[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[ 64.510031][ T26] kauditd_printk_skb: 7 callbacks suppressed
[ 64.510040][ T26] audit: type=1800 audit(1568445347.884:29): pid=9563 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0
[ 64.543629][ T26] audit: type=1800 audit(1568445347.884:30): pid=9563 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0
Debian GNU/Linux 7 syzkaller ttyS0
Warning: Permanently added '10.128.0.133' (ECDSA) to the list of known hosts.
syzkaller login: [ 76.494302][ T9718] IPVS: ftp: loaded support on port[0] = 21
[ 76.540568][ T9718] chnl_net:caif_netlink_parms(): no params data found
[ 76.562022][ T9718] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.569189][ T9718] bridge0: port 1(bridge_slave_0) entered disabled state
[ 76.576660][ T9718] device bridge_slave_0 entered promiscuous mode
[ 76.583886][ T9718] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.591067][ T9718] bridge0: port 2(bridge_slave_1) entered disabled state
[ 76.598653][ T9718] device bridge_slave_1 entered promiscuous mode
[ 76.612102][ T9718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 76.622351][ T9718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 76.637408][ T9718] team0: Port device team_slave_0 added
[ 76.644344][ T9718] team0: Port device team_slave_1 added
[ 76.709116][ T9718] device hsr_slave_0 entered promiscuous mode
[ 76.767790][ T9718] device hsr_slave_1 entered promiscuous mode
[ 76.842864][ T9718] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.850136][ T9718] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 76.857410][ T9718] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.864487][ T9718] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 76.888705][ T9718] 8021q: adding VLAN 0 to HW filter on device bond0
[ 76.899794][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 76.918391][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state
[ 76.926015][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state
[ 76.933923][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 76.944021][ T9718] 8021q: adding VLAN 0 to HW filter on device team0
[ 76.953121][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 76.961759][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.968859][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 76.986758][ T9718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 76.997517][ T9718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 77.009736][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 77.018391][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.025418][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.033322][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
executing program
[ 77.042115][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 77.050403][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 77.058524][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 77.066581][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 77.074495][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 77.087363][ T9718] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 182.107463][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[ 182.114113][ C1] rcu: 1-...!: (1 GPs behind) idle=d9a/0/0x3 softirq=9105/9106 fqs=12
[ 182.122414][ C1] (t=10500 jiffies g=8989 q=144)
[ 182.127421][ C1] rcu: rcu_preempt kthread starved for 10476 jiffies! g8989 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[ 182.138675][ C1] rcu: RCU grace-period kthread stack dump:
