[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 58.224089][ T26] audit: type=1800 audit(1562456404.887:25): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 58.245398][ T26] audit: type=1800 audit(1562456404.887:26): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 58.266591][ T26] audit: type=1800 audit(1562456404.887:27): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.255' (ECDSA) to the list of known hosts. 2019/07/06 23:40:18 parsed 1 programs 2019/07/06 23:40:20 executed programs: 0 syzkaller login: [ 74.219141][ T8817] IPVS: ftp: loaded support on port[0] = 21 [ 74.223774][ T8816] IPVS: ftp: loaded support on port[0] = 21 [ 74.309500][ T8822] IPVS: ftp: loaded support on port[0] = 21 [ 74.312874][ T8825] IPVS: ftp: loaded support on port[0] = 21 [ 74.334120][ T8824] IPVS: ftp: loaded support on port[0] = 21 [ 74.334130][ T8820] IPVS: ftp: loaded support on port[0] = 21 [ 74.472595][ T8817] chnl_net:caif_netlink_parms(): no params data found [ 74.583382][ T8817] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.593293][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.603309][ T8817] device bridge_slave_0 entered promiscuous mode [ 74.663730][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.674013][ T8817] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.682535][ T8817] device bridge_slave_1 entered promiscuous mode [ 74.699441][ T8816] chnl_net:caif_netlink_parms(): no params data found [ 74.708730][ T8824] chnl_net:caif_netlink_parms(): no params data found [ 74.731554][ T8825] chnl_net:caif_netlink_parms(): no params data found [ 74.762906][ T8817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.799873][ T8817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.869786][ T8817] team0: Port device team_slave_0 added [ 74.887369][ T8824] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.894446][ T8824] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.903501][ T8824] device bridge_slave_0 entered promiscuous mode [ 74.922162][ T8817] team0: Port device team_slave_1 added [ 74.928751][ T8820] chnl_net:caif_netlink_parms(): no params data found [ 74.943305][ T8824] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.950870][ T8824] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.960071][ T8824] device bridge_slave_1 entered promiscuous mode [ 74.980414][ T8825] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.988101][ T8825] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.996405][ T8825] device bridge_slave_0 entered promiscuous mode [ 75.004413][ T8825] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.011539][ T8825] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.020265][ T8825] device bridge_slave_1 entered promiscuous mode [ 75.041807][ T8822] chnl_net:caif_netlink_parms(): no params data found [ 75.058188][ T8816] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.066553][ T8816] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.074327][ T8816] device bridge_slave_0 entered promiscuous mode [ 75.089862][ T8825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.106532][ T8825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.118246][ T8824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.127972][ T8816] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.135024][ T8816] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.146575][ T8816] device bridge_slave_1 entered promiscuous mode [ 75.174178][ T8824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.239804][ T8817] device hsr_slave_0 entered promiscuous mode [ 75.305822][ T8817] device hsr_slave_1 entered promiscuous mode [ 75.392487][ T8825] team0: Port device team_slave_0 added [ 75.410990][ T8816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.428796][ T8816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.440038][ T8825] team0: Port device team_slave_1 added [ 75.453431][ T8824] team0: Port device team_slave_0 added [ 75.463778][ T8824] team0: Port device team_slave_1 added [ 75.478264][ T8820] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.485445][ T8820] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.493299][ T8820] device bridge_slave_0 entered promiscuous mode [ 75.501373][ T8820] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.509201][ T8820] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.519474][ T8820] device bridge_slave_1 entered promiscuous mode [ 75.536917][ T8816] team0: Port device team_slave_0 added [ 75.550609][ T8822] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.558091][ T8822] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.566499][ T8822] device bridge_slave_0 entered promiscuous mode [ 75.574222][ T8822] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.582045][ T8822] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.590234][ T8822] device bridge_slave_1 entered promiscuous