[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 38.086281] audit: type=1800 audit(1568026805.874:33): pid=7316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 38.113828] audit: type=1800 audit(1568026805.874:34): pid=7316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 40.707730] audit: type=1400 audit(1568026808.494:35): avc: denied { map } for pid=7488 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.215' (ECDSA) to the list of known hosts. [ 230.801467] audit: type=1400 audit(1568026998.594:36): avc: denied { map } for pid=7501 comm="syz-executor284" path="/root/syz-executor284287163" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 230.821964] IPVS: ftp: loaded support on port[0] = 21 [ 230.887115] chnl_net:caif_netlink_parms(): no params data found [ 230.922509] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.929084] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.936299] device bridge_slave_0 entered promiscuous mode [ 230.943545] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.950008] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.956917] device bridge_slave_1 entered promiscuous mode [ 230.972462] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 230.981602] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 230.997579] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 231.005257] team0: Port device team_slave_0 added [ 231.010755] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 231.017879] team0: Port device team_slave_1 added [ 231.023284] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 231.030665] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 231.081731] device hsr_slave_0 entered promiscuous mode [ 231.149681] device hsr_slave_1 entered promiscuous mode [ 231.249917] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 231.256932] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 231.270737] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.277146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.284083] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.290481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.323318] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 231.330324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.338133] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 231.346573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.366190] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.373651] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.381782] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 231.392533] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 231.398621] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.418075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.425958] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.432358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.442806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.450476] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.456804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.470801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.478519] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.488963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.499258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.510442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network executing program [ 231.521491] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 231.527535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.535665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.547874] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 231.559532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.669363] rcu: INFO: rcu_preempt self-detected stall on CPU [ 336.675467] rcu: 1-...!: (1 GPs behind) idle=7d2/1/0x4000000000000002 softirq=9940/9941 fqs=12 [ 336.684565] rcu: (t=10500 jiffies g=5429 q=24) [ 336.689332] rcu: rcu_preempt kthread starved for 10475 jiffies! g5429 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 336.699974] rcu: RCU grace-period kthread stack dump: [ 336.705144] rcu_preempt I29104 10 2 0x80000000 [ 336.710765] Call Trace: [ 336.713431] __schedule+0x866/0x1dc0 [ 336.717138] ? pci_mmcfg_check_reserved+0x170/0x170 [ 336.722142] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 336.727280] ? lockdep_hardirqs_on+0x415/0x5d0 [ 336.731920] ? trace_hardirqs_on+0x67/0x220 [ 336.736244] schedule+0x92/0x1c0 [ 336.739622] schedule_timeout+0x4db/0xfc0 [ 336.743764] ? usleep_range+0x170/0x170 [ 336.747726] ? trace_hardirqs_on+0x67/0x220 [ 336.752073] ? kasan_check_read+0x11/0x20 [ 336.756231] ? __next_timer_interrupt+0x1a0/0x1a0 [ 336.761089] ? prepare_to_swait_exclusive+0x120/0x120 [ 336.766302] rcu_gp_kthread+0xd5c/0x2190 [ 336.770372] ? rcu_blocking_is_gp+0x90/0x90 [ 336.774684] ? trace_hardirqs_on+0x67/0x220 [ 336.778992] ? kasan_check_read+0x11/0x20 [ 336.783130] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 336.788254] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 336.793814] ? __kthread_parkme+0xfb/0x1b0 [ 336.798043] kthread+0x354/0x420 [ 336.801400] ? rcu_blocking_is_gp+0x90/0x90 [ 336.805811] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 