[ 65.698330][ T26] audit: type=1800 audit(1568132013.700:27): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 65.722799][ T26] audit: type=1800 audit(1568132013.700:28): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 66.419111][ T26] audit: type=1800 audit(1568132014.500:29): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 66.440989][ T26] audit: type=1800 audit(1568132014.500:30): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.62' (ECDSA) to the list of known hosts. syzkaller login: [ 216.501218][ T9891] IPVS: ftp: loaded support on port[0] = 21 [ 216.544518][ T9891] chnl_net:caif_netlink_parms(): no params data found [ 216.567200][ T9891] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.575093][ T9891] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.582713][ T9891] device bridge_slave_0 entered promiscuous mode [ 216.590791][ T9891] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.598122][ T9891] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.606055][ T9891] device bridge_slave_1 entered promiscuous mode [ 216.620793][ T9891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.631407][ T9891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.648018][ T9891] team0: Port device team_slave_0 added [ 216.654929][ T9891] team0: Port device team_slave_1 added [ 216.709525][ T9891] device hsr_slave_0 entered promiscuous mode [ 216.777884][ T9891] device hsr_slave_1 entered promiscuous mode [ 216.842978][ T9891] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.850505][ T9891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.858179][ T9891] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.865843][ T9891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.891119][ T9891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.902013][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.920724][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.929498][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.937102][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 216.948711][ T9891] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.958729][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.967501][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.975533][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.994303][ T9891] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.006451][ T9891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.020652][ T9895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.029816][ T9895] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.037168][ T9895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.045640][ T9895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.055419][ T9895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.064342][ T9895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.073940][ T9895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.082890][ T9895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 217.091457][ T9895] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.105504][ T9891] 8021q: adding VLAN 0 to HW filter on device batadv0 executing program [ 322.157555][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 322.164217][ C1] rcu: 1-...!: (10500 ticks this GP) idle=02a/1/0x4000000000000002 softirq=8837/8837 fqs=0 [ 322.174431][ C1] (t=10501 jiffies g=9249 q=132) [ 322.179440][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g9249 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 322.190698][ C1] rcu: RCU grace-period kthread stack dump: [ 322.196752][ C1] rcu_preempt I29520 10 2 0x80004000 [ 322.203066][ C1] Call Trace: [ 322.206426][ C1] __schedule+0x755/0x1580 [ 322.210842][ C1] ? __sched_text_start+0x8/0x8 [ 322.215768][ C1] schedule+0xd9/0x260 [ 322.219834][ C1] schedule_timeout+0x486/0xc50 [ 322.225132][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 322.230048][ C1] ? usleep_range+0x170/0x170 [ 322.234703][ C1] ? trace_hardirqs_on+0x67/0x240 [ 322.239716][ C1] ? __kasan_check_read+0x11/0x20 [ 322.244984][ C1] ? __next_timer_interrupt+0x1a0/0x1a0 [ 322.250512][ C1] ? swake_up_one+0x60/0x60 [ 322.255008][ C1] ? trace_hardirqs_on+0x67/0x240 [ 322.260015][ C1] rcu_gp_kthread+0x9b2/0x18c0 [ 322.264863][ C1] ? rcu_barrier+0x310/0x310 [ 322.269442][ C1] ? trace_hardirqs_on+0x67/0x240 [ 322.274448][ C1] ? __kasan_check_read+0x11/0x20 [ 322.279460][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 322.285680][ C1] ? __kthread_parkme+0x108/0x1c0 [ 322.290709][ C1] ? __kasan_check_read+0x11/0x20 [ 322.295729][ C1] kthread+0x361/0x430 [ 322.299792][ C1] ? rcu_barrier+0x310/0x310 [ 322.304455][ C1] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 322.310675][ C1] ret_from_fork+0x24/0x30 [ 322.315123][ C1] NMI backtrace for cpu 1 [ 322.319451][ C1] CPU: 1 PID: 9895 Comm: kworker/1:2 Not tainted 5.3.0-rc7+ #0 [ 322.326977][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.337110][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 322.343087][ C1] Call Trace: [ 322.346352][ C1] [ 322.349189][ C1] dump_stack+0x172/0x1f0 [ 322.353586][ C1] nmi_cpu_backtrace.cold+0x70/0xb2 [ 322.358774][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 322.365018][ C1] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 322.370643][ C1] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 322.376606][ C1] arch_trigger_cpumask_backtrace+0x14/0x20 [ 322.382494][ C1] rcu_dump_cpu_stacks+0x183/0x1cf [ 322.387616][ C1] rcu_sched_clock_irq.cold+0x4dd/0xc13 [ 322.393333][ C1] ? raise_softirq+0x138/0x340 [ 322.398082][ C1] update_process_times+0x32/0x80 [ 322.403097][ C1] tick_sched_handle+0xa2/0x190 [ 322.407950][ C1] tick_sched_timer+0x53/0x140 [ 322.412730][ C1] __hrtimer_run_queues+0x364/0xe40 [ 322.418017][ C1] ? tick_sched_do_timer+0x1b0/0x1b0 [ 322.423300][ C1] ? hrtimer_start_range_ns+0xcb0/0xcb0 [ 322.428830][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 322.434554][ C1] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 322.440641][ C1] hrtimer_interrupt+0x314/0x770 [ 322.445644][ C1] smp_apic_timer_interrupt+0x160/0x610 [ 322.451190][ C1] apic_timer_interrupt+0xf/0x20 [ 322.456114][ C1] RIP: 0010:__list_add_valid+0x52/0xa0 [ 322.461556][ C1] Code: 3c 02 00 75 52 49 8b 54 24 08 48 39 f2 0f 85 5a 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 f2 48 c1 ea 03 80 3c 02 00 75 3c <48> 8b 16 4c 39 e2 0f 85 5f 01 00 00 49 39 f5 0f 84 3f 01 00 00 4d [ 322.481236][ C1] RSP: 0018:ffff8880ae908b20 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 322.489639][ C1] RAX: dffffc0000000000 RBX: ffff8880910b42f8 RCX: ffffffff85c66361 [ 322.497768][ C1] RDX: 1ffff11012216872 RSI: ffff8880910b4390 RDI: ffff8880910b4398 [ 322.505820][ C1] RBP: ffff8880ae908b38 R08: ffff888089e5c500 R09: 0000000000000000 [ 322.513774][ C1] R10: fffffbfff134af9f R11: ffff888089e5c500 R12: ffff8880910b4390 [ 322.521741][ C1] R13: ffff8880910b42f8 R14: ffff8880910b4398 R15: ffff8880910b4390 [ 322.529724][ C1] ? apic_timer_interrupt+0xa/0x20 [ 322.534888][ C1] ? hhf_dequeue+0x5d1/0xa20 [ 322.539464][ C1] hhf_dequeue+0x66d/0xa20 [ 322.543963][ C1] __qdisc_run+0x1e5/0x1a00 [ 322.548463][ C1] ? dev_queue_xmit+0x18/0x20 [ 322.553124][ C1] __dev_queue_xmit+0x16f1/0x3650 [ 322.558133][ C1] ? process_backlog+0x206/0x750 [ 322.563051][ C1] ? net_rx_action+0x4d6/0x1030 [ 322.567889][ C1] ? __do_softirq+0x262/0x98c [ 322.572546][ C1] ? do_softirq_own_stack+0x2a/0x40 [ 322.577743][ C1] ? do_softirq.part.0+0x11a/0x170 [ 322.582840][ C1] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 322.588111][ C1] ? quarantine_put+0x11c/0x1c0 [ 322.593043][ C1] ? trace_hardirqs_on+0x67/0x240 [ 322.598125][ C1] ? __skb_ext_put+0xd9/0x210 [ 322.602786][ C1] dev_queue_xmit+0x18/0x20 [ 322.607293][ C1] ? dev_queue_xmit+0x18/0x20 [ 322.612010][ C1] br_dev_queue_push_xmit+0x3f3/0x5c0 [ 322.617366][ C1] ? __skb_ext_del+0xb0/0x2c0 [ 322.622117][ C1] ? lock_downgrade+0x920/0x920 [ 322.626984][ C1] br_nf_dev_queue_xmit+0x34e/0x1470 [ 322.632253][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 322.637963][ C1] br_nf_post_routing+0x1502/0x1d30 [ 322.643143][ C1] ? br_nf_dev_queue_xmit+0x1470/0x1470 [ 322.648845][ C1] ? mark_held_locks+0xf0/0xf0 [ 322.653623][ C1] ? nf_bridge_update_protocol+0x1d0/0x1d0 [ 322.659411][ C1] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 322.665250][ C1] nf_hook_slow+0xbc/0x1e0 [ 322.669666][ C1] br_forward_finish+0x215/0x400 [ 322.674675][ C1] ? br_dev_queue_push_xmit+0x5c0/0x5c0 [ 322.680208][ C1] ? process_one_work+0x9af/0x1740 [ 322.685310][ C1] ? worker_thread+0x98/0xe40 [ 322.689974][ C1] ? kthread+0x361/0x430 [ 322.694218][ C1] ? br_fdb_add.cold+0x8c/0x8c [ 322.699013][ C1] ? ip_vs_out+0x244/0x1700 [ 322.703521][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 322.710274][ C1] ? nf_hook_slow+0xf0/0x1e0 [ 322.714948][ C1] ? should_fail+0x1de/0x852 [ 322.719532][ C1] br_nf_hook_thresh+0x2e9/0x370 [ 322.724455][ C1] ? br_dev_queue_push_xmit+0x5c0/0x5c0 [ 322.729983][ C1] ? setup_pre_routing+0x4b0/0x4b0 [ 322.735077][ C1] ? br_dev_queue_push_xmit+0x5c0/0x5c0 [ 322.740610][ C1] ? br_nf_forward_finish+0x176/0xa90 [ 322.745963][ C1] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 322.751838][ C1] br_nf_forward_finish+0x66c/0xa90 [ 322.757056][ C1] ? br_dev_queue_push_xmit+0x5c0/0x5c0 [ 322.762679][ C1] br_nf_forward_ip+0xc74/0x21e0 [ 322.767599][ C1] ? br_nf_forward_arp+0x1670/0x1670 [ 322.772878][ C1] ? mark_held_locks+0xf0/0xf0 [ 322.777643][ C1] ? br_nf_hook_thresh+0x370/0x370 [ 322.782746][ C1] ? __vlan_flush+0x120/0x120 [ 322.787407][ C1] nf_hook_slow+0xbc/0x1e0 [ 322.791827][ C1] __br_forward+0x393/0xb00 [ 322.796321][ C1] ? br_forward_finish+0x400/0x400 [ 322.801438][ C1] ? br_dev_queue_push_xmit+0x5c0/0x5c0 [ 322.806969][ C1] deliver_clone+0x61/0xc0 [ 322.811373][ C1] br_flood+0x325/0x3d0 [ 322.815520][ C1] br_handle_frame_finish+0xb46/0x1670 [ 322.821792][ C1] ? br_handle_local_finish+0x20/0x20 [ 322.827145][ C1] ? lock_downgrade+0x920/0x920 [ 322.831991][ C1] ? __this_cpu_preempt_check+0x3a/0x210 [ 322.837661][ C1] ? audit_alloc_mark+0x3d0/0x500 [ 322.842673][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 322.848377][ C1] ? nf_hook_slow+0xf0/0x1e0 [ 322.852950][ C1] br_nf_hook_thresh+0x2e9/0x370 [ 322.857894][ C1] ? br_handle_local_finish+0x20/0x20 [ 322.863247][ C1] ? setup_pre_routing+0x4b0/0x4b0 [ 322.868341][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 322.874565][ C1] ? br_handle_local_finish+0x20/0x20 [ 322.879929][ C1] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 322.885802][ C1] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 322.891681][ C1] br_nf_pre_routing_finish_ipv6+0x6fb/0xd80 [ 322.898422][ C1] ? br_handle_local_finish+0x20/0x20 [ 322.903774][ C1] br_nf_pre_routing_ipv6+0x456/0x832 [ 322.909126][ C1] ? br_validate_ipv6+0xb80/0xb80 [ 322.914151][ C1] ? br_nf_pre_routing.cold+0x29/0x29 [ 322.919504][ C1] ? br_nf_pre_routing+0x246/0x22d1 [ 322.924695][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 322.930935][ C1] ? skb_pull_rcsum+0x155/0x300 [ 322.935869][ C1] br_nf_pre_routing+0x18af/0x22d1 [ 322.940966][ C1] ? br_nf_pre_routing_finish+0x1730/0x1730 [ 322.946925][ C1] ? __enqueue_entity+0x142/0x390 [ 322.951945][ C1] ? br_nf_pre_routing_finish+0x1730/0x1730 [ 322.957830][ C1] br_handle_frame+0x806/0x133e [ 322.962674][ C1] ? br_handle_frame_finish+0x1670/0x1670 [ 322.968375][ C1] ? trace_hardirqs_off+0x62/0x240 [ 322.973467][ C1] ? br_handle_local_finish+0x20/0x20 [ 322.978821][ C1] ? try_to_wake_up+0xf3/0x1aa0 [ 322.983654][ C1] ? __kasan_check_read+0x11/0x20 [ 322.988761][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 322.994995][ C1] ? br_handle_frame_finish+0x1670/0x1670 [ 323.000700][ C1] __netif_receive_skb_core+0xfc1/0x3060 [ 323.006315][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 323.012188][ C1] ? try_to_wake_up+0xb0/0x1aa0 [ 323.017127][ C1] ? do_xdp_generic+0x50/0x50 [ 323.021799][ C1] ? swake_up_one+0x4d/0x60 [ 323.026296][ C1] ? __kasan_check_read+0x11/0x20 [ 323.031319][ C1] ? lock_downgrade+0x920/0x920 [ 323.036165][ C1] __netif_receive_skb_one_core+0xa8/0x1a0 [ 323.041963][ C1] ? __netif_receive_skb_one_core+0xa8/0x1a0 [ 323.047943][ C1] ? __kasan_check_write+0x14/0x20 [ 323.053034][ C1] ? __netif_receive_skb_core+0x3060/0x3060 [ 323.058907][ C1] ? lock_acquire+0x190/0x410 [ 323.063564][ C1] ? process_backlog+0x195/0x750 [ 323.068483][ C1] __netif_receive_skb+0x2c/0x1d0 [ 323.073487][ C1] process_backlog+0x206/0x750 [ 323.078235][ C1] ? __kasan_check_read+0x11/0x20 [ 323.083260][ C1] net_rx_action+0x4d6/0x1030 [ 323.087934][ C1] ? napi_complete_done+0x4b0/0x4b0 [ 323.093124][ C1] ? sched_clock+0x2e/0x50 [ 323.097527][ C1] ? ip6_finish_output2+0x106d/0x2520 [ 323.102893][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 323.109986][ C1] __do_softirq+0x262/0x98c [ 323.114645][ C1] ? ip6_finish_output2+0x106d/0x2520 [ 323.120012][ C1] do_softirq_own_stack+0x2a/0x40 [ 323.125032][ C1] [ 323.128142][ C1] do_softirq.part.0+0x11a/0x170 [ 323.133064][ C1] __local_bh_enable_ip+0x211/0x270 [ 323.138246][ C1] ip6_finish_output2+0x10a0/0x2520 [ 323.143540][ C1] ? ip6_mtu+0x2e6/0x460 [ 323.147768][ C1] ? ip6_forward_finish+0x530/0x530 [ 323.153056][ C1] ? lock_downgrade+0x920/0x920 [ 323.157898][ C1] ? ip6_mtu+0x16f/0x460 [ 323.162128][ C1] __ip6_finish_output+0x444/0xa50 [ 323.167345][ C1] ? __ip6_finish_output+0x444/0xa50 [ 323.172611][ C1] ip6_finish_output+0x38/0x1f0 [ 323.177519][ C1] ip6_output+0x235/0x7c0 [ 323.181832][ C1] ? ip6_finish_output+0x1f0/0x1f0 [ 323.186925][ C1] ? __ip6_finish_output+0xa50/0xa50 [ 323.192241][ C1] ? ndisc_send_skb+0x803/0x1450 [ 323.197165][ C1] ndisc_send_skb+0xf29/0x1450 [ 323.201913][ C1] ? nf_hook.constprop.0+0x560/0x560 [ 323.207288][ C1] ? skb_set_owner_w+0x21b/0x320 [ 323.212213][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 323.218024][ C1] ndisc_send_ns+0x3a9/0x850 [ 323.222604][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 323.228826][ C1] ? ndisc_netdev_event+0x4e0/0x4e0 [ 323.234008][ C1] ? addrconf_dad_work+0xac4/0x1150 [ 323.239278][ C1] ? trace_hardirqs_on+0x67/0x240 [ 323.244283][ C1] ? addrconf_dad_work+0xac4/0x1150 [ 323.249490][ C1] addrconf_dad_work+0xb88/0x1150 [ 323.254594][ C1] ? addrconf_dad_completed+0xbb0/0xbb0 [ 323.260119][ C1] ? lock_acquire+0x190/0x410 [ 323.264792][ C1] ? trace_hardirqs_on+0x67/0x240 [ 323.269798][ C1] process_one_work+0x9af/0x1740 [ 323.274733][ C1] ? pwq_dec_nr_in_flight+0x320/0x320 [ 323.280438][ C1] ? lock_acquire+0x190/0x410 [ 323.285137][ C1] worker_thread+0x98/0xe40 [ 323.289633][ C1] kthread+0x361/0x430 [ 323.293697][ C1] ? process_one_work+0x1740/0x1740 [ 323.299017][ C1] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 323.305389][ C1] ret_from_fork+0x24/0x30