[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.589617][ T25] audit: type=1800 audit(1568602073.550:25): pid=8693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 55.610842][ T25] audit: type=1800 audit(1568602073.550:26): pid=8693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 55.638623][ T25] audit: type=1800 audit(1568602073.560:27): pid=8693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.25' (ECDSA) to the list of known hosts. syzkaller login: [ 63.474444][ T8846] IPVS: ftp: loaded support on port[0] = 21 [ 63.528996][ T8846] chnl_net:caif_netlink_parms(): no params data found [ 63.555484][ T8846] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.563483][ T8846] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.571433][ T8846] device bridge_slave_0 entered promiscuous mode [ 63.579600][ T8846] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.586765][ T8846] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.594668][ T8846] device bridge_slave_1 entered promiscuous mode [ 63.610474][ T8846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.620980][ T8846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.638745][ T8846] team0: Port device team_slave_0 added [ 63.645823][ T8846] team0: Port device team_slave_1 added [ 63.720955][ T8846] device hsr_slave_0 entered promiscuous mode [ 63.788862][ T8846] device hsr_slave_1 entered promiscuous mode [ 63.846660][ T8846] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.853988][ T8846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.861877][ T8846] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.868959][ T8846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.904160][ T8846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.916450][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.926376][ T2976] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.935329][ T2976] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.943356][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 63.955633][ T8846] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.966479][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.975344][ T3588] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.982444][ T3588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.000827][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.009449][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.016488][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.024802][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.033397][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.042662][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.053822][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.066257][ T8846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.078048][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.086084][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready executing program [ 64.106075][ T8846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.158508][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 169.165251][ C1] rcu: 1-...!: (10499 ticks this GP) idle=74e/1/0x4000000000000002 softirq=9317/9317 fqs=9 [ 169.175513][ C1] (t=10500 jiffies g=6961 q=23) [ 169.180447][ C1] rcu: rcu_preempt kthread starved for 10482 jiffies! g6961 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 169.191695][ C1] rcu: RCU grace-period kthread stack dump: [ 169.197565][ C1] rcu_preempt I29320 10 2 0x80004000 [ 169.203880][ C1] Call Trace: [ 169.207247][ C1] __schedule+0x755/0x1580 [ 169.211650][ C1] ? __sched_text_start+0x8/0x8 [ 169.216516][ C1] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 169.222330][ C1] ? schedule_timeout+0x47c/0xc50 [ 169.227356][ C1] ? lockdep_hardirqs_on+0x418/0x5d0 [ 169.232630][ C1] schedule+0xd9/0x260 [ 169.236686][ C1] schedule_timeout+0x486/0xc50 [ 169.241516][ C1] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 169.247317][ C1] ? usleep_range+0x170/0x170 [ 169.251985][ C1] ? trace_hardirqs_on+0x67/0x240 [ 169.256992][ C1] ? __kasan_check_read+0x11/0x20 [ 169.262017][ C1] ? __next_timer_interrupt+0x1a0/0x1a0 [ 169.267550][ C1] ? swake_up_one+0x60/0x60 [ 169.272042][ C1] rcu_gp_kthread+0x9b2/0x18c0 [ 169.276805][ C1] ? rcu_barrier+0x310/0x310 [ 169.281377][ C1] ? trace_hardirqs_on+0x67/0x240 [ 169.286390][ C1] ? __kasan_check_read+0x11/0x20 [ 169.291410][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 169.297633][ C1] ? __kthread_parkme+0x108/0x1c0 [ 169.302637][ C1] ? __kasan_check_read+0x11/0x20 [ 169.307646][ C1] kthread+0x361/0x430 [ 169.311704][ C1] ? rcu_barrier+0x310/0x310 [ 169.316278][ C1] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 169.322511][ C1] ret_from_fork+0x24/0x30 [ 169.326946][ C1] NMI backtrace for cpu 1 [ 169.331262][ C1] CPU: 1 PID: 42 Comm: kworker/1:1 Not tainted 5.3.0-rc7+ #0 [ 169.338608][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.348671][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 169.354641][ C1] Call Trace: [ 169.357915][ C1] [ 169.360779][ C1] dump_stack+0x172/0x1f0 [ 169.365099][ C1] nmi_cpu_backtrace.cold+0x70/0xb2 [ 169.370282][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 169.377030][ C1] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 169.382643][ C1] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 169.388613][ C1] arch_trigger_cpumask_backtrace+0x14/0x20 [ 169.394645][ C1] rcu_dump_cpu_stacks+0x183/0x1cf [ 169.399758][ C1] rcu_sched_clock_irq.cold+0x4dd/0xc13 [ 169.405298][ C1] ? raise_softirq+0x138/0x340 [ 169.410057][ C1] update_process_times+0x32/0x80 [ 169.415069][ C1] tick_sched_handle+0xa2/0x190 [ 169.419902][ C1] tick_sched_timer+0x53/0x140 [ 169.424659][ C1] __hrtimer_run_queues+0x364/0xe40 [ 169.429847][ C1] ? tick_sched_do_timer+0x1b0/0x1b0 [ 169.435126][ C1] ? hrtimer_start_range_ns+0xcb0/0xcb0 [ 169.440653][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 169.446351][ C1] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 169.452405][ C1] hrtimer_interrupt+0x314/0x770 [ 169.457349][ C1] smp_apic_timer_interrupt+0x160/0x610 [ 169.462881][ C1] apic_timer_interrupt+0xf/0x20 [ 169.467801][ C1] RIP: 0010:hhf_dequeue+0x674/0xa20 [ 169.472983][ C1] Code: e8 03 42 80 3c 20 00 0f 85 5b 03 00 00 4d 8b bd 98 03 00 00 48 89 df 48 8b 55 c8 4c 89 fe e8 b3 6c 76 fd 31 ff 89 c6 88 45 b0 b7 91 aa fb 0f b6 75 b0 40 84 f6 0f 84 c6 f9 ff ff e8 65 90 aa [ 169.492659][ C1] RSP: 0018:ffff8880ae908b48 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 169.501052][ C1] RAX: 0000000000000001 RBX: ffff8880a06f3e38 RCX: ffffffff85c7e431 [ 169.509004][ C1] RDX: ffff8880a06f3ed0 RSI: 0000000000000001 RDI: 0000000000000000 [ 169.516973][ C1] RBP: ffff8880ae908b98 R08: ffff8880a9ae8380 R09: fffffbfff14e9755 [ 169.524927][ C1] R10: ffff8880a9ae8d78 R11: ffff8880a9ae8380 R12: dffffc0000000000 [ 169.532879][ C1] R13: ffff8880a06f3b40 R14: ffff8880a06f3ed8 R15: ffff8880a06f3ed0 [ 169.540839][ C1] ? apic_timer_interrupt+0xa/0x20 [ 169.545942][ C1] ? hhf_dequeue+0x5d1/0xa20 [ 169.550516][ C1] ? hhf_dequeue+0x66d/0xa20 [ 169.555091][ C1] __qdisc_run+0x1e7/0x19d0 [ 169.559579][ C1] ? dev_queue_xmit+0x18/0x20 [ 169.564245][ C1] __dev_queue_xmit+0x16f1/0x3650 [ 169.569251][ C1] ? process_backlog+0x206/0x750 [ 169.574168][ C1] ? net_rx_action+0x4d6/0x1080 [ 169.578999][ C1] ? __do_softirq+0x262/0x98c [ 169.583656][ C1] ? do_softirq_own_stack+0x2a/0x40 [ 169.588846][ C1] ? do_softirq.part.0+0x11a/0x170 [ 169.593971][ C1] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 169.599254][ C1] ? __skb_ext_put+0xd9/0x210 [ 169.603922][ C1] dev_queue_xmit+0x18/0x20 [ 169.608407][ C1] ? dev_queue_xmit+0x18/0x20 [ 169.613067][ C1] br_dev_queue_push_xmit+0x3f3/0x5c0 [ 169.618419][ C1] ? __skb_ext_del+0xb0/0x2c0 [ 169.623075][ C1] ? lock_downgrade+0x920/0x920 [ 169.627909][ C1] br_nf_dev_queue_xmit+0x34e/0x1470 [ 169.633182][ C1] br_nf_post_routing+0x1502/0x1d30 [ 169.638364][ C1] ? br_nf_dev_queue_xmit+0x1470/0x1470 [ 169.643894][ C1] ? mark_held_locks+0xf0/0xf0 [ 169.648658][ C1] ? nf_bridge_update_protocol+0x1d0/0x1d0 [ 169.654459][ C1] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 169.660258][ C1] nf_hook_slow+0xbc/0x1e0 [ 169.664658][ C1] br_forward_finish+0x215/0x400 [ 169.669578][ C1] ? br_dev_queue_push_xmit+0x5c0/0x5c0 [ 169.675110][ C1] ? br_fdb_add.cold+0x8c/0x8c [ 169.679867][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 169.685565][ C1] ? nf_hook_slow+0xf0/0x1e0 [ 169.690143][ C1] br_nf_hook_thresh+0x2e9/0x370 [ 169.695072][ C1] ? br_dev_queue_push_xmit+0x5c0/0x5c0 [ 169.700604][ C1] ? setup_pre_routing+0x4b0/0x4b0 [ 169.705704][ C1] ? br_dev_queue_push_xmit+0x5c0/0x5c0 [ 169.711232][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 169.717453][ C1] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 169.723332][ C1] br_nf_forward_finish+0x66c/0xa90 [ 169.728513][ C1] ? br_dev_queue_push_xmit+0x5c0/0x5c0 [ 169.734045][ C1] br_nf_forward_ip+0xc74/0x21e0 [ 169.738969][ C1] ? br_nf_forward_arp+0x1670/0x1670 [ 169.744234][ C1] ? mark_held_locks+0xf0/0xf0 [ 169.748979][ C1] ? br_nf_hook_thresh+0x370/0x370 [ 169.754070][ C1] ? __vlan_flush+0x120/0x120 [ 169.758733][ C1] nf_hook_slow+0xbc/0x1e0 [ 169.763151][ C1] __br_forward+0x393/0xb00 [ 169.767646][ C1] ? br_forward_finish+0x400/0x400 [ 169.772741][ C1] ? br_dev_queue_push_xmit+0x5c0/0x5c0 [ 169.778272][ C1] deliver_clone+0x61/0xc0 [ 169.782672][ C1] br_flood+0x325/0x3d0 [ 169.786831][ C1] br_handle_frame_finish+0xb46/0x1670 [ 169.792276][ C1] ? br_handle_local_finish+0x20/0x20 [ 169.797659][ C1] ? audit_alloc_mark+0x3d0/0x500 [ 169.802683][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 169.808483][ C1] ? nf_hook_slow+0xf0/0x1e0 [ 169.813070][ C1] br_nf_hook_thresh+0x2e9/0x370 [ 169.818172][ C1] ? br_handle_local_finish+0x20/0x20 [ 169.823529][ C1] ? setup_pre_routing+0x4b0/0x4b0 [ 169.828624][ C1] ? find_held_lock+0x35/0x130 [ 169.833371][ C1] ? br_handle_local_finish+0x20/0x20 [ 169.838743][ C1] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 169.844619][ C1] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 169.850494][ C1] br_nf_pre_routing_finish_ipv6+0x6fb/0xd80 [ 169.856455][ C1] ? br_handle_local_finish+0x20/0x20 [ 169.861809][ C1] ? __kasan_check_read+0x11/0x20 [ 169.866820][ C1] br_nf_pre_routing_ipv6+0x456/0x832 [ 169.872176][ C1] ? br_validate_ipv6+0xb80/0xb80 [ 169.877705][ C1] ? br_nf_pre_routing_finish.cold+0x124/0x124 [ 169.883846][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 169.890070][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 169.896291][ C1] ? skb_pull_rcsum+0x155/0x300 [ 169.901126][ C1] br_nf_pre_routing+0x1743/0x2355 [ 169.906226][ C1] ? br_nf_pre_routing_finish+0x1730/0x1730 [ 169.912200][ C1] ? br_nf_pre_routing_finish+0x1730/0x1730 [ 169.918083][ C1] br_handle_frame+0x806/0x133e [ 169.922923][ C1] ? br_handle_frame_finish+0x1670/0x1670 [ 169.928628][ C1] ? br_handle_local_finish+0x20/0x20 [ 169.934418][ C1] ? br_handle_frame_finish+0x1670/0x1670 [ 169.940118][ C1] __netif_receive_skb_core+0xfc1/0x3060 [ 169.945733][ C1] ? __kasan_check_read+0x11/0x20 [ 169.950748][ C1] ? do_xdp_generic+0x50/0x50 [ 169.955408][ C1] ? __kasan_check_read+0x11/0x20 [ 169.960414][ C1] ? __lock_acquire+0x8a2/0x4c30 [ 169.965340][ C1] ? __kasan_check_read+0x11/0x20 [ 169.970356][ C1] __netif_receive_skb_one_core+0xa8/0x1a0 [ 169.976142][ C1] ? __netif_receive_skb_one_core+0xa8/0x1a0 [ 169.982105][ C1] ? __netif_receive_skb_core+0x3060/0x3060 [ 169.988001][ C1] ? lock_acquire+0x190/0x410 [ 169.992702][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 169.998946][ C1] __netif_receive_skb+0x2c/0x1d0 [ 170.003963][ C1] process_backlog+0x206/0x750 [ 170.008726][ C1] ? net_rx_action+0x249/0x1080 [ 170.013560][ C1] ? lockdep_hardirqs_on+0x19e/0x5d0 [ 170.018841][ C1] net_rx_action+0x4d6/0x1080 [ 170.023517][ C1] ? napi_busy_loop+0x970/0x970 [ 170.028361][ C1] __do_softirq+0x262/0x98c [ 170.032852][ C1] ? ip6_finish_output2+0x106d/0x2520 [ 170.038206][ C1] do_softirq_own_stack+0x2a/0x40 [ 170.043207][ C1] [ 170.046129][ C1] do_softirq.part.0+0x11a/0x170 [ 170.051049][ C1] __local_bh_enable_ip+0x211/0x270 [ 170.056233][ C1] ip6_finish_output2+0x10a0/0x2520 [ 170.061412][ C1] ? ip6_mtu+0x2e6/0x460 [ 170.065640][ C1] ? ip6_forward_finish+0x530/0x530 [ 170.070819][ C1] ? lock_downgrade+0x920/0x920 [ 170.075655][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 170.081890][ C1] ? __kasan_check_read+0x11/0x20 [ 170.086900][ C1] __ip6_finish_output+0x444/0xa50 [ 170.092010][ C1] ? __ip6_finish_output+0x444/0xa50 [ 170.097290][ C1] ip6_finish_output+0x38/0x1f0 [ 170.102134][ C1] ip6_output+0x235/0x7c0 [ 170.106451][ C1] ? ip6_finish_output+0x1f0/0x1f0 [ 170.111546][ C1] ? __ip6_finish_output+0xa50/0xa50 [ 170.116820][ C1] ndisc_send_skb+0xf29/0x1450 [ 170.121570][ C1] ? nf_hook.constprop.0+0x560/0x560 [ 170.126842][ C1] ? skb_set_owner_w+0x21b/0x320 [ 170.131773][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 170.137478][ C1] ndisc_send_ns+0x3a9/0x850 [ 170.142052][ C1] ? mark_held_locks+0xa4/0xf0 [ 170.146797][ C1] ? ndisc_netdev_event+0x4e0/0x4e0 [ 170.151973][ C1] ? lockdep_hardirqs_on+0x418/0x5d0 [ 170.157239][ C1] ? addrconf_dad_work+0xac4/0x1150 [ 170.162416][ C1] ? trace_hardirqs_on+0x67/0x240 [ 170.167422][ C1] ? addrconf_dad_work+0xac4/0x1150 [ 170.172629][ C1] addrconf_dad_work+0xb88/0x1150 [ 170.177655][ C1] ? addrconf_dad_completed+0xbb0/0xbb0 [ 170.183233][ C1] process_one_work+0x9af/0x1740 [ 170.188165][ C1] ? pwq_dec_nr_in_flight+0x320/0x320 [ 170.193530][ C1] ? lock_acquire+0x190/0x410 [ 170.198198][ C1] worker_thread+0x98/0xe40 [ 170.202698][ C1] ? trace_hardirqs_on+0x67/0x240 [ 170.207733][ C1] kthread+0x361/0x430 [ 170.211786][ C1] ? process_one_work+0x1740/0x1740 [ 170.216964][ C1] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 170.223187][ C1] ret_from_fork+0x24/0x30