[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 61.905606][ T26] audit: type=1800 audit(1559585316.306:25): pid=8684 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 61.930867][ T26] audit: type=1800 audit(1559585316.336:26): pid=8684 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 61.965618][ T26] audit: type=1800 audit(1559585316.336:27): pid=8684 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.5' (ECDSA) to the list of known hosts. syzkaller login: [ 71.333195][ T8846] IPVS: ftp: loaded support on port[0] = 21 [ 71.349013][ T8845] IPVS: ftp: loaded support on port[0] = 21 [ 71.368093][ T8847] IPVS: ftp: loaded support on port[0] = 21 [ 71.370547][ T8849] IPVS: ftp: loaded support on port[0] = 21 [ 71.384985][ T8848] IPVS: ftp: loaded support on port[0] = 21 [ 71.397084][ T8850] IPVS: ftp: loaded support on port[0] = 21 [ 71.632035][ T8849] chnl_net:caif_netlink_parms(): no params data found [ 71.758839][ T8846] chnl_net:caif_netlink_parms(): no params data found [ 71.820859][ T8849] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.828748][ T8849] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.836999][ T8849] device bridge_slave_0 entered promiscuous mode [ 71.844858][ T8845] chnl_net:caif_netlink_parms(): no params data found [ 71.864166][ T8850] chnl_net:caif_netlink_parms(): no params data found [ 71.884066][ T8849] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.891322][ T8849] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.899171][ T8849] device bridge_slave_1 entered promiscuous mode [ 71.957030][ T8848] chnl_net:caif_netlink_parms(): no params data found [ 71.969238][ T8849] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 71.977701][ T8847] chnl_net:caif_netlink_parms(): no params data found [ 71.986943][ T8846] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.994015][ T8846] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.002605][ T8846] device bridge_slave_0 entered promiscuous mode [ 72.028913][ T8849] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.047765][ T8846] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.054857][ T8846] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.062840][ T8846] device bridge_slave_1 entered promiscuous mode [ 72.110162][ T8850] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.118059][ T8850] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.126570][ T8850] device bridge_slave_0 entered promiscuous mode [ 72.162113][ T8849] team0: Port device team_slave_0 added [ 72.173287][ T8850] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.181131][ T8850] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.189257][ T8850] device bridge_slave_1 entered promiscuous mode [ 72.228158][ T8849] team0: Port device team_slave_1 added [ 72.236831][ T8850] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.246875][ T8846] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.255326][ T8845] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.262886][ T8845] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.270757][ T8845] device bridge_slave_0 entered promiscuous mode [ 72.278271][ T8847] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.285348][ T8847] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.295054][ T8847] device bridge_slave_0 entered promiscuous mode [ 72.302768][ T8848] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.310779][ T8848] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.318611][ T8848] device bridge_slave_0 entered promiscuous mode [ 72.333426][ T8848] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.340944][ T8848] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.349287][ T8848] device bridge_slave_1 entered promiscuous mode [ 72.358799][ T8850] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.375719][ T8846] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.389775][ T8845] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.397017][ T8845] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.404685][ T8845] device bridge_slave_1 entered promiscuous mode [ 72.411938][ T8847] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.419456][ T8847] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.427891][ T8847] device bridge_slave_1 entered promiscuous mode [ 72.469188][ T8846] team0: Port device team_slave_0 added [ 72.537775][ T8849] device hsr_slave_0 entered promiscuous mode [ 72.575873][ T8849] device hsr_slave_1 entered promiscuous mode [ 72.617219][ T8850] team0: Port device team_slave_0 added [ 72.625010][ T8848] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.634869][ T8846] team0: Port device team_slave_1 added [ 72.650126][ T8845] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.660910][ T8850] team0: Port device team_slave_1 added [ 72.699620][ T8848] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.722732][ T8847] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.732822][ T8845] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.798734][ T8850] device hsr_slave_0 entered promiscuous mode [ 72.865841][ T8850] device hsr_slave_1 entered promiscuous mode [ 72.931685][ T8848] team0: Port device team_slave_0 added [ 72.944614][ T8848] team0: Port device team_slave_1 added [ 72.952054][ T8847] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.018642][ T8846] device hsr_slave_0 entered promiscuous mode [ 73.055969][ T8846] device hsr_slave_1 entered promiscuous mode [ 73.097612][ T8845] team0: Port device team_slave_0 added [ 73.110105][ T8847] team0: Port device team_slave_0 added [ 73.120050][ T8847] team0: Port device team_slave_1 added [ 73.148219][ T8845] team0: Port device team_slave_1 added [ 73.218718][ T8847] device hsr_slave_0 entered promiscuous mode [ 73.265811][ T8847] device hsr_slave_1 entered promiscuous mode [ 73.367487][ T8848] device hsr_slave_0 entered promiscuous mode [ 73.416041][ T8848] device hsr_slave_1 entered promiscuous mode [ 73.568020][ T8845] device hsr_slave_0 entered promiscuous mode [ 73.616032][ T8845] device hsr_slave_1 entered promiscuous mode [ 73.763930][ T8849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.802536][ T8847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.810616][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.821257][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.833303][ T8849] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.853397][ T8850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.866845][ T8846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.887686][ T8847] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.909281][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.917398][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.925089][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.933936][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.942468][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.949654][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.959245][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.966978][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.006181][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.014143][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.023134][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.033191][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.040303][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.048845][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.057534][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.065956][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.073004][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.080747][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.089760][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.098434][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.107727][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.114781][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.122656][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.131436][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.156735][ T8845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.166468][ T8850] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.180904][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.188961][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.198229][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.206037][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.214483][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.223506][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.232503][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.242365][ T8846] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.257063][ T8848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.279104][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.288478][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.297484][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.304545][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.312209][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.320788][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.329460][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.337178][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.344700][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.353270][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.361578][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.370237][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.378713][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.385818][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.431493][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.439877][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.449124][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.457747][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.467432][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.475808][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.484209][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.492791][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.501085][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.508947][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.516876][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.525156][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.533666][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.542619][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.551087][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.558254][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.566154][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.574652][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.583316][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.591770][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.600337][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.609194][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.618926][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.627205][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.635077][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.643571][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.653962][ T8848] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.662720][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.673337][ T8845] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.699981][ T8850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.710768][ T8850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.730349][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.739617][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.747998][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.756994][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.765061][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.773775][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.782178][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.789457][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.797454][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.806352][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.814655][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.821760][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.829332][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.838408][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.846613][ T3488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.865393][ T8849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.896289][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.912364][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.920921][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.929730][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.939192][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.947649][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.954705][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.962373][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.970849][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.979264][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.986363][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.995004][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.003077][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.022358][ T8850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.059361][ T3129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.069094][ T3129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.084978][ T3129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.095652][ T3129] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.102732][ T3129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.110641][ T3129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.119423][ T3129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.128091][ T3129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.136536][ T3129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.144617][ T3129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.153289][ T3129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.162025][ T3129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.170747][ T3129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.179349][ T3129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.189113][ T3129] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready executing program [ 75.207269][ T8847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.214894][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.223573][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.244674][ T8848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.265684][ T3129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.274415][ T3129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.289579][ T8867] ------------[ cut here ]------------ [ 75.296948][ T8867] ODEBUG: free active (active state 0) object type: work_struct hint: smc_tx_work+0x0/0x1d0 [ 75.307349][ T8867] WARNING: CPU: 0 PID: 8867 at lib/debugobjects.c:325 debug_print_object+0x168/0x250 [ 75.316799][ T8867] Kernel panic - not syncing: panic_on_warn set ... [ 75.323383][ T8867] CPU: 0 PID: 8867 Comm: syz-executor515 Not tainted 5.2.0-rc2+ #38 [ 75.331345][ T8867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.341392][ T8867] Call Trace: [ 75.344706][ T8867] dump_stack+0x172/0x1f0 [ 75.349043][ T8867] ? debug_print_object+0x80/0x250 [ 75.354157][ T8867] panic+0x2cb/0x744 [ 75.358050][ T8867] ? __warn_printk+0xf3/0xf3 [ 75.362661][ T8867] ? debug_print_object+0x168/0x250 [ 75.367856][ T8867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 75.374093][ T8867] ? __warn.cold+0x5/0x4d [ 75.378413][ T8867] ? __warn+0xe8/0x1d0 [ 75.382479][ T8867] ? debug_print_object+0x168/0x250 [ 75.387673][ T8867] __warn.cold+0x20/0x4d [ 75.391918][ T8867] ? vprintk_emit+0x1ea/0x700 [ 75.396589][ T8867] ? debug_print_object+0x168/0x250 [ 75.401780][ T8867] report_bug+0x263/0x2b0 [ 75.406129][ T8867] do_error_trap+0x11b/0x200 [ 75.410714][ T8867] do_invalid_op+0x37/0x50 [ 75.415125][ T8867] ? debug_print_object+0x168/0x250 [ 75.420324][ T8867] invalid_op+0x14/0x20 [ 75.424482][ T8867] RIP: 0010:debug_print_object+0x168/0x250 [ 75.430281][ T8867] Code: dd 00 c6 a4 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 00 c6 a4 87 48 c7 c7 a0 bb a4 87 e8 06 90 0d fe <0f> 0b 83 05 5b 5f 4b 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 [ 75.449906][ T8867] RSP: 0018:ffff888084727bb0 EFLAGS: 00010086 [ 75.455968][ T8867] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 75.463950][ T8867] RDX: 0000000000000000 RSI: ffffffff815ac7e6 RDI: ffffed10108e4f68 [ 75.471911][ T8867] RBP: ffff888084727bf0 R08: ffff888099770200 R09: ffffed1015d040f1 [ 75.479879][ T8867] R10: ffffed1015d040f0 R11: ffff8880ae820787 R12: 0000000000000001 [ 75.488307][ T8867] R13: ffffffff88b714c0 R14: ffffffff81496ec0 R15: ffff888098f1d798 [ 75.496285][ T8867] ? __exit_umh+0x2e0/0x2e0 [ 75.500791][ T8867] ? vprintk_func+0x86/0x189 [ 75.505389][ T8867] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 75.511197][ T8867] debug_check_no_obj_freed+0x29f/0x464 [ 75.516747][ T8867] kmem_cache_free+0x18f/0x260 [ 75.521513][ T8867] __sk_destruct+0x4bc/0x6e0 [ 75.526107][ T8867] sk_destruct+0x7b/0x90 [ 75.530347][ T8867] __sk_free+0xce/0x300 [ 75.534528][ T8867] sk_free+0x42/0x50 [ 75.538423][ T8867] smc_release+0x5a7/0x7b0 [ 75.542835][ T8867] __sock_release+0xce/0x2a0 [ 75.547427][ T8867] sock_close+0x1b/0x30 [ 75.551579][ T8867] __fput+0x2ff/0x890 [ 75.555560][ T8867] ? __sock_release+0x2a0/0x2a0 [ 75.560414][ T8867] ____fput+0x16/0x20 [ 75.564387][ T8867] task_work_run+0x145/0x1c0 [ 75.568975][ T8867] exit_to_usermode_loop+0x273/0x2c0 [ 75.574262][ T8867] do_syscall_64+0x58e/0x680 [ 75.578870][ T8867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 75.584760][ T8867] RIP: 0033:0x4026f0 [ 75.588671][ T8867] Code: 01 f0 ff ff 0f 83 c0 0f 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 3d 94 2d 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 94 0f 00 00 c3 48 83 ec 08 e8 fa 04 00 00 [ 75.608289][ T8867] RSP: 002b:00007ffe8e8cf708 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 75.616745][ T8867] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004026f0 [ 75.624716][ T8867] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000000000000003 [ 75.632687][ T8867] RBP: 0000000000000000 R08: 0000000000000038 R09: 0000000000000004 [ 75.640657][ T8867] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 75.648624][ T8867] R13: 0000000000403ba0 R14: 0000000000000000 R15: 0000000000000000 [ 75.656605][ T8867] [ 75.656612][ T8867] ====================================================== [ 75.656618][ T8867] WARNING: possible circular locking dependency detected [ 75.656622][ T8867] 5.2.0-rc2+ #38 Not tainted [ 75.656628][ T8867] ------------------------------------------------------ [ 75.656634][ T8867] syz-executor515/8867 is trying to acquire lock: [ 75.656638][ T8867] 0000000072a86abe ((console_sem).lock){-.