[ 70.690736][ T26] audit: type=1800 audit(1568284150.232:32): pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 75.002066][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 75.002080][ T26] audit: type=1400 audit(1568284154.652:35): avc: denied { map } for pid=10385 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.199' (ECDSA) to the list of known hosts. [ 124.511893][ T26] audit: type=1400 audit(1568284204.162:36): avc: denied { map } for pid=10397 comm="syz-executor319" path="/root/syz-executor319440948" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 124.542220][T10398] IPVS: ftp: loaded support on port[0] = 21 [ 124.583856][T10398] chnl_net:caif_netlink_parms(): no params data found [ 124.606464][T10398] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.614019][T10398] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.621728][T10398] device bridge_slave_0 entered promiscuous mode [ 124.628898][T10398] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.636802][T10398] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.644549][T10398] device bridge_slave_1 entered promiscuous mode [ 124.658117][T10398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.668633][T10398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.684878][T10398] team0: Port device team_slave_0 added [ 124.692405][T10398] team0: Port device team_slave_1 added [ 124.742706][T10398] device hsr_slave_0 entered promiscuous mode [ 124.810868][T10398] device hsr_slave_1 entered promiscuous mode [ 124.886119][T10398] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.893459][T10398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.900986][T10398] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.908093][T10398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.933335][T10398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.944412][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.962563][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.970879][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.978579][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 124.988669][T10398] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.997960][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.006569][ T3021] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.013917][ T3021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.031223][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.039508][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.046691][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.054737][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.063170][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.072250][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.081630][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready executing program [ 125.093044][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.101869][T10398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.117945][T10398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.150566][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 230.157298][ C0] rcu: 0-...!: (10500 ticks this GP) idle=89a/0/0x3 softirq=11590/11590 fqs=0 [ 230.166289][ C0] (t=10501 jiffies g=10481 q=147) [ 230.171387][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g10481 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 230.182716][ C0] rcu: RCU grace-period kthread stack dump: [ 230.188589][ C0] rcu_preempt I29688 10 2 0x80004000 [ 230.194899][ C0] Call Trace: [ 230.198180][ C0] __schedule+0x755/0x1580 [ 230.202577][ C0] ? __sched_text_start+0x8/0x8 [ 230.207406][ C0] schedule+0xd9/0x260 [ 230.211452][ C0] schedule_timeout+0x486/0xc50 [ 