[ 33.909029][ T26] audit: type=1800 audit(1553333440.885:27): pid=7350 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 33.935562][ T26] audit: type=1800 audit(1553333440.885:28): pid=7350 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 34.702952][ T26] audit: type=1800 audit(1553333441.745:29): pid=7350 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 34.723376][ T26] audit: type=1800 audit(1553333441.745:30): pid=7350 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.212' (ECDSA) to the list of known hosts. syzkaller login: [ 599.798738][ T7505] IPVS: ftp: loaded support on port[0] = 21 [ 599.871615][ T7505] chnl_net:caif_netlink_parms(): no params data found [ 599.906373][ T7505] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.914879][ T7505] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.923560][ T7505] device bridge_slave_0 entered promiscuous mode [ 599.931861][ T7505] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.939673][ T7505] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.947448][ T7505] device bridge_slave_1 entered promiscuous mode [ 599.963748][ T7505] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 599.973520][ T7505] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 599.991502][ T7505] team0: Port device team_slave_0 added [ 599.999475][ T7505] team0: Port device team_slave_1 added [ 600.054940][ T7505] device hsr_slave_0 entered promiscuous mode [ 600.102644][ T7505] device hsr_slave_1 entered promiscuous mode [ 600.149550][ T7505] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.156803][ T7505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.164797][ T7505] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.172234][ T7505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.204791][ T7505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.215186][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 600.226913][ T7509] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.235478][ T7509] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.243693][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 600.256524][ T7505] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.266963][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 600.275785][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.282924][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.303253][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 600.311902][ T7509] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.319405][ T7509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.327973][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 600.336722][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 600.347356][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready executing program [ 600.355375][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 600.366801][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 600.376934][ T7505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 600.395126][ T7505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.410290][ T7505] IPVS: ftp: loaded support on port[0] = 21 [ 870.492425][ T1041] INFO: task kworker/0:2:2996 blocked for more than 143 seconds. [ 870.500402][ T1041] Not tainted 5.1.0-rc1+ #33 [ 870.506218][ T1041] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 870.515203][ T1041] kworker/0:2 D25448 2996 2 0x80000000 [ 870.522101][ T1041] Workqueue: events linkwatch_event [ 870.527475][ T1041] Call Trace: [ 870.530794][ T1041] __schedule+0x817/0x1cc0 [ 870.535392][ T1041] ? __mutex_lock+0x721/0x1310 [ 870.540357][ T1041] ? __sched_text_start+0x8/0x8 [ 870.545373][ T1041] schedule+0x92/0x180 [ 870.549534][ T1041] schedule_preempt_disabled+0x13/0x20 [ 870.555068][ T1041] __mutex_lock+0x726/0x1310 [ 870.559691][ T1041] ? rtnl_lock+0x17/0x20 [ 870.564034][ T1041] ? mutex_trylock+0x1e0/0x1e0 [ 870.568857][ T1041] ? mark_held_locks+0xf0/0xf0 [ 870.573745][ T1041] ? process_one_work+0x890/0x1790 [ 870.578979][ T1041] mutex_lock_nested+0x16/0x20 [ 870.583824][ T1041] ? mutex_lock_nested+0x16/0x20 [ 870.588855][ T1041] rtnl_lock+0x17/0x20 [ 870.593147][ T1041] linkwatch_event+0xf/0x70 [ 870.597776][ T1041] process_one_work+0x98e/0x1790 [ 870.603012][ T1041] ? pwq_dec_nr_in_flight+0x320/0x320 [ 870.608397][ T1041] ? lock_acquire+0x16f/0x3f0 [ 870.613156][ T1041] worker_thread+0x98/0xe40 [ 870.617676][ T1041] kthread+0x357/0x430 [ 870.621738][ T1041] ? process_one_work+0x1790/0x1790 [ 870.627067][ T1041] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 870.633962][ T1041] ret_from_fork+0x3a/0x50 [ 870.638450][ T1041] INFO: task kworker/u4:1:7508 blocked for more than 143 seconds. [ 870.646372][ T1041] Not tainted 5.1.0-rc1+ #33 [ 870.651482][ T1041] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 870.660217][ T1041] kworker/u4:1 D26488 7508 2 0x80000000 [ 870.666683][ T1041] Workqueue: netns cleanup_net [ 870.671582][ T1041] Call Trace: [ 870.674949][ T1041] __schedule+0x817/0x1cc0 [ 870.679621][ T1041] ? __mutex_lock+0x721/0x1310 [ 870.684521][ T1041] ? __sched_text_start+0x8/0x8 [ 870.689419][ T1041] schedule+0x92/0x180 [ 870.693547][ T1041] schedule_preempt_disabled+0x13/0x20 [ 870.699019][ T1041] __mutex_lock+0x726/0x1310 [ 870.703700][ T1041] ? rtnl_lock+0x17/0x20 [ 870.707950][ T1041] ? mutex_trylock+0x1e0/0x1e0 [ 870.712800][ T1041] ? __lock_acquire+0x548/0x3fb0 [ 870.717809][ T1041] ? lock_downgrade+0x880/0x880 [ 870.722863][ T1041] ? kcm_exit_net+0x135/0x2b0 [ 870.727556][ T1041] mutex_lock_nested+0x16/0x20 [ 870.732369][ T1041] ? mutex_lock_nested+0x16/0x20 [ 870.737321][ T1041] rtnl_lock+0x17/0x20 [ 870.741449][ T1041] ip6gre_exit_batch_net+0x8e/0x750 [ 870.746857][ T1041] ? lock_downgrade+0x880/0x880 [ 870.751962][ T1041] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 870.758366][ T1041] ? ip6gre_tunnel_link+0x100/0x100 [ 870.764090][ T1041] ? ip6gre_tunnel_link+0x100/0x100 [ 870.769299][ T1041] ops_exit_list.isra.0+0x105/0x160 [ 870.774662][ T1041] cleanup_net+0x3fb/0x960 [ 870.779123][ T1041] ? netns_install+0x1d0/0x1d0 [ 870.784044][ T1041] process_one_work+0x98e/0x1790 [ 870.789019][ T1041] ? pwq_dec_nr_in_flight+0x320/0x320 [ 870.794508][ T1041] ? lock_acquire+0x16f/0x3f0 [ 870.799253][ T1041] worker_thread+0x98/0xe40 [ 870.804021][ T1041] ? trace_hardirqs_on+0x67/0x230 [ 870.809093][ T1041] kthread+0x357/0x430 [ 870.813528][ T1041] ? process_one_work+0x1790/0x1790 [ 870.818761][ T1041] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 870.825213][ T1041] ret_from_fork+0x3a/0x50 [ 870.829702][ T1041] INFO: task kworker/0:3:7510 blocked for more than 143 seconds. [ 870.837710][ T1041] Not tainted 5.1.0-rc1+ #33 [ 870.842900][ T1041] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 870.851623][ T1041] kworker/0:3 D27936 7510 2 0x80000000 [ 870.854085][ T7505] kobject: 'rx-0' (0000000077f209a3): kobject_cleanup, parent 0000000095ecbe4b [ 870.858163][ T1041] Workqueue: ipv6_addrconf addrconf_verify_work [ 870.873333][ T1041] Call Trace: [ 870.876679][ T1041] __schedule+0x817/0x1cc0 [ 870.881120][ T1041] ? __mutex_lock+0x721/0x1310 [ 870.885979][ T1041] ? __sched_text_start+0x8/0x8 [ 870.891135][ T1041] schedule+0x92/0x180 [ 870.895947][ T1041] schedule_preempt_disabled+0x13/0x20 [ 870.901500][ T1041] __mutex_lock+0x726/0x1310 [ 870.906246][ T1041] ? rtnl_lock+0x17/0x20 [ 870.910511][ T1041] ? mutex_trylock+0x1e0/0x1e0 [ 870.915354][ T1041] ? mark_held_locks+0xf0/0xf0 [ 870.920246][ T1041] ? process_one_work+0x890/0x1790 [ 870.925483][ T1041] mutex_lock_nested+0x16/0x20 [ 870.930619][ T1041] ? mutex_lock_nested+0x16/0x20 [ 870.935800][ T1041] rtnl_lock+0x17/0x20 [ 870.939881][ T1041] addrconf_verify_work+0xe/0x20 [ 870.945105][ T1041] process_one_work+0x98e/0x1790 [ 870.950084][ T1041] ? pwq_dec_nr_in_flight+0x320/0x320 [ 870.955523][ T1041] ? lock_acquire+0x16f/0x3f0 [ 870.960395][ T1041] worker_thread+0x98/0xe40 [ 870.965290][ T1041] ? trace_hardirqs_on+0x67/0x230 [ 870.970438][ T1041] kthread+0x357/0x430 [ 870.974593][ T1041] ? process_one_work+0x1790/0x1790 [ 870.979850][ T1041] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 870.986229][ T1041] ret_from_fork+0x3a/0x50 [ 870.990772][ T1041] [ 870.990772][ T1041] Showing all locks held in the system: [ 870.998596][ T1041] 1 lock held by khungtaskd/1041: [ 871.003675][ T1041] #0: 000000007106f882 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 871.013087][ T1041] 3 locks held by kworker/0:2/2996: [ 871.018276][ T1041] #0: 00000000c74c34f7 ((wq_completion)events){+.+.}, at: process_one_work+0x87e/0x1790 [ 871.028831][ T1041] #1: 000000000ba543fd ((linkwatch_work).work){+.+.