.606152][ C1] do_idle+0x413/0x760
[ 338.610203][ C1] ? arch_cpu_idle_exit+0x80/0x80
[ 338.615209][ C1] ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 338.621001][ C1] ? complete+0x61/0x80
[ 338.625224][ C1] cpu_startup_entry+0x1b/0x20
[ 338.629975][ C1] start_secondary+0x315/0x430
[ 338.634716][ C1] ? set_cpu_sibling_map+0x2180/0x2180
[ 338.640161][ C1] secondary_startup_64+0xa4/0xb0