336.811351] ret_from_fork+0x24/0x30 [ 336.815091] NMI backtrace for cpu 1 [ 336.818708] CPU: 1 PID: 7504 Comm: kworker/1:3 Not tainted 4.19.71 #0 [ 336.825266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.834708] Workqueue: ipv6_addrconf addrconf_dad_work [ 336.839972] Call Trace: [ 336.842551] [ 336.844712] dump_stack+0x172/0x1f0 [ 336.848332] nmi_cpu_backtrace.cold+0x63/0xa4 [ 336.852848] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 336.857765] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 336.863032] arch_trigger_cpumask_backtrace+0x14/0x20 [ 336.868210] rcu_dump_cpu_stacks+0x189/0x1d5 [ 336.872639] ? wake_up_process+0x10/0x20 [ 336.876702] rcu_check_callbacks.cold+0x5e3/0xd90 [ 336.881539] ? trace_hardirqs_off+0x62/0x220 [ 336.885997] update_process_times+0x32/0x80 [ 336.890341] tick_sched_handle+0xa2/0x190 [ 336.894479] tick_sched_timer+0x47/0x130 [ 336.898528] __hrtimer_run_queues+0x33b/0xdc0 [ 336.903015] ? tick_sched_do_timer+0x1b0/0x1b0 [ 336.907590] ? hrtimer_fixup_activate+0x30/0x30 [ 336.912263] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 336.917262] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 336.922630] hrtimer_interrupt+0x314/0x770 [ 336.926866] smp_apic_timer_interrupt+0x111/0x550 [ 336.931696] apic_timer_interrupt+0xf/0x20 [ 336.935920] [ 336.938214] RIP: 0010:__list_add_valid+0x2b/0xa0 [ 336.944101] Code: b8 00 00 00 00 00 fc ff df 55 48 89 e5 41 55 49 89 fd 48 8d 7a 08 41 54 49 89 d4 48 89 fa 48 83 ec 08 48 c1 ea 03 80 3c 02 00 <75> 52 49 8b 54 24 08 48 39 f2 0f 85 5a 01 00 00 48 b8 00 00 00 00 [ 336.962995] RSP: 0018:ffff88808ba0edd0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 336.970700] RAX: dffffc0000000000 RBX: ffff88809f3af038 RCX: ffffffff858e8986 [ 336.977962] RDX: 1ffff11013e75e1b RSI: ffff88809f3af0d0 RDI: ffff88809f3af0d8 [ 336.985216] RBP: ffff88808ba0ede8 R08: ffff8880a0eb8300 R09: 0000000000000009 [ 336.992470] R10: ffff8880a0eb8ce8 R11: 000000008102099a R12: ffff88809f3af0d0 [ 336.999726] R13: ffff88809f3af038 R14: ffff88809f3af0d8 R15: ffff88809f3af0d0 [ 337.007048] ? hhf_dequeue+0x5b6/0xa00 [ 337.010928] hhf_dequeue+0x652/0xa00 [ 337.014687] __qdisc_run+0x1e7/0x1960 [ 337.018530] __dev_queue_xmit+0x165c/0x2fe0 [ 337.022849] ? netdev_pick_tx+0x300/0x300 [ 337.027099] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 337.032680] ? br_nf_post_routing+0x780/0x12f0 [ 337.037286] ? br_forward_finish+0x235/0x400 [ 337.041684] ? find_held_lock+0x35/0x130 [ 337.045732] ? br_forward_finish+0x235/0x400 [ 337.050144] dev_queue_xmit+0x18/0x20 [ 337.053935] ? dev_queue_xmit+0x18/0x20 [ 337.057898] br_dev_queue_push_xmit+0x405/0x5d0 [ 337.062556] ? kasan_check_read+0x11/0x20 [ 337.066699] br_forward_finish+0xfa/0x400 [ 337.070847] ? br_dev_queue_push_xmit+0x5d0/0x5d0 [ 337.075679] ? br_fdb_add.cold+0x8a/0x8a [ 337.079733] ? kasan_check_read+0x11/0x20 [ 337.083881] __br_forward+0x647/0xb30 [ 337.087674] ? br_forward_finish+0x400/0x400 [ 337.092074] ? br_dev_queue_push_xmit+0x5d0/0x5d0 [ 337.096910] deliver_clone+0x61/0xc0 [ 337.100611] br_flood+0x4da/0x710 [ 337.104058] br_dev_xmit+0xeeb/0x1490 [ 337.107857] ? br_poll_controller+0x10/0x10 [ 337.112170] ? __lock_is_held+0xb6/0x140 [ 337.116251] dev_hard_start_xmit+0x1a5/0x980 [ 337.120669] ? check_preemption_disabled+0x48/0x290 [ 337.125688] __dev_queue_xmit+0x2704/0x2fe0 [ 337.130011] ? netdev_pick_tx+0x300/0x300 [ 337.134218] ? ip6_finish_output2+0xac0/0x2550 [ 337.138800] ? find_held_lock+0x35/0x130 [ 337.142851] ? ip6_finish_output2+0xb7f/0x2550 [ 337.147428] ? mark_held_locks+0xb1/0x100 [ 337.151571] dev_queue_xmit+0x18/0x20 [ 337.155363] ? dev_queue_xmit+0x18/0x20 [ 337.159380] neigh_resolve_output+0x5b7/0x980 [ 337.163873] ip6_finish_output2+0xb7f/0x2550 [ 337.168301] ? ip6_mtu+0x2e6/0x460 [ 337.171833] ? ip6_forward_finish+0x4d0/0x4d0 [ 337.176320] ? lock_downgrade+0x810/0x810 [ 337.180460] ? kasan_check_read+0x11/0x20 [ 337.184611] ip6_finish_output+0x574/0xbe0 [ 337.188834] ? ip6_finish_output+0x574/0xbe0 [ 337.193231] ip6_output+0x235/0x7c0 [ 337.196847] ? ip6_finish_output+0xbe0/0xbe0 [ 337.201245] ? ip6_fragment+0x3770/0x3770 [ 337.205394] ndisc_send_skb+0xf3b/0x1460 [ 337.209474] ? nf_hook.constprop.0+0x560/0x560 [ 337.214109] ? skb_set_owner_w+0x24c/0x360 [ 337.218335] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 337.223343] ndisc_send_ns+0x3a9/0x850 [ 337.227392] ? mark_held_locks+0xb1/0x100 [ 337.231532] ? ndisc_netdev_event+0x470/0x470 [ 337.236022] ? lockdep_hardirqs_on+0x415/0x5d0 [ 337.240680] ? addrconf_dad_work+0xac4/0x1150 [ 337.246679] ? trace_hardirqs_on+0x67/0x220 [ 337.250991] ? addrconf_dad_work+0xac4/0x1150 [ 337.255485] addrconf_dad_work+0xb88/0x1150 [ 337.259820] ? addrconf_dad_completed+0xbb0/0xbb0 [ 337.265104] process_one_work+0x989/0x1750 [ 337.269334] ? pwq_dec_nr_in_flight+0x320/0x320 [ 337.273992] ? lock_acquire+0x16f/0x3f0 [ 337.277981] ? kasan_check_write+0x14/0x20 [ 337.282270] ? do_raw_spin_lock+0xc8/0x240 [ 337.286508] worker_thread+0x98/0xe40 [ 337.290310] ? trace_hardirqs_on+0x67/0x220 [ 337.294633] kthread+0x354/0x420 [ 337.297987] ? process_one_work+0x1750/0x1750 [ 337.302656] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 337.308270] ret_from_fork+0x24/0x30