Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.950315] audit: type=1800 audit(1568050944.651:33): pid=7291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 36.971891] audit: type=1800 audit(1568050944.651:34): pid=7291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 40.879087] audit: type=1400 audit(1568050948.581:35): avc: denied { map } for pid=7465 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.12' (ECDSA) to the list of known hosts. [ 595.893392] audit: type=1400 audit(1568051503.591:36): avc: denied { map } for pid=7477 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/09/09 17:51:43 parsed 1 programs [ 595.962642] audit: type=1400 audit(1568051503.661:37): avc: denied { map } for pid=7477 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=68 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/09/09 17:51:45 executed programs: 0 [ 597.540813] IPVS: ftp: loaded support on port[0] = 21 [ 597.600703] chnl_net:caif_netlink_parms(): no params data found [ 597.631843] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.638668] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.646637] device bridge_slave_0 entered promiscuous mode [ 597.653832] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.660287] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.667282] device bridge_slave_1 entered promiscuous mode [ 597.682091] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 597.691265] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 597.706942] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 597.714377] team0: Port device team_slave_0 added [ 597.719882] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 597.727050] team0: Port device team_slave_1 added [ 597.732250] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 597.739582] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 597.787876] device hsr_slave_0 entered promiscuous mode [ 597.835983] device hsr_slave_1 entered promiscuous mode [ 597.876152] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 597.883019] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 597.896003] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.902420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.909331] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.915749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.945394] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 597.951526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.959700] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 597.968093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 597.986594] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.993668] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.001390] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 598.010861] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 598.017373] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.026629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 598.034261] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.040640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.057136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 598.064709] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.071095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.078492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 598.086342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 598.094393] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 598.103333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 598.114221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 598.124627] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 598.131533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 598.139347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 598.151413] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 598.162403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.172310] audit: type=1400 audit(1568051505.881:38): avc: denied { associate } for pid=7494 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 749.985825] INFO: task syz-executor.0:7540 blocked for more than 140 seconds. [ 749.993213] Not tainted 4.19.71 #0 [ 749.997947] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 750.005963] syz-executor.0 D28152 7540 7494 0x00000004 [ 750.011694] Call Trace: [ 750.014389] __schedule+0x866/0x1dc0 [ 750.018806] ? finish_task_switch+0x146/0x780 [ 750.023297] ? pci_mmcfg_check_reserved+0x170/0x170 [ 750.028361] ? mark_held_locks+0x100/0x100 [ 750.032606] schedule+0x92/0x1c0 [ 750.036594] schedule_timeout+0x8c8/0xfc0 [ 750.040729] ? wait_for_completion+0x294/0x440 [ 750.045324] ? find_held_lock+0x35/0x130 [ 750.049416] ? usleep_range+0x170/0x170 [ 750.053397] ? _raw_spin_unlock_irq+0x28/0x90 [ 750.058502] ? wait_for_completion+0x294/0x440 [ 750.063070] ? _raw_spin_unlock_irq+0x28/0x90 [ 750.067588] ? lockdep_hardirqs_on+0x415/0x5d0 [ 750.072212] ? trace_hardirqs_on+0x67/0x220 [ 750.077147] ? kasan_check_read+0x11/0x20 [ 750.081288] wait_for_completion+0x29c/0x440 [ 750.085736] ? wait_for_completion_interruptible+0x4b0/0x4b0 [ 750.091534] ? preempt_schedule_common+0x4f/0xe0 [ 750.096908] ? wake_up_q+0x100/0x100 [ 750.100626] ? ___preempt_schedule+0x16/0x18 [ 750.105073] __flush_work+0x49f/0x870 [ 750.108904] ? insert_work+0x3a0/0x3a0 [ 750.112815] ? __radix_tree_lookup+0x219/0x380 [ 750.118029] ? flush_workqueue_prep_pwqs+0x590/0x590 [ 750.123126] ? __cancel_work_timer+0xc4/0x520 [ 750.127646] ? __cancel_work_timer+0x1d3/0x520 [ 750.132233] ? cancel_work_sync+0x18/0x20 [ 750.137036] ? __cancel_work_timer+0x1d3/0x520 [ 750.141607] ? lockdep_hardirqs_on+0x415/0x5d0 [ 750.146230] ? trace_hardirqs_on+0x67/0x220 [ 750.150550] __cancel_work_timer+0x3bf/0x520 [ 750.154942] ? try_to_grab_pending+0x710/0x710 [ 750.160171] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 750.165265] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 750.170478] ? p9_fd_close+0x29e/0x570 [ 750.174388] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 750.180142] ? lockdep_hardirqs_on+0x415/0x5d0 [ 750.184716] ? trace_hardirqs_on+0x67/0x220 [ 750.189063] ? kasan_check_read+0x11/0x20 [ 750.193210] cancel_work_sync+0x18/0x20 [ 750.197796] p9_fd_close+0x329/0x570 [ 750.201501] p9_client_create+0x98c/0x1400 [ 750.205802] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 750.211345] ? p9_client_zc_rpc.constprop.0+0x10b0/0x10b0 [ 750.217568] ? rcu_read_lock_sched_held+0x110/0x130 [ 750.222581] ? __lockdep_init_map+0x10c/0x5b0 [ 750.227105] ? lockdep_init_map+0x9/0x10 [ 750.231201] v9fs_session_init+0x1e7/0x18c0 [ 750.235505] ? v9fs_session_init+0x1e7/0x18c0 [ 750.240634] ? find_held_lock+0x35/0x130 [ 750.244721] ? fs_reclaim_acquire+0x20/0x20 [ 750.249081] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 750.254618] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 750.260811] ? v9fs_show_options+0x7e0/0x7e0 [ 750.265211] ? v9fs_mount+0x5e/0x920 [ 750.268960] ? rcu_read_lock_sched_held+0x110/0x130 [ 750.274026] ? kmem_cache_alloc_trace+0x348/0x760 [ 750.279489] ? free_pages+0x46/0x50 [ 750.283166] ? selinux_sb_copy_data+0x319/0x4a0 [ 750.287870] v9fs_mount+0x7d/0x920 [ 750.291411] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 750.297612] mount_fs+0xa8/0x31f [ 750.300993] vfs_kern_mount.part.0+0x6f/0x410 [ 750.305473] do_mount+0x53e/0x2bc0 [ 750.309051] ? copy_mount_string+0x40/0x40 [ 750.313290] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 750.319453] ? copy_mount_options+0x280/0x3a0 [ 750.323943] ksys_mount+0xdb/0x150 [ 750.327511] __x64_sys_mount+0xbe/0x150 [ 750.331527] do_syscall_64+0xfd/0x620 [ 750.335314] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 750.341119] RIP: 0033:0x4598e9 [ 750.344302] Code: a8 00 00 00 48 83 ec 38 48 89 6c 24 30 48 8d 6c 24 30 31 c0 eb 09 48 8b 54 24 20 48 8d 42 01 48 83 f8 0e 7d 78 48 8d 0c 40 48 <8b> 54 24 40 48 8b 1c ca 48 8b 74 ca 08 48 8b 7c 24 48 4c 8b 04 cf [ 750.363822] RSP: 002b:00007efdfb5c4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 750.371571] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004598e9 [ 750.378892] RDX: 0000000020000d00 RSI: 0000000020000140 RDI: 0000000000000000 [ 750.386575] RBP: 000000000075c118 R08: 0000000020000d40 R09: 0000000000000000 [ 750.393846] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efdfb5c56d4 [ 750.401144] R13: 00000000004c5e68 R14: 00000000004da9b0 R15: 00000000ffffffff [ 750.408441] [ 750.408441] Showing all locks held in the system: [ 750.414751] 1 lock held by khungtaskd/1038: [ 750.419084] #0: 00000000307b13c7 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 750.427759] 1 lock held by rsyslogd/7329: [ 750.431898] #0: 000000007942a694 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 750.439823] 2 locks held by getty/7451: [ 750.443781] #0: 00000000552fb7c9 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 750.452064] #1: 00000000cf5f6bdb (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 750.461046] 2 locks held by getty/7452: [ 750.464995] #0: 00000000b857a7e8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 750.473283] #1: 0000000098f92461 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 750.482294] 2 locks held by getty/7453: [ 750.486301] #0: 0000000051554e30 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 750.494560] #1: 00000000adc2c46b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 750.503448] 2 locks held by getty/7454: [ 750.507438] #0: 00000000d16ab835 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 750.515710] #1: 0000000086556db3 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 750.524580] 2 locks held by getty/7455: [ 750.528576] #0: 000000004da12955 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 750.536860] #1: 0000000055896c98 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 750.545744] 2 locks held by getty/7456: [ 750.549709] #0: 000000003f1f96d7 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 750.558009] #1: 0000000032f9a793 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 750.566905] 2 locks held by getty/7457: [ 750.570864] #0: 00000000bec1f911 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 750.579134] #1: 00000000e0dbbbe6 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 750.588035] 2 locks held by kworker/1:0/7498: [ 750.592509] #0: 0000000080086691 ((wq_completion)"events"){+.+.}, at: process_one_work+0x87e/0x1750 [ 750.601815] #1: 000000004f647b94 ((work_completion)(&m->wq)){+.+.}, at: process_one_work+0x8b4/0x1750 [ 750.611320] [ 750.612928] ============================================= [ 750.612928] [ 750.619973] NMI backtrace for cpu 1 [ 750.623604] CPU: 1 PID: 1038 Comm: khungtaskd Not tainted 4.19.71 #0 [ 750.630075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 750.639407] Call Trace: [ 750.642045] dump_stack+0x172/0x1f0 [ 750.645709] nmi_cpu_backtrace.cold+0x63/0xa4 [ 750.650208] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 750.655120] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 750.660390] arch_trigger_cpumask_backtrace+0x14/0x20 [ 750.665562] watchdog+0x9df/0xee0 [ 750.669004] kthread+0x354/0x420 [ 750.672398] ? reset_hung_task_detector+0x30/0x30 [ 750.677223] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 750.682747] ret_from_fork+0x24/0x30 [ 750.686550] Sending NMI from CPU 1 to CPUs 0: [ 750.691118] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0xe/0x10 [ 750.692071] Kernel panic - not syncing: hung_task: blocked tasks [ 750.704781] CPU: 1 PID: 1038 Comm: khungtaskd Not tainted 4.19.71 #0 [ 750.711252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 750.720585] Call Trace: [ 750.723203] dump_stack+0x172/0x1f0 [ 750.726877] panic+0x263/0x507 [ 750.730054] ? __warn_printk+0xf3/0xf3 [ 750.733925] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 750.738954] ? printk_safe_flush+0xf2/0x140 [ 750.743259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 750.748786] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 750.753696] ? nmi_trigger_cpumask_backtrace+0x16e/0x1f8 [ 750.759246] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 750.764680] watchdog+0x9f0/0xee0 [ 750.768121] kthread+0x354/0x420 [ 750.771467] ? reset_hung_task_detector+0x30/0x30 [ 750.776289] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 750.781810] ret_from_fork+0x24/0x30 [ 750.786809] Kernel Offset: disabled [ 750.796684] Rebooting in 86400 seconds..