mode [ 75.620125][ T8816] team0: Port device team_slave_1 added [ 75.677583][ T8825] device hsr_slave_0 entered promiscuous mode [ 75.725997][ T8825] device hsr_slave_1 entered promiscuous mode [ 75.773655][ T8820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.790681][ T8820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.869532][ T8824] device hsr_slave_0 entered promiscuous mode [ 75.935836][ T8824] device hsr_slave_1 entered promiscuous mode [ 75.987772][ T8822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.037509][ T8816] device hsr_slave_0 entered promiscuous mode [ 76.075984][ T8816] device hsr_slave_1 entered promiscuous mode [ 76.139806][ T8822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.166514][ T8820] team0: Port device team_slave_0 added [ 76.181001][ T8822] team0: Port device team_slave_0 added [ 76.188303][ T8822] team0: Port device team_slave_1 added [ 76.198040][ T8820] team0: Port device team_slave_1 added [ 76.267896][ T8822] device hsr_slave_0 entered promiscuous mode [ 76.305908][ T8822] device hsr_slave_1 entered promiscuous mode [ 76.399409][ T8820] device hsr_slave_0 entered promiscuous mode [ 76.445884][ T8820] device hsr_slave_1 entered promiscuous mode [ 76.522502][ T8825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.568986][ T8816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.581370][ T8824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.603677][ T8817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.615112][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.625146][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.633943][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.642110][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.666458][ T8816] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.677694][ T8825] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.705167][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.715219][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.723980][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.731233][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.740555][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.749442][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.758270][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.765418][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.773228][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.782136][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.789990][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.809241][ T8824] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.820688][ T8817] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.833394][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.841805][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.850701][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.860119][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.870101][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.878845][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.887735][ T3685] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.895559][ T3685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.903464][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.911871][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.939620][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.948785][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.957070][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.965712][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.976505][ T3685] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.984089][ T3685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.992837][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.001807][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.012559][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.021529][ T3685] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.028901][ T3685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.036747][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.047008][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.057409][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.067425][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.076484][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.086283][ T3685] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.093524][ T3685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.101333][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.110721][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.123851][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.132532][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.140550][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.159725][ T8820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.183570][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.195197][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.206185][ T2862] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.213527][ T2862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.221314][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.230001][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.238786][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.247269][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.255892][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.264164][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.272880][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.281476][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.290076][ T2862] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.297283][ T2862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.305164][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.313693][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.321966][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.330385][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.345787][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.354366][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.364018][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.374195][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.382939][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.391351][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.400414][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.419769][ T8822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.431826][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.442010][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.450958][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.460558][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.468888][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.477717][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.487610][ T8825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.513866][ T8820] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.533991][ T8816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.557195][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.572815][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.582965][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.593174][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.602632][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.611102][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.619922][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.628205][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.636118][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.644909][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.653651][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.662787][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.670646][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.678684][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.690704][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.699981][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.708004][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.741847][ T8822] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.770635][ T8825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.789802][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.799798][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.808460][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.818565][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.829237][ T2862] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.836549][ T2862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.844436][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.853583][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.862617][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.871498][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.887758][ T8824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.922503][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.931559][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.941251][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.952901][ T8829] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.960159][ T8829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.969720][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.979008][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.988630][ T8829] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.995835][ T8829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.006497][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.015261][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.027249][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.036629][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.044797][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.053811][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.064487][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.073765][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.084920][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.097932][ T8820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.155983][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.164980][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.214011][ T8817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.241955][ T8820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.259336][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.271351][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.280904][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.297541][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.307361][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.316074][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.324378][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.335189][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.403047][ T8822] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/07/06 23:40:26 executed programs: 8 [ 83.047976][ T9013] [ 83.050381][ T9013] ===================================================== [ 83.057300][ T9013] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 83.064756][ T9013] 5.2.0-rc7-next-20190703 #28 Not tainted [ 83.070461][ T9013] ----------------------------------------------------- [ 83.077385][ T9013] syz-executor.4/9013 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 83.085383][ T9013] 00000000db98b25b (&ctx->fd_wqh){....}, at: io_submit_one+0xefa/0x2ef0 [ 83.093712][ T9013] [ 83.093712][ T9013] and this task is already holding: [ 83.101086][ T9013] 0000000069f2c97f (&(&ctx->ctx_lock)->rlock){..-.}, at: io_submit_one+0xeb5/0x2ef0 [ 83.110502][ T9013] which would create a new lock dependency: [ 83.116389][ T9013] (&(&ctx->ctx_lock)->rlock){..-.} -> (&ctx->fd_wqh){....} [ 83.123696][ T9013] [ 83.123696][ T9013] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 83.133131][ T9013] (&(&ctx->ctx_lock)->rlock){..-.} [ 83.133144][ T9013] [ 83.133144][ T9013] ... which became SOFTIRQ-irq-safe at: [ 83.146094][ T9013] lock_acquire+0x190/0x410 [ 83.150676][ T9013] _raw_spin_lock_irq+0x60/0x80 [ 83.155633][ T9013] free_ioctx_users+0x2d/0x490 [ 83.160474][ T9013] percpu_ref_switch_to_atomic_rcu+0x4c0/0x570 [ 83.167084][ T9013] rcu_core+0x67f/0x1580 [ 83.171558][ T9013] rcu_core_si+0x9/0x10 [ 83.175890][ T9013] __do_softirq+0x262/0x98c [ 83.180473][ T9013] irq_exit+0x19b/0x1e0 [ 83.184713][ T9013] smp_apic_timer_interrupt+0x1a3/0x610 [ 83.191202][ T9013] apic_timer_interrupt+0xf/0x20 [ 83.196231][ T9013] native_safe_halt+0xe/0x10 [ 83.200919][ T9013] arch_cpu_idle+0xa/0x10 [ 83.205324][ T9013] default_idle_call+0x84/0xb0 [ 83.210188][ T9013] do_idle+0x413/0x760 [ 83.214355][ T9013] cpu_startup_entry+0x1b/0x20 [ 83.219684][ T9013] rest_init+0x245/0x37b [ 83.224032][ T9013] arch_call_rest_init+0xe/0x1b [ 83.229306][ T9013] start_kernel+0x8de/0x91d [ 83.234033][ T9013] x86_64_start_reservations+0x29/0x2b [ 83.239594][ T9013] x86_64_start_kernel+0x77/0x7b [ 83.244605][ T9013] secondary_startup_64+0xa4/0xb0 [ 83.249763][ T9013] [ 83.249763][ T9013] to a SOFTIRQ-irq-unsafe lock: [ 83.256764][ T9013] (&ctx->fault_pending_wqh){+.+.} [ 83.256772][ T9013] [ 83.256772][ T9013] ... which became SOFTIRQ-irq-unsafe at: [ 83.269749][ T9013] ... [ 83.269767][ T9013] lock_acquire+0x190/0x410 [ 83.277045][ T9013] _raw_spin_lock+0x2f/0x40 [ 83.281630][ T9013] userfaultfd_release+0x4ca/0x710 [ 83.286816][ T9013] __fput+0x2ff/0x890 [ 83.290901][ T9013] ____fput+0x16/0x20 [ 83.294955][ T9013] task_work_run+0x145/0x1c0 [ 83.299638][ T9013] exit_to_usermode_loop+0x280/0x2d0 [ 83.305012][ T9013] do_syscall_64+0x5a9/0x6a0 [ 83.309676][ T9013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 83.315635][ T9013] [ 83.315635][ T9013] other info that might help us debug this: [ 83.315635][ T9013] [ 83.325850][ T9013] Chain exists of: [ 83.325850][ T9013] &(&ctx->ctx_lock)->rlock --> &ctx->fd_wqh --> &ctx->fault_pending_wqh [ 83.325850][ T9013] [ 83.340074][ T9013] Possible interrupt unsafe locking scenario: [ 83.340074][ T9013] [ 83.348403][ T9013] CPU0 CPU1 [ 83.353844][ T9013] ---- ---- [ 83.359599][ T9013] lock(&ctx->fault_pending_wqh); [ 83.364718][ T9013] local_irq_disable(); [ 83.371745][ T9013] lock(&(&ctx->ctx_lock)->rlock); [ 83.379803][ T9013] lock(&ctx->fd_wqh); [ 83.386580][ T9013] [ 83.390027][ T9013] lock(&(&ctx->ctx_lock)->rlock); [ 83.395401][ T9013] [ 83.395401][ T9013] *** DEADLOCK *** [ 83.395401][ T9013] [ 83.403678][ T9013] 1 lock held by syz-executor.4/9013: [ 83.409894][ T9013] #0: 0000000069f2c97f (&(&ctx->ctx_lock)->rlock){..