230.216279][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 230.221195][ C0] ? usleep_range+0x170/0x170 [ 230.225847][ C0] ? trace_hardirqs_on+0x67/0x240 [ 230.230848][ C0] ? __kasan_check_read+0x11/0x20 [ 230.235855][ C0] ? __next_timer_interrupt+0x1a0/0x1a0 [ 230.241375][ C0] ? swake_up_one+0x60/0x60 [ 230.245853][ C0] ? trace_hardirqs_on+0x67/0x240 [ 230.250856][ C0] rcu_gp_kthread+0x9b2/0x18c0 [ 230.255613][ C0] ? rcu_barrier+0x310/0x310 [ 230.260177][ C0] ? trace_hardirqs_on+0x67/0x240 [ 230.265181][ C0] ? __kasan_check_read+0x11/0x20 [ 230.270206][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 230.276461][ C0] ? __kthread_parkme+0x108/0x1c0 [ 230.281472][ C0] ? __kasan_check_read+0x11/0x20 [ 230.286478][ C0] kthread+0x361/0x430 [ 230.290528][ C0] ? rcu_barrier+0x310/0x310 [ 230.295099][ C0] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 230.301319][ C0] ret_from_fork+0x24/0x30 [ 230.305738][ C0] NMI backtrace for cpu 0 [ 230.310048][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.3.0-rc8+ #0 [ 230.317125][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.327152][ C0] Call Trace: [ 230.330439][ C0] [ 230.333292][ C0] dump_stack+0x172/0x1f0 [ 230.337604][ C0] nmi_cpu_backtrace.cold+0x70/0xb2 [ 230.342777][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 230.348999][ C0] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 230.354610][ C0] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 230.360571][ C0] arch_trigger_cpumask_backtrace+0x14/0x20 [ 230.366529][ C0] rcu_dump_cpu_stacks+0x183/0x1cf [ 230.371619][ C0] rcu_sched_clock_irq.cold+0x4dd/0xc13 [ 230.377151][ C0] ? raise_softirq+0x138/0x340 [ 230.381897][ C0] update_process_times+0x32/0x80 [ 230.386899][ C0] tick_sched_handle+0xa2/0x190 [ 230.391723][ C0] tick_sched_timer+0x53/0x140 [ 230.396467][ C0] __hrtimer_run_queues+0x364/0xe40 [ 230.401658][ C0] ? tick_sched_do_timer+0x1b0/0x1b0 [ 230.406923][ C0] ? hrtimer_start_range_ns+0xcb0/0xcb0 [ 230.412443][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 230.418161][ C0] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 230.424207][ C0] hrtimer_interrupt+0x314/0x770 [ 230.429128][ C0] smp_apic_timer_interrupt+0x160/0x610 [ 230.434651][ C0] apic_timer_interrupt+0xf/0x20 [ 230.439573][ C0] RIP: 0010:hhf_dequeue+0x572/0xa20 [ 230.444753][ C0] Code: 48 39 c2 74 34 e8 1e 15 ac fb 49 8d bd ac 03 00 00 48 89 f8 48 c1 e8 03 42 0f b6 14 20 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 <84> d2 0f 85 b5 03 00 00 45 8b b5 ac 03 00 00 e8 ea 14 ac fb 49 8d [ 230.464418][ C0] RSP: 0018:ffff8880ae8095c8 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 230.475842][ C0] RAX: 0000000000000007 RBX: ffff888088db8778 RCX: ffffffff85c65b39 [ 230.483799][ C0] RDX: 0000000000000000 RSI: ffffffff85c65fd2 RDI: ffff888088db882c [ 230.491748][ C0] RBP: ffff8880ae809618 R08: ffffffff88c7a1c0 R09: 0000000000000000 [ 230.499695][ C0] R10: fffffbfff134afaf R11: ffffffff88c7a1c0 R12: dffffc0000000000 [ 230.510505][ C0] R13: ffff888088db8480 R14: 0000000000000001 R15: 0000000000000000 [ 230.518461][ C0] ? apic_timer_interrupt+0xa/0x20 [ 230.523551][ C0] ? hhf_dequeue+0xb9/0xa20 [ 230.528032][ C0] ? hhf_dequeue+0x552/0xa20 [ 230.532608][ C0] ? hhf_dequeue+0x552/0xa20 [ 230.537181][ C0] __qdisc_run+0x1e7/0x19d0 [ 230.541663][ C0] ? dev_queue_xmit+0x18/0x20 [ 230.546320][ C0] __dev_queue_xmit+0x16f1/0x3650 [ 230.551329][ C0] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 230.556596][ C0] ? __ip6_finish_output+0x444/0xa50 [ 230.561859][ C0] ? ipv6_chk_mcast_addr+0x315/0x6f0 [ 230.567121][ C0] ? lock_downgrade+0x920/0x920 [ 230.571952][ C0] ? lock_acquire+0x190/0x410 [ 230.576606][ C0] ? __ip6_finish_output+0x444/0xa50 [ 230.581867][ C0] dev_queue_xmit+0x18/0x20 [ 230.586345][ C0] ? dev_queue_xmit+0x18/0x20 [ 230.591008][ C0] ip6_finish_output2+0xf58/0x2520 [ 230.596098][ C0] ? ip6_forward_finish+0x530/0x530 [ 230.601271][ C0] ? ip6_mtu+0x16f/0x460 [ 230.605495][ C0] __ip6_finish_output+0x444/0xa50 [ 230.610579][ C0] ? __ip6_finish_output+0x444/0xa50 [ 230.615859][ C0] ip6_finish_output+0x38/0x1f0 [ 230.620699][ C0] ip6_output+0x235/0x7c0 [ 230.625018][ C0] ? ip6_finish_output+0x1f0/0x1f0 [ 230.630121][ C0] ? __ip6_finish_output+0xa50/0xa50 [ 230.635403][ C0] ? icmp6_dst_alloc+0x432/0x660 [ 230.640322][ C0] mld_sendpack+0x9c7/0xea0 [ 230.644808][ C0] ? nf_hook.constprop.0+0x560/0x560 [ 230.650076][ C0] ? mld_ifc_timer_expire+0x437/0x8a0 [ 230.655426][ C0] ? __local_bh_enable_ip+0x15a/0x270 [ 230.660786][ C0] mld_ifc_timer_expire+0x449/0x8a0 [ 230.665966][ C0] call_timer_fn+0x1ac/0x780 [ 230.670562][ C0] ? mld_dad_timer_expire+0x1c0/0x1c0 [ 230.675911][ C0] ? msleep_interruptible+0x150/0x150 [ 230.681261][ C0] ? trace_hardirqs_on+0x67/0x240 [ 230.686261][ C0] ? __kasan_check_read+0x11/0x20 [ 230.691263][ C0] ? mld_dad_timer_expire+0x1c0/0x1c0 [ 230.696611][ C0] ? mld_dad_timer_expire+0x1c0/0x1c0 [ 230.701962][ C0] run_timer_softirq+0x697/0x17a0 [ 230.706970][ C0] ? add_timer+0x930/0x930 [ 230.711363][ C0] ? kvm_clock_read+0x18/0x30 [ 230.716016][ C0] ? kvm_sched_clock_read+0x9/0x20 [ 230.721123][ C0] ? sched_clock+0x2e/0x50 [ 230.726919][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 230.731752][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 230.737975][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 230.744195][ C0] __do_softirq+0x262/0x98c [ 230.748781][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 230.753612][ C0] irq_exit+0x19b/0x1e0 [ 230.757744][ C0] smp_apic_timer_interrupt+0x1a3/0x610 [ 230.763267][ C0] apic_timer_interrupt+0xf/0x20 [ 230.768193][ C0] [ 230.771114][ C0] RIP: 0010:native_safe_halt+0xe/0x10 [ 230.776475][ C0] Code: 38 73 6e fa eb 8a 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d 24 1b 4a 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 14 1b 4a 00 fb f4 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 ee 32 22 fa e8 39 [ 230.796343][ C0] RSP: 0018:ffffffff88c07ce8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 230.804737][ C0] RAX: 1ffffffff11a5e8d RBX: ffffffff88c7a1c0 RCX: 1ffffffff134b5ee [ 230.812695][ C0] RDX: dffffc0000000000 RSI: ffffffff8177f14e RDI: ffffffff873e050c [ 230.820644][ C0] RBP: ffffffff88c07d18 R08: ffffffff88c7a1c0 R09: fffffbfff118f439 [ 230.828594][ C0] R10: fffffbfff118f438 R11: ffffffff88c7a1c7 R12: dffffc0000000000 [ 230.836544][ C0] R13: ffffffff89a57d78 R14: 0000000000000000 R15: 0000000000000000 [ 230.844508][ C0] ? trace_hardirqs_on+0x5e/0x240 [ 230.849520][ C0] ? default_idle+0x1c/0x360 [ 230.854089][ C0] ? default_idle+0x4e/0x360 [ 230.858661][ C0] arch_cpu_idle+0xa/0x10 [ 230.862966][ C0] default_idle_call+0x84/0xb0 [ 230.867707][ C0] do_idle+0x413/0x760 [ 230.871755][ C0] ? arch_cpu_idle_exit+0x80/0x80 [ 230.876757][ C0] ? trace_hardirqs_on+0x67/0x240 [ 230.881762][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 230.887981][ C0] ? debug_smp_processor_id+0x3c/0x214 [ 230.893419][ C0] cpu_startup_entry+0x1b/0x20 [ 230.898162][ C0] rest_init+0x245/0x37b [ 230.902385][ C0] arch_call_rest_init+0xe/0x1b [ 230.907226][ C0] start_kernel+0x912/0x951 [ 230.911706][ C0] ? mem_encrypt_init+0xb/0xb [ 230.916371][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 230.922596][ C0] ? x86_family+0x41/0x50 [ 230.926905][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 230.933125][ C0] x86_64_start_reservations+0x29/0x2b [ 230.938562][ C0] x86_64_start_kernel+0x77/0x7b [ 230.943513][ C0] secondary_startup_64+0xa4/0xb0