====================================================== WARNING: possible circular locking dependency detected 4.20.0-rc6+ #184 Not tainted ------------------------------------------------------ syz-executor4/8201 is trying to acquire lock: 00000000d44d12a5 (&tbl->lock){+.-.}, at: neigh_change_state+0x1dc/0x7a0 net/core/neighbour.c:141 but task is already holding lock: 00000000c785a610 (&n->lock){++--}, at: __neigh_update+0xe6/0x1eb0 net/core/neighbour.c:1203 which lock already depends on the new lock. kobject: 'loop0' (0000000031f36e24): kobject_uevent_env the existing dependency chain (in reverse order) is: -> #1 (&n->lock){++--}: __raw_write_lock include/linux/rwlock_api_smp.h:210 [inline] _raw_write_lock+0x2d/0x40 kernel/locking/spinlock.c:288 neigh_flush_dev+0x34f/0x960 net/core/neighbour.c:294 neigh_changeaddr+0x31/0x40 net/core/neighbour.c:325 ndisc_netdev_event+0xe6/0x5b0 net/ipv6/ndisc.c:1770 notifier_call_chain+0x17e/0x380 kernel/notifier.c:93 __raw_notifier_call_chain kernel/notifier.c:394 [inline] raw_notifier_call_chain+0x2d/0x40 kernel/notifier.c:401 call_netdevice_notifiers_info+0x3f/0x90 net/core/dev.c:1737 call_netdevice_notifiers_extack net/core/dev.c:1749 [inline] call_netdevice_notifiers net/core/dev.c:1763 [inline] dev_set_mac_address+0x293/0x3b0 net/core/dev.c:7780 do_setlink+0x7c7/0x3f30 net/core/rtnetlink.c:2447 __rtnl_newlink+0xcde/0x19e0 net/core/rtnetlink.c:3115 rtnl_newlink+0x6b/0xa0 net/core/rtnetlink.c:3240 rtnetlink_rcv_msg+0x46a/0xc20 net/core/rtnetlink.c:4969 netlink_rcv_skb+0x172/0x440 net/netlink/af_netlink.c:2477 rtnetlink_rcv+0x1c/0x20 net/core/rtnetlink.c:4987 netlink_unicast_kernel net/netlink/af_netlink.c:1310 [inline] netlink_unicast+0x5a5/0x760 net/netlink/af_netlink.c:1336 netlink_sendmsg+0xa18/0xfc0 net/netlink/af_netlink.c:1917 sock_sendmsg_nosec net/socket.c:621 [inline] sock_sendmsg+0xd5/0x120 net/socket.c:631 ___sys_sendmsg+0x7fd/0x930 net/socket.c:2116 __sys_sendmsg+0x11d/0x280 net/socket.c:2154 __do_sys_sendmsg net/socket.c:2163 [inline] __se_sys_sendmsg net/socket.c:2161 [inline] __x64_sys_sendmsg+0x78/0xb0 net/socket.c:2161 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe -> #0 (&tbl->lock){+.-.}: lock_acquire+0x1ed/0x520 kernel/locking/lockdep.c:3844 __raw_write_lock_bh include/linux/rwlock_api_smp.h:203 [inline] _raw_write_lock_bh+0x31/0x40 kernel/locking/spinlock.c:312 neigh_change_state+0x1dc/0x7a0 net/core/neighbour.c:141 __neigh_update+0x478/0x1eb0 net/core/neighbour.c:1302 neigh_update+0x37/0x50 net/core/neighbour.c:1372 arp_req_set+0x54c/0xaa0 net/ipv4/arp.c:1072 arp_ioctl+0x48b/0xae0 net/ipv4/arp.c:1230 inet_ioctl+0x237/0x360 net/ipv4/af_inet.c:932 sock_do_ioctl+0xeb/0x420 net/socket.c:950 sock_ioctl+0x313/0x690 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:509 [inline] do_vfs_ioctl+0x1de/0x1790 fs/ioctl.c:696 ksys_ioctl+0xa9/0xd0 fs/ioctl.c:713 __do_sys_ioctl fs/ioctl.c:720 [inline] __se_sys_ioctl fs/ioctl.c:718 [inline] __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:718 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe other info that might help us debug this: Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&n->lock); lock(&tbl->lock); lock(&n->lock); lock(&tbl->lock); *** DEADLOCK *** 2 locks held by syz-executor4/8201: #0: 000000007da38ee0 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:77 #1: 00000000c785a610 (&n->lock){++--}, at: __neigh_update+0xe6/0x1eb0 net/core/neighbour.c:1203 stack backtrace: CPU: 1 PID: 8201 Comm: syz-executor4 Not tainted 4.20.0-rc6+ #184 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x244/0x39d lib/dump_stack.c:113 print_circular_bug.isra.35.cold.54+0x1bd/0x27d kernel/locking/lockdep.c:1221 check_prev_add kernel/locking/lockdep.c:1863 [inline] check_prevs_add kernel/locking/lockdep.c:1976 [inline] validate_chain kernel/locking/lockdep.c:2347 [inline] __lock_acquire+0x3399/0x4c20 kernel/locking/lockdep.c:3341 lock_acquire+0x1ed/0x520 kernel/locking/lockdep.c:3844 __raw_write_lock_bh include/linux/rwlock_api_smp.h:203 [inline] _raw_write_lock_bh+0x31/0x40 kernel/locking/spinlock.c:312 neigh_change_state+0x1dc/0x7a0 net/core/neighbour.c:141 __neigh_update+0x478/0x1eb0 net/core/neighbour.c:1302 neigh_update+0x37/0x50 net/core/neighbour.c:1372 arp_req_set+0x54c/0xaa0 net/ipv4/arp.c:1072 arp_ioctl+0x48b/0xae0 net/ipv4/arp.c:1230 inet_ioctl+0x237/0x360 net/ipv4/af_inet.c:932 