[ 39.830868] audit: type=1800 audit(1567991677.036:31): pid=7529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 45.205888] kauditd_printk_skb: 3 callbacks suppressed [ 45.205903] audit: type=1400 audit(1567991682.466:35): avc: denied { map } for pid=7704 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.228' (ECDSA) to the list of known hosts. [ 112.741751] audit: type=1400 audit(1567991749.996:36): avc: denied { map } for pid=7716 comm="syz-executor002" path="/root/syz-executor002061814" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 112.767005] IPVS: ftp: loaded support on port[0] = 21 [ 112.822415] chnl_net:caif_netlink_parms(): no params data found [ 112.856370] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.863367] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.870625] device bridge_slave_0 entered promiscuous mode [ 112.878893] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.885467] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.892769] device bridge_slave_1 entered promiscuous mode [ 112.908753] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 112.917988] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.936624] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 112.944464] team0: Port device team_slave_0 added [ 112.950027] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 112.957995] team0: Port device team_slave_1 added [ 112.963460] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 112.970802] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 113.054916] device hsr_slave_0 entered promiscuous mode [ 113.123201] device hsr_slave_1 entered promiscuous mode [ 113.163561] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 113.170635] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 113.185924] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.192354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.199539] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.206038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.237934] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 113.244265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.252247] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 113.261514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.281004] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.288632] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.296782] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 113.308479] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 113.315105] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.325382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.333815] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.340153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.353123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.361179] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.367598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.381781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.390012] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.400615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.414914] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.425660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network executing program [ 113.436422] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 113.443516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.451353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.459443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.472271] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 113.482860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.532644] rcu: INFO: rcu_preempt self-detected stall on CPU [ 218.538817] rcu: 0-...!: (10500 ticks this GP) idle=84a/1/0x4000000000000002 softirq=10142/10142 fqs=0 [ 218.548682] rcu: (t=10500 jiffies g=5481 q=8) [ 218.553359] rcu: rcu_preempt kthread starved for 10500 jiffies! g5481 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 218.563911] rcu: RCU grace-period kthread stack dump: [ 218.569096] rcu_preempt I29424 10 2 0x80000000 [ 218.574723] Call Trace: [ 218.577313] __schedule+0x866/0x1dc0 [ 218.581024] ? pci_mmcfg_check_reserved+0x170/0x170 [ 218.586030] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 218.591123] ? lockdep_hardirqs_on+0x415/0x5d0 [ 218.595704] ? trace_hardirqs_on+0x67/0x220 [ 218.600015] schedule+0x92/0x1c0 [ 218.603370] schedule_timeout+0x4db/0xfc0 [ 218.607617] ? usleep_range+0x170/0x170 [ 218.611585] ? trace_hardirqs_on+0x67/0x220 [ 218.615899] ? kasan_check_read+0x11/0x20 [ 218.620050] ? __next_timer_interrupt+0x1a0/0x1a0 [ 218.624884] ? prepare_to_swait_exclusive+0x120/0x120 [ 