Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.281116] audit: type=1800 audit(1567847745.102:33): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 36.302772] audit: type=1800 audit(1567847745.102:34): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 39.747165] audit: type=1400 audit(1567847748.572:35): avc: denied { map } for pid=7377 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 112.857776] audit: type=1400 audit(1567847821.682:36): avc: denied { map } for pid=7386 comm="sh" path="/bin/dash" dev="sda1" ino=1473 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.183' (ECDSA) to the list of known hosts. [ 199.253913] audit: type=1400 audit(1567847908.072:37): avc: denied { map } for pid=7393 comm="syz-executor377" path="/root/syz-executor377392399" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 199.278206] IPVS: ftp: loaded support on port[0] = 21 [ 199.333116] chnl_net:caif_netlink_parms(): no params data found [ 199.364603] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.371204] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.378250] device bridge_slave_0 entered promiscuous mode [ 199.385144] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.391569] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.398442] device bridge_slave_1 entered promiscuous mode [ 199.413179] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 199.422268] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 199.437830] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 199.445243] team0: Port device team_slave_0 added [ 199.450770] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 199.457932] team0: Port device team_slave_1 added [ 199.463057] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 199.470389] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 199.528251] device hsr_slave_0 entered promiscuous mode [ 199.596270] device hsr_slave_1 entered promiscuous mode [ 199.676445] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 199.683285] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 199.697199] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.703577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.710435] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.716809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.744854] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 199.752203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.760080] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 199.768613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.786899] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.793832] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.802358] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 199.811759] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 199.818182] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.837238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.844727] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.851090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.867406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.874970] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.881351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.888842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.896642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.904544] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.913702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.924237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.934522] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready executing program executing program executing program executing program [ 199.941943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.948974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.961065] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 199.971961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.986022] rcu: INFO: rcu_preempt