[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 70.225617][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 70.225631][ T26] audit: type=1800 audit(1559591532.728:33): pid=9559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 70.255663][ T26] audit: type=1800 audit(1559591532.728:34): pid=9559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [ 71.076772][ T26] audit: type=1400 audit(1559591533.578:35): avc: denied { map } for pid=9738 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.93' (ECDSA) to the list of known hosts. syzkaller login: [ 77.689230][ T26] audit: type=1400 audit(1559591540.188:36): avc: denied { map } for pid=9750 comm="syz-executor027" path="/root/syz-executor027616162" dev="sda1" ino=15969 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 77.757391][ T9757] IPVS: ftp: loaded support on port[0] = 21 [ 77.767482][ T9761] IPVS: ftp: loaded support on port[0] = 21 [ 77.770250][ T9758] IPVS: ftp: loaded support on port[0] = 21 [ 77.787274][ T9759] IPVS: ftp: loaded support on port[0] = 21 [ 77.787555][ T9760] IPVS: ftp: loaded support on port[0] = 21 [ 77.794813][ T9762] IPVS: ftp: loaded support on port[0] = 21 [ 78.007418][ T9757] chnl_net:caif_netlink_parms(): no params data found [ 78.253960][ T9759] chnl_net:caif_netlink_parms(): no params data found [ 78.273554][ T9758] chnl_net:caif_netlink_parms(): no params data found [ 78.284584][ T9757] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.295063][ T9757] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.307151][ T9757] device bridge_slave_0 entered promiscuous mode [ 78.317043][ T9760] chnl_net:caif_netlink_parms(): no params data found [ 78.333991][ T9762] chnl_net:caif_netlink_parms(): no params data found [ 78.369512][ T9757] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.376754][ T9757] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.385000][ T9757] device bridge_slave_1 entered promiscuous mode [ 78.392554][ T9761] chnl_net:caif_netlink_parms(): no params data found [ 78.450226][ T9758] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.458074][ T9758] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.466443][ T9758] device bridge_slave_0 entered promiscuous mode [ 78.480264][ T9758] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.487448][ T9758] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.495339][ T9758] device bridge_slave_1 entered promiscuous mode [ 78.531647][ T9760] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.539018][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.547304][ T9760] device bridge_slave_0 entered promiscuous mode [ 78.556650][ T9757] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.568008][ T9757] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.599175][ T9760] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.607488][ T9760] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.615520][ T9760] device bridge_slave_1 entered promiscuous mode [ 78.631111][ T9758] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.646979][ T9759] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.654195][ T9759] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.661905][ T9759] device bridge_slave_0 entered promiscuous mode [ 78.691256][ T9758] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.705903][ T9759] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.713385][ T9759] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.721125][ T9759] device bridge_slave_1 entered promiscuous mode [ 78.728529][ T9762] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.736200][ T9762] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.744075][ T9762] device bridge_slave_0 entered promiscuous mode [ 78.757535][ T9762] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.764800][ T9762] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.772779][ T9762] device bridge_slave_1 entered promiscuous mode [ 78.782019][ T9757] team0: Port device team_slave_0 added [ 78.801759][ T9761] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.809162][ T9761] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.817091][ T9761] device bridge_slave_0 entered promiscuous mode [ 78.832187][ T9760] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.849683][ T9760] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.859991][ T9757] team0: Port device team_slave_1 added [ 78.873603][ T9761] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.880736][ T9761] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.888848][ T9761] device bridge_slave_1 entered promiscuous mode [ 78.926294][ T9762] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.936585][ T9758] team0: Port device team_slave_0 added [ 78.945406][ T9758] team0: Port device team_slave_1 added [ 78.952988][ T9759] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.970086][ T9761] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.988248][ T9762] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.006238][ T9759] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.020883][ T9761] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.031012][ T9760] team0: Port device team_slave_0 added [ 79.114342][ T9757] device hsr_slave_0 entered promiscuous mode [ 79.152877][ T9757] device hsr_slave_1 entered promiscuous mode [ 79.210891][ T9760] team0: Port device team_slave_1 added [ 79.237032][ T9762] team0: Port device team_slave_0 added [ 79.244798][ T9759] team0: Port device team_slave_0 added [ 79.252189][ T9759] team0: Port device team_slave_1 added [ 79.325441][ T9758] device hsr_slave_0 entered promiscuous mode [ 79.392725][ T9758] device hsr_slave_1 entered promiscuous mode [ 79.460470][ T9762] team0: Port device team_slave_1 added [ 79.489985][ T9761] team0: Port device team_slave_0 added [ 79.544491][ T9760] device hsr_slave_0 entered promiscuous mode [ 79.582731][ T9760] device hsr_slave_1 entered promiscuous mode [ 79.664244][ T9759] device hsr_slave_0 entered promiscuous mode [ 79.712791][ T9759] device hsr_slave_1 entered promiscuous mode [ 79.754792][ T9761] team0: Port device team_slave_1 added [ 79.836764][ T9762] device hsr_slave_0 entered promiscuous mode [ 79.882694][ T9762] device hsr_slave_1 entered promiscuous mode [ 80.016259][ T9761] device hsr_slave_0 entered promiscuous mode [ 80.072872][ T9761] device hsr_slave_1 entered promiscuous mode [ 80.276053][ T9760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.313677][ T9759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.327375][ T9758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.341226][ T9760] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.358998][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.368877][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.389969][ T9762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.400860][ T9757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.414343][ T9758] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.422810][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.431568][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.441478][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.448711][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.457282][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.465665][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.478624][ T9759] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.502806][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.510807][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.520933][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.529311][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.538867][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.547549][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.554654][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.563161][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.571666][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.580161][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.587242][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.595156][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.603728][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.611988][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.619137][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.626706][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.637917][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.678381][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.687875][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.697471][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.706375][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.715627][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.724220][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.732926][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.741410][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.750240][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.758995][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.767749][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.776674][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.783796][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.791299][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.800072][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.808483][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.815590][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.824411][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.833129][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.841602][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.849526][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.857400][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.865888][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.873844][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.887183][ T9757] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.905424][ T9762] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.917293][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.927452][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.936258][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.945121][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.953916][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.976462][ T9759] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.987127][ T9759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.010678][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.020617][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.029155][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.038171][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.047410][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.055766][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.064136][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.072793][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.080981][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.090058][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.098660][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.105762][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.113874][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.122529][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.130830][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.137941][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.145920][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.155679][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.163810][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.175893][ T9761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.201649][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.231087][ T9758] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.246826][ T9758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.260214][ T9759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.272096][ T9760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.290226][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.299712][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.311328][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.320253][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.328858][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.337302][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.346025][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.354581][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.365806][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.372926][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.380545][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.389118][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.397568][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.406386][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.415299][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.425271][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.433383][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.468269][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.479335][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.488535][ T9769] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.495667][ T9769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.504444][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.519179][ T9761] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.541516][ T9758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.553333][ T26] audit: type=1400 audit(1559591544.048:37): avc: denied { associate } for pid=9759 comm="syz-executor027" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 81.564466][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.608997][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.617124][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.631407][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.640602][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.651604][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.660596][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.669225][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.678123][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.700942][ T9762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network executing program [ 81.712183][ T9762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.735091][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.743382][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.753241][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.761870][ T17] bridge0: port 1(bridge_slave_0) entered blocking state executing program executing program [ 81.769064][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.783898][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.792925][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.801264][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.810120][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready executing program executing program executing program [ 81.818758][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.828419][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.836953][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.845766][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.855143][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.862288][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state executing program [ 81.872066][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.880622][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.888859][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.897806][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready executing program executing program [ 81.917084][ T9760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.935326][ T9757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready executing program executing program executing program [ 81.974976][ T9762] 8021q: adding VLAN 0 to HW filter on device batadv0 executing program executing program executing program [ 82.054455][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.064380][ T9794] ------------[ cut here ]------------ [ 82.071439][ T9794] ODEBUG: free active (active state 0) object type: work_struct hint: smc_tx_work+0x0/0x1d0 [ 82.081810][ T9794] WARNING: CPU: 1 PID: 9794 at lib/debugobjects.c:325 debug_print_object+0x168/0x250 [ 82.091273][ T9794] Kernel panic - not syncing: panic_on_warn set ... executing program executing program executing program executing program executing program [ 82.097876][ T9794] CPU: 1 PID: 9794 Comm: syz-executor027 Not tainted 5.2.0-rc3 #11 [ 82.105770][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.115845][ T9794] Call Trace: [ 82.119163][ T9794] dump_stack+0x172/0x1f0 [ 82.123511][ T9794] ? debug_print_object+0x150/0x250 [ 82.128732][ T9794] panic+0x2cb/0x744 [ 82.132655][ T9794] ? __warn_printk+0xf3/0xf3 [ 82.137278][ T9794] ? debug_print_object+0x168/0x250 [ 82.142486][ T9794] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.148731][ T9794] ? __warn.cold+0x5/0x4d executing program executing program executing program executing program executing program [ 82.153254][ T9794] ? __warn+0xe8/0x1d0 [ 82.157337][ T9794] ? debug_print_object+0x168/0x250 [ 82.162545][ T9794] __warn.cold+0x20/0x4d [ 82.166902][ T9794] ? vprintk_emit+0x1ea/0x700 [ 82.171594][ T9794] ? debug_print_object+0x168/0x250 [ 82.176818][ T9794] report_bug+0x263/0x2b0 [ 82.181170][ T9794] do_error_trap+0x11b/0x200 [ 82.185783][ T9794] do_invalid_op+0x37/0x50 [ 82.190234][ T9794] ? debug_print_object+0x168/0x250 [ 82.195458][ T9794] invalid_op+0x14/0x20 executing program executing program executing program executing program [ 82.199632][ T9794] RIP: 0010:debug_print_object+0x168/0x250 [ 82.205450][ T9794] Code: dd 60 c7 a4 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 60 c7 a4 87 48 c7 c7 00 bd a4 87 e8 f6 8f 0d fe <0f> 0b 83 05 2b 61 4b 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 [ 82.225064][ T9794] RSP: 0018:ffff88807e097bb0 EFLAGS: 00010086 [ 82.231150][ T9794] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 82.239145][ T9794] RDX: 0000000000000000 RSI: ffffffff815ac936 RDI: ffffed100fc12f68 [ 82.247142][ T9794] RBP: ffff88807e097bf0 R08: ffff888092a3a5c0 R09: ffffed1015d240f1 executing program executing program executing program executing program executing program [ 82.255146][ T9794] R10: ffffed1015d240f0 R11: ffff8880ae920787 R12: 0000000000000001 [ 82.263164][ T9794] R13: ffffffff88b71500 R14: ffffffff81497000 R15: ffff88808ceb37d8 [ 82.271164][ T9794] ? __exit_umh+0x2e0/0x2e0 [ 82.275688][ T9794] ? vprintk_func+0x86/0x189 [ 82.280295][ T9794] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 82.286168][ T9794] debug_check_no_obj_freed+0x29f/0x464 executing program executing program executing program executing program [ 82.301156][ T9794] kmem_cache_free+0x18f/0x260 [ 82.305949][ T9794] __sk_destruct+0x4bc/0x6e0 [ 82.312163][ T9794] sk_destruct+0x7b/0x90 [ 82.316424][ T9794] __sk_free+0xce/0x300 [ 82.320601][ T9794] sk_free+0x42/0x50 [ 82.324511][ T9794] smc_release+0x5a7/0x7b0 [ 82.328955][ T9794] __sock_release+0xce/0x2a0 [ 82.333578][ T9794] sock_close+0x1b/0x30 [ 82.337756][ T9794] __fput+0x2ff/0x890 [ 82.341756][ T9794] ? __sock_release+0x2a0/0x2a0 [ 82.346645][ T9794] ____fput+0x16/0x20 [ 82.350656][ T9794] task_work_run+0x145/0x1c0 executing program executing