}, at: process_one_work+0x8b4/0x1790 [ 871.038893][ T1041] #2: 000000009eebb218 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 871.046989][ T1041] 1 lock held by rsyslogd/7388: [ 871.051872][ T1041] #0: 00000000ace5cadc (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 871.060913][ T1041] 2 locks held by getty/7478: [ 871.065658][ T1041] #0: 00000000313ab2c7 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 871.074837][ T1041] #1: 000000003b6eb669 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 871.084590][ T1041] 2 locks held by getty/7479: [ 871.089254][ T1041] #0: 000000004357648c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 871.098296][ T1041] #1: 000000000ff60fdd (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 871.108201][ T1041] 2 locks held by getty/7480: [ 871.112965][ T1041] #0: 00000000bba63480 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 871.122063][ T1041] #1: 00000000ec92ab6f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 871.131777][ T1041] 2 locks held by getty/7481: [ 871.136521][ T1041] #0: 00000000689ffa67 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 871.145879][ T1041] #1: 000000006b4b544c (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 871.156408][ T1041] 2 locks held by getty/7482: [ 871.161100][ T1041] #0: 0000000005cca694 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 871.170223][ T1041] #1: 000000006d486805 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 871.179901][ T1041] 2 locks held by getty/7483: [ 871.184671][ T1041] #0: 00000000dc4d720a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 871.193999][ T1041] #1: 00000000ae7ff028 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 871.203687][ T1041] 2 locks held by getty/7484: [ 871.208379][ T1041] #0: 000000003a6f1357 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 871.217475][ T1041] #1: 00000000d3b0de77 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 871.227268][ T1041] 1 lock held by syz-executor035/7505: [ 871.233158][ T1041] 4 locks held by kworker/u4:1/7508: [ 871.238536][ T1041] #0: 000000002cb8bd94 ((wq_completion)netns){+.+.}, at: process_one_work+0x87e/0x1790 [ 871.248388][ T1041] #1: 00000000af22df40 (net_cleanup_work){+.+.}, at: process_one_work+0x8b4/0x1790 [ 871.257857][ T1041] #2: 00000000f48ba3a3 (pernet_ops_rwsem){++++}, at: cleanup_net+0xae/0x960 [ 871.266722][ T1041] #3: 000000009eebb218 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 871.274997][ T1041] 3 locks held by kworker/0:3/7510: [ 871.280190][ T1041] #0: 00000000a1446d39 ((wq_completion)ipv6_addrconf){+.+.}, at: process_one_work+0x87e/0x1790 [ 871.291364][ T1041] #1: 0000000032038b13 ((addr_chk_work).work){+.+.}, at: process_one_work+0x8b4/0x1790 [ 871.301279][ T1041] #2: 000000009eebb218 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 871.309513][ T1041] [ 871.311829][ T1041] ============================================= [ 871.311829][ T1041] [ 871.320451][ T1041] NMI backtrace for cpu 1 [ 871.324856][ T1041] CPU: 1 PID: 1041 Comm: khungtaskd Not tainted 5.1.0-rc1+ #33 [ 871.332490][ T1041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 871.342666][ T1041] Call Trace: [ 871.346040][ T1041] dump_stack+0x172/0x1f0 [ 871.350471][ T1041] nmi_cpu_backtrace.cold+0x63/0xa4 [ 871.355846][ T1041] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 871.361571][ T1041] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 871.367897][ T1041] arch_trigger_cpumask_backtrace+0x14/0x20 [ 871.373775][ T1041] watchdog+0x9b7/0xec0 [ 871.378045][ T1041] kthread+0x357/0x430 [ 871.382099][ T1041] ? reset_hung_task_detector+0x30/0x30 [ 871.387636][ T1041] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 871.393876][ T1041] ret_from_fork+0x3a/0x50 [ 871.398428][ T1041] Sending NMI from CPU 1 to CPUs 0: [ 871.403814][ C0] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x2/0x10 [ 871.404728][ T1041] Kernel panic - not syncing: hung_task: blocked tasks [ 871.418902][ T1041] CPU: 1 PID: 1041 Comm: khungtaskd Not tainted 5.1.0-rc1+ #33 [ 871.426473][ T1041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 871.436689][ T1041] Call Trace: [ 871.439981][ T1041] dump_stack+0x172/0x1f0 [ 871.444471][ T1041] panic+0x2cb/0x65c [ 871.448367][ T1041] ? __warn_printk+0xf3/0xf3 [ 871.452980][ T1041] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 871.458746][ T1041] ? printk_safe_flush+0xf2/0x140 [ 871.463765][ T1041] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 871.470296][ T1041] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 871.475939][ T1041] ? nmi_trigger_cpumask_backtrace+0x1a7/0x236 [ 871.482106][ T1041] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 871.488269][ T1041] watchdog+0x9c8/0xec0 [ 871.492451][ T1041] kthread+0x357/0x430 [ 871.496603][ T1041] ? reset_hung_task_detector+0x30/0x30 [ 871.502164][ T1041] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 871.508420][ T1041] ret_from_fork+0x3a/0x50 [ 871.514268][ T1041] Kernel Offset: disabled [ 871.518662][ T1041] Rebooting in 86400 seconds..