[info] Using makefile-style concurrent boot in runlevel 2. [ 26.489074] audit: type=1800 audit(1541960557.769:21): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 41.195166] sshd (6021) used greatest stack depth: 15744 bytes left Warning: Permanently added '10.128.10.12' (ECDSA) to the list of known hosts. [ 124.387993] IPVS: ftp: loaded support on port[0] = 21 [ 124.388151] IPVS: ftp: loaded support on port[0] = 21 [ 124.398997] IPVS: ftp: loaded support on port[0] = 21 [ 124.402605] IPVS: ftp: loaded support on port[0] = 21 [ 124.408026] IPVS: ftp: loaded support on port[0] = 21 [ 124.413920] IPVS: ftp: loaded support on port[0] = 21 [ 125.048186] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.057853] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.074285] device bridge_slave_0 entered promiscuous mode [ 125.107078] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.123816] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.138404] device bridge_slave_0 entered promiscuous mode [ 125.145751] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.152115] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.159992] device bridge_slave_0 entered promiscuous mode [ 125.169449] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.176079] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.183650] device bridge_slave_0 entered promiscuous mode [ 125.192190] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.199978] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.207506] device bridge_slave_1 entered promiscuous mode [ 125.216700] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.223737] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.231033] device bridge_slave_0 entered promiscuous mode [ 125.239891] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.246691] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.254556] device bridge_slave_0 entered promiscuous mode [ 125.263970] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.270324] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.278736] device bridge_slave_1 entered promiscuous mode [ 125.285807] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.292156] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.300951] device bridge_slave_1 entered promiscuous mode [ 125.309268] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 125.316749] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.325222] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.332642] device bridge_slave_1 entered promiscuous mode [ 125.343566] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.350435] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.364044] device bridge_slave_1 entered promiscuous mode [ 125.371951] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 125.381478] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 125.392198] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 125.409754] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.416995] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.431168] device bridge_slave_1 entered promiscuous mode [ 125.438400] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 125.449496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 125.460876] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 125.475780] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 125.495873] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 125.518553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 125.584733] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 125.591999] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 125.641862] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 125.651374] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 125.711057] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 125.727261] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 125.739873] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 125.782134] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 125.797645] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 125.810208] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 125.822023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.839449] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 125.848629] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 125.861650] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 125.874086] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 125.887473] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 125.899412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.914775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.930423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 125.941719] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 125.959426] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 125.972444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.983974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.997534] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 126.008595] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 126.021412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 126.031564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.044804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.078726] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 126.088791] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 126.114187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.124352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.139768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 126.151792] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 126.159986] team0: Port device team_slave_0 added [ 126.173648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.202726] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 126.214670] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 126.231644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.244438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.261010] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 