[ 182.144637][ C1] rcu_preempt I29520 10 2 0x80004000
[ 182.151472][ C1] Call Trace:
[ 182.154763][ C1] __schedule+0x755/0x1580
[ 182.159160][ C1] ? __sched_text_start+0x8/0x8
[ 182.163993][ C1] schedule+0xd9/0x260
[ 182.168043][ C1] schedule_timeout+0x486/0xc50
[ 182.172872][ C1] ? rwlock_bug.part.0+0x90/0x90
[ 182.177786][ C1] ? usleep_range+0x170/0x170
[ 182.182438][ C1] ? trace_hardirqs_on+0x67/0x240
[ 182.187440][ C1] ? __kasan_check_read+0x11/0x20
[ 182.192456][ C1] ? __next_timer_interrupt+0x1a0/0x1a0
[ 182.197987][ C1] ? swake_up_one+0x60/0x60
[ 182.202470][ C1] rcu_gp_kthread+0x9b2/0x18c0
[ 182.207222][ C1] ? rcu_barrier+0x310/0x310
[ 182.211802][ C1] ? trace_hardirqs_on+0x67/0x240
[ 182.216807][ C1] ? __kasan_check_read+0x11/0x20
[ 182.221825][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 182.228051][ C1] ? __kthread_parkme+0x108/0x1c0
[ 182.233052][ C1] ? __kasan_check_read+0x11/0x20
[ 182.238227][ C1] kthread+0x361/0x430
[ 182.242275][ C1] ? rcu_barrier+0x310/0x310
[ 182.246842][ C1] ? kthread_cancel_delayed_work_sync+0x20/0x20
[ 182.253059][ C1] ret_from_fork+0x24/0x30
[ 182.257490][ C1] NMI backtrace for cpu 1
[ 182.261806][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.3.0-rc8+ #0
[ 182.268894][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 182.278929][ C1] Call Trace:
[ 182.282194][ C1]
[ 182.285026][ C1] dump_stack+0x172/0x1f0
[ 182.289334][ C1] nmi_cpu_backtrace.cold+0x70/0xb2
[ 182.294512][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 182.300741][ C1] ? lapic_can_unplug_cpu.cold+0x45/0x45
[ 182.306353][ C1] nmi_trigger_cpumask_backtrace+0x23b/0x28b
[ 182.312321][ C1] arch_trigger_cpumask_backtrace+0x14/0x20
[ 182.318254][ C1] rcu_dump_cpu_stacks+0x183/0x1cf
[ 182.323358][ C1] rcu_sched_clock_irq.cold+0x4dd/0xc13
[ 182.328974][ C1] ? raise_softirq+0x138/0x340
[ 182.333724][ C1] update_process_times+0x32/0x80
[ 182.338727][ C1] tick_sched_handle+0xa2/0x190
[ 182.343556][ C1] tick_sched_timer+0x53/0x140
[ 182.348298][ C1] __hrtimer_run_queues+0x364/0xe40
[ 182.353476][ C1] ? tick_sched_do_timer+0x1b0/0x1b0
[ 182.358743][ C1] ? hrtimer_start_range_ns+0xcb0/0xcb0
[ 182.364273][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 182.369982][ C1] ? ktime_get_update_offsets_now+0x2d3/0x440
[ 182.376037][ C1] hrtimer_interrupt+0x314/0x770
[ 182.380957][ C1] smp_apic_timer_interrupt+0x160/0x610
[ 182.386492][ C1] apic_timer_interrupt+0xf/0x20
[ 182.391498][ C1] RIP: 0010:hhf_dequeue+0x586/0xa20
[ 182.396682][ C1] Code: 48 c1 e8 03 42 0f b6 14 20 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 b5 03 00 00 45 8b b5 ac 03 00 00 e8 fa 04 ac fb <49> 8d bd 14 03 00 00 48 89 f8 48 c1 e8 03 42 0f b6 14 20 48 89 f8
[ 182.416364][ C1] RSP: 0018:ffff8880ae909538 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13
[ 182.425547][ C1] RAX: ffff8880a98c6340 RBX: ffff88809f6610b8 RCX: ffffffff85c66b39
[ 182.433499][ C1] RDX: 0000000000000100 RSI: ffffffff85c67006 RDI: ffff88809f66116c
[ 182.441452][ C1] RBP: ffff8880ae909588 R08: ffff8880a98c6340 R09: 0000000000000000
[ 182.449402][ C1] R10: fffffbfff134afaf R11: ffff8880a98c6340 R12: dffffc0000000000
[ 182.457361][ C1] R13: ffff88809f660dc0 R14: 0000000000000000 R15: 0000000000000000
[ 182.465330][ C1] ? apic_timer_interrupt+0xa/0x20
[ 182.470424][ C1] ? hhf_dequeue+0xb9/0xa20
[ 182.474904][ C1] ? hhf_dequeue+0x586/0xa20
[ 182.479484][ C1] ? hhf_dequeue+0x586/0xa20
[ 182.484144][ C1] __qdisc_run+0x1e7/0x19d0
[ 182.488630][ C1] ? dev_queue_xmit+0x18/0x20
[ 182.493294][ C1] __dev_queue_xmit+0x16f1/0x3650