sock_do_ioctl+0xeb/0x420 net/socket.c:950 sock_ioctl+0x313/0x690 net/socket.c:1074 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:509 [inline] do_vfs_ioctl+0x1de/0x1790 fs/ioctl.c:696 ksys_ioctl+0xa9/0xd0 fs/ioctl.c:713 __do_sys_ioctl fs/ioctl.c:720 [inline] __se_sys_ioctl fs/ioctl.c:718 [inline] __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:718 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457669 Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f8db46f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 RDX: 0000000020000040 RSI: 0000000000008955 RDI: 0000000000000003 RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8db46f66d4 R13: 00000000004c0acd R14: 00000000004d1c98 R15: 00000000ffffffff kobject: 'loop0' (0000000031f36e24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'tx-1' (00000000f4db3744): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-1' (00000000f4db3744): kobject_uevent_env kobject: 'loop0' (0000000031f36e24): kobject_uevent_env kobject: 'loop0' (0000000031f36e24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'tx-1' (00000000f4db3744): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-1' kobject: 'loop4' (00000000c3736a7e): kobject_uevent_env kobject: 'loop4' (00000000c3736a7e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'rx-1' (0000000092baffec): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-1' (0000000092baffec): kobject_uevent_env kobject: 'rx-1' (0000000092baffec): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-1' kobject: 'tx-1' (00000000f4db3744): kobject_cleanup, parent 000000003b67e1f2 kobject: 'tx-1' (00000000f4db3744): auto cleanup 'remove' event kobject: 'tx-1' (00000000f4db3744): kobject_uevent_env kobject: 'tx-1' (00000000f4db3744): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-1' kobject: 'loop2' (0000000036a8dcf7): kobject_uevent_env kobject: 'tx-1' (00000000f4db3744): auto cleanup kobject_del kobject: 'loop2' (0000000036a8dcf7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'tx-1' (00000000f4db3744): calling ktype release kobject: 'loop4' (00000000c3736a7e): kobject_uevent_env kobject: 'tx-1': free name kobject: 'loop4' (00000000c3736a7e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'rx-1' (0000000092baffec): kobject_cleanup, parent 000000003b67e1f2 kobject: 'rx-1' (0000000092baffec): auto cleanup 'remove' event kobject: 'rx-1' (0000000092baffec): kobject_uevent_env kobject: 'rx-1' (0000000092baffec): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-1' kobject: 'rx-1' (0000000092baffec): auto cleanup kobject_del kobject: 'rx-1' (0000000092baffec): calling ktype release kobject: 'rx-1': free name kobject: 'rx-0' (0000000047cd8b47): kobject_cleanup, parent 000000003b67e1f2 kobject: 'rx-0' (0000000047cd8b47): auto cleanup 'remove' event kobject: 'loop1' (00000000bbdad9fe): kobject_uevent_env kobject: 'rx-0' (0000000047cd8b47): kobject_uevent_env kobject: 'loop1' (00000000bbdad9fe): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'rx-0' (0000000047cd8b47): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' kobject: 'rx-0' (0000000047cd8b47): auto cleanup kobject_del kobject: 'rx-0' (0000000047cd8b47): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (000000002062af0f): kobject_cleanup, parent 000000003b67e1f2 kobject: 'tx-0' (000000002062af0f): auto cleanup 'remove' event kobject: 'tx-0' (000000002062af0f): kobject_uevent_env kobject: 'tx-0' (000000002062af0f): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' kobject: 'tx-0' (000000002062af0f): auto cleanup kobject_del kobject: 'tx-0' (000000002062af0f): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (000000003b67e1f2): kobject_cleanup, parent (null) kobject: 'queues' (000000003b67e1f2): calling ktype release kobject: 'queues' (000000003b67e1f2): kset_release kobject: 'queues': free name kobject: 'nr0' (00000000fbafcddc): kobject_uevent_env kobject: 'nr0' (00000000fbafcddc): fill_kobj_path: path = '/devices/virtual/net/nr0' kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'nr0' (00000000fbafcddc): kobject_cleanup, parent (null) kobject: 'nr0' (00000000fbafcddc): calling ktype release kobject: 'nr0': free name kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop3' (000000003cd16c25): kobject_uevent_env kobject: 'loop3' (000000003cd16c25): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop4' (00000000c3736a7e): kobject_uevent_