126.274280] team0: Port device team_slave_1 added [ 126.280151] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 126.289255] team0: Port device team_slave_0 added [ 126.317945] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 126.328215] team0: Port device team_slave_0 added [ 126.337487] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 126.347045] team0: Port device team_slave_0 added [ 126.358886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.380936] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 126.392015] team0: Port device team_slave_1 added [ 126.401531] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 126.412916] team0: Port device team_slave_1 added [ 126.433617] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 126.441013] team0: Port device team_slave_0 added [ 126.456292] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 126.465262] team0: Port device team_slave_1 added [ 126.475956] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 126.484181] team0: Port device team_slave_0 added [ 126.490827] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.507633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.532000] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 126.540756] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 126.550556] team0: Port device team_slave_1 added [ 126.558571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.566608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.580415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.596293] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 126.606327] team0: Port device team_slave_1 added [ 126.614453] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 126.632793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.642719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.653826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.661543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.676110] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 126.695310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.707235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.733809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.744184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.752258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.760240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.771482] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 126.780470] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 126.791295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.805516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.814123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.821905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.834187] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 126.843116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.850797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.870126] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 126.878130] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 126.894013] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 126.906417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.915190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.924097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.937574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.945380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.954187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.964105] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 126.977401] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 126.991364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.004912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.012835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.038920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.047636] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 127.058402] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 127.072072] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 127.086125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.097897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.118739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.127203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.135747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.143794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 127.602135] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.608705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.615953] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.622331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.634240] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 127.642670] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.649063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.655736] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.662072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.671661] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: No buffer space available [ 127.744494] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.750877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.757519] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.763904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.773996] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 127.790377] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.796826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.803558] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.809931] bridge0: port 1(bridge_slave_0) entered forwarding state RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available [ 127.837057] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 127.843705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.852227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.863657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.870655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready RTNETLINK answers: No buffer space available RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported [ 127.948641] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.955085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.961700] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.968163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.980906] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 128.000247] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.006684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.013354] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.019707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.028007] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 128.880658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.896025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument [ 130.213520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.272314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.415531] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 130.452118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.478553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.497628] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 130.558785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.600191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.685121] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 130.695661] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 130.701840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.713824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.730983] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 130.749521] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 130.767583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.777853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.843937] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 130.850820] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 130.964408] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 130.971296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.978841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.994833] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 131.008383] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.023365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.030425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.050370] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.125573] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 131.140674] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 131.157268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.166928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.180773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.188719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.247986] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.261997] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.385500] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.401824] 8021q: adding VLAN 0 to HW filter on device team0 executing program executing program [ 132.544875] FAULT_INJECTION: forcing a failure. [ 132.544875] name failslab, interval 1, probability 0, space 0, times 1 [ 132.558620] CPU: 1 PID: 7444 Comm: syz-executor239 Not tainted 4.20.0-rc1+ #141 [ 132.566053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 132.575388] Call Trace: [ 132.577969] dump_stack+0x244/0x39d [ 132.581588] ? dump_stack_print_info.cold.1+0x20/0x20 [ 132.586774] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 132.591521] should_fail.cold.4+0xa/0x17 [ 132.595573] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 132.600662] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 132.605578] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 132.610848] ? __lock_acquire+0x62f/0x4c20 [ 132.615070] ? __lock_acquire+0x62f/0x4c20 [ 132.619294] ? is_bpf_text_address+0xd3/0x170 [ 132.623776] ? kernel_text_address+0x79/0xf0 [ 132.628178] ? mark_held_locks+0x130/0x130 [ 132.632398] ? __lock_acquire+0x62f/0x4c20 [ 132.636633] ? save_stack_trace+0x1a/0x20 [ 132.640786] __should_failslab+0x124/0x180 [ 132.645011] should_failslab+0x9/0x14 [ 132.648796] kmem_cache_alloc+0x47/0x730 [ 132.652844] ? kasan_check_read+0x11/0x20 [ 132.656988] ? graph_lock+0x9c/0x270 [ 132.660695] __debug_object_init+0xbb8/0x1290 [ 132.665175] ? __unlock_page_memcg+0x70/0x100 [ 132.669666] ? kasan_check_read+0x11/0x20 [ 132.673804] ? debug_object_free+0x690/0x690 [ 132.678205] ? find_held_lock+0x36/0x1c0 [ 132.682271] ? debug_object_activate+0x2ba/0x600 [ 132.687018] ? lock_downgrade+0x900/0x900 [ 132.691163] ? trace_hardirqs_off+0xb8/0x310 [ 132.695568] ? kasan_check_read+0x11/0x20 [ 132.699712] ? do_raw_spin_unlock+0xa7/0x330 [ 132.704107] ? trace_hardirqs_on+0x310/0x310 [ 132.708507] ? lock_acquire+0x1ed/0x520 [ 132.712476] debug_object_activate+0x323/0x600 [ 132.717054] ? do_raw_spin_lock+0x14f/0x350 [ 132.721367] ? free_obj_work+0xb80/0xb80 [ 132.725411] ? do_raw_spin_trylock+0x270/0x270 [ 132.729986] add_timer+0x50e/0x15a0 [ 132.733608] ? mod_timer+0x1560/0x1560 [ 132.737485] ? lock_acquire+0x1ed/0x520 [ 132.741446] ? perf_event_release_kernel+0x36c/0x10e0 [ 132.746630] ? lock_release+0xa00/0xa00 [ 132.750609] ? perf_trace_sched_process_exec+0x860/0x860 [ 132.756053] ? zap_class+0x640/0x640 [ 132.759758] ? __mutex_lock+0x85e/0x16f0 [ 132.763807] ? perf_duration_warn+0x40/0x40 [ 132.768127] ? perf_event_release_kernel+0x36c/0x10e0 [ 132.773312] __queue_delayed_work+0x249/0x380 [ 132.777792] ? trace_hardirqs_off+0xb8/0x310 [ 132.782527] ? rcu_work_rcufn+0xf0/0xf0 [ 132.786493] ? lock_downgrade+0x900/0x900 [ 132.790631] queue_delayed_work_on+0x1a2/0x1f0 [ 132.795202] _free_event+0xf27/0x1660 [ 132.798994] ? ring_buffer_attach+0x840/0x840 [ 132.803504] ? _raw_spin_unlock_irq+0x27/0x80 [ 132.807988] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 132.812569] ? trace_hardirqs_on+0xbd/0x310 [ 132.816883] ? kasan_check_read+0x11/0x20 [ 132.821019] ? perf_event_release_kernel+0x2e2/0x10e0 [ 132.826197] ? trace_hardirqs_off_caller+0x310/0x310 [ 132.831293] put_event+0x48/0x60 [ 