[ 182.498299][ C1] ? __kasan_check_read+0x11/0x20
[ 182.503306][ C1] ? netdev_core_pick_tx+0x2f0/0x2f0
[ 182.508571][ C1] ? ip6_finish_output2+0x1034/0x2520
[ 182.513928][ C1] ? __kasan_check_read+0x11/0x20
[ 182.518941][ C1] ? lock_downgrade+0x920/0x920
[ 182.523783][ C1] dev_queue_xmit+0x18/0x20
[ 182.528264][ C1] ? dev_queue_xmit+0x18/0x20
[ 182.533032][ C1] neigh_resolve_output+0x5a5/0x970
[ 182.538236][ C1] ip6_finish_output2+0x1034/0x2520
[ 182.543414][ C1] ? ip6_mtu+0x2e6/0x460
[ 182.547636][ C1] ? ip6_forward_finish+0x530/0x530
[ 182.552812][ C1] ? ip6_mtu+0x16f/0x460
[ 182.558263][ C1] __ip6_finish_output+0x444/0xa50
[ 182.563351][ C1] ? __ip6_finish_output+0x444/0xa50
[ 182.568614][ C1] ip6_finish_output+0x38/0x1f0
[ 182.573451][ C1] ip6_output+0x235/0x7c0
[ 182.577759][ C1] ? ip6_finish_output+0x1f0/0x1f0
[ 182.582851][ C1] ? __ip6_finish_output+0xa50/0xa50
[ 182.588113][ C1] ? icmp6_dst_alloc+0x432/0x660
[ 182.593031][ C1] mld_sendpack+0x9c7/0xea0
[ 182.597521][ C1] ? nf_hook.constprop.0+0x560/0x560
[ 182.602811][ C1] ? mld_ifc_timer_expire+0x437/0x8a0
[ 182.608248][ C1] ? __local_bh_enable_ip+0x15a/0x270
[ 182.613637][ C1] mld_ifc_timer_expire+0x449/0x8a0
[ 182.618817][ C1] call_timer_fn+0x1ac/0x780
[ 182.623388][ C1] ? mld_dad_timer_expire+0x1c0/0x1c0
[ 182.628738][ C1] ? msleep_interruptible+0x150/0x150
[ 182.634089][ C1] ? trace_hardirqs_on+0x67/0x240
[ 182.639090][ C1] ? __kasan_check_read+0x11/0x20
[ 182.644092][ C1] ? mld_dad_timer_expire+0x1c0/0x1c0
[ 182.649451][ C1] ? mld_dad_timer_expire+0x1c0/0x1c0
[ 182.654803][ C1] run_timer_softirq+0x697/0x17a0
[ 182.659847][ C1] ? add_timer+0x930/0x930
[ 182.664257][ C1] ? kvm_clock_read+0x18/0x30
[ 182.668909][ C1] ? kvm_sched_clock_read+0x9/0x20
[ 182.674008][ C1] ? sched_clock+0x2e/0x50
[ 182.678403][ C1] ? sched_clock_cpu+0x1b/0x1b0
[ 182.683234][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 182.689452][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 182.695680][ C1] __do_softirq+0x262/0x98c
[ 182.700336][ C1] ? sched_clock_cpu+0x1b/0x1b0
[ 182.705168][ C1] irq_exit+0x19b/0x1e0
[ 182.709303][ C1] smp_apic_timer_interrupt+0x1a3/0x610
[ 182.714827][ C1] apic_timer_interrupt+0xf/0x20
[ 182.719747][ C1]
[ 182.722667][ C1] RIP: 0010:native_safe_halt+0xe/0x10
[ 182.728456][ C1] Code: 88 63 6e fa eb 8a 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d 24 0b 4a 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 14 0b 4a 00 fb f4 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 2e 23 22 fa e8 f9
[ 182.748325][ C1] RSP: 0018:ffff8880a98dfd68 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
[ 182.756725][ C1] RAX: 1ffffffff11a5e8d RBX: ffff8880a98c6340 RCX: 1ffffffff134b5ee
[ 182.764689][ C1] RDX: dffffc0000000000 RSI: ffffffff8177f15e RDI: ffffffff873e150c
[ 182.772646][ C1] RBP: ffff8880a98dfd98 R08: ffff8880a98c6340 R09: ffffed1015318c69
[ 182.780602][ C1] R10: ffffed1015318c68 R11: ffff8880a98c6347 R12: dffffc0000000000
[ 182.788646][ C1] R13: ffffffff89a57d78 R14: 0000000000000000 R15: 0000000000000001
[ 182.796620][ C1] ? trace_hardirqs_on+0x5e/0x240
[ 182.801634][ C1] ? default_idle+0x1c/0x360
[ 182.806215][ C1] ? default_idle+0x4e/0x360
[ 182.810799][ C1] arch_cpu_idle+0xa/0x10
[ 182.815226][ C1] default_idle_call+0x84/0xb0
[ 182.819972][ C1] do_idle+0x413/0x760
[ 182.824025][ C1] ? arch_cpu_idle_exit+0x80/0x80
[ 182.829032][ C1] cpu_startup_entry+0x1b/0x20
[ 182.833782][ C1] start_secondary+0x315/0x430
[ 182.838526][ C1] ? set_cpu_sibling_map+0x2180/0x2180
[ 182.843985][ C1] secondary_startup_64+0xa4/0xb0