218.630098] rcu_gp_kthread+0xd5c/0x2190 [ 218.634166] ? rcu_blocking_is_gp+0x90/0x90 [ 218.638501] ? trace_hardirqs_on+0x67/0x220 [ 218.642834] ? kasan_check_read+0x11/0x20 [ 218.646994] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 218.652097] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 218.657631] ? __kthread_parkme+0xfb/0x1b0 [ 218.661856] kthread+0x354/0x420 [ 218.665301] ? rcu_blocking_is_gp+0x90/0x90 [ 218.669611] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 218.675147] ret_from_fork+0x24/0x30 [ 218.679008] NMI backtrace for cpu 0 [ 218.682644] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted 4.19.71 #0 [ 218.689308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.698768] Workqueue: ipv6_addrconf addrconf_dad_work [ 218.704043] Call Trace: [ 218.706616] [ 218.708766] dump_stack+0x172/0x1f0 [ 218.712389] nmi_cpu_backtrace.cold+0x63/0xa4 [ 218.716878] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 218.721891] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 218.727166] arch_trigger_cpumask_backtrace+0x14/0x20 [ 218.732609] rcu_dump_cpu_stacks+0x189/0x1d5 [ 218.737010] ? wake_up_process+0x10/0x20 [ 218.741065] rcu_check_callbacks.cold+0x5e3/0xd90 [ 218.745904] ? trace_hardirqs_off+0x62/0x220 [ 218.750319] update_process_times+0x32/0x80 [ 218.754629] tick_sched_handle+0xa2/0x190 [ 218.758766] tick_sched_timer+0x47/0x130 [ 218.762838] __hrtimer_run_queues+0x33b/0xdc0 [ 218.767327] ? tick_sched_do_timer+0x1b0/0x1b0 [ 218.771900] ? hrtimer_fixup_activate+0x30/0x30 [ 218.776699] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 218.781739] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 218.787122] hrtimer_interrupt+0x314/0x770 [ 218.791372] smp_apic_timer_interrupt+0x111/0x550 [ 218.796254] apic_timer_interrupt+0xf/0x20 [ 218.800474] [ 218.802790] RIP: 0010:hhf_dequeue+0x557/0xa00 [ 218.807276] Code: 48 39 c2 74 34 e8 89 dd dc fb 49 8d bd 6c 03 00 00 48 89 f8 48 c1 e8 03 42 0f b6 14 20 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 <84> d2 0f 85 91 03 00 00 45 8b b5 6c 03 00 00 e8 55 dd dc fb 49 8d [ 218.826167] RSP: 0018:ffff8880aa26f448 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 218.833871] RAX: 0000000000000007 RBX: ffff888097798bb8 RCX: ffffffff858e8489 [ 218.841135] RDX: 0000000000000000 RSI: ffffffff858e8907 RDI: ffff888097798c6c [ 218.848402] RBP: ffff8880aa26f498 R08: ffff8880aa25e380 R09: 0000000000000007 [ 218.855660] R10: ffff8880aa25ed18 R11: 00000000c3ab0a4d R12: dffffc0000000000 [ 218.862915] R13: ffff888097798900 R14: 0000000000000001 R15: 0000000000000000 [ 218.870189] ? hhf_dequeue+0xb9/0xa00 [ 218.873977] ? hhf_dequeue+0x537/0xa00 [ 218.877857] ? hhf_dequeue+0x537/0xa00 [ 218.881738] __qdisc_run+0x1e7/0x1960 [ 218.885539] __dev_queue_xmit+0x165c/0x2fe0 [ 218.889854] ? netdev_pick_tx+0x300/0x300 [ 218.893994] ? ip6_finish_output2+0xac0/0x2550 [ 218.898567] ? find_held_lock+0x35/0x130 [ 218.902796] ? ip6_finish_output2+0xb7f/0x2550 [ 218.907369] ? mark_held_locks+0xb1/0x100 [ 218.911524] dev_queue_xmit+0x18/0x20 [ 218.915310] ? dev_queue_xmit+0x18/0x20 [ 218.919276] neigh_resolve_output+0x5b7/0x980 [ 218.923768] ip6_finish_output2+0xb7f/0x2550 [ 218.928168] ? find_held_lock+0x35/0x130 [ 218.932248] ? ip6_mtu+0x2e6/0x460 [ 218.935798] ? ip6_forward_finish+0x4d0/0x4d0 [ 218.940306] ? lock_downgrade+0x810/0x810 [ 218.944457] ? kasan_check_read+0x11/0x20 [ 218.948605] ip6_finish_output+0x574/0xbe0 [ 218.952841] ? ip6_finish_output+0x574/0xbe0 [ 218.957241] ip6_output+0x235/0x7c0 [ 218.960862] ? ip6_finish_output+0xbe0/0xbe0 [ 218.965369] ? ip6_fragment+0x3770/0x3770 [ 218.969512] ndisc_send_skb+0xf3b/0x1460 [ 218.973570] ? nf_hook.constprop.0+0x560/0x560 [ 218.978148] ? skb_set_owner_w+0x24c/0x360 [ 218.982377] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 218.987389] ndisc_send_ns+0x3a9/0x850 [ 218.991269] ? mark_held_locks+0xb1/0x100 [ 218.995588] ? ndisc_netdev_event+0x470/0x470 [ 219.000086] ? lockdep_hardirqs_on+0x415/0x5d0 [ 219.004686] ? addrconf_dad_work+0xac4/0x1150 [ 219.009188] ? trace_hardirqs_on+0x67/0x220 [ 219.013503] ? addrconf_dad_work+0xac4/0x1150 [ 219.017991] addrconf_dad_work+0xb88/0x1150 [ 219.022328] ? addrconf_dad_completed+0xbb0/0xbb0 [ 219.027177] process_one_work+0x989/0x1750 [ 219.031413] ? pwq_dec_nr_in_flight+0x320/0x320 [ 219.036181] ? lock_acquire+0x16f/0x3f0 [ 219.040165] ? kasan_check_write+0x14/0x20 [ 219.044394] ? do_raw_spin_lock+0xc8/0x240 [ 219.048650] worker_thread+0x98/0xe40 [ 219.052553] ? trace_hardirqs_on+0x67/0x220 [ 219.057002] kthread+0x354/0x420 [ 219.060397] ? process_one_work+0x1750/0x1750 [ 219.064894] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 219.070435] ret_from_fork+0x24/0x30