132.834649] perf_event_release_kernel+0x8d0/0x10e0 [ 132.839650] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 132.845183] ? put_event+0x60/0x60 [ 132.848712] ? mark_held_locks+0x130/0x130 [ 132.852930] ? perf_trace_sched_process_exec+0x860/0x860 [ 132.858368] ? find_held_lock+0x36/0x1c0 [ 132.862421] ? get_pid_task+0xd6/0x1a0 [ 132.866299] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 132.871820] ? locks_remove_posix+0x47d/0x840 [ 132.876308] ? vfs_lock_file+0xe0/0xe0 [ 132.880190] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 132.885722] ? fsnotify+0x4e5/0xf20 [ 132.889336] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 132.894856] ? locks_remove_file+0x3c6/0x5c0 [ 132.899251] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 132.904774] ? ima_file_free+0x132/0x650 [ 132.908819] ? fsnotify_first_mark+0x350/0x350 [ 132.913389] ? ima_file_check+0x130/0x130 [ 132.917526] ? fsnotify+0xf20/0xf20 [ 132.921156] ? perf_event_release_kernel+0x10e0/0x10e0 [ 132.926418] perf_release+0x37/0x50 [ 132.930031] __fput+0x385/0xa30 [ 132.933397] ? get_max_files+0x20/0x20 [ 132.937269] ? trace_hardirqs_on+0xbd/0x310 [ 132.941579] ? kasan_check_read+0x11/0x20 [ 132.945718] ? task_work_run+0x1af/0x2a0 [ 132.950283] ? trace_hardirqs_off_caller+0x310/0x310 [ 132.955372] ? filp_close+0x1cd/0x250 [ 132.959181] ____fput+0x15/0x20 [ 132.962453] task_work_run+0x1e8/0x2a0 [ 132.966330] ? task_work_cancel+0x240/0x240 [ 132.970647] ? copy_fd_bitmaps+0x210/0x210 [ 132.974870] ? do_syscall_64+0x9a/0x820 [ 132.978832] exit_to_usermode_loop+0x318/0x380 [ 132.983403] ? __bpf_trace_sys_exit+0x30/0x30 [ 132.987887] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 132.993411] do_syscall_64+0x6be/0x820 [ 132.997286] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 133.002638] ? syscall_return_slowpath+0x5e0/0x5e0 [ 133.007553] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 133.012383] ? trace_hardirqs_on_caller+0x310/0x310 [ 133.017397] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 133.022400] ? prepare_exit_to_usermode+0x291/0x3b0 [ 133.027408] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 133.032241] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 133.037414] RIP: 0033:0x449e59 [ 133.040606] Code: e8 ac e7 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 bb 02 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 133.059495] RSP: 002b:00007f931b2a7ca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 133.067195] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000449e59 [ 133.074447] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000005 [ 133.081703] RBP: 00000000006e59e0 R08: 0000000000000001 R09: 0000000000000031 [ 133.089043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 133.096298] R13: ffffffffffffffff R14: 00007f931b2a89c0 R15: 0000000000000000 [ 133.103571] [ 133.103575] ====================================================== [ 133.103588] WARNING: possible circular locking dependency detected [ 133.103591] 4.20.0-rc1+ #141 Not tainted [ 133.103596] ------------------------------------------------------ [ 133.103600] syz-executor239/7444 is trying to acquire lock: [ 133.103602] 0000000024bdb1f8 ((console_sem).lock){-.-.}, at: down_trylock+0x13/0x70 [ 133.103613] [ 133.103617] but task is already holding lock: executing program [ 133.103620] 000000009cd56431 (&base->lock){..-.}, at: add_timer+0x3e4/0x15a0 [ 133.103631] [ 133.103634] which lock already depends on the new lock. [ 133.103636] [ 133.103638] [ 133.103642] the existing dependency chain (in reverse order) is: [ 133.103645] [ 133.103646] -> #3 (&base->lock){..-.}: [ 133.103657] _raw_spin_lock_irqsave+0x99/0xd0 [ 133.103661] lock_timer_base+0xbb/0x2b0 [ 133.103664] add_timer+0x87f/0x15a0 [ 133.103667] __queue_delayed_work+0x249/0x380 [ 133.103671] queue_delayed_work_on+0x1a2/0x1f0 [ 133.103674] psi_task_change+0x3f1/0x5f0 [ 133.103678] activate_task+0x1b4/0x470 [ 133.103681] wake_up_new_task+0x523/0xcf0 [ 133.103684] _do_fork+0x33b/0x11d0 [ 133.103688] kernel_thread+0x34/0x40 [ 133.103692] rest_init+0x28/0x372 [ 133.103695] arch_call_rest_init+0xe/0x1b [ 133.103699] start_kernel+0x9f0/0xa2b [ 133.103703] x86_64_start_reservations+0x2e/0x30 [ 133.103707] x86_64_start_kernel+0x76/0x79 [ 133.103710] secondary_startup_64+0xa4/0xb0 [ 133.103712] [ 133.103714] -> #2 (&rq->lock){-.-.}: [ 133.103727] _raw_spin_lock+0x2d/0x40 [ 133.103730] task_fork_fair+0xb0/0x6d0 [ 133.103733] sched_fork+0x443/0xba0 [ 133.103737] copy_process+0x25b8/0x87a0 [ 133.103740] _do_fork+0x1cb/0x11d0 [ 133.103743] kernel_thread+0x34/0x40 [ 133.103746] rest_init+0x28/0x372 [ 133.103749] arch_call_rest_init+0xe/0x1b [ 133.103752] start_kernel+0x9f0/0xa2b [ 133.103757] x86_64_start_reservations+0x2e/0x30 [ 133.103760] x86_64_start_kernel+0x76/0x79 [ 133.103763] secondary_startup_64+0xa4/0xb0 [ 133.103765] [ 133.103767] -> #1 (&p->pi_lock){-.-.}: [ 133.103779] _raw_spin_lock_irqsave+0x99/0xd0 [ 133.103782] try_to_wake_up+0xdc/0x1490 [ 133.103785] wake_up_process+0x10/0x20 [ 133.103788] __up.isra.1+0x1c0/0x2a0 [ 133.103791] up+0x13c/0x1c0 [ 133.103794] __up_console_sem+0xbe/0x1b0 [ 133.103798] console_unlock+0x811/0x1190 [ 133.103803] vprintk_emit+0x391/0x990 [ 133.103807] vprintk_default+0x28/0x30 [ 133.103811] vprintk_func+0x7e/0x181 [ 133.103814] printk+0xa7/0xcf [ 133.103817] do_exit.cold.18+0x57/0x16f [ 133.103821] do_group_exit+0x177/0x440 [ 133.103825] __x64_sys_exit_group+0x3e/0x50 [ 133.103830] do_syscall_64+0x1b9/0x820 [ 133.103834] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 133.103836] [ 133.103838] -> #0 ((console_sem).lock){-.-.