-.}, at: down_trylock+0x13/0x70 [ 75.656653][ T8867] [ 75.656658][ T8867] but task is already holding lock: [ 75.656662][ T8867] 0000000006284f80 (&obj_hash[i].lock){-.-.}, at: debug_check_no_obj_freed+0xbe/0x464 [ 75.656678][ T8867] [ 75.656683][ T8867] which lock already depends on the new lock. [ 75.656685][ T8867] [ 75.656688][ T8867] [ 75.656694][ T8867] the existing dependency chain (in reverse order) is: [ 75.656696][ T8867] [ 75.656699][ T8867] -> #3 (&obj_hash[i].lock){-.-.}: [ 75.656715][ T8867] _raw_spin_lock_irqsave+0x95/0xcd [ 75.656719][ T8867] __debug_object_init+0xc6/0xc30 [ 75.656724][ T8867] debug_object_init+0x16/0x20 [ 75.656728][ T8867] hrtimer_init+0x2a/0x300 [ 75.656733][ T8867] init_dl_task_timer+0x1b/0x50 [ 75.656737][ T8867] __sched_fork+0x22a/0x4f0 [ 75.656741][ T8867] init_idle+0x75/0x670 [ 75.656745][ T8867] sched_init+0x952/0x9f5 [ 75.656750][ T8867] start_kernel+0x393/0x893 [ 75.656754][ T8867] x86_64_start_reservations+0x29/0x2b [ 75.656759][ T8867] x86_64_start_kernel+0x77/0x7b [ 75.656764][ T8867] secondary_startup_64+0xa4/0xb0 [ 75.656766][ T8867] [ 75.656769][ T8867] -> #2 (&rq->lock){-.-.}: [ 75.656783][ T8867] _raw_spin_lock+0x2f/0x40 [ 75.656788][ T8867] task_fork_fair+0x6a/0x520 [ 75.656792][ T8867] sched_fork+0x3af/0x900 [ 75.656797][ T8867] copy_process.part.0+0x1a25/0x6790 [ 75.656801][ T8867] _do_fork+0x25d/0xfe0 [ 75.656805][ T8867] kernel_thread+0x34/0x40 [ 75.656809][ T8867] rest_init+0x28/0x37b [ 75.656814][ T8867] arch_call_rest_init+0xe/0x1b [ 75.656818][ T8867] start_kernel+0x854/0x893 [ 75.656823][ T8867] x86_64_start_reservations+0x29/0x2b [ 75.656827][ T8867] x86_64_start_kernel+0x77/0x7b [ 75.656832][ T8867] secondary_startup_64+0xa4/0xb0 [ 75.656834][ T8867] [ 75.656837][ T8867] -> #1 (&p->pi_lock){-.-.}: [ 75.656852][ T8867] _raw_spin_lock_irqsave+0x95/0xcd [ 75.656857][ T8867] try_to_wake_up+0x90/0x13f0 [ 75.656861][ T8867] wake_up_process+0x10/0x20 [ 75.656865][ T8867] __up.isra.0+0x136/0x1a0 [ 75.656869][ T8867] up+0x9c/0xe0 [ 75.656873][ T8867] __up_console_sem+0xb7/0x1c0 [ 75.656878][ T8867] console_unlock+0x663/0xec0 [ 75.656882][ T8867] vprintk_emit+0x2a0/0x700 [ 75.656886][ T8867] vprintk_default+0x28/0x30 [ 75.656890][ T8867] vprintk_func+0x7e/0x189 [ 75.656894][ T8867] printk+0xba/0xed [ 75.656899][ T8867] kobject_uevent_env+0xe2/0x101d [ 75.656904][ T8867] reg_query_database+0x232/0x340 [ 75.656908][ T8867] reg_process_hint+0x13f/0xd30 [ 75.656912][ T8867] reg_todo+0x1ab/0x7d0 [ 75.656917][ T8867] process_one_work+0x989/0x1790 [ 75.656921][ T8867] worker_thread+0x98/0xe40 [ 75.656925][ T8867] kthread+0x354/0x420 [ 75.656929][ T8867] ret_from_fork+0x24/0x30 [ 75.656932][ T8867] [ 75.656935][ T8867] -> #0 ((console_sem).lock){-.-.}: [ 75.656950][ T8867] lock_acquire+0x16f/0x3f0 [ 75.656954][ T8867] _raw_spin_lock_irqsave+0x95/0xcd [ 75.656958][ T8867] down_trylock+0x13/0x70 [ 75.656962][ T8867] __down_trylock_console_sem+0xa8/0x210 [ 75.656966][ T8867] console_trylock+0x15/0xa0 [ 75.656970][ T8867] vprintk_emit+0x283/0x700 [ 75.656975][ T8867] vprintk_default+0x28/0x30 [ 75.656979][ T8867] vprintk_func+0x7e/0x189 [ 75.656983][ T8867] printk+0xba/0xed [ 75.656987][ T8867] __warn_printk+0x9b/0xf3 [ 75.656991][ T8867] debug_print_object+0x168/0x250 [ 75.656996][ T8867] debug_check_no_obj_freed+0x29f/0x464 [ 75.657001][ T8867] kmem_cache_free+0x18f/0x260 [ 75.657005][ T8867] __sk_destruct+0x4bc/0x6e0 [ 75.657009][ T8867] sk_destruct+0x7b/0x90 [ 75.657013][ T8867] __sk_free+0xce/0x300 [ 75.657023][ T8867] sk_free+0x42/0x50 [ 75.657027][ T8867] smc_release+0x5a7/0x7b0 [ 75.657031][ T8867] __sock_release+0xce/0x2a0 [ 75.657035][ T8867] sock_close+0x1b/0x30 [ 75.657039][ T8867] __fput+0x2ff/0x890 [ 75.657043][ T8867] ____fput+0x16/0x20 [ 75.657047][ T8867] task_work_run+0x145/0x1c0 [ 75.657053][ T8867] exit_to_usermode_loop+0x273/0x2c0 [ 75.657057][ T8867] do_syscall_64+0x58e/0x680 [ 75.657062][ T8867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 