-.}, at: io_submit_one+0xeb5/0x2ef0 [ 83.419920][ T9013] [ 83.419920][ T9013] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 83.430350][ T9013] -> (&(&ctx->ctx_lock)->rlock){..-.} { [ 83.435930][ T9013] IN-SOFTIRQ-W at: [ 83.439924][ T9013] lock_acquire+0x190/0x410 [ 83.446082][ T9013] _raw_spin_lock_irq+0x60/0x80 [ 83.452577][ T9013] free_ioctx_users+0x2d/0x490 [ 83.458983][ T9013] percpu_ref_switch_to_atomic_rcu+0x4c0/0x570 [ 83.466784][ T9013] rcu_core+0x67f/0x1580 [ 83.472687][ T9013] rcu_core_si+0x9/0x10 [ 83.478476][ T9013] __do_softirq+0x262/0x98c [ 83.484631][ T9013] irq_exit+0x19b/0x1e0 [ 83.490430][ T9013] smp_apic_timer_interrupt+0x1a3/0x610 [ 83.497609][ T9013] apic_timer_interrupt+0xf/0x20 [ 83.504201][ T9013] native_safe_halt+0xe/0x10 [ 83.510705][ T9013] arch_cpu_idle+0xa/0x10 [ 83.516688][ T9013] default_idle_call+0x84/0xb0 [ 83.523123][ T9013] do_idle+0x413/0x760 [ 83.530423][ T9013] cpu_startup_entry+0x1b/0x20 [ 83.536865][ T9013] rest_init+0x245/0x37b [ 83.542842][ T9013] arch_call_rest_init+0xe/0x1b [ 83.549351][ T9013] start_kernel+0x8de/0x91d [ 83.555575][ T9013] x86_64_start_reservations+0x29/0x2b [ 83.562688][ T9013] x86_64_start_kernel+0x77/0x7b [ 83.569266][ T9013] secondary_startup_64+0xa4/0xb0 [ 83.575920][ T9013] INITIAL USE at: [ 83.579803][ T9013] lock_acquire+0x190/0x410 [ 83.585857][ T9013] _raw_spin_lock_irq+0x60/0x80 [ 83.592268][ T9013] free_ioctx_users+0x2d/0x490 [ 83.598599][ T9013] percpu_ref_switch_to_atomic_rcu+0x4c0/0x570 [ 83.606490][ T9013] rcu_core+0x67f/0x1580 [ 83.612316][ T9013] rcu_core_si+0x9/0x10 [ 83.618043][ T9013] __do_softirq+0x262/0x98c [ 83.624096][ T9013] irq_exit+0x19b/0x1e0 [ 83.629821][ T9013] smp_apic_timer_interrupt+0x1a3/0x610 [ 83.637085][ T9013] apic_timer_interrupt+0xf/0x20 [ 83.644566][ T9013] native_safe_halt+0xe/0x10 [ 83.650706][ T9013] arch_cpu_idle+0xa/0x10 [ 83.656592][ T9013] default_idle_call+0x84/0xb0 [ 83.662934][ T9013] do_idle+0x413/0x760 [ 83.668567][ T9013] cpu_startup_entry+0x1b/0x20 [ 83.674992][ T9013] rest_init+0x245/0x37b [ 83.683312][ T9013] arch_call_rest_init+0xe/0x1b [ 83.689718][ T9013] start_kernel+0x8de/0x91d [ 83.695950][ T9013] x86_64_start_reservations+0x29/0x2b [ 83.703059][ T9013] x86_64_start_kernel+0x77/0x7b [ 83.709557][ T9013] secondary_startup_64+0xa4/0xb0 [ 83.716147][ T9013] } [ 83.719598][ T9013] ... key at: [] __key.53855+0x0/0x40 [ 83.727260][ T9013] ... acquired at: [ 83.731064][ T9013] lock_acquire+0x190/0x410 [ 83.735734][ T9013] _raw_spin_lock+0x2f/0x40 [ 83.740401][ T9013] io_submit_one+0xefa/0x2ef0 [ 83.745240][ T9013] __x64_sys_io_submit+0x1bd/0x570 [ 83.750536][ T9013] do_syscall_64+0xfd/0x6a0 [ 83.755209][ T9013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 83.761284][ T9013] [ 83.763616][ T9013] [ 83.763616][ T9013] the dependencies between the lock to be acquired [ 83.763620][ T9013] and SOFTIRQ-irq-unsafe lock: [ 83.777434][ T9013] -> (&ctx->fault_pending_wqh){+.+.} { [ 83.782967][ T9013] HARDIRQ-ON-W at: [ 83.787052][ T9013] lock_acquire+0x190/0x410 [ 83.793374][ T9013] _raw_spin_lock+0x2f/0x40 [ 83.799710][ T9013] userfaultfd_release+0x4ca/0x710 [ 83.806801][ T9013] __fput+0x2ff/0x890 [ 83.812832][ T9013] ____fput+0x16/0x20 [ 83.818626][ T9013] task_work_run+0x145/0x1c0 [ 83.825060][ T9013] exit_to_usermode_loop+0x280/0x2d0 [ 83.832398][ T9013] do_syscall_64+0x5a9/0x6a0 [ 83.838810][ T9013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 83.846504][ T9013] SOFTIRQ-ON-W at: [ 83.850573][ T9013] lock_acquire+0x190/0x410 [ 83.856926][ T9013] _raw_spin_lock+0x2f/0x40 [ 83.863294][ T9013] userfaultfd_release+0x4ca/0x710 [ 83.870671][ T9013] __fput+0x2ff/0x890 [ 83.876467][ T9013] ____fput+0x16/0x20 [ 83.882277][ T9013] task_work_run+0x145/0x1c0 [ 83.888704][ T9013] exit_to_usermode_loop+0x280/0x2d0 [ 83.895824][ T9013] do_syscall_64+0x5a9/0x6a0 [ 83.902225][ T9013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 83.909917][ T9013] INITIAL USE at: [ 83.913905][ T9013] lock_acquire+0x190/0x410 [ 83.920131][ T9013] _raw_spin_lock+0x2f/0x40 [ 83.926363][ T9013] userfaultfd_read+0x54d/0x1940 [ 83.933044][ T9013] __vfs_read+0x8a/0x110 [ 83.939123][ T9013] vfs_read+0x1f0/0x440 [ 83.945012][ T9013] ksys_read+0x14f/0x290 [ 83.950974][ T9013] __x64_sys_read+0x73/0xb0 [ 83.957208][ T9013] do_syscall_64+0xfd/0x6a0 [ 83.965219][ T9013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 83.972859][ T9013] } [ 83.983389][ T9013] ... key at: [] __key.46572+0x0/0x40 [ 83.991228][ T9013] ... acquired at: [ 83.995184][ T9013] _raw_spin_lock+0x2f/0x40 [ 83.999877][ T9013] userfaultfd_read+0x54d/0x1940 [ 84.005090][ T9013] __vfs_read+0x8a/0x110 [ 84.009495][ T9013] vfs_read+0x1f0/0x440 [ 84.013807][ T9013] ksys_read+0x14f/0x290 [ 84.018210][ T9013] __x64_sys_read+0x73/0xb0 [ 84.022883][ T9013] do_syscall_64+0xfd/0x6a0 [ 84.027546][ T9013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 84.033590][ T9013] [ 84.035929][ T9013] -> (&ctx->fd_wqh){....