program executing program executing program [ 82.355271][ T9794] exit_to_usermode_loop+0x273/0x2c0 [ 82.360581][ T9794] do_syscall_64+0x58e/0x680 [ 82.365210][ T9794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 82.371125][ T9794] RIP: 0033:0x402720 [ 82.375036][ T9794] Code: 01 f0 ff ff 0f 83 40 0d 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 0d 94 2d 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 14 0d 00 00 c3 48 83 ec 08 e8 7a 02 00 00 [ 82.394652][ T9794] RSP: 002b:00007fffcddc6d38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 executing program executing program [ 82.403082][ T9794] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000402720 [ 82.411180][ T9794] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000000000000003 [ 82.419259][ T9794] RBP: 0000000000000000 R08: 0000000000000038 R09: 00000000004aa1df [ 82.427255][ T9794] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 82.435258][ T9794] R13: 0000000000403950 R14: 0000000000000000 R15: 0000000000000000 [ 82.443265][ T9794] [ 82.443271][ T9794] ====================================================== [ 82.443276][ T9794] WARNING: possible circular locking dependency detected [ 82.443280][ T9794] 5.2.0-rc3 #11 Not tainted [ 82.443285][ T9794] ------------------------------------------------------ [ 82.443290][ T9794] syz-executor027/9794 is trying to acquire lock: [ 82.443294][ T9794] 000000007a4e30be ((console_sem).lock){-.-.}, at: down_trylock+0x13/0x70 [ 82.443308][ T9794] [ 82.443312][ T9794] but task is already holding lock: [ 82.443316][ T9794] 00000000a17270ae (&obj_hash[i].lock){-.-.}, at: debug_check_no_obj_freed+0xbe/0x464 [ 82.443331][ T9794] [ 82.443335][ T9794] which lock already depends on the new lock. [ 82.443337][ T9794] [ 82.443340][ T9794] [ 82.443345][ T9794] the existing dependency chain (in reverse order) is: [ 82.443347][ T9794] [ 82.443350][ T9794] -> #3 (&obj_hash[i].lock){-.-.}: [ 82.443365][ T9794] _raw_spin_lock_irqsave+0x95/0xcd [ 82.443369][ T9794] __debug_object_init+0xc6/0xc30 [ 82.443372][ T9794] debug_object_init+0x16/0x20 [ 82.443377][ T9794] hrtimer_init+0x2a/0x300 [ 82.443381][ T9794] init_dl_task_timer+0x1b/0x50 [ 82.443385][ T9794] __sched_fork+0x22a/0x4f0 [ 82.443389][ T9794] init_idle+0x75/0x670 [ 82.443393][ T9794] sched_init+0x952/0x9f5 [ 82.443397][ T9794] start_kernel+0x393/0x893 [ 82.443402][ T9794] x86_64_start_reservations+0x29/0x2b [ 82.443406][ T9794] x86_64_start_kernel+0x77/0x7b [ 82.443410][ T9794] secondary_startup_64+0xa4/0xb0 [ 82.443412][ T9794] [ 82.443414][ T9794] -> #2 (&rq->lock){-.-.}: [ 82.443427][ T9794] _raw_spin_lock+0x2f/0x40 [ 82.443431][ T9794] task_fork_fair+0x6a/0x520 [ 82.443435][ T9794] sched_fork+0x3af/0x900 [ 82.443438][ T9794] copy_process.part.0+0x1a25/0x6790 [ 82.443442][ T9794] _do_fork+0x25d/0xfe0 [ 82.443445][ T9794] kernel_thread+0x34/0x40 [ 82.443449][ T9794] rest_init+0x28/0x37b [ 82.443453][ T9794] arch_call_rest_init+0xe/0x1b [ 82.443457][ T9794] start_kernel+0x854/0x893 [ 82.443461][ T9794] x86_64_start_reservations+0x29/0x2b [ 82.443465][ T9794] x86_64_start_kernel+0x77/0x7b [ 82.443470][ T9794] secondary_startup_64+0xa4/0xb0 [ 82.443472][ T9794] [ 82.443474][ T9794] -> #1 (&p->pi_lock){-.-.}: [ 82.443489][ T9794] _raw_spin_lock_irqsave+0x95/0xcd [ 82.443493][ T9794] try_to_wake_up+0x90/0x13f0 [ 82.443497][ T9794] wake_up_process+0x10/0x20 [ 82.443501][ T9794] __up.isra.0+0x136/0x1a0 [ 82.443504][ T9794] up+0x9c/0xe0 [ 82.443509][ T9794] __up_console_sem+0xb7/0x1c0 [ 82.443513][ T9794] console_unlock+0x663/0xec0 [ 82.443517][ T9794] vprintk_emit+0x2a0/0x700 [ 82.443521][ T9794] vprintk_default+0x28/0x30 [ 82.443525][ T9794] vprintk_func+0x7e/0x189 [ 82.443528][ T9794] printk+0xba/0xed [ 82.443533][ T9794] kauditd_hold_skb.cold+0x3f/0x4e [ 82.443537][ T9794] kauditd_send_queue+0x12b/0x170 [ 82.443542][ T9794] kauditd_thread+0x7b5/0xb00 [ 82.443545][ T9794] kthread+0x354/0x420 [ 82.443549][ T9794] ret_from_fork+0x24/0x30 [ 82.443552][ T9794] [ 82.443555][ T9794] -> #0 ((console_sem).lock){-.-.}: [ 82.443570][ T9794] lock_acquire+0x16f/0x3f0 [ 82.443575][ T9794] _raw_spin_lock_irqsave+0x95/0xcd [ 82.443579][ T9794] down_trylock+0x13/0x70 [ 82.443583][ T9794] __down_trylock_console_sem+0xa8/0x210 [ 82.443588][ T9794] console_trylock+0x15/0xa0 [ 82.443592][ T9794] vprintk_emit+0x283/0x700 [ 82.443596][ T9794] vprintk_default+0x28/0x30 [ 82.443600][ T9794] vprintk_func+0x7e/0x189 [ 82.443604][ T9794] printk+0xba/0xed [ 82.443608][ T9794] __warn_printk+0x9b/0xf3 [ 82.443612][ T9794] debug_print_object+0x168/0x250 [ 82.443616][ T9794] debug_check_no_obj_freed+0x29f/0x464 [ 82.443621][ T9794] kmem_cache_free+0x18f/0x260 [ 82.443625][ T9794] __sk_destruct+0x4bc/0x6e0 [ 82.443629][ T9794] sk_destruct+0x7b/0x90 [ 82.443633][ T9794] __sk_free+0xce/0x300 [ 82.443637][ T9794] sk_free+0x42/0x50 [ 82.443641][ T9794] smc_release+0x5a7/0x7b0 [ 