75.657065][ T8867] [ 75.657069][ T8867] other info that might help us debug this: [ 75.657072][ T8867] [ 75.657076][ T8867] Chain exists of: [ 75.657078][ T8867] (console_sem).lock --> &rq->lock --> &obj_hash[i].lock [ 75.657098][ T8867] [ 75.657102][ T8867] Possible unsafe locking scenario: [ 75.657105][ T8867] [ 75.657109][ T8867] CPU0 CPU1 [ 75.657114][ T8867] ---- ---- [ 75.657116][ T8867] lock(&obj_hash[i].lock); [ 75.657127][ T8867] lock(&rq->lock); [ 75.657137][ T8867] lock(&obj_hash[i].lock); [ 75.657145][ T8867] lock((console_sem).lock); [ 75.657154][ T8867] [ 75.657157][ T8867] *** DEADLOCK *** [ 75.657160][ T8867] [ 75.657165][ T8867] 2 locks held by syz-executor515/8867: [ 75.657167][ T8867] #0: 0000000000eaaad2 (&sb->s_type->i_mutex_key#11){+.+.}, at: __sock_release+0x89/0x2a0 [ 75.657188][ T8867] #1: 0000000006284f80 (&obj_hash[i].lock){-.-.}, at: debug_check_no_obj_freed+0xbe/0x464 [ 75.657207][ T8867] [ 75.657211][ T8867] stack backtrace: [ 75.657217][ T8867] CPU: 0 PID: 8867 Comm: syz-executor515 Not tainted 5.2.0-rc2+ #38 [ 75.657224][ T8867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.657227][ T8867] Call Trace: [ 75.657231][ T8867] dump_stack+0x172/0x1f0 [ 75.657235][ T8867] print_circular_bug.cold+0x1cc/0x28f [ 75.657240][ T8867] __lock_acquire+0x3755/0x5490 [ 75.657244][ T8867] ? mark_held_locks+0xf0/0xf0 [ 75.657248][ T8867] ? kvm_clock_read+0x18/0x30 [ 75.657252][ T8867] ? kvm_sched_clock_read+0x9/0x20 [ 75.657256][ T8867] lock_acquire+0x16f/0x3f0 [ 75.657260][ T8867] ? down_trylock+0x13/0x70 [ 75.657264][ T8867] _raw_spin_lock_irqsave+0x95/0xcd [ 75.657269][ T8867] ? down_trylock+0x13/0x70 [ 75.657272][ T8867] ? vprintk_emit+0x283/0x700 [ 75.657276][ T8867] down_trylock+0x13/0x70 [ 75.657280][ T8867] ? vprintk_emit+0x283/0x700 [ 75.657285][ T8867] __down_trylock_console_sem+0xa8/0x210 [ 75.657289][ T8867] console_trylock+0x15/0xa0 [ 75.657293][ T8867] vprintk_emit+0x283/0x700 [ 75.657297][ T8867] ? __exit_umh+0x2e0/0x2e0 [ 75.657301][ T8867] vprintk_default+0x28/0x30 [ 75.657305][ T8867] vprintk_func+0x7e/0x189 [ 75.657308][ T8867] printk+0xba/0xed [ 75.657313][ T8867] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 75.657317][ T8867] ? mark_held_locks+0xf0/0xf0 [ 75.657321][ T8867] ? task_work_run+0x145/0x1c0 [ 75.657326][ T8867] ? exit_to_usermode_loop+0x273/0x2c0 [ 75.657330][ T8867] ? do_syscall_64+0x58e/0x680 [ 75.657335][ T8867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 75.657339][ T8867] ? __warn_printk+0x8f/0xf3 [ 75.657343][ T8867] ? smc_tx_sendmsg+0x1820/0x1820 [ 75.657347][ T8867] __warn_printk+0x9b/0xf3 [ 75.657351][ T8867] ? add_taint.cold+0x16/0x16 [ 75.657355][ T8867] ? kasan_check_write+0x14/0x20 [ 75.657359][ T8867] ? lock_downgrade+0x880/0x880 [ 75.657364][ T8867] ? smc_tx_sendmsg+0x1820/0x1820 [ 75.657368][ T8867] debug_print_object+0x168/0x250 [ 75.657373][ T8867] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 75.657377][ T8867] debug_check_no_obj_freed+0x29f/0x464 [ 75.657381][ T8867] kmem_cache_free+0x18f/0x260 [ 75.657385][ T8867] __sk_destruct+0x4bc/0x6e0 [ 75.657389][ T8867] sk_destruct+0x7b/0x90 [ 75.657393][ T8867] __sk_free+0xce/0x300 [ 75.657396][ T8867] sk_free+0x42/0x50 [ 75.657400][ T8867] smc_release+0x5a7/0x7b0 [ 75.657404][ T8867] __sock_release+0xce/0x2a0 [ 75.657408][ T8867] sock_close+0x1b/0x30 [ 75.657412][ T8867] __fput+0x2ff/0x890 [ 75.657416][ T8867] ? __sock_release+0x2a0/0x2a0 [ 75.657420][ T8867] ____fput+0x16/0x20 [ 75.657424][ T8867] task_work_run+0x145/0x1c0 [ 75.657428][ T8867] exit_to_usermode_loop+0x273/0x2c0 [ 75.657432][ T8867] do_syscall_64+0x58e/0x680 [ 75.657437][ T8867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 75.657440][ T8867] RIP: 0033:0x4026f0 [ 75.657453][ T8867] Code: 01 f0 ff ff 0f 83 c0 0f 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 3d 94 2d 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 94 0f 00 00 c3 48 83 ec 08 e8 fa 04 00 00 [ 75.657458][ T8867] RSP: 002b:00007ffe8e8cf708 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 75.657468][ T8867] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004026f0 [ 75.657474][ T8867] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000000000000003 [ 75.657480][ T8867] RBP: 0000000000000000 R08: 0000000000000038 R09: 0000000000000004 [ 75.657487][ T8867] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 75.657493][ T8867] R13: 0000000000403ba0 R14: 0000000000000000 R15: 0000000000000000 [ 76.797745][ T8867] Shutting down cpus with NMI [ 77.707874][ T8867] Kernel Offset: disabled [ 77.712201][ T8867] Rebooting in 86400 seconds..