[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 61.486394][ T26] audit: type=1800 audit(1569909274.538:25): pid=8925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 61.513303][ T26] audit: type=1800 audit(1569909274.538:26): pid=8925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 61.557893][ T26] audit: type=1800 audit(1569909274.538:27): pid=8925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.122' (ECDSA) to the list of known hosts. syzkaller login: [ 73.594412][ T9077] IPVS: ftp: loaded support on port[0] = 21 [ 73.657016][ T9077] chnl_net:caif_netlink_parms(): no params data found [ 73.688790][ T9077] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.697697][ T9077] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.706339][ T9077] device bridge_slave_0 entered promiscuous mode [ 73.715639][ T9077] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.723674][ T9077] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.731892][ T9077] device bridge_slave_1 entered promiscuous mode [ 73.753912][ T9077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.765666][ T9077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.787643][ T9077] team0: Port device team_slave_0 added [ 73.795523][ T9077] team0: Port device team_slave_1 added [ 73.874012][ T9077] device hsr_slave_0 entered promiscuous mode [ 73.941125][ T9077] device hsr_slave_1 entered promiscuous mode [ 74.030195][ T9077] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.038696][ T9077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.047215][ T9077] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.056538][ T9077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.097227][ T9077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.113247][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.135973][ T9079] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.145931][ T9079] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.155663][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 74.170352][ T9077] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.182841][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.192652][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.200552][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.221146][ T9080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.231193][ T9080] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.238733][ T9080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.247969][ T9080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.260784][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.272617][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.288911][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.303897][ T9077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.323142][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.333571][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready executing program [ 74.355868][ T9077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.442521][ T9088] [ 74.445789][ T9088] ================================================ [ 74.452590][ T9088] WARNING: lock held when returning to user space! [ 74.459586][ T9088] 5.4.0-rc1-next-20191001 #0 Not tainted [ 74.465742][ T9088] ------------------------------------------------ [ 74.474342][ T9088] syz-executor589/9088 is leaving the kernel with locks still held! [ 74.483837][ T9088] 1 lock held by syz-executor589/9088: [ 74.489979][ T9088] #0: ffffffff88faadc0 (rcu_read_lock){....}, at: membarrier_private_expedited+0x180/0x590 [ 74.501435][ T9088] ------------[ cut here ]------------ [ 74.507823][ T9088] WARNING: CPU: 0 PID: 9088 at kernel/rcu/tree_plugin.h:293 rcu_note_context_switch+0x373/0x1910 [ 74.518872][ T9088] Kernel panic - not syncing: panic_on_warn set ... [ 74.526479][ T9088] CPU: 0 PID: 9088 Comm: syz-executor589 Not tainted 5.4.0-rc1-next-20191001 #0 [ 74.535842][ T9088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.547152][ T9088] Call Trace: [ 74.550763][ T9088] dump_stack+0x172/0x1f0 [ 74.555330][ T9088] ? rcu_note_context_switch+0x330/0x1910 [ 74.562319][ T9088] panic+0x2dc/0x755 [ 74.566831][ T9088] ? add_taint.cold+0x16/0x16 [ 74.571851][ T9088] ? printk+0xba/0xed [ 74.576074][ T9088] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 74.581619][ T9088] ? __warn.cold+0x14/0x3c [ 74.589565][ T9088] ? __warn+0xd9/0x1d0 [ 74.593695][ T9088] ? rcu_note_context_switch+0x373/0x1910 [ 74.600268][ T9088] __warn.cold+0x2f/0x3c [ 74.604667][ T9088] ? report_bug.cold+0x63/0xad [ 74.609791][ T9088] ? rcu_note_context_switch+0x373/0x1910 [ 74.615843][ T9088] report_bug+0x289/0x300 [ 74.620633][ T9088] do_error_trap+0x11b/0x200 [ 74.627052][ T9088] do_invalid_op+0x37/0x50 [ 74.631934][ T9088] ? rcu_note_context_switch+0x373/0x1910 [ 74.638101][ T9088] invalid_op+0x23/0x30 [ 74.642617][ T9088] RIP: 0010:rcu_note_context_switch+0x373/0x1910 [ 74.654410][ T9088] Code: 8b 13 48 85 d2 75 c3 48 8b 5d c8 65 ff 0d dd 75 a1 7e 0f 85 fa fc ff ff e8 4a df 9f ff e9 f0 fc ff ff 85 d2 0f 8e 62 fe ff ff <0f> 0b e9 1f fe ff ff 65 8b 1d ff 0a a1 7e 83 fb 3f 0f 87 0d 0e 00 [ 74.675268][ T9088] RSP: 0000:ffff888090017d60 EFLAGS: 00010002 [ 74.681493][ T9088] RAX: ffffffff89c60674 RBX: ffff8880ae835ac0 RCX: 1ffff110148334c7 [ 74.690051][ T9088] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8880a419a638 [ 74.698500][ T9088] RBP: ffff888090017dd0 R08: 1ffffffff138ba90 R09: fffffbfff138ba91 [ 74.707601][ T9088] R10: fffffbfff138ba90 R11: ffffffff89c5d487 R12: 0000000000000000 [ 74.715892][ T9088] R13: ffff8880a419a2c0 R14: 0000000000000000 R15: ffff8880ae834d18 [ 74.724316][ T9088] ? schedule+0xd9/0x260 [ 74.728633][ T9088] ? trace_hardirqs_off+0x62/0x240 [ 74.734235][ T9088] __schedule+0x25e/0x1e70 [ 74.738866][ T9088] ? printk+0xba/0xed [ 74.743112][ T9088] ? __sched_text_start+0x8/0x8 [ 74.748298][ T9088] ? print_lock_name+0x83/0xa7 [ 74.753972][ T9088] ? save_trace.cold+0x19/0x19 [ 74.759247][ T9088] schedule+0xd9/0x260 [ 74.764534][ T9088] exit_to_usermode_loop+0x195/0x380 [ 74.771476][ T9088] prepare_exit_to_usermode+0x2ff/0x370 [ 74.778399][ T9088] retint_user+0x8/0x18 [ 74.783703][ T9088] RIP: 0033:0x446ed9 [ 74.788124][ T9088] Code: e8 5c 14 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 ab 0e fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 74.810035][ T9088] RSP: 002b:00007f082bf04db8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 74.818809][ T9088] RAX: 0000000000000000 RBX: 00000000006dcc38 RCX: 0000000000446ed9 [ 74.827707][ T9088] RDX: 0000000000403494 RSI: 0000000000000000 RDI: 0000000100000008 [ 74.836352][ T9088] RBP: 00000000006dcc30 R08: 00007f082bf05700 R09: 0000000000000000 [ 74.844533][ T9088] R10: 00007f082bf05700 R11: 0000000000000246 R12: 00000000006dcc3c [ 74.852737][ T9088] R13: 00007ffef65e667f R14: 00007f082bf059c0 R15: 0000000000000001 [ 74.863129][ T9088] Kernel Offset: disabled [ 74.868146][ T9088] Rebooting in 86400 seconds..