82.443646][ T9794] __sock_release+0xce/0x2a0 [ 82.443650][ T9794] sock_close+0x1b/0x30 [ 82.443654][ T9794] __fput+0x2ff/0x890 [ 82.443658][ T9794] ____fput+0x16/0x20 [ 82.443662][ T9794] task_work_run+0x145/0x1c0 [ 82.443667][ T9794] exit_to_usermode_loop+0x273/0x2c0 [ 82.443671][ T9794] do_syscall_64+0x58e/0x680 [ 82.443676][ T9794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 82.443679][ T9794] [ 82.443684][ T9794] other info that might help us debug this: [ 82.443686][ T9794] [ 82.443690][ T9794] Chain exists of: [ 82.443692][ T9794] (console_sem).lock --> &rq->lock --> &obj_hash[i].lock [ 82.443712][ T9794] [ 82.443717][ T9794] Possible unsafe locking scenario: [ 82.443719][ T9794] [ 82.443724][ T9794] CPU0 CPU1 [ 82.443728][ T9794] ---- ---- [ 82.443731][ T9794] lock(&obj_hash[i].lock); [ 82.443741][ T9794] lock(&rq->lock); [ 82.443751][ T9794] lock(&obj_hash[i].lock); [ 82.443760][ T9794] lock((console_sem).lock); [ 82.443769][ T9794] [ 82.443773][ T9794] *** DEADLOCK *** [ 82.443775][ T9794] [ 82.443780][ T9794] 2 locks held by syz-executor027/9794: [ 82.443782][ T9794] #0: 00000000711396b9 (&sb->s_type->i_mutex_key#11){+.+.}, at: __sock_release+0x89/0x2a0 [ 82.443803][ T9794] #1: 00000000a17270ae (&obj_hash[i].lock){-.-.}, at: debug_check_no_obj_freed+0xbe/0x464 [ 82.443821][ T9794] [ 82.443825][ T9794] stack backtrace: [ 82.443831][ T9794] CPU: 1 PID: 9794 Comm: syz-executor027 Not tainted 5.2.0-rc3 #11 [ 82.443838][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.443841][ T9794] Call Trace: [ 82.443845][ T9794] dump_stack+0x172/0x1f0 [ 82.443849][ T9794] print_circular_bug.cold+0x1cc/0x28f [ 82.443854][ T9794] __lock_acquire+0x3755/0x5490 [ 82.443858][ T9794] ? mark_held_locks+0xf0/0xf0 [ 82.443862][ T9794] ? kvm_clock_read+0x18/0x30 [ 82.443866][ T9794] ? kvm_sched_clock_read+0x9/0x20 [ 82.443870][ T9794] lock_acquire+0x16f/0x3f0 [ 82.443874][ T9794] ? down_trylock+0x13/0x70 [ 82.443878][ T9794] _raw_spin_lock_irqsave+0x95/0xcd [ 82.443882][ T9794] ? down_trylock+0x13/0x70 [ 82.443886][ T9794] ? vprintk_emit+0x283/0x700 [ 82.443889][ T9794] down_trylock+0x13/0x70 [ 82.443894][ T9794] ? vprintk_emit+0x283/0x700 [ 82.443898][ T9794] __down_trylock_console_sem+0xa8/0x210 [ 82.443902][ T9794] console_trylock+0x15/0xa0 [ 82.443906][ T9794] vprintk_emit+0x283/0x700 [ 82.443910][ T9794] ? __exit_umh+0x2e0/0x2e0 [ 82.443913][ T9794] vprintk_default+0x28/0x30 [ 82.443917][ T9794] vprintk_func+0x7e/0x189 [ 82.443921][ T9794] printk+0xba/0xed [ 82.443925][ T9794] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 82.443929][ T9794] ? mark_held_locks+0xf0/0xf0 [ 82.443933][ T9794] ? ____fput+0x16/0x20 [ 82.443937][ T9794] ? task_work_run+0x145/0x1c0 [ 82.443940][ T9794] ? exit_to_usermode_loop+0x273/0x2c0 [ 82.443944][ T9794] ? do_syscall_64+0x58e/0x680 [ 82.443948][ T9794] ? __warn_printk+0x8f/0xf3 [ 82.443953][ T9794] ? smc_tx_sendmsg+0x1820/0x1820 [ 82.443956][ T9794] __warn_printk+0x9b/0xf3 [ 82.443960][ T9794] ? add_taint.cold+0x16/0x16 [ 82.443964][ T9794] ? kasan_check_write+0x14/0x20 [ 82.443968][ T9794] ? lock_downgrade+0x880/0x880 [ 82.443972][ T9794] ? smc_tx_sendmsg+0x1820/0x1820 [ 82.443976][ T9794] debug_print_object+0x168/0x250 [ 82.443981][ T9794] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 82.443986][ T9794] debug_check_no_obj_freed+0x29f/0x464 [ 82.443990][ T9794] kmem_cache_free+0x18f/0x260 [ 82.443994][ T9794] __sk_destruct+0x4bc/0x6e0 [ 82.443997][ T9794] sk_destruct+0x7b/0x90 [ 82.444001][ T9794] __sk_free+0xce/0x300 [ 82.444004][ T9794] sk_free+0x42/0x50 [ 82.444007][ T9794] smc_release+0x5a7/0x7b0 [ 82.444011][ T9794] __sock_release+0xce/0x2a0 [ 82.444015][ T9794] sock_close+0x1b/0x30 [ 82.444018][ T9794] __fput+0x2ff/0x890 [ 82.444022][ T9794] ? __sock_release+0x2a0/0x2a0 [ 82.444025][ T9794] ____fput+0x16/0x20 [ 82.444029][ T9794] task_work_run+0x145/0x1c0 [ 82.444034][ T9794] exit_to_usermode_loop+0x273/0x2c0 [ 82.444037][ T9794] do_syscall_64+0x58e/0x680 [ 82.444042][ T9794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 82.444046][ T9794] RIP: 0033:0x402720 [ 82.444059][ T9794] Code: 01 f0 ff ff 0f 83 40 0d 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 0d 94 2d 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 14 0d 00 00 c3 48 83 ec 08 e8 7a 02 00 00 [ 82.444063][ T9794] RSP: 002b:00007fffcddc6d38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 82.444074][ T9794] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000402720 [ 82.444080][ T9794] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000000000000003 [ 82.444086][ T9794] RBP: 0000000000000000 R08: 0000000000000038 R09: 00000000004aa1df [ 82.444092][ T9794] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 82.444098][ T9794] R13: 0000000000403950 R14: 0000000000000000 R15: 0000000000000000 [ 82.445240][ T9794] Kernel Offset: disabled [ 83.345966][ T9794] Rebooting in 86400 seconds..