[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.034617] audit: type=1800 audit(1568870197.921:33): pid=7305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 37.056405] audit: type=1800 audit(1568870197.931:34): pid=7305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 39.865911] audit: type=1400 audit(1568870200.761:35): avc: denied { map } for pid=7482 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 60.668789] audit: type=1400 audit(1568870221.561:36): avc: denied { map } for pid=7491 comm="sh" path="/bin/dash" dev="sda1" ino=1473 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.152' (ECDSA) to the list of known hosts. [ 243.629418] audit: type=1400 audit(1568870404.521:37): avc: denied { map } for pid=7498 comm="syz-executor775" path="/root/syz-executor775910289" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 243.648993] IPVS: ftp: loaded support on port[0] = 21 [ 243.711106] chnl_net:caif_netlink_parms(): no params data found [ 243.742782] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.750092] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.757539] device bridge_slave_0 entered promiscuous mode [ 243.765116] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.771814] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.779313] device bridge_slave_1 entered promiscuous mode [ 243.794475] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 243.804157] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 243.821404] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 243.829330] team0: Port device team_slave_0 added [ 243.835007] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 243.842611] team0: Port device team_slave_1 added [ 243.848340] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 243.856076] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 243.937853] device hsr_slave_0 entered promiscuous mode [ 243.976814] device hsr_slave_1 entered promiscuous mode [ 244.046076] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 244.053219] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 244.067121] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.073635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.080750] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.087565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.118710] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 244.125128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.134750] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 244.143693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.163729] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.171946] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.179952] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 244.190113] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 244.197108] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.206904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.215172] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.221739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.230831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.239180] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.245761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.266420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.274342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.283139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.291399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.300203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.310380] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready executing program [ 244.316923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.330102] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 244.341688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.345336] rcu: INFO: rcu_preempt self-detected stall on CPU [ 349.351453] rcu: 1-...!: (1 GPs behind) idle=c0e/0/0x3 softirq=9891/9892 fqs=35 [ 349.359348] rcu: (t=10500 jiffies g=5017 q=112) [ 349.364204] rcu: rcu_preempt kthread starved for 10430 jiffies! g5017 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 349.374857] rcu: RCU grace-period kthread stack dump: [ 349.380035] rcu_preempt I29104 10 2 0x80000000 [ 349.385663] Call Trace: [ 349.388347] __schedule+0x866/0x1dc0 [ 349.392072] ? pci_mmcfg_check_reserved+0x170/0x170 [ 349.397079] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 349.402246] ? lockdep_hardirqs_on+0x415/0x5d0 [ 349.406866] ? trace_hardirqs_on+0x67/0x220 [ 349.411192] schedule+0x92/0x1c0 [ 349.414557] schedule_timeout+0x4db/0xfc0 [ 349.418700] ? usleep_range+0x170/0x170 [ 349.422667] ? trace_hardirqs_on+0x67/0x220 [ 349.427029] ? kasan_check_read+0x11/0x20 [ 349.431202] ? __next_timer_interrupt+0x1a0/0x1a0 [ 349.436063] ? prepare_to_swait_exclusive+0x120/0x120 [ 349.441286] rcu_gp_kthread+0xd5c/0x2190 [ 349.445358] ? rcu_blocking_is_gp+0x90/0x90 [ 349.449698] ? trace_hardirqs_on+0x67/0x220 [ 349.454020] ? kasan_check_read+0x11/0x20 [ 349.458171] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 349.463352] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 349.468904] ? __kthread_parkme+0xfb/0x1b0 [ 349.473182] kthread+0x354/0x420 [ 349.476542] ? rcu_blocking_is_gp+0x90/0x90 [ 349.480854] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 349.486394] ret_from_fork+0x24/0x30 [ 349.490144] NMI backtrace for cpu 1 [ 349.493763] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.19.73 #0 [ 349.499892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.509236] Call Trace: [ 349.511806] [ 349.513988] dump_stack+0x172/0x1f0 [ 349.517612] nmi_cpu_backtrace.cold+0x63/0xa4 [ 349.522139] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 349.527060] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 349.532327] arch_trigger_cpumask_backtrace+0x14/0x20 [ 349.537510] rcu_dump_cpu_stacks+0x189/0x1d5 [ 349.541956] ? wake_up_process+0x10/0x20 [ 349.546013] rcu_check_callbacks.cold+0x5e3/0xd90 [ 349.550848] ? trace_hardirqs_off+0x62/0x220 [ 349.555268] update_process_times+0x32/0x80 [ 349.559659] tick_sched_handle+0xa2/0x190 [ 349.563809] tick_sched_timer+0x47/0x130 [ 349.567884] __hrtimer_run_queues+0x33b/0xdc0 [ 349.572415] ? tick_sched_do_timer+0x1b0/0x1b0 [ 349.577004] ? hrtimer_fixup_activate+0x30/0x30 [ 349.581665] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 349.586676] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 349.592037] hrtimer_interrupt+0x314/0x770 [ 349.596270] smp_apic_timer_interrupt+0x111/0x550 [ 349.601104] apic_timer_interrupt+0xf/0x20 [ 349.605400] RIP: 0010:hhf_dequeue+0x69b/0xa00 [ 349.609891] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 0f 85 fb 02 00 00 48 89 d8 49 89 9d 58 03 00 00 48 c1 e8 03 42 80 3c 20 00 0f 85 a4 02 00 00 <48> 8b 45 c8 48 8d 7b 08 48 89 03 48 89 f8 48 c1 e8 03 42 80 3c 20 [ 349.628780] RSP: 0018:ffff8880ae907618 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 349.636491] RAX: 1ffff11012e01c57 RBX: ffff88809700e2b8 RCX: ffffffff858ebe8e [ 349.643751] RDX: 0000000000000100 RSI: ffffffff858ebea0 RDI: 0000000000000001 [ 349.651009] RBP: ffff8880ae907668 R08: ffff8880aa2703c0 R09: 0000000000000005 [ 349.658267] R10: ffff8880aa270d08 R11: 0000000054c4a6a3 R12: dffffc0000000000 [ 349.665525] R13: ffff88809700e000 R14: ffff88809700e358 R15: ffff88809700e350 [ 349.672794] ? apic_timer_interrupt+0xa/0x20 [ 349.677197] ? hhf_dequeue+0x65e/0xa00 [ 349.681074] ? hhf_dequeue+0x670/0xa00 [ 349.684954] ? hhf_dequeue+0x670/0xa00 [ 349.688894] __qdisc_run+0x1e7/0x1960 [ 349.692765] __dev_queue_xmit+0x165c/0x2fe0 [ 349.697094] ? mark_held_locks+0x100/0x100 [ 349.701324] ? netdev_pick_tx+0x300/0x300 [ 349.705521] ? ip6_finish_output+0x574/0xbe0 [ 349.709923] ? find_held_lock+0x35/0x130 [ 349.713981] ? ip6_finish_output+0x574/0xbe0 [ 349.718381] ? mark_held_locks+0xb1/0x100 [ 349.722521] ? ip6_finish_output2+0x1784/0x2550 [ 349.727367] ? ip6_finish_output+0x574/0xbe0 [ 349.731766] ? ip6_finish_output2+0x1784/0x2550 [ 349.736433] dev_queue_xmit+0x18/0x20 [ 349.740236] ? dev_queue_xmit+0x18/0x20 [ 349.744204] ip6_finish_output2+0x12fd/0x2550 [ 349.748693] ? ip6_mtu+0x2e6/0x460 [ 349.752242] ? ip6_forward_finish+0x4d0/0x4d0 [ 349.756742] ? lock_downgrade+0x810/0x810 [ 349.760897] ? kasan_check_read+0x11/0x20 [ 349.765058] ip6_finish_output+0x574/0xbe0 [ 349.769282] ? ip6_finish_output+0x574/0xbe0 [ 349.775073] ip6_output+0x235/0x7c0 [ 349.778694] ? ip6_finish_output+0xbe0/0xbe0 [ 349.783110] ? ip6_fragment+0x3770/0x3770 [ 349.787330] ? icmp6_dst_alloc+0x432/0x660 [ 349.791558] mld_sendpack+0x9d3/0xeb0 [ 349.795353] ? nf_hook.constprop.0+0x560/0x560 [ 349.799964] ? mld_ifc_timer_expire+0x437/0x8a0 [ 349.804668] ? __local_bh_enable_ip+0x15a/0x270 [ 349.809354] mld_ifc_timer_expire+0x449/0x8a0 [ 349.813854] call_timer_fn+0x18d/0x720 [ 349.817742] ? mld_dad_timer_expire+0x1c0/0x1c0 [ 349.822406] ? process_timeout+0x40/0x40 [ 349.826480] ? run_timer_softirq+0x647/0x1700 [ 349.831075] ? trace_hardirqs_on+0x67/0x220 [ 349.835744] ? kasan_check_read+0x11/0x20 [ 349.839913] ? mld_dad_timer_expire+0x1c0/0x1c0 [ 349.844579] run_timer_softirq+0x652/0x1700 [ 349.849252] ? add_timer+0xbe0/0xbe0 [ 349.853032] ? kvm_clock_read+0x18/0x30 [ 349.857066] ? check_preemption_disabled+0x48/0x290 [ 349.862124] ? sched_clock+0x2e/0x50 [ 349.865842] __do_softirq+0x25c/0x921 [ 349.869658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.875198] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.880735] irq_exit+0x180/0x1d0 [ 349.884193] smp_apic_timer_interrupt+0x13b/0x550 [ 349.889078] apic_timer_interrupt+0xf/0x20 [ 349.893299] [ 349.895528] RIP: 0010:native_safe_halt+0xe/0x10 [ 349.900199] Code: ff ff 48 89 df e8 72 de ad fa eb 82 e9 07 00 00 00 0f 00 2d 84 c3 53 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 74 c3 53 00 fb f4 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 6e c1 65 fa e8 39 [ 349.919101] RSP: 0018:ffff8880aa27fd00 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 349.926804] RAX: 1ffffffff10e48c4 RBX: ffff8880aa2703c0 RCX: 0000000000000000 [ 349.934067] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8880aa270c3c [ 349.941329] RBP: ffff8880aa27fd30 R08: ffff8880aa2703c0 R09: 0000000000000000 [ 349.948588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 349.955847] R13: ffffffff88724610 R14: 0000000000000001 R15: 0000000000000000 [ 349.963127] ? default_idle+0x4e/0x320 [ 349.968141] arch_cpu_idle+0xa/0x10 [ 349.971769] default_idle_call+0x36/0x90 [ 349.975826] do_idle+0x377/0x560 [ 349.979270] ? arch_cpu_idle_exit+0x80/0x80 [ 349.983580] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 349.988692] ? complete+0x61/0x80 [ 349.992313] cpu_startup_entry+0xc8/0xe0 [ 349.996464] ? cpu_in_idle+0x20/0x20 [ 350.000232] ? setup_APIC_timer+0x1aa/0x200 [ 350.004546] start_secondary+0x3e8/0x5b0 [ 350.008601] ? set_cpu_sibling_map+0x1860/0x1860 [ 350.013392] secondary_startup_64+0xa4/0xb0