}: [ 133.103852] lock_acquire+0x1ed/0x520 [ 133.103856] _raw_spin_lock_irqsave+0x99/0xd0 [ 133.103859] down_trylock+0x13/0x70 [ 133.103863] __down_trylock_console_sem+0xae/0x1f0 [ 133.103867] console_trylock+0x15/0xa0 [ 133.103871] vprintk_emit+0x372/0x990 [ 133.103874] vprintk_default+0x28/0x30 [ 133.103878] vprintk_func+0x7e/0x181 [ 133.103881] printk+0xa7/0xcf [ 133.103885] should_fail+0xac1/0xd01 [ 133.103888] __should_failslab+0x124/0x180 [ 133.103892] should_failslab+0x9/0x14 [ 133.103896] kmem_cache_alloc+0x47/0x730 [ 133.103900] __debug_object_init+0xbb8/0x1290 [ 133.103905] debug_object_activate+0x323/0x600 [ 133.103908] add_timer+0x50e/0x15a0 [ 133.103911] __queue_delayed_work+0x249/0x380 [ 133.103915] queue_delayed_work_on+0x1a2/0x1f0 [ 133.103919] _free_event+0xf27/0x1660 [ 133.103922] put_event+0x48/0x60 [ 133.103927] perf_event_release_kernel+0x8d0/0x10e0 [ 133.103930] perf_release+0x37/0x50 [ 133.103933] __fput+0x385/0xa30 [ 133.103936] ____fput+0x15/0x20 [ 133.103940] task_work_run+0x1e8/0x2a0 [ 133.103944] exit_to_usermode_loop+0x318/0x380 [ 133.103948] do_syscall_64+0x6be/0x820 [ 133.103952] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 133.103954] [ 133.103958] other info that might help us debug this: [ 133.103960] [ 133.103963] Chain exists of: [ 133.103965] (console_sem).lock --> &rq->lock --> &base->lock [ 133.103982] [ 133.103986] Possible unsafe locking scenario: [ 133.103988] [ 133.103992] CPU0 CPU1 [ 133.103996] ---- ---- [ 133.103999] lock(&base->lock); [ 133.104007] lock(&rq->lock); [ 133.104015] lock(&base->lock); [ 133.104022] lock((console_sem).lock); [ 133.104030] [ 133.104033] *** DEADLOCK *** [ 133.104035] [ 133.104039] 1 lock held by syz-executor239/7444: [ 133.104042] #0: 000000009cd56431 (&base->lock){..-.}, at: add_timer+0x3e4/0x15a0 [ 133.104057] [ 133.104060] stack backtrace: [ 133.104066] CPU: 1 PID: 7444 Comm: syz-executor239 Not tainted 4.20.0-rc1+ #141 [ 133.104073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 133.104076] Call Trace: [ 133.104079] dump_stack+0x244/0x39d [ 133.104084] ? dump_stack_print_info.cold.1+0x20/0x20 [ 133.104087] ? vprintk_func+0x85/0x181 [ 133.104092] print_circular_bug.isra.35.cold.54+0x1bd/0x27d [ 133.104096] ? save_trace+0xe0/0x290 [ 133.104099] __lock_acquire+0x3399/0x4c20 [ 133.104103] ? mark_held_locks+0x130/0x130 [ 133.104107] ? dentry_name+0x641/0x8f0 [ 133.104111] ? mark_held_locks+0x130/0x130 [ 133.104120] ? restricted_pointer+0x410/0x410 [ 133.104125] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 133.104130] ? __bpf_trace_xdp_cpumap_enqueue+0x40/0x40 [ 133.104133] ? print_usage_bug+0xc0/0xc0 [ 133.104137] ? zap_class+0x640/0x640 [ 133.104141] ? __lock_acquire+0x62f/0x4c20 [ 133.104146] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 133.104150] ? number+0x972/0xca0 [ 133.104154] ? zap_class+0x640/0x640 [ 133.104159] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 133.104163] lock_acquire+0x1ed/0x520 [ 133.104167] ? down_trylock+0x13/0x70 [ 133.104171] ? lock_release+0xa00/0xa00 [ 133.104175] ? trace_hardirqs_off+0xb8/0x310 [ 133.104179] ? vprintk_emit+0x1de/0x990 [ 133.104183] ? trace_hardirqs_on+0x310/0x310 [ 133.104187] ? trace_hardirqs_off+0xb8/0x310 [ 133.104190] ? log_store+0x344/0x4c0 [ 133.104194] ? vprintk_emit+0x372/0x990 [ 133.104198] _raw_spin_lock_irqsave+0x99/0xd0 [ 133.104201] ? down_trylock+0x13/0x70 [ 133.104205] down_trylock+0x13/0x70 [ 133.104210] __down_trylock_console_sem+0xae/0x1f0 [ 133.104214] console_trylock+0x15/0xa0 [ 133.104217] vprintk_emit+0x372/0x990 [ 133.104221] ? wake_up_klogd+0x180/0x180 [ 133.104226] ? mark_held_locks+0x130/0x130 [ 133.104229] ? save_stack+0xa9/0xd0 [ 133.104233] ? __lock_acquire+0x62f/0x4c20 [ 133.104237] ? print_usage_bug+0xc0/0xc0 [ 133.104241] ? zap_class+0x640/0x640 [ 133.104245] vprintk_default+0x28/0x30 [ 133.104248] vprintk_func+0x7e/0x181 [ 133.104252] printk+0xa7/0xcf [ 133.104256] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 133.104260] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 133.104264] should_fail+0xac1/0xd01 [ 133.104268] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 133.104272] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 133.104277] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 133.104281] ? __lock_acquire+0x62f/0x4c20 [ 133.104285] ? __lock_acquire+0x62f/0x4c20 [ 133.104290] ? is_bpf_text_address+0xd3/0x170 [ 133.104294] ? kernel_text_address+0x79/0xf0 [ 133.104298] ? mark_held_locks+0x130/0x130 [ 133.104302] ? __lock_acquire+0x62f/0x4c20 [ 133.104306] ? save_stack_trace+0x1a/0x20 [ 133.104310] __should_failslab+0x124/0x180 [ 133.104313] should_failslab+0x9/0x14 [ 133.104318] kmem_cache_alloc+0x47/0x730 [ 133.104322] ? kasan_check_read+0x11/0x20 [ 133.104325] ? graph_lock+0x9c/0x270 [ 133.104328] __debug_object_init+0xbb8/0x1290 [ 133.104332] ? __unlock_page_memcg+0x70/0x100 [ 133.104336] ? kasan_check_read+0x11/0x20 [ 133.104340] ? debug_object_free+0x690/0x690 [ 133.104344] ? find_held_lock+0x36/0x1c0 [ 133.104348] ? debug_object_activate+0x2ba/0x600 [ 133.104353] ? lock_downgrade+0x900/0x900 [ 133.104357] ? trace_hardirqs_off+0xb8/0x310 [ 133.104360] ? kasan_check_read+0x11/0x20 [ 133.104365] ? do_raw_spin_unlock+0xa7/0x330 [ 133.104369] ? trace_hardirqs_on+0x310/0x310 [ 133.104373] ? lock_acquire+0x1ed/0x520 [ 133.104377] debug_object_activate+0x323/0x600 [ 133.104381] ? do_raw_spin_lock+0x14f/0x350 [ 133.104385] ? free_obj_work+0xb80/0xb80 [ 133.104389] ? do_raw_spin_trylock+0x270/0x270 [ 133.104393] add_timer+0x50e/0x15a0 [ 133.104397] ? mod_timer+0x1560/0x1560 [ 133.104401] ? lock_acquire+0x1ed/0x520 [ 133.104406] ? perf_event_release_kernel+0x36c/0x10e0 [ 133.104409] ? lock_release+0xa00/0xa00 [ 133.104414] ? perf_trace_sched_process_exec+0x860/0x860 [ 133.104418] ? zap_class+0x640/0x640 [ 133.104421] ? __mutex_lock+0x85e/0x16f0 [ 133.104425] ? perf_duration_warn+0x40/0x40 [ 133.104430] ? perf_event_release_kernel+0x36c/0x10e0 [ 133.104434] __queue_delayed_work+0x249/0x380 [ 133.104438] ? trace_hardirqs_off+0xb8/0x310 [ 133.104442] ? rcu_work_rcufn+0xf0/0xf0 [ 133.104446] ? lock_downgrade+0x900/0x900 [ 133.104450] queue_delayed_work_on+0x1a2/0x1f0 [ 133.104454] _free_event+0xf27/0x1660 [ 133.104458] ? ring_buffer_attach+0x840/0x840 [ 133.104462] ? _raw_spin_unlock_irq+0x27/0x80 [ 133.104466] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 133.104471] ? trace_hardirqs_on+0xbd/0x310 [ 133.104474] ? kasan_check_read+0x11/0x20 [ 133.104478] ? perf_event_release_kernel+0x2e2/0x10e0 [ 