[ 50.920563][ T26] audit: type=1800 audit(1568112877.466:21): pid=8953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [ 50.953290][ T26] audit: type=1800 audit(1568112877.476:22): pid=8953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2447 res=0 [ 50.974379][ T26] audit: type=1800 audit(1568112877.476:23): pid=8953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rsyslog" dev="sda1" ino=2442 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.28' (ECDSA) to the list of known hosts. syzkaller login: [ 388.225505][ T9106] IPVS: ftp: loaded support on port[0] = 21 [ 388.264505][ T9106] chnl_net:caif_netlink_parms(): no params data found [ 388.283293][ T9106] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.290407][ T9106] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.298216][ T9106] device bridge_slave_0 entered promiscuous mode [ 388.305381][ T9106] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.312474][ T9106] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.319842][ T9106] device bridge_slave_1 entered promiscuous mode [ 388.331564][ T9106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.341840][ T9106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.356348][ T9106] team0: Port device team_slave_0 added [ 388.363011][ T9106] team0: Port device team_slave_1 added [ 388.413710][ T9106] device hsr_slave_0 entered promiscuous mode [ 388.452273][ T9106] device hsr_slave_1 entered promiscuous mode [ 388.496359][ T9106] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.503562][ T9106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.510808][ T9106] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.517868][ T9106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.539361][ T9106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.548713][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 388.568043][ T9108] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.575724][ T9108] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.583721][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 388.593128][ T9106] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.612621][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 388.621032][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.628124][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.635705][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 388.644027][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.651050][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.667233][ T9106] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 388.677680][ T9106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.689754][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 388.698137][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 388.706316][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.715474][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.723559][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 388.730982][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready executing program [ 388.744795][ T9106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.871876][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 493.878519][ C0] rcu: 0-...!: (10499 ticks this GP) idle=b3a/0/0x3 softirq=9367/9367 fqs=22 [ 493.887422][ C0] (t=10500 jiffies g=6737 q=58) [ 493.892361][ C0] rcu: rcu_preempt kthread starved for 10456 jiffies! g6737 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 493.903619][ C0] rcu: RCU grace-period kthread stack dump: [ 493.909494][ C0] rcu_preempt I29128 10 2 0x80004000 [ 493.915804][ C0] Call Trace: [ 493.919150][ C0] __schedule+0x877/0xc50 [ 493.923459][ C0] schedule+0x131/0x1e0 [ 493.927589][ C0] schedule_timeout+0x14f/0x240 [ 493.932519][ C0] ? run_local_timers+0x120/0x120 [ 493.937554][ C0] rcu_gp_kthread+0xef8/0x1790 [ 493.942319][ C0] kthread+0x332/0x350 [ 493.946367][ C0] ? rcu_report_qs_rsp+0x150/0x150 [ 493.951450][ C0] ? kthread_blkcg+0xe0/0xe0 [ 493.956020][ C0] ret_from_fork+0x24/0x30 [ 493.960435][ C0] NMI backtrace for cpu 0 [ 493.964753][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.3.0-rc8+ #0 [ 493.971839][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.981871][ C0] Call Trace: [ 493.985137][ C0] [ 493.988008][ C0] dump_stack+0x1d8/0x2f8 [ 493.992316][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 493.997141][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 494.003346][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 494.009389][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 494.015344][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 494.021238][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 