} { [ 84.040504][ T9013] INITIAL USE at: [ 84.044407][ T9013] lock_acquire+0x190/0x410 [ 84.050467][ T9013] _raw_spin_lock_irq+0x60/0x80 [ 84.057229][ T9013] userfaultfd_read+0x27a/0x1940 [ 84.063754][ T9013] __vfs_read+0x8a/0x110 [ 84.069561][ T9013] vfs_read+0x1f0/0x440 [ 84.075262][ T9013] ksys_read+0x14f/0x290 [ 84.081055][ T9013] __x64_sys_read+0x73/0xb0 [ 84.087130][ T9013] do_syscall_64+0xfd/0x6a0 [ 84.093193][ T9013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 84.100750][ T9013] } [ 84.103291][ T9013] ... key at: [] __key.46575+0x0/0x40 [ 84.110895][ T9013] ... acquired at: [ 84.114696][ T9013] lock_acquire+0x190/0x410 [ 84.119370][ T9013] _raw_spin_lock+0x2f/0x40 [ 84.124039][ T9013] io_submit_one+0xefa/0x2ef0 [ 84.129033][ T9013] __x64_sys_io_submit+0x1bd/0x570 [ 84.135103][ T9013] do_syscall_64+0xfd/0x6a0 [ 84.139955][ T9013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 84.146021][ T9013] [ 84.148336][ T9013] [ 84.148336][ T9013] stack backtrace: [ 84.154268][ T9013] CPU: 1 PID: 9013 Comm: syz-executor.4 Not tainted 5.2.0-rc7-next-20190703 #28 [ 84.163410][ T9013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.173456][ T9013] Call Trace: [ 84.176736][ T9013] dump_stack+0x172/0x1f0 [ 84.181091][ T9013] check_irq_usage.cold+0x5b4/0x72e [ 84.186280][ T9013] ? check_usage_forwards+0x330/0x330 [ 84.191667][ T9013] ? check_path+0x26/0x40 [ 84.196147][ T9013] ? kasan_check_read+0x11/0x20 [ 84.201273][ T9013] ? check_noncircular+0x16a/0x3e0 [ 84.206380][ T9013] ? print_circular_bug+0x200/0x200 [ 84.211572][ T9013] ? __lockdep_reset_lock+0x450/0x450 [ 84.216970][ T9013] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 84.223209][ T9013] __lock_acquire+0x25bd/0x4c20 [ 84.229352][ T9013] ? __lock_acquire+0x25bd/0x4c20 [ 84.235498][ T9013] ? mark_held_locks+0xf0/0xf0 [ 84.240685][ T9013] ? trace_hardirqs_on+0x67/0x240 [ 84.245744][ T9013] ? kasan_check_read+0x11/0x20 [ 84.250627][ T9013] lock_acquire+0x190/0x410 [ 84.255233][ T9013] ? io_submit_one+0xefa/0x2ef0 [ 84.260090][ T9013] _raw_spin_lock+0x2f/0x40 [ 84.265022][ T9013] ? io_submit_one+0xefa/0x2ef0 [ 84.270092][ T9013] io_submit_one+0xefa/0x2ef0 [ 84.275248][ T9013] ? lookup_ioctx+0x1d7/0x830 [ 84.279920][ T9013] ? ioctx_alloc+0x1dc0/0x1dc0 [ 84.284673][ T9013] ? aio_setup_rw+0x180/0x180 [ 84.289360][ T9013] __x64_sys_io_submit+0x1bd/0x570 [ 84.296048][ T9013] ? __x64_sys_io_submit+0x1bd/0x570 [ 84.301325][ T9013] ? __ia32_sys_io_destroy+0x420/0x420 [ 84.306811][ T9013] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 84.312377][ T9013] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 84.317824][ T9013] ? do_syscall_64+0x26/0x6a0 [ 84.322488][ T9013] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 84.328565][ T9013] ? do_syscall_64+0x26/0x6a0 [ 84.333230][ T9013] ? lockdep_hardirqs_on+0x418/0x5d0 [ 84.338522][ T9013] do_syscall_64+0xfd/0x6a0 [ 84.343036][ T9013] ? do_syscall_64+0xfd/0x6a0 [ 84.347740][ T9013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 84.353640][ T9013] RIP: 0033:0x4597c9 [ 84.357536][ T9013] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 84.377708][ T9013] RSP: 002b:00007f3d4bb23c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 84.387120][ T9013] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004597c9 [ 84.395082][ T9013] RDX: 0000000020000600 RSI: 0000000000000001 RDI: 00007f3d4bb25000 2019/07/06 23:40:31 executed programs: 32 [ 84.403069][ T9013] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 84.411034][ T9013] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3d4bb246d4 [ 84.419026][ T9013] R13: 00000000004c0b97 R14: 00000000004d3908 R15: 00000000ffffffff [ 84.445260][ T3880] kobject: 'loop0' (00000000e0f5d30b): kobject_uevent_env [ 84.455072][ T3880] kobject: 'loop0' (00000000e0f5d30b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 84.502099][ T3880] kobject: 'loop3' (0000000019474027): kobject_uevent_env [ 84.510055][ T3880] kobject: 'loop3' (0000000019474027): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 84.542990][ T3880] kobject: 'loop1' (000000009ed50bb6): kobject_uevent_env [ 84.550757][ T3880] kobject: 'loop1' (000000009ed50bb6): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 84.567482][ T3880] kobject: 'loop5' (0000000001d8cc27): kobject_uevent_env [ 84.576142][ T3880] kobject: 'loop5' (0000000001d8cc27): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 84.590271][ T3880] kobject: 'loop2' (00000000a1c2a204): kobject_uevent_env [ 84.597914][ T3880] kobject: 'loop2' (00000000a1c2a204): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 84.611104][ T3880] kobject: 'loop4' (0000000013ed4810): kobject_uevent_env [ 84.618347][ T3880] kobject: 'loop4' (0000000013ed4810): fill_kobj_path: path = '/devices/virtual/block/loop4'