133.104483] ? trace_hardirqs_off_caller+0x310/0x310 [ 133.104486] put_event+0x48/0x60 [ 133.104491] perf_event_release_kernel+0x8d0/0x10e0 [ 133.104495] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 133.104499] ? put_event+0x60/0x60 [ 133.104502] ? mark_held_locks+0x130/0x130 [ 133.104507] ? perf_trace_sched_process_exec+0x860/0x860 [ 133.104510] ? find_held_lock+0x36/0x1c0 [ 133.104514] ? get_pid_task+0xd6/0x1a0 [ 133.104519] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 133.104523] ? locks_remove_posix+0x47d/0x840 [ 133.104527] ? vfs_lock_file+0xe0/0xe0 [ 133.104531] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 133.104535] ? fsnotify+0x4e5/0xf20 [ 133.104540] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 133.104544] ? locks_remove_file+0x3c6/0x5c0 [ 133.104548] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 133.104552] ? ima_file_free+0x132/0x650 [ 133.104555] ? fsnotify_first_mark+0x350/0x350 [ 133.104559] ? ima_file_check+0x130/0x130 [ 133.104562] ? fsnotify+0xf20/0xf20 [ 133.104566] ? perf_event_release_kernel+0x10e0/0x10e0 [ 133.104570] perf_release+0x37/0x50 [ 133.104573] __fput+0x385/0xa30 [ 133.104577] ? get_max_files+0x20/0x20 [ 133.104592] ? trace_hardirqs_on+0xbd/0x310 executing program [ 133.104596] ? kasan_check_read+0x11/0x [ 133.104603] Lost 29 message(s)! [ 134.172294] FAULT_INJECTION: forcing a failure. [ 134.172294] name fail_futex, interval 1, probability 0, space 0, times 1 [ 134.173547] ------------[ cut here ]------------ [ 134.188428] downgrading a read lock [ 134.188509] WARNING: CPU: 1 PID: 7460 at kernel/locking/lockdep.c:3556 lock_downgrade+0x4d7/0x900 [ 134.190762] CPU: 0 PID: 7473 Comm: syz-executor239 Not tainted 4.20.0-rc1+ #141 [ 134.192137] Kernel panic - not syncing: panic_on_warn set ... [ 134.201132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 134.223763] Call Trace: [ 134.226347] dump_stack+0x244/0x39d [ 134.229972] ? dump_stack_print_info.cold.1+0x20/0x20 [ 134.235157] ? mark_held_locks+0x130/0x130 [ 134.239386] ? mark_held_locks+0x130/0x130 [ 134.243623] should_fail.cold.4+0xa/0x17 [ 134.247678] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 134.252778] ? mark_held_locks+0x130/0x130 [ 134.257010] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 134.261933] ? mark_held_locks+0x130/0x130 [ 134.266166] ? mark_held_locks+0x130/0x130 [ 134.270397] ? __unlock_page_memcg+0x70/0x100 [ 134.274884] ? unlock_page_memcg+0x2c/0x40 [ 134.279116] ? mark_held_locks+0x130/0x130 [ 134.283342] ? page_add_new_anon_rmap+0xb70/0xb70 [ 134.288176] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 134.293109] ? __debug_object_init+0x57d/0x1290 [ 134.297771] ? lock_downgrade+0x900/0x900 [ 134.301913] ? lock_downgrade+0x900/0x900 [ 134.306061] get_futex_key+0x127d/0x21b0 [ 134.310120] ? fixup_owner+0x250/0x250 [ 134.314001] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 134.319101] ? __debug_object_init+0x57d/0x1290 [ 134.323769] ? mark_held_locks+0x130/0x130 [ 134.328009] ? debug_object_activate+0x402/0x600 [ 134.332757] ? lock_downgrade+0x900/0x900 [ 134.336907] ? trace_hardirqs_on+0xbd/0x310 [ 134.341222] ? kasan_check_read+0x11/0x20 [ 134.345364] ? debug_object_activate+0x402/0x600 [ 134.350117] ? mark_held_locks+0x130/0x130 [ 134.354342] ? lock_downgrade+0x900/0x900 [ 134.358486] ? mark_held_locks+0x130/0x130 [ 134.362892] ? trace_hardirqs_on+0xbd/0x310 [ 134.367205] ? kasan_check_read+0x11/0x20 [ 134.371345] ? debug_object_active_state+0x2f5/0x4d0 [ 134.376443] ? trace_hardirqs_off_caller+0x310/0x310 [ 134.381550] ? lock_downgrade+0x900/0x900 [ 134.385697] ? generic_exec_single+0x1f8/0x5f0 [ 134.390276] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 134.395806] ? check_preemption_disabled+0x48/0x280 [ 134.400825] ? mark_held_locks+0x130/0x130 [ 134.405053] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 134.409808] ? is_bpf_text_address+0xac/0x170 [ 134.414297] ? lock_downgrade+0x900/0x900 [ 134.418445] ? mark_held_locks+0x130/0x130 [ 134.422679] ? kasan_check_read+0x11/0x20 [ 134.426826] ? __debug_object_init+0x57d/0x1290 [ 134.431490] ? lock_downgrade+0x900/0x900 [ 134.435629] ? lock_downgrade+0x900/0x900 [ 134.439775] ? trace_hardirqs_on+0xbd/0x310 [ 134.444093] ? kasan_check_read+0x11/0x20 [ 134.448235] ? __debug_object_init+0x57d/0x1290 [ 134.452897] ? trace_hardirqs_off_caller+0x310/0x310 [ 134.457990] ? do_raw_spin_trylock+0x270/0x270 [ 134.462568] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 134.467503] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 134.472609] ? __debug_object_init+0x57d/0x1290 [ 134.477366] futex_wake+0x1ac/0x760 [ 134.480991] ? kasan_check_read+0x11/0x20 [ 134.485133] ? get_futex_key+0x21b0/0x21b0 [ 134.489363] ? debug_object_active_state+0x2f5/0x4d0 [ 134.494460] ? lock_downgrade+0x900/0x900 [ 134.498607] ? trace_hardirqs_on+0xbd/0x310 [ 134.502923] do_futex+0x2e4/0x26d0 [ 134.506456] ? trace_hardirqs_off+0xb8/0x310 [ 134.510868] ? kasan_check_read+0x11/0x20 [ 134.515012] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 134.520555] ? check_preemption_disabled+0x48/0x280 [ 134.525577] ? exit_robust_list+0x280/0x280 [ 134.529889] ? trace_hardirqs_on+0xbd/0x310 [ 134.534205] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 134.539475] ? debug_object_deactivate+0x450/0x450 [ 134.544393] ? call_rcu+0xb/0x10 [ 134.547757] ? trace_hardirqs_off_caller+0x310/0x310 [ 134.552856] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 134.558385] ? check_preemption_disabled+0x48/0x280 [ 134.563398] ? trace_hardirqs_off_caller+0x310/0x310 [ 134.568492] ? rcu_is_watching+0x30/0x30 [ 134.572554] ? __kasan_slab_free+0x119/0x150 [ 134.576961] ? kzfree+0x28/0x30 [ 134.580237] ? kzfree+0x28/0x30 [ 134.583516] ? blkcg_maybe_throttle_current+0xa38/0x1080 [ 134.588967] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 134.594498] ? check_preemption_disabled+0x48/0x280 [ 134.599529] ? blkg_prfill_rwstat_field_recursive+0x170/0x170 [ 134.605410] ? percpu_counter_add_batch+0x141/0x190 [ 134.610434] ? task_work_run+0x1af/0x2a0 [ 134.614487] ? lock_downgrade+0x900/0x900 [ 134.618633] ? trace_hardirqs_on+0xbd/0x310 [ 134.622959] ? kasan_check_read+0x11/0x20 [ 134.627100] ? task_work_run+0x1af/0x2a0 [ 134.631155] ? trace_hardirqs_off_caller+0x310/0x310 [ 134.636249] ? perf_trace_sched_process_exec+0x860/0x860 [ 134.641691] ? filp_close+0x1cd/0x250 [ 134.645489] ? trace_hardirqs_off+0xb8/0x310 [ 134.649900] __x64_sys_futex+0x472/0x6a0 [ 134.653955] ? do_futex+0x26d0/0x26d0 [ 134.657766] ? trace_hardirqs_on+0xbd/0x310 [ 134.662082] ? exit_to_usermode_loop+0x1f4/0x380 [ 134.666831] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 134.672188] ? trace_hardirqs_off_caller+0x310/0x310 [ 134.677410] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 134.682941] do_syscall_64+0x1b9/0x820 [ 134.686819] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 134.692178] ? syscall_return_slowpath+0x5e0/0x5e0 [ 134.697104] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 134.701944] ? trace_hardirqs_on_caller+0x310/0x310 [ 134.706953] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 134.711962] ? prepare_exit_to_usermode+0x291/0x3b0 [ 134.716977] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 134.721815] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 134.727000] RIP: 0033:0x449e59 [ 134.730191] Code: e8 ac e7 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 bb 02 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 134.749082] RSP: 002b:00007f931b286ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 134.756783] RAX: ffffffffffffffda RBX: 00000000006e59f8 RCX: 0000000000449e59 [ 134.764044] RDX: 0000000000449e59 RSI: 0000000000000081 RDI: 00000000006e59fc [ 134.771304] RBP: 00000000006e59f0 R08: 0000000000000031 R09: 00007ffca656f83f [ 134.778567] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000006e59fc [ 134.786310] R13: 00007ffca656f83f R14: 00007f931b2879c0 R15: 0000000000000004 [ 134.793592] CPU: 1 PID: 7460 Comm: sh Not tainted 4.20.0-rc1+ #141 [ 134.799269] FAULT_INJECTION: forcing a failure. [ 134.799269] name fail_futex, interval 1, probability 0, space 0, times 1 [ 134.799922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 134.799926] Call Trace: [ 134.799947] dump_stack+0x244/0x39d [ 134.799968] ? dump_stack_print_info.cold.1+0x20/0x20 [ 134.813509] FAULT_INJECTION: forcing a failure. [ 134.813509] name fail_futex, interval 1, probability 0, space 0, times 0 [ 134.820651] panic+0x2ad/0x55c [ 134.820667] ? add_taint.cold.5+0x16/0x16 [ 134.850689] ? __warn.cold.8+0x5/0x45 executing program [ 134.854488] ? __warn+0xe8/0x1d0 [ 134.857866] ? lock_downgrade+0x4d7/0x900 [ 134.862016] __warn.cold.8+0x20/0x45 [ 134.865742] ? lock_downgrade+0x4d7/0x900 [ 134.869890] report_bug+0x254/0x2d0 [ 134.873525] do_error_trap+0x11b/0x200 [ 134.877421] do_invalid_op+0x36/0x40 [ 134.881137] ? lock_downgrade+0x4d7/0x900 [ 134.885284] invalid_op+0x14/0x20 [ 134.888742] RIP: 0010:lock_downgrade+0x4d7/0x900 [ 134.893495] Code: 00 00 fc ff df 41 c6 44 05 00 f8 e9 1b ff ff ff 48 c7 c7 60 65 2b 88 4c 89 9d 58 ff ff ff 48 89 85 60 ff ff ff e8 e9 22 e7 ff <0f> 0b 48 8b 85 60 ff ff ff 4c 8d 4d d8 4c 89 e9 48 ba 00 00 00 00 [ 134.912404] RSP: 0018:ffff8801c2b0fb70 EFLAGS: 00010086 [ 134.917762] RAX: 0000000000000000 RBX: 1ffff10038561f74 RCX: 0000000000000000 [ 134.925025] RDX: 0000000000000000 RSI: ffffffff8165e9a5 RDI: 0000000000000006 [ 134.932290] RBP: ffff8801c2b0fc28 R08: ffff8801bbfa0700 R09: fffffbfff12b225c [ 134.939557] R10: fffffbfff12b225c R11: ffffffff895912e3 R12: ffffffff8b0e07a0 [ 134.946823] R13: ffff8801c2b0fbc0 R14: 0000000000000001 R15: ffff8801bbfa0700 [ 134.952034] FAULT_INJECTION: forcing a failure. [ 134.952034] name fail_futex, interval 1, probability 0, space 0, times 0 [ 134.954642] ? vprintk_func+0x85/0x181 [ 134.954664] ? __do_munmap+0xcd8/0xf80 [ 134.954679] ? lock_set_class+0x770/0x770 [ 134.954691] ? perf_trace_sched_process_exec+0x860/0x860 [ 134.954707] downgrade_write+0x76/0x270 [ 134.954721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 134.954732] ? up_read+0x2c0/0x2c0 [ 134.954745] ? vma_compute_subtree_gap+0x160/0x240 [ 134.954757] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 134.954771] __do_munmap+0xcd8/0xf80 [ 134.954786] __vm_munmap+0x138/0x1f0 [ 134.954798] ? __do_munmap+0xf80/0xf80 [ 134.954811] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 134.954826] ? trace_hardirqs_off_caller+0x310/0x310 [ 134.954840] __x64_sys_munmap+0x65/0x80 [ 134.954852] do_syscall_64+0x1b9/0x820 [ 134.954877] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 134.989963] FAULT_INJECTION: forcing a failure. [ 134.989963] name fail_futex, interval 1, probability 0, space 0, times 0 [ 134.993087] ? syscall_return_slowpath+0x5e0/0x5e0 [ 134.993101] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 134.993117] ? trace_hardirqs_on_caller+0x310/0x310 [ 134.993133] ? prepare_exit_to_usermode+0x291/0x3b0 [ 135.033029] FAULT_INJECTION: forcing a failure. [ 135.033029] name fail_futex, interval 1, probability 0, space 0, times 0 [ 135.036086] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 135.036104] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 135.057409] FAULT_INJECTION: forcing a failure. [ 135.057409] name fail_futex, interval 1, probability 0, space 0, times 0 [ 135.057702] RIP: 0033:0x7fc59cdf5417 [ 135.108933] Code: f0 ff ff 73 01 c3 48 8d 0d 8a ad 20 00 31 d2 48 29 c2 89 11 48 83 c8 ff eb eb 90 90 90 90 90 90 90 90 90 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d 5d ad 20 00 31 d2 48 29 c2 89 [ 135.127831] RSP: 002b:00007ffda520c9b8 EFLAGS: 00000203 ORIG_RAX: 000000000000000b [ 135.135536] RAX: ffffffffffffffda RBX: 00007fc59d0001c8 RCX: 00007fc59cdf5417 [ 135.142798] RDX: 000000000031a400 RSI: 00000000000033ef RDI: 00007fc59cff8000 [ 135.150064] RBP: 00007ffda520cb20 R08: 0000000000000001 R09: 0000000000000007 [ 135.157330] R10: 00007fc59cdefa0b R11: 0000000000000203 R12: 000000003556ce08 [ 135.164593] R13: 0000004a3556ce08 R14: 0000004a35266162 R15: 00007fc59cff6700 [ 135.171870] CPU: 0 PID: 7484 Comm: syz-executor239 Not tainted 4.20.0-rc1+ #141 [ 