[ 42.400843][ T25] audit: type=1800 audit(1575376789.179:27): pid=7913 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 42.461666][ T25] audit: type=1800 audit(1575376789.279:28): pid=7913 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.265587][ T25] audit: type=1800 audit(1575376790.079:29): pid=7913 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 43.284750][ T25] audit: type=1800 audit(1575376790.079:30): pid=7913 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.206' (ECDSA) to the list of known hosts. 2019/12/03 12:39:58 fuzzer started 2019/12/03 12:40:00 dialing manager at 10.128.0.26:45711 2019/12/03 12:40:00 syscalls: 2689 2019/12/03 12:40:00 code coverage: enabled 2019/12/03 12:40:00 comparison tracing: enabled 2019/12/03 12:40:00 extra coverage: extra coverage is not supported by the kernel 2019/12/03 12:40:00 setuid sandbox: enabled 2019/12/03 12:40:00 namespace sandbox: enabled 2019/12/03 12:40:00 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 12:40:00 fault injection: enabled 2019/12/03 12:40:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 12:40:00 net packet injection: enabled 2019/12/03 12:40:00 net device setup: enabled 2019/12/03 12:40:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 12:40:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 12:40:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) read$usbfs(r1, &(0x7f00000012c0)=""/154, 0x9a) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r1) 12:40:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x8, 0x18, 0x3f}, @IFLA_BOND_MODE={0x8, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) syzkaller login: [ 54.482339][ T8078] IPVS: ftp: loaded support on port[0] = 21 [ 54.624383][ T8080] IPVS: ftp: loaded support on port[0] = 21 [ 54.636249][ T8078] chnl_net:caif_netlink_parms(): no params data found 12:40:01 executing program 2: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r3, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87state=0x0 ->cpu=1 [ 163.491890][ C0] rcu: RCU grace-period kthread stack dump: [ 163.497768][ C0] rcu_preempt R running task 28864 10 2 0x80004000 [ 163.505654][ C0] Call Trace: [ 163.508938][ C0] __schedule+0x9a0/0xcc0 [ 163.513264][ C0] schedule+0x181/0x210 [ 163.517406][ C0] schedule_timeout+0x14f/0x240 [ 163.522246][ C0] ? run_local_timers+0x120/0x120 [ 163.527260][ C0] rcu_gp_kthread+0xed8/0x1770 [ 163.532020][ C0] kthread+0x332/0x350 [ 163.536072][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 163.541170][ C0] ? kthread_blkcg+0xe0/0xe0 [ 163.545751][ C0] ret_from_fork+0x24/0x30 [ 163.550170][ C0] NMI backtrace for cpu 0 [ 163.554489][ C0] CPU: 0 PID: 8078 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 163.562706][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.572909][ C0] Call Trace: [ 163.576196][ C0] [ 163.579058][ C0] dump_stack+0x1fb/0x318 [ 163.583409][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 163.588258][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 163.594408][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 163.600463][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 163.606432][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 163.612312][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 163.617415][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 163.622615][ C0] ? trace_hardirqs_off+0x74/0x80 [ 163.627628][ C0] update_process_times+0x12d/0x180 [ 163.632829][ C0] tick_sched_timer+0x263/0x420 [ 163.637664][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 163.643195][ C0] __hrtimer_run_queues+0x403/0x840 [ 163.648393][ C0] hrtimer_interrupt+0x38c/0xda0 [ 163.653334][ C0] ? debug_smp_processor_id+0x9/0x20 [ 163.658611][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 163.664143][ C0] apic_timer_interrupt+0xf/0x20 [ 163.669061][ C0] [ 163.671986][ C0] RIP: 0010:free_thread_stack+0x133/0x590 [ 163.677694][ C0] Code: 00 ea ff ff 48 01 c7 be 03 00 00 00 e8 06 a2 60 00 e9 5d 04 00 00 e8 5c 2d 2e 00 48 89 df 31 f6 e8 42 af 6e 00 43 80 3c 2e 00 <74> 08 4c 89 e7 e8 43 a4 69 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 [ 163.697299][ C0] RSP: 0018:ffffc90001ee7bd0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 163.705698][ C0] RAX: 0000000000000001 RBX: ffffea00024b7c40 RCX: 0000000000000000 [ 163.713656][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea00024b7c40 [ 163.721613][ C0] RBP: ffffc90001ee7c08 R08: 000000000003a768 R09: ffffed1011b1529f [ 163.729624][ C0] R10: ffffed1011b1529f R11: 0000000000000000 R12: ffff88809fac9520 [ 163.737585][ C0] R13: dffffc0000000000 R14: 1ffff11013f592a4 R15: ffff88808d8a94e8 [ 163.745584][ C0] put_task_stack+0xa3/0x130 [ 163.750163][ C0] finish_task_switch+0x3f1/0x550 [ 163.755175][ C0] __schedule+0x9a8/0xcc0 [ 163.759503][ C0] schedule+0x181/0x210 [ 163.763649][ C0] do_nanosleep+0x1d0/0x6c0 [ 163.768147][ C0] hrtimer_nanosleep+0x3a6/0x5b0 [ 163.773076][ C0] ? trace_hrtimer_expire_exit+0x2d0/0x2d0 [ 163.778874][ C0] __x64_sys_nanosleep+0x186/0x1d0 [ 163.783974][ C0] do_syscall_64+0xf7/0x1c0 [ 163.788461][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 163.794340][ C0] RIP: 0033:0x458b20 [ 163.798219][ C0] Code: c0 5b 5d c3 66 0f 1f 44 00 00 8b 04 24 48 83 c4 18 5b 5d c3 66 0f 1f 44 00 00 83 3d 11 fe 61 00 00 75 14 b8 23 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 d4 d1 fb ff c3 48 83 ec 08 e8 ea 46 00 00 [ 163.817810][ C0] RSP: 002b:00007ffe2966c008 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 163.826220][ C0] RAX: ffffffffffffffda RBX: 000000000000e425 RCX: 0000000000458b20 [ 163.834264][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffe2966c010 [ 163.842655][ C0] RBP: 0000000000000002 R08: 0000000000000001 R09: 000000000190a940 [ 163.850612][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.858571][ C0] R13: 00007ffe2966c060 R14: 000000000000e41d R15: 00007ffe2966c070