self-detected stall on CPU [ 304.992130] rcu: 1-...!: (10500 ticks this GP) idle=d2e/1/0x4000000000000004 softirq=15588/15588 fqs=0 [ 305.001921] rcu: (t=10500 jiffies g=4949 q=101) [ 305.006760] rcu: rcu_preempt kthread starved for 10500 jiffies! g4949 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 305.017323] rcu: RCU grace-period kthread stack dump: [ 305.022496] rcu_preempt I29504 10 2 0x80000000 [ 305.028118] Call Trace: [ 305.030767] __schedule+0x866/0x1dc0 [ 305.034476] ? pci_mmcfg_check_reserved+0x170/0x170 [ 305.039478] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 305.044603] ? lockdep_hardirqs_on+0x415/0x5d0 [ 305.049209] ? trace_hardirqs_on+0x67/0x220 [ 305.053522] schedule+0x92/0x1c0 [ 305.056884] schedule_timeout+0x4db/0xfc0 [ 305.061030] ? usleep_range+0x170/0x170 [ 305.064989] ? trace_hardirqs_on+0x67/0x220 [ 305.069343] ? kasan_check_read+0x11/0x20 [ 305.073508] ? __next_timer_interrupt+0x1a0/0x1a0 [ 305.078365] ? prepare_to_swait_exclusive+0x120/0x120 [ 305.083563] rcu_gp_kthread+0xd5c/0x2190 [ 305.087639] ? rcu_blocking_is_gp+0x90/0x90 [ 305.091947] ? trace_hardirqs_on+0x67/0x220 [ 305.096259] ? kasan_check_read+0x11/0x20 [ 305.100395] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 305.105505] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 305.111063] ? __kthread_parkme+0xfb/0x1b0 [ 305.115287] kthread+0x354/0x420 [ 305.118643] ? rcu_blocking_is_gp+0x90/0x90 [ 305.122948] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 305.128478] ret_from_fork+0x24/0x30 [ 305.132208] NMI backtrace for cpu 1 [ 305.135823] CPU: 1 PID: 7403 Comm: syz-executor377 Not tainted 4.19.71 #0 [ 305.142729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.152062] Call Trace: [ 305.154639] [ 305.156802] dump_stack+0x172/0x1f0 [ 305.160418] nmi_cpu_backtrace.cold+0x63/0xa4 [ 305.164925] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 305.169840] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 305.175102] arch_trigger_cpumask_backtrace+0x14/0x20 [ 305.180279] rcu_dump_cpu_stacks+0x189/0x1d5 [ 305.184708] ? wake_up_process+0x10/0x20 [ 305.188761] rcu_check_callbacks.cold+0x5e3/0xd90 [ 305.193588] ? trace_hardirqs_off+0x62/0x220 [ 305.198012] update_process_times+0x32/0x80 [ 305.202340] tick_sched_handle+0xa2/0x190 [ 305.206473] tick_sched_timer+0x47/0x130 [ 305.210521] __hrtimer_run_queues+0x33b/0xdc0 [ 305.215004] ? tick_sched_do_timer+0x1b0/0x1b0 [ 305.219574] ? hrtimer_fixup_activate+0x30/0x30 [ 305.224229] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 305.229232] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 305.234585] hrtimer_interrupt+0x314/0x770 [ 305.238816] smp_apic_timer_interrupt+0x111/0x550 [ 305.243651] apic_timer_interrupt+0xf/0x20 [ 305.247927] RIP: 0010:__list_del_entry_valid+0x13/0xf5 [ 305.253193] Code: 8b 75 e8 eb 9f 48 89 f7 48 89 75 e8 e8 26 28 7c fe 48 8b 75 e8 eb b2 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 41 56 49 89 fe <48> 83 c7 08 48 89 fa 41 55 48 c1 ea 03 41 54 80 3c 02 00 0f 85 a1 [ 305.272077] RSP: 0000:ffff8880ae907570 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 305.279772] RAX: dffffc0000000000 RBX: ffff888097afb938 RCX: ffffffff858e8489 [ 305.287027] RDX: 0000000000000000 RSI: ffffffff858e893b RDI: ffff888097afb938 [ 305.294286] RBP: ffff8880ae907578 R08: ffff8880985f6580 R09: 0000000000000008 [ 305.301538] R10: ffff8880985f6f40 R11: 0000000091bbf3c9 R12: dffffc0000000000 [ 305.308791] R13: ffff888097afb680 R14: ffff888097afb938 R15: 0000000000000000 [ 305.316052] ? apic_timer_interrupt+0xa/0x20 [ 305.320507] ? hhf_dequeue+0xb9/0xa00 [ 305.324295] ? hhf_dequeue+0x56b/0xa00 [ 305.328172] hhf_dequeue+0x5aa/0xa00 [ 305.331913] __qdisc_run+0x1e7/0x1960 [ 305.335745] __dev_queue_xmit+0x165c/0x2fe0 [ 305.340058] ? netdev_pick_tx+0x300/0x300 [ 305.344235] ? ip6_finish_output2+0xac0/0x2550 [ 305.348808] ? find_held_lock+0x35/0x130 [ 305.352857] ? ip6_finish_output2+0xb7f/0x2550 [ 