[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 58.868474][ T27] audit: type=1800 audit(1559594352.359:25): pid=8824 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 58.906916][ T27] audit: type=1800 audit(1559594352.359:26): pid=8824 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 58.937336][ T27] audit: type=1800 audit(1559594352.369:27): pid=8824 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.253' (ECDSA) to the list of known hosts. syzkaller login: [ 66.750237][ T8984] IPVS: ftp: loaded support on port[0] = 21 [ 66.751419][ T8981] IPVS: ftp: loaded support on port[0] = 21 [ 66.770783][ T8985] IPVS: ftp: loaded support on port[0] = 21 [ 66.771694][ T8988] IPVS: ftp: loaded support on port[0] = 21 [ 66.781542][ T8987] IPVS: ftp: loaded support on port[0] = 21 [ 66.792056][ T8986] IPVS: ftp: loaded support on port[0] = 21 [ 66.987426][ T8988] chnl_net:caif_netlink_parms(): no params data found [ 67.064349][ T8984] chnl_net:caif_netlink_parms(): no params data found [ 67.156280][ T8988] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.166043][ T8988] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.174028][ T8988] device bridge_slave_0 entered promiscuous mode [ 67.234010][ T8988] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.242942][ T8988] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.250748][ T8988] device bridge_slave_1 entered promiscuous mode [ 67.294803][ T8985] chnl_net:caif_netlink_parms(): no params data found [ 67.307393][ T8987] chnl_net:caif_netlink_parms(): no params data found [ 67.318917][ T8981] chnl_net:caif_netlink_parms(): no params data found [ 67.329179][ T8984] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.336238][ T8984] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.343968][ T8984] device bridge_slave_0 entered promiscuous mode [ 67.353574][ T8988] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.370769][ T8986] chnl_net:caif_netlink_parms(): no params data found [ 67.383766][ T8984] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.392057][ T8984] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.399842][ T8984] device bridge_slave_1 entered promiscuous mode [ 67.408198][ T8988] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 67.460091][ T8984] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.504826][ T8984] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 67.525360][ T8988] team0: Port device team_slave_0 added [ 67.532563][ T8981] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.540658][ T8981] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.548908][ T8981] device bridge_slave_0 entered promiscuous mode [ 67.561955][ T8981] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.569986][ T8981] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.577824][ T8981] device bridge_slave_1 entered promiscuous mode [ 67.595501][ T8985] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.602664][ T8985] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.610945][ T8985] device bridge_slave_0 entered promiscuous mode [ 67.619500][ T8988] team0: Port device team_slave_1 added [ 67.625313][ T8985] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.632613][ T8985] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.640370][ T8985] device bridge_slave_1 entered promiscuous mode [ 67.688874][ T8984] team0: Port device team_slave_0 added [ 67.694711][ T8986] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.701993][ T8986] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.710266][ T8986] device bridge_slave_0 entered promiscuous mode [ 67.731750][ T8987] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.739059][ T8987] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.746614][ T8987] device bridge_slave_0 entered promiscuous mode [ 67.754455][ T8987] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.761667][ T8987] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.769690][ T8987] device bridge_slave_1 entered promiscuous mode [ 67.777473][ T8984] team0: Port device team_slave_1 added [ 67.783295][ T8986] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.790520][ T8986] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.798399][ T8986] device bridge_slave_1 entered promiscuous mode [ 67.807085][ T8985] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.823097][ T8981] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.859395][ T8981] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 67.876041][ T8985] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 67.903872][ T8987] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.915342][ T8986] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.925746][ T8986] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 67.990133][ T8988] device hsr_slave_0 entered promiscuous mode [ 68.047362][ T8988] device hsr_slave_1 entered promiscuous mode [ 68.120977][ T8987] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 68.130741][ T8981] team0: Port device team_slave_0 added [ 68.143775][ T8985] team0: Port device team_slave_0 added [ 68.220117][ T8984] device hsr_slave_0 entered promiscuous mode [ 68.267127][ T8984] device hsr_slave_1 entered promiscuous mode [ 68.314557][ T8981] team0: Port device team_slave_1 added [ 68.323192][ T8985] team0: Port device team_slave_1 added [ 68.331281][ T8986] team0: Port device team_slave_0 added [ 68.339038][ T8986] team0: Port device team_slave_1 added [ 68.347399][ T8987] team0: Port device team_slave_0 added [ 68.354584][ T8987] team0: Port device team_slave_1 added [ 68.471509][ T8985] device hsr_slave_0 entered promiscuous mode [ 68.517165][ T8985] device hsr_slave_1 entered promiscuous mode [ 68.629957][ T8987] device hsr_slave_0 entered promiscuous mode [ 68.667197][ T8987] device hsr_slave_1 entered promiscuous mode [ 68.788624][ T8981] device hsr_slave_0 entered promiscuous mode [ 68.857324][ T8981] device hsr_slave_1 entered promiscuous mode [ 68.949045][ T8986] device hsr_slave_0 entered promiscuous mode [ 68.987260][ T8986] device hsr_slave_1 entered promiscuous mode [ 69.185724][ T8987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.207756][ T8985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.228109][ T8984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.246181][ T8984] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.260386][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.270761][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.278675][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.288188][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.296519][ T2868] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.303726][ T2868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.312677][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.322935][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.331611][ T2868] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.338715][ T2868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.347903][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.386501][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.394339][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.402982][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.410801][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.422192][ T8988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.432634][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.445341][ T8987] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.461938][ T8986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.480783][ T8988] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.489695][ T8985] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.507653][ T8981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.521557][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.529276][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.536958][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.545490][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.554696][ T8997] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.561793][ T8997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.569955][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.599283][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.608907][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.617909][ T8997] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.624952][ T8997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.632619][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.641341][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.649864][ T8997] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.656966][ T8997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.664441][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.672998][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.681267][ T8997] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.688368][ T8997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.695829][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.704399][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.712765][ T8997] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.719857][ T8997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.728076][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.736496][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.745159][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.753610][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.762051][ T8997] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.769102][ T8997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.777309][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.785223][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.805903][ T8981] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.824812][ T8984] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.836568][ T8984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.853309][ T8986] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.861727][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.872979][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.884861][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.893438][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.901956][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.910570][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.918621][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.927283][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.935543][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.944522][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.953199][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.961503][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.970444][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.979201][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.987553][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.995141][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.003222][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.011124][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.019241][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.055762][ T8988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.067571][ T8988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.090633][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.100404][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.109424][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.118106][ T2868] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.125147][ T2868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.132789][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.141224][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.149910][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.158324][ T2868] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.165360][ T2868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.173000][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.182154][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.190757][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.199261][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.207855][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.216122][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.224498][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.232716][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.243094][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.251096][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.259560][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.267351][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.279311][ T8984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.304178][ T8985] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.326364][ T8985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.352113][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.361544][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.370863][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.379536][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.388101][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.396524][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.405334][ T8997] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.412406][ T8997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.421329][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.430460][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.438978][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.447674][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.455933][ T8997] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.463025][ T8997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.470615][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.479468][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.488098][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.496734][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.504768][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.513303][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.534955][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.545017][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.585868][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.595074][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.604103][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.614216][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.622737][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready executing program [ 70.634978][ T8988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.654464][ T8985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.665933][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready executing program executing program executing program executing program [ 70.683680][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.702500][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.712244][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.721787][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready executing program [ 70.731038][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.740994][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.749239][ T9012] ------------[ cut here ]------------ [ 70.756408][ T9012] ODEBUG: free active (active state 0) object type: work_struct hint: smc_tx_work+0x0/0x1d0 [ 70.766787][ T9012] WARNING: CPU: 0 PID: 9012 at lib/debugobjects.c:325 debug_print_object+0x168/0x250 [ 70.776234][ T9012] Kernel panic - not syncing: panic_on_warn set ... [ 70.782812][ T9012] CPU: 0 PID: 9012 Comm: syz-executor120 Not tainted 5.2.0-rc3 #10 [ 70.790711][ T9012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.800759][ T9012] Call Trace: [ 70.804051][ T9012] dump_stack+0x172/0x1f0 [ 70.808379][ T9012] ? debug_print_object+0x150/0x250 [ 70.813579][ T9012] panic+0x2cb/0x744 [ 70.817478][ T9012] ? __warn_printk+0xf3/0xf3 [ 70.822065][ T9012] ? debug_print_object+0x168/0x250 [ 70.827256][ T9012] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 70.833490][ T9012] ? __warn.cold+0x5/0x4d [ 70.837885][ T9012] ? __warn+0xe8/0x1d0 [ 70.841957][ T9012] ? debug_print_object+0x168/0x250 [ 70.847161][ T9012] __warn.cold+0x20/0x4d [ 70.851400][ T9012] ? vprintk_emit+0x1ea/0x700 [ 70.856077][ T9012] ? debug_print_object+0x168/0x250 [ 70.861269][ T9012] report_bug+0x263/0x2b0 [ 70.865596][ T9012] do_error_trap+0x11b/0x200 [ 70.870181][ T9012] do_invalid_op+0x37/0x50 [ 70.874593][ T9012] ? debug_print_object+0x168/0x250 [ 70.879781][ T9012] invalid_op+0x14/0x20 [ 70.883932][ T9012] RIP: 0010:debug_print_object+0x168/0x250 [ 70.889730][ T9012] Code: dd 60 c7 a4 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 60 c7 a4 87 48 c7 c7 00 bd a4 87 e8 f6 8f 0d fe <0f> 0b 83 05 2b 61 4b 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 [ 70.909324][ T9012] RSP: 0018:ffff88808435fba0 EFLAGS: 00010082 [ 70.915393][ T9012] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 70.923355][ T9012] RDX: 0000000000000000 RSI: ffffffff815ac936 RDI: ffffed101086bf66 [ 70.931315][ T9012] RBP: ffff88808435fbe0 R08: ffff8880a50f83c0 R09: ffffed1015d040f1 [ 70.939277][ T9012] R10: ffffed1015d040f0 R11: ffff8880ae820787 R12: 0000000000000001 [ 70.947240][ T9012] R13: ffffffff88b71500 R14: ffffffff81497000 R15: ffff8880977f1798 [ 70.955214][ T9012] ? __exit_umh+0x2e0/0x2e0 [ 70.959733][ T9012] ? vprintk_func+0x86/0x189 [ 70.964317][ T9012] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 70.970120][ T9012] debug_check_no_obj_freed+0x29f/0x464 [ 70.975665][ T9012] kmem_cache_free+0x18f/0x260 [ 70.980432][ T9012] __sk_destruct+0x4bc/0x6e0 [ 70.985026][ T9012] sk_destruct+0x7b/0x90 [ 70.989267][ T9012] __sk_free+0xce/0x300 [ 70.993418][ T9012] sk_free+0x42/0x50 [ 70.997309][ T9012] smc_release+0x5a7/0x7b0 [ 71.001716][ T9012] __sock_release+0xce/0x2a0 [ 71.006299][ T9012] sock_close+0x1b/0x30 [ 71.010454][ T9012] __fput+0x2ff/0x890 [ 71.014438][ T9012] ? __sock_release+0x2a0/0x2a0 [ 71.019288][ T9012] ____fput+0x16/0x20 [ 71.023264][ T9012] task_work_run+0x145/0x1c0 [ 71.027863][ T9012] exit_to_usermode_loop+0x273/0x2c0 [ 71.033159][ T9012] do_fast_syscall_32+0xb51/0xd7d [ 71.038200][ T9012] entry_SYSENTER_compat+0x70/0x7f [ 71.043300][ T9012] RIP: 0023:0xf7fb8849 [ 71.047375][ T9012] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 71.066977][ T9012] RSP: 002b:00000000ff899f5c EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 71.075378][ T9012] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000006 [ 71.083343][ T9012] RDX: 0000000000000004 RSI: 000000000001142d RDI: 0000000000000000 [ 71.091314][ T9012] RBP: 00000000ff89a088 R08: 0000000000000000 R09: 0000000000000000 [ 71.099279][ T9012] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 71.107243][ T9012] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.115216][ T9012] [ 71.115223][ T9012] ====================================================== [ 71.115228][ T9012] WARNING: possible circular locking dependency detected [ 71.115233][ T9012] 5.2.0-rc3 #10 Not tainted [ 71.115238][ T9012] ------------------------------------------------------ [ 71.115244][ T9012] syz-executor120/9012 is trying to acquire lock: [ 71.115248][ T9012] 0000000052010491 ((console_sem).lock){-.-.}, at: down_trylock+0x13/0x70 [ 71.115263][ T9012] [ 71.115268][ T9012] but task is already holding lock: [ 71.115271][ T9012] 00000000a479f180 (&obj_hash[i].lock){-.-.}, at: debug_check_no_obj_freed+0xbe/0x464 [ 71.115287][ T9012] [ 71.115292][ T9012] which lock already depends on the new lock. [ 71.115294][ T9012] [ 71.115297][ T9012] [ 71.115303][ T9012] the existing dependency chain (in reverse order) is: [ 71.115305][ T9012] [ 71.115308][ T9012] -> #3 (&obj_hash[i].lock){-.-.}: [ 71.115323][ T9012] _raw_spin_lock_irqsave+0x95/0xcd [ 71.115328][ T9012] __debug_object_init+0xc6/0xc30 [ 71.115332][ T9012] debug_object_init+0x16/0x20 [ 71.115336][ T9012] hrtimer_init+0x2a/0x300 [ 71.115341][ T9012] init_dl_task_timer+0x1b/0x50 [ 71.115345][ T9012] __sched_fork+0x22a/0x4f0 [ 71.115349][ T9012] init_idle+0x75/0x670 [ 71.115353][ T9012] sched_init+0x952/0x9f5 [ 71.115357][ T9012] start_kernel+0x393/0x893 [ 71.115362][ T9012] x86_64_start_reservations+0x29/0x2b [ 71.115367][ T9012] x86_64_start_kernel+0x77/0x7b [ 71.115371][ T9012] secondary_startup_64+0xa4/0xb0 [ 71.115374][ T9012] [ 71.115376][ T9012] -> #2 (&rq->lock){-.-.}: [ 71.115390][ T9012] _raw_spin_lock+0x2f/0x40 [ 71.115394][ T9012] task_fork_fair+0x6a/0x520 [ 71.115398][ T9012] sched_fork+0x3af/0x900 [ 71.115403][ T9012] copy_process.part.0+0x1a25/0x6790 [ 71.115407][ T9012] _do_fork+0x25d/0xfe0 [ 71.115411][ T9012] kernel_thread+0x34/0x40 [ 71.115415][ T9012] rest_init+0x28/0x37b [ 71.115419][ T9012] arch_call_rest_init+0xe/0x1b [ 71.115424][ T9012] start_kernel+0x854/0x893 [ 71.115429][ T9012] x86_64_start_reservations+0x29/0x2b [ 71.115433][ T9012] x86_64_start_kernel+0x77/0x7b [ 71.115438][ T9012] secondary_startup_64+0xa4/0xb0 [ 71.115440][ T9012] [ 71.115443][ T9012] -> #1 (&p->pi_lock){-.-.}: [ 71.115458][ T9012] _raw_spin_lock_irqsave+0x95/0xcd [ 71.115462][ T9012] try_to_wake_up+0x90/0x13f0 [ 71.115467][ T9012] wake_up_process+0x10/0x20 [ 71.115471][ T9012] __up.isra.0+0x136/0x1a0 [ 71.115474][ T9012] up+0x9c/0xe0 [ 71.115479][ T9012] __up_console_sem+0xb7/0x1c0 [ 71.115483][ T9012] console_unlock+0x663/0xec0 [ 71.115487][ T9012] vprintk_emit+0x2a0/0x700 [ 71.115491][ T9012] vprintk_default+0x28/0x30 [ 71.115495][ T9012] vprintk_func+0x7e/0x189 [ 71.115499][ T9012] printk+0xba/0xed [ 71.115503][ T9012] do_exit.cold+0x5d/0x254 [ 71.115508][ T9012] do_group_exit+0x135/0x370 [ 71.115512][ T9012] __x64_sys_exit_group+0x44/0x50 [ 71.115516][ T9012] do_syscall_64+0xfd/0x680 [ 71.115521][ T9012] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 71.115524][ T9012] [ 71.115526][ T9012] -> #0 ((console_sem).lock){-.-.}: [ 71.115542][ T9012] lock_acquire+0x16f/0x3f0 [ 71.115547][ T9012] _raw_spin_lock_irqsave+0x95/0xcd [ 71.115551][ T9012] down_trylock+0x13/0x70 [ 71.115556][ T9012] __down_trylock_console_sem+0xa8/0x210 [ 71.115560][ T9012] console_trylock+0x15/0xa0 [ 71.115564][ T9012] vprintk_emit+0x283/0x700 [ 71.115568][ T9012] vprintk_default+0x28/0x30 [ 71.115572][ T9012] vprintk_func+0x7e/0x189 [ 71.115576][ T9012] printk+0xba/0xed [ 71.115581][ T9012] __warn_printk+0x9b/0xf3 [ 71.115585][ T9012] debug_print_object+0x168/0x250 [ 71.115590][ T9012] debug_check_no_obj_freed+0x29f/0x464 [ 71.115594][ T9012] kmem_cache_free+0x18f/0x260 [ 71.115598][ T9012] __sk_destruct+0x4bc/0x6e0 [ 71.115602][ T9012] sk_destruct+0x7b/0x90 [ 71.115606][ T9012] __sk_free+0xce/0x300 [ 71.115610][ T9012] sk_free+0x42/0x50 [ 71.115614][ T9012] smc_release+0x5a7/0x7b0 [ 71.115619][ T9012] __sock_release+0xce/0x2a0 [ 71.115623][ T9012] sock_close+0x1b/0x30 [ 71.115627][ T9012] __fput+0x2ff/0x890 [ 71.115630][ T9012] ____fput+0x16/0x20 [ 71.115635][ T9012] task_work_run+0x145/0x1c0 [ 71.115639][ T9012] exit_to_usermode_loop+0x273/0x2c0 [ 71.115644][ T9012] do_fast_syscall_32+0xb51/0xd7d [ 71.115648][ T9012] entry_SYSENTER_compat+0x70/0x7f [ 71.115651][ T9012] [ 71.115656][ T9012] other info that might help us debug this: [ 71.115658][ T9012] [ 71.115661][ T9012] Chain exists of: [ 71.115664][ T9012] (console_sem).lock --> &rq->lock --> &obj_hash[i].lock [ 71.115683][ T9012] [ 71.115687][ T9012] Possible unsafe locking scenario: [ 71.115690][ T9012] [ 71.115694][ T9012] CPU0 CPU1 [ 71.115699][ T9012] ---- ---- [ 71.115701][ T9012] lock(&obj_hash[i].lock); [ 71.115711][ T9012] lock(&rq->lock); [ 71.115721][ T9012] lock(&obj_hash[i].lock); [ 71.115730][ T9012] lock((console_sem).lock); [ 71.115738][ T9012] [ 71.115741][ T9012] *** DEADLOCK *** [ 71.115744][ T9012] [ 71.115748][ T9012] 2 locks held by syz-executor120/9012: [ 71.115751][ T9012] #0: 0000000009a328ab (&sb->s_type->i_mutex_key#11){+.+.}, at: __sock_release+0x89/0x2a0 [ 71.115772][ T9012] #1: 00000000a479f180 (&obj_hash[i].lock){-.-.}, at: debug_check_no_obj_freed+0xbe/0x464 [ 71.115790][ T9012] [ 71.115794][ T9012] stack backtrace: [ 71.115800][ T9012] CPU: 0 PID: 9012 Comm: syz-executor120 Not tainted 5.2.0-rc3 #10 [ 71.115807][ T9012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.115810][ T9012] Call Trace: [ 71.115814][ T9012] dump_stack+0x172/0x1f0 [ 71.115819][ T9012] print_circular_bug.cold+0x1cc/0x28f [ 71.115823][ T9012] __lock_acquire+0x3755/0x5490 [ 71.115827][ T9012] ? mark_held_locks+0xf0/0xf0 [ 71.115831][ T9012] ? kvm_clock_read+0x18/0x30 [ 71.115835][ T9012] ? kvm_sched_clock_read+0x9/0x20 [ 71.115839][ T9012] lock_acquire+0x16f/0x3f0 [ 71.115843][ T9012] ? down_trylock+0x13/0x70 [ 71.115847][ T9012] _raw_spin_lock_irqsave+0x95/0xcd [ 71.115851][ T9012] ? down_trylock+0x13/0x70 [ 71.115855][ T9012] ? vprintk_emit+0x283/0x700 [ 71.115859][ T9012] down_trylock+0x13/0x70 [ 71.115863][ T9012] ? vprintk_emit+0x283/0x700 [ 71.115868][ T9012] __down_trylock_console_sem+0xa8/0x210 [ 71.115872][ T9012] console_trylock+0x15/0xa0 [ 71.115882][ T9012] vprintk_emit+0x283/0x700 [ 71.115886][ T9012] ? __exit_umh+0x2e0/0x2e0 [ 71.115890][ T9012] vprintk_default+0x28/0x30 [ 71.115894][ T9012] vprintk_func+0x7e/0x189 [ 71.115897][ T9012] printk+0xba/0xed [ 71.115902][ T9012] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 71.115906][ T9012] ? mark_held_locks+0xf0/0xf0 [ 71.115910][ T9012] ? task_work_run+0x145/0x1c0 [ 71.115914][ T9012] ? exit_to_usermode_loop+0x273/0x2c0 [ 71.115919][ T9012] ? do_fast_syscall_32+0xb51/0xd7d [ 71.115923][ T9012] ? entry_SYSENTER_compat+0x70/0x7f [ 71.115927][ T9012] ? __warn_printk+0x8f/0xf3 [ 71.115931][ T9012] ? smc_tx_sendmsg+0x1820/0x1820 [ 71.115935][ T9012] __warn_printk+0x9b/0xf3 [ 71.115939][ T9012] ? add_taint.cold+0x16/0x16 [ 71.115944][ T9012] ? kasan_check_write+0x14/0x20 [ 71.115948][ T9012] ? lock_downgrade+0x880/0x880 [ 71.115952][ T9012] ? smc_tx_sendmsg+0x1820/0x1820 [ 71.115956][ T9012] debug_print_object+0x168/0x250 [ 71.115961][ T9012] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 71.115965][ T9012] debug_check_no_obj_freed+0x29f/0x464 [ 71.115969][ T9012] kmem_cache_free+0x18f/0x260 [ 71.115973][ T9012] __sk_destruct+0x4bc/0x6e0 [ 71.115977][ T9012] sk_destruct+0x7b/0x90 [ 71.115981][ T9012] __sk_free+0xce/0x300 [ 71.115984][ T9012] sk_free+0x42/0x50 [ 71.115988][ T9012] smc_release+0x5a7/0x7b0 [ 71.115992][ T9012] __sock_release+0xce/0x2a0 [ 71.115996][ T9012] sock_close+0x1b/0x30 [ 71.115999][ T9012] __fput+0x2ff/0x890 [ 71.116003][ T9012] ? __sock_release+0x2a0/0x2a0 [ 71.116007][ T9012] ____fput+0x16/0x20 [ 71.116011][ T9012] task_work_run+0x145/0x1c0 [ 71.116015][ T9012] exit_to_usermode_loop+0x273/0x2c0 [ 71.116019][ T9012] do_fast_syscall_32+0xb51/0xd7d [ 71.116023][ T9012] entry_SYSENTER_compat+0x70/0x7f [ 71.116027][ T9012] RIP: 0023:0xf7fb8849 [ 71.116040][ T9012] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 71.116044][ T9012] RSP: 002b:00000000ff899f5c EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 71.116055][ T9012] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000006 [ 71.116061][ T9012] RDX: 0000000000000004 RSI: 000000000001142d RDI: 0000000000000000 [ 71.116067][ T9012] RBP: 00000000ff89a088 R08: 0000000000000000 R09: 0000000000000000 [ 71.116073][ T9012] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 71.116079][ T9012] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.253977][ T9012] Shutting down cpus with NMI [ 73.148275][ T9012] Kernel Offset: disabled [ 73.152604][ T9012] Rebooting in 86400 seconds..