494.026340][ C0] rcu_sched_clock_irq+0xb95/0x16d0 [ 494.031572][ C0] ? trace_hardirqs_off+0x74/0x80 [ 494.036572][ C0] update_process_times+0x134/0x190 [ 494.041765][ C0] tick_sched_timer+0x263/0x420 [ 494.046589][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 494.052374][ C0] __hrtimer_run_queues+0x403/0x850 [ 494.057554][ C0] hrtimer_interrupt+0x38c/0xda0 [ 494.062475][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 494.067999][ C0] apic_timer_interrupt+0xf/0x20 [ 494.072946][ C0] RIP: 0010:hhf_dequeue+0x4ef/0xaa0 [ 494.078126][ C0] Code: 48 8b 1b 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 01 28 a0 fb 4c 89 73 08 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 <74> 08 4c 89 f7 e8 e7 27 a0 fb 49 89 1e eb 09 e8 0d 2c 67 fb 4c 8b [ 494.097704][ C0] RSP: 0018:ffff8880aea09478 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 494.106098][ C0] RAX: 1ffff11013231c72 RBX: ffff88809918e390 RCX: ffffffff88875a00 [ 494.114043][ C0] RDX: 0000000000000702 RSI: 0000000000000000 RDI: ffff88809918e398 [ 494.121992][ C0] RBP: ffff8880aea09520 R08: ffffffff860c5d6a R09: 0000000000000000 [ 494.129939][ C0] R10: fffffbfff117be8d R11: 0000000000000000 R12: dffffc0000000000 [ 494.137885][ C0] R13: ffff88809918e000 R14: ffff88809918e390 R15: ffff88809918e380 [ 494.145838][ C0] ? apic_timer_interrupt+0xa/0x20 [ 494.150925][ C0] ? hhf_dequeue+0x15a/0xaa0 [ 494.155493][ C0] ? hhf_dequeue+0x490/0xaa0 [ 494.160060][ C0] ? hhf_enqueue+0x19dc/0x2110 [ 494.164825][ C0] __qdisc_run+0x217/0x1b30 [ 494.169348][ C0] ? dev_queue_xmit+0x17/0x20 [ 494.173999][ C0] __dev_queue_xmit+0x1161/0x3020 [ 494.179004][ C0] dev_queue_xmit+0x17/0x20 [ 494.183552][ C0] br_dev_queue_push_xmit+0x551/0x650 [ 494.188910][ C0] ? fdb_add_hw_addr+0x220/0x220 [ 494.193822][ C0] __br_forward+0x439/0x720 [ 494.198298][ C0] br_flood+0x52e/0x840 [ 494.202444][ C0] br_dev_xmit+0xcb6/0x1100 [ 494.206927][ C0] dev_hard_start_xmit+0x1c1/0x3f0 [ 494.212017][ C0] __dev_queue_xmit+0x1e86/0x3020 [ 494.217055][ C0] ? ip_finish_output2+0x10b5/0x18d0 [ 494.222312][ C0] ? ip_finish_output2+0x11ee/0x18d0 [ 494.227572][ C0] dev_queue_xmit+0x17/0x20 [ 494.232061][ C0] ip_finish_output2+0x145c/0x18d0 [ 494.237149][ C0] __ip_finish_output+0x801/0xa70 [ 494.242148][ C0] ip_finish_output+0x52/0x1e0 [ 494.246883][ C0] ? ip_output+0x17e/0x280 [ 494.251273][ C0] ip_output+0x1bc/0x280 [ 494.255505][ C0] ip_local_out+0x105/0x140 [ 494.259996][ C0] igmpv3_sendpack+0x15a/0x230 [ 494.264734][ C0] igmp_ifc_timer_expire+0xb39/0xf60 [ 494.269994][ C0] ? call_timer_fn+0x5d/0x170 [ 494.274645][ C0] ? igmp_gq_timer_expire+0x80/0x80 [ 494.279816][ C0] call_timer_fn+0x95/0x170 [ 494.284298][ C0] ? igmp_gq_timer_expire+0x80/0x80 [ 494.289477][ C0] __run_timers+0x79e/0x970 [ 494.294019][ C0] ? check_preemption_disabled+0x47/0x2a0 [ 494.299713][ C0] ? check_preemption_disabled+0x47/0x2a0 [ 494.305406][ C0] run_timer_softirq+0x4a/0x90 [ 494.310153][ C0] __do_softirq+0x333/0x7c4 [ 494.314688][ C0] ? irq_exit+0x227/0x230 [ 494.318995][ C0] irq_exit+0x227/0x230 [ 494.323127][ C0] smp_apic_timer_interrupt+0x113/0x280 [ 494.328646][ C0] apic_timer_interrupt+0xf/0x20 [ 494.333582][ C0] [ 494.336496][ C0] RIP: 0010:native_safe_halt+0xe/0x10 [ 494.341842][ C0] Code: 30 fa eb ae 89 d9 80 e1 07 80 c1 03 38 c1 7c ba 48 89 df e8 34 a1 30 fa eb b0 90 90 e9 07 00 00 00 0f 00 2d 96 a0 46 00 fb f4 90 e9 07 00 00 00 0f 00 2d 86 a0 46 00 f4 c3 90 90 55 48 89 e5 [ 494.361430][ C0] RSP: 0018:ffffffff88807dc0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 494.369815][ C0] RAX: 1ffffffff11150f3 RBX: ffffffff88875a00 RCX: dffffc0000000000 [ 494.377776][ C0] RDX: 0000000000000000 RSI: ffffffff812b7a1a RDI: ffffffff877be46a [ 494.385737][ C0] RBP: ffffffff88807dc8 R08: ffffffff81790e54 R09: fffffbfff110eb41 [ 494.393682][ C0] R10: fffffbfff110eb41 R11: 0000000000000000 R12: dffffc0000000000 [ 494.401637][ C0] R13: 1ffffffff110eb40 R14: dffffc0000000000 R15: 0000000000000000 [ 494.409595][ C0] ? trace_hardirqs_on+0x34/0x80 [ 494.414559][ C0] ? arch_cpu_idle+0xa/0x10 [ 494.419038][ C0] ? default_idle+0x1a/0x70 [ 494.423517][ C0] ? default_idle+0x50/0x70 [ 494.427994][ C0] arch_cpu_idle+0xa/0x10 [ 494.432309][ C0] default_idle_call+0x59/0xa0 [ 494.437103][ C0] do_idle+0x140/0x6d0 [ 494.441158][ C0] ? debug_smp_processor_id+0x1c/0x20 [ 494.446505][ C0] cpu_startup_entry+0x25/0x30 [ 494.451256][ C0] rest_init+0x29d/0x2b0 [ 494.455513][ C0] arch_call_rest_init+0xe/0x10 [ 494.460338][ C0] start_kernel+0x6f5/0x7f6 [ 494.464818][ C0] x86_64_start_reservations+0x18/0x2e [ 494.470252][ C0] x86_64_start_kernel+0x7a/0x7d [ 494.475191][ C0] secondary_startup_64+0xa4/0xb0