135.179313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.188650] Call Trace: [ 135.191234] dump_stack+0x244/0x39d [ 135.194855] ? dump_stack_print_info.cold.1+0x20/0x20 [ 135.200041] should_fail.cold.4+0xa/0x17 [ 135.204094] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 135.209188] ? mark_held_locks+0x130/0x130 [ 135.213416] ? mark_held_locks+0x130/0x130 [ 135.217645] ? mark_held_locks+0x130/0x130 [ 135.221876] ? mark_held_locks+0x130/0x130 [ 135.226105] ? mark_held_locks+0x130/0x130 [ 135.230331] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 135.235857] ? perf_event_update_time+0x2ad/0x420 [ 135.240697] ? __debug_object_init+0x57d/0x1290 [ 135.245357] ? lock_downgrade+0x900/0x900 [ 135.249505] ? lock_downgrade+0x900/0x900 [ 135.253651] get_futex_key+0x127d/0x21b0 [ 135.257704] ? fixup_owner+0x250/0x250 [ 135.261580] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 135.266678] ? __debug_object_init+0x57d/0x1290 [ 135.271338] ? mark_held_locks+0x130/0x130 [ 135.275567] ? debug_object_activate+0x402/0x600 [ 135.280315] ? lock_downgrade+0x900/0x900 [ 135.284456] ? trace_hardirqs_on+0xbd/0x310 [ 135.288769] ? kasan_check_read+0x11/0x20 [ 135.292911] ? debug_object_activate+0x402/0x600 [ 135.297674] ? mark_held_locks+0x130/0x130 [ 135.301897] ? lock_downgrade+0x900/0x900 [ 135.306039] ? mark_held_locks+0x130/0x130 [ 135.310266] ? trace_hardirqs_on+0xbd/0x310 [ 135.314578] ? kasan_check_read+0x11/0x20 [ 135.318720] ? debug_object_active_state+0x2f5/0x4d0 [ 135.323814] ? trace_hardirqs_off_caller+0x310/0x310 [ 135.328910] ? lock_downgrade+0x900/0x900 [ 135.333046] ? generic_exec_single+0x1f8/0x5f0 [ 135.337626] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 135.343157] ? check_preemption_disabled+0x48/0x280 [ 135.348171] ? mark_held_locks+0x130/0x130 [ 135.352398] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 135.357151] ? is_bpf_text_address+0xac/0x170 [ 135.361635] ? lock_downgrade+0x900/0x900 [ 135.365785] ? mark_held_locks+0x130/0x130 [ 135.370015] ? kasan_check_read+0x11/0x20 [ 135.374161] ? __debug_object_init+0x57d/0x1290 [ 135.378821] ? lock_downgrade+0x900/0x900 [ 135.382971] ? lock_downgrade+0x900/0x900 [ 135.387110] ? trace_hardirqs_on+0xbd/0x310 [ 135.391434] ? kasan_check_read+0x11/0x20 [ 135.395573] ? __debug_object_init+0x57d/0x1290 [ 135.400235] ? trace_hardirqs_off_caller+0x310/0x310 [ 135.405329] ? do_raw_spin_trylock+0x270/0x270 [ 135.409901] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 135.414824] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 135.419922] ? __debug_object_init+0x57d/0x1290 [ 135.424609] futex_wake+0x1ac/0x760 [ 135.428230] ? kasan_check_read+0x11/0x20 [ 135.432378] ? get_futex_key+0x21b0/0x21b0 [ 135.436609] ? debug_object_active_state+0x2f5/0x4d0 [ 135.441703] ? lock_downgrade+0x900/0x900 [ 135.445845] ? trace_hardirqs_on+0xbd/0x310 [ 135.450158] do_futex+0x2e4/0x26d0 [ 135.453707] ? trace_hardirqs_off+0xb8/0x310 [ 135.458108] ? kasan_check_read+0x11/0x20 [ 135.462247] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 135.467775] ? check_preemption_disabled+0x48/0x280 [ 135.472786] ? exit_robust_list+0x280/0x280 [ 135.477100] ? trace_hardirqs_on+0xbd/0x310 [ 135.481409] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 135.486674] ? debug_object_deactivate+0x450/0x450 [ 135.491592] ? call_rcu+0xb/0x10 [ 135.494950] ? trace_hardirqs_off_caller+0x310/0x310 [ 135.500047] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 135.505575] ? check_preemption_disabled+0x48/0x280 [ 135.510588] ? trace_hardirqs_off_caller+0x310/0x310 [ 135.515693] ? rcu_is_watching+0x30/0x30 [ 135.519743] ? __kasan_slab_free+0x119/0x150 [ 135.524147] ? kzfree+0x28/0x30 [ 135.527418] ? kzfree+0x28/0x30 [ 135.530691] ? blkcg_maybe_throttle_current+0xa38/0x1080 [ 135.536128] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 135.541657] ? check_preemption_disabled+0x48/0x280 [ 135.546669] ? blkg_prfill_rwstat_field_recursive+0x170/0x170 [ 135.552547] ? percpu_counter_add_batch+0x141/0x190 [ 135.557557] ? task_work_run+0x1af/0x2a0 [ 135.561615] ? lock_downgrade+0x900/0x900 [ 135.565756] ? trace_hardirqs_on+0xbd/0x310 [ 135.570067] ? kasan_check_read+0x11/0x20 [ 135.574203] ? task_work_run+0x1af/0x2a0 [ 135.578257] ? trace_hardirqs_off_caller+0x310/0x310 [ 135.583349] ? perf_trace_sched_process_exec+0x860/0x860 [ 135.588792] ? filp_close+0x1cd/0x250 [ 135.592588] ? trace_hardirqs_off+0xb8/0x310 [ 135.596990] __x64_sys_futex+0x472/0x6a0 [ 135.601047] ? do_futex+0x26d0/0x26d0 [ 135.604836] ? trace_hardirqs_on+0xbd/0x310 [ 135.609150] ? exit_to_usermode_loop+0x1f4/0x380 [ 135.613898] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 135.619250] ? trace_hardirqs_off_caller+0x310/0x310 [ 135.624346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 135.629874] do_syscall_64+0x1b9/0x820 [ 135.633754] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 135.639107] ? syscall_return_slowpath+0x5e0/0x5e0 [ 135.644030] ? trace_hardirqs_on_caller+0x310/0x310 [ 135.649036] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 135.654046] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 135.660701] ? __switch_to_asm+0x40/0x70 [ 135.664749] ? __switch_to_asm+0x34/0x70 [ 135.668818] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 135.673656] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 135.678837] RIP: 0033:0x449e59 [ 135.682026] Code: e8 ac e7 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 bb 02 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 135.700915] RSP: 002b:00007f931b265ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 135.708614] RAX: ffffffffffffffda RBX: 00000000006e5a08 RCX: 0000000000449e59 [ 135.715872] RDX: 0000000000449e59 RSI: 0000000000000081 RDI: 00000000006e5a0c [ 135.723131] RBP: 00000000006e5a00 R08: 0000000000000031 R09: 00007ffca656f83f [ 135.730396] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000006e5a0c [ 135.737765] R13: 00007ffca656f83f R14: 00007f931b2669c0 R15: 0000000000000001 [ 135.746311] Kernel Offset: disabled [ 135.749933] Rebooting in 86400 seconds..