305.357427] ? mark_held_locks+0xb1/0x100 [ 305.361576] dev_queue_xmit+0x18/0x20 [ 305.366239] ? dev_queue_xmit+0x18/0x20 [ 305.370230] neigh_resolve_output+0x5b7/0x980 [ 305.374719] ip6_finish_output2+0xb7f/0x2550 [ 305.379115] ? find_held_lock+0x35/0x130 [ 305.383182] ? ip6_mtu+0x2e6/0x460 [ 305.386719] ? ip6_forward_finish+0x4d0/0x4d0 [ 305.391202] ? lock_downgrade+0x810/0x810 [ 305.395341] ? kasan_check_read+0x11/0x20 [ 305.399480] ip6_finish_output+0x574/0xbe0 [ 305.403701] ? ip6_finish_output+0x574/0xbe0 [ 305.408098] ip6_output+0x235/0x7c0 [ 305.411712] ? ip6_finish_output+0xbe0/0xbe0 [ 305.416109] ? ip6_fragment+0x3770/0x3770 [ 305.420241] ? icmp6_dst_alloc+0x432/0x660 [ 305.424493] mld_sendpack+0x9d3/0xeb0 [ 305.428286] ? nf_hook.constprop.0+0x560/0x560 [ 305.432860] ? mld_ifc_timer_expire+0x437/0x8a0 [ 305.437584] ? __local_bh_enable_ip+0x15a/0x270 [ 305.442248] mld_ifc_timer_expire+0x449/0x8a0 [ 305.446740] call_timer_fn+0x18d/0x720 [ 305.450614] ? mld_dad_timer_expire+0x1c0/0x1c0 [ 305.455280] ? process_timeout+0x40/0x40 [ 305.459326] ? run_timer_softirq+0x647/0x1700 [ 305.463815] ? trace_hardirqs_on+0x67/0x220 [ 305.468141] ? kasan_check_read+0x11/0x20 [ 305.472277] ? mld_dad_timer_expire+0x1c0/0x1c0 [ 305.476939] run_timer_softirq+0x652/0x1700 [ 305.481259] ? add_timer+0xbe0/0xbe0 [ 305.484962] ? __lock_is_held+0xb6/0x140 [ 305.489034] __do_softirq+0x25c/0x921 [ 305.492821] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 305.498348] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 305.503894] irq_exit+0x180/0x1d0 [ 305.507335] smp_apic_timer_interrupt+0x13b/0x550 [ 305.512168] apic_timer_interrupt+0xf/0x20 [ 305.516384] [ 305.518642] RIP: 0010:filemap_map_pages+0x40d/0x1130 [ 305.523743] Code: ff ff ff 48 83 c0 08 48 89 85 e0 fe ff ff 48 c1 e8 03 42 80 3c 28 00 0f 85 d2 0b 00 00 48 8b 85 30 ff ff ff 31 ff 48 8b 58 08 <83> e3 01 48 89 de e8 28 30 e6 ff 48 85 db 0f 85 cb 06 00 00 e8 7a [ 305.542630] RSP: 0000:ffff88808caa7b18 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 305.550326] RAX: ffffea00023aab40 RBX: ffffea0002140f88 RCX: ffffffff818537c2 [ 305.557690] RDX: 0000000000000000 RSI: ffffffff818537cf RDI: 0000000000000000 [ 305.564953] RBP: ffff88808caa7c68 R08: ffff8880985f6580 R09: ffffed1011954f79 [ 305.572221] R10: ffffed1011954f78 R11: 0000000000000003 R12: ffffea00023aab40 [ 305.579479] R13: dffffc0000000000 R14: ffff88808caa7c40 R15: ffffea00023aab74 [ 305.586758] ? filemap_map_pages+0x3d2/0x1130 [ 305.591241] ? filemap_map_pages+0x3df/0x1130 [ 305.595731] ? filemap_map_pages+0x3df/0x1130 [ 305.600220] ? find_get_pages_range_tag+0xc40/0xc40 [ 305.605305] ? add_mm_counter_fast.part.0+0x40/0x40 [ 305.610319] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 305.615847] __handle_mm_fault+0x325d/0x3f80 [ 305.620247] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 305.625092] ? count_memcg_event_mm+0x2b1/0x4d0 [ 305.629750] handle_mm_fault+0x1b5/0x690 [ 305.633838] __do_page_fault+0x62a/0xe90 [ 305.637897] ? vmalloc_fault+0x740/0x740 [ 305.641951] ? trace_hardirqs_off_caller+0x65/0x220 [ 305.646958] ? trace_hardirqs_on_caller+0x6a/0x220 [ 305.651875] ? page_fault+0x8/0x30 [ 305.655404] do_page_fault+0x71/0x57d [ 305.659196] ? page_fault+0x8/0x30 [ 305.662725] page_fault+0x1e/0x30 [ 305.666164] RIP: 0033:0x401956 [ 305.669343] Code: 48 05 bb bb bb 01 48 89 04 24 e8 09 f1 ff ff 89 df e8 6e 07 00 00 bf 00 00 00 40 e8 44 34 04 00 e8 d4 f1 ff ff e8 aa f2 03 00 <85> c0 89 c3 0f 88 ae 02 00 00 74 4e c7 04 24 00 00 00 00 e8 d8 eb [ 305.688322] RSP: 002b:00007ffd10ebd8c0 EFLAGS: 00010246 [ 305.693669] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000440cda [ 305.700924] RDX: 0000006ce7cbb96d RSI: 0000000000000000 RDI: 0000000001200011 [ 305.708175] RBP: 0000000000030d1f R08: 0000000000000001 R09: 0000000001d97880 [ 305.715429] R10: 0000000001d97b50 R11: 0000000000000246 R12: 0000000000000000 [ 305.722682] R13: 00000000004032f0 R14: 0000000000000000 R15: 0000000000000000