[ 72.188279][ T27] audit: type=1800 audit(1564506225.386:27): pid=10060 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 72.209228][ T27] audit: type=1800 audit(1564506225.396:28): pid=10060 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 72.932954][ T27] audit: type=1800 audit(1564506226.196:29): pid=10060 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 72.954116][ T27] audit: type=1800 audit(1564506226.196:30): pid=10060 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.60' (ECDSA) to the list of known hosts. syzkaller login: [ 206.736599][T10214] IPVS: ftp: loaded support on port[0] = 21 [ 206.781706][T10214] chnl_net:caif_netlink_parms(): no params data found [ 206.804625][T10214] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.813174][T10214] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.821658][T10214] device bridge_slave_0 entered promiscuous mode [ 206.831170][T10214] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.839716][T10214] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.848654][T10214] device bridge_slave_1 entered promiscuous mode [ 206.862918][T10214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.875296][T10214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.896399][T10214] team0: Port device team_slave_0 added [ 206.905196][T10214] team0: Port device team_slave_1 added [ 206.976449][T10214] device hsr_slave_0 entered promiscuous mode [ 207.034864][T10214] device hsr_slave_1 entered promiscuous mode [ 207.080881][T10214] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.091865][T10214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.102210][T10214] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.111518][T10214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.141154][T10214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.153657][ T2984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.173563][ T2984] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.182671][ T2984] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.192981][ T2984] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 207.205299][T10214] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.219544][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.230463][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.240963][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.264840][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.275357][T10216] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.283789][T10216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.304835][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.316199][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.330320][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready executing program [ 207.342062][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.355179][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.367652][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.385061][T10214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.423046][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 312.614224][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 312.620897][ C1] rcu: 1-....: (1 GPs behind) idle=ed2/1/0x4000000000000002 softirq=9404/9405 fqs=5249 [ 312.630683][ C1] (t=10500 jiffies g=10597 q=79) [ 312.635705][ C1] NMI backtrace for cpu 1 [ 312.640059][ C1] CPU: 1 PID: 10214 Comm: syz-executor478 Not tainted 5.3.0-rc2-next-20190730 #55 [ 312.649225][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.659280][ C1] Call Trace: [ 312.662567][ C1] [ 312.665463][ C1] dump_stack+0x172/0x1f0 [ 312.669774][ C1] nmi_cpu_backtrace.cold+0x70/0xb2 [ 312.675169][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.681421][ C1] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 312.687033][ C1] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 312.692991][ C1] arch_trigger_cpumask_backtrace+0x14/0x20 [ 312.698859][ C1] rcu_dump_cpu_stacks+0x183/0x1cf [ 312.703970][ C1] ? find_next_bit+0x107/0x130 [ 312.708713][ C1] rcu_sched_clock_irq.cold+0x4dd/0xc13 [ 312.714259][ C1] ? raise_softirq+0x138/0x340 [ 312.719011][ C1] update_process_times+0x32/0x80 [ 312.724011][ C1] tick_sched_handle+0xa2/0x190 [ 312.728840][ C1] tick_sched_timer+0x53/0x140 [ 312.733593][ C1] __hrtimer_run_queues+0x364/0xe40 [ 312.738772][ C1] ? tick_sched_do_timer+0x1b0/0x1b0 [ 312.744032][ C1] ? hrtimer_start_range_ns+0xcb0/0xcb0 [ 312.749551][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 312.755261][ C1] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 312.761309][ C1] hrtimer_interrupt+0x314/0x770 [ 312.766240][ C1] smp_apic_timer_interrupt+0x160/0x610 [ 312.771778][ C1] apic_timer_interrupt+0xf/0x20 [ 312.776711][ C1] RIP: 0010:native_queued_spin_lock_slowpath+0xaf/0x9f0 [ 312.783630][ C1] Code: 49 89 fe 49 89 fd 41 bc 01 00 00 00 49 c1 ee 03 41 83 e5 07 48 b8 00 00 00 00 00 fc ff df 49 01 c6 41 83 c5 03 be 04 00 00 00 <48> 89 df e8 99 f5 53 00 41 0f b6 06 41 38 c5 7c 08 84 c0 0f 85 4e [ 312.803836][ C1] RSP: 0018:ffff8880ae909210 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 312.812230][ C1] RAX: 0000000000000000 RBX: ffff8880a7632d08 RCX: ffffffff8158f237 [ 312.820196][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880a7632d08 [ 312.828235][ C1] RBP: ffff8880ae9092d0 R08: 1ffff11014ec65a1 R09: ffffed1014ec65a2 [ 312.836193][ C1] R10: ffffed1014ec65a1 R11: ffff8880a7632d0b R12: 0000000000000001 [ 312.844161][ C1] R13: 0000000000000003 R14: ffffed1014ec65a1 R15: 0000000000000001 [ 312.852124][ C1] ? apic_timer_interrupt+0xa/0x20 [ 312.857221][ C1] ? native_queued_spin_lock_slowpath+0xb7/0x9f0 [ 312.863531][ C1] ? __pv_queued_spin_lock_slowpath+0xd10/0xd10 [ 312.869773][ C1] ? mark_held_locks+0xf0/0xf0 [ 312.874517][ C1] do_raw_spin_lock+0x20e/0x2e0 [ 312.879345][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 312.884262][ C1] ? lock_acquire+0x190/0x410 [ 312.888934][ C1] ? release_sock+0x20/0x1c0 [ 312.893514][ C1] ? __kasan_check_read+0x11/0x20 [ 312.898520][ C1] _raw_spin_lock_bh+0x3b/0x50 [ 312.903281][ C1] ? release_sock+0x20/0x1c0 [ 312.907852][ C1] release_sock+0x20/0x1c0 [ 312.912268][ C1] wait_on_pending_writer+0x20f/0x420 [ 312.917629][ C1] ? ip6_rcv_finish+0x1de/0x2f0 [ 312.922456][ C1] ? tls_init+0x560/0x560 [ 312.926779][ C1] ? process_backlog+0x206/0x750 [ 312.931714][ C1] ? net_rx_action+0x508/0x10c0 [ 312.936560][ C1] ? __do_softirq+0x262/0x98c [ 312.941231][ C1] ? prepare_to_wait_exclusive+0x320/0x320 [ 312.947022][ C1] ? inet_release+0xed/0x200 [ 312.951587][ C1] ? inet6_release+0x53/0x80 [ 312.956166][ C1] ? __sock_release+0xce/0x280 [ 312.960904][ C1] ? sock_close+0x1e/0x30 [ 312.965217][ C1] ? __fput+0x2ff/0x890 [ 312.969350][ C1] ? ____fput+0x16/0x20 [ 312.973496][ C1] ? task_work_run+0x145/0x1c0 [ 312.978256][ C1] ? exit_to_usermode_loop+0x316/0x380 [ 312.983692][ C1] tls_sk_proto_cleanup+0x2c5/0x3e0 [ 312.988866][ C1] ? wait_on_pending_writer+0x420/0x420 [ 312.994390][ C1] tls_sk_proto_unhash+0x90/0x3f0 [ 312.999393][ C1] tcp_set_state+0x5b9/0x7d0 [ 313.003960][ C1] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 313.010176][ C1] ? __sk_mem_reduce_allocated+0x1b0/0x560 [ 313.015961][ C1] ? tcp_alloc_md5sig_pool+0x4a0/0x4a0 [ 313.021882][ C1] ? __sk_mem_reclaim+0x55/0x70 [ 313.026715][ C1] ? tcp_write_queue_purge+0x5d8/0x1310 [ 313.032263][ C1] ? inet6_sk_rx_dst_set+0x244/0x6f0 [ 313.037524][ C1] tcp_done+0xe2/0x320 [ 313.041566][ C1] tcp_reset+0x132/0x500 [ 313.045789][ C1] tcp_validate_incoming+0xa2d/0x1660 [ 313.051137][ C1] tcp_rcv_established+0x6b5/0x1e70 [ 313.056312][ C1] ? mark_held_locks+0xf0/0xf0 [ 313.061061][ C1] ? sk_filter_trim_cap+0x45f/0xb30 [ 313.066244][ C1] ? tcp_data_queue+0x4860/0x4860 [ 313.071258][ C1] ? do_raw_spin_lock+0x12a/0x2e0 [ 313.076257][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 313.081168][ C1] ? lock_acquire+0x190/0x410 [ 313.085837][ C1] tcp_v6_do_rcv+0x41e/0x12c0 [ 313.090504][ C1] tcp_v6_rcv+0x31f1/0x3500 [ 313.094987][ C1] ? tcp_v6_syn_recv_sock+0x2290/0x2290 [ 313.100523][ C1] ? nf_confirm+0x360/0x4d0 [ 313.105004][ C1] ? mark_held_locks+0xf0/0xf0 [ 313.109752][ C1] ip6_protocol_deliver_rcu+0x2fe/0x1660 [ 313.115363][ C1] ip6_input_finish+0x84/0x170 [ 313.120101][ C1] ip6_input+0xe4/0x3f0 [ 313.124237][ C1] ? ip6_input_finish+0x170/0x170 [ 313.129254][ C1] ? __kasan_check_read+0x11/0x20 [ 313.134265][ C1] ? ip6_protocol_deliver_rcu+0x1660/0x1660 [ 313.140172][ C1] ? lock_downgrade+0x920/0x920 [ 313.145013][ C1] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 313.151521][ C1] ip6_rcv_finish+0x1de/0x2f0 [ 313.156177][ C1] ipv6_rcv+0x10e/0x420 [ 313.160309][ C1] ? ip6_rcv_core.isra.0+0x1bb0/0x1bb0 [ 313.165747][ C1] ? lock_downgrade+0x920/0x920 [ 313.170571][ C1] ? lock_downgrade+0x920/0x920 [ 313.175399][ C1] ? ip6_rcv_finish_core.isra.0+0x560/0x560 [ 313.181276][ C1] ? trace_hardirqs_off+0x62/0x240 [ 313.186380][ C1] ? ip6_rcv_core.isra.0+0x1bb0/0x1bb0 [ 313.191816][ C1] __netif_receive_skb_one_core+0x113/0x1a0 [ 313.197699][ C1] ? __netif_receive_skb_core+0x3060/0x3060 [ 313.203566][ C1] ? lock_acquire+0x190/0x410 [ 313.208236][ C1] ? process_backlog+0x195/0x750 [ 313.213153][ C1] __netif_receive_skb+0x2c/0x1d0 [ 313.218167][ C1] process_backlog+0x206/0x750 [ 313.222909][ C1] ? lock_acquire+0x190/0x410 [ 313.227561][ C1] ? clockevents_program_event+0x15a/0x370 [ 313.233348][ C1] net_rx_action+0x508/0x10c0 [ 313.238005][ C1] ? napi_complete_done+0x4b0/0x4b0 [ 313.243194][ C1] ? sched_clock+0x2e/0x50 [ 313.247625][ C1] ? kvm_clock_read+0x18/0x30 [ 313.252288][ C1] ? inet_csk_listen_stop+0x1bc/0x850 [ 313.257656][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 313.263908][ C1] __do_softirq+0x262/0x98c [ 313.268393][ C1] ? inet_csk_listen_stop+0x1bc/0x850 [ 313.274762][ C1] do_softirq_own_stack+0x2a/0x40 [ 313.279801][ C1] [ 313.282747][ C1] do_softirq.part.0+0x11a/0x170 [ 313.287663][ C1] __local_bh_enable_ip+0x211/0x270 [ 313.292834][ C1] inet_csk_listen_stop+0x1e0/0x850 [ 313.298006][ C1] tcp_close+0xd5b/0x10e0 [ 313.302335][ C1] ? ip_mc_drop_socket+0x211/0x270 [ 313.307424][ C1] ? down_write+0xdf/0x150 [ 313.311816][ C1] inet_release+0xed/0x200 [ 313.316207][ C1] inet6_release+0x53/0x80 [ 313.320702][ C1] __sock_release+0xce/0x280 [ 313.325267][ C1] sock_close+0x1e/0x30 [ 313.329395][ C1] __fput+0x2ff/0x890 [ 313.333366][ C1] ? __sock_release+0x280/0x280 [ 313.338195][ C1] ____fput+0x16/0x20 [ 313.342154][ C1] task_work_run+0x145/0x1c0 [ 313.346721][ C1] exit_to_usermode_loop+0x316/0x380 [ 313.351990][ C1] do_syscall_64+0x65f/0x760 [ 313.356559][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.362438][ C1] RIP: 0033:0x406571 [ 313.366315][ C1] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 24 1a 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 313.386071][ C1] RSP: 002b:00007ffd37731f30 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 313.394481][ C1] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000406571 [ 313.402430][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 313.410381][ C1] RBP: 00000000006dcc20 R08: 0000000000000140 R09: 0000000000000140 [ 313.418438][ C1] R10: 00007ffd37731f60 R11: 0000000000000293 R12: 00007ffd37731f90 [ 313.426386][ C1] R13: 00000000006dcc2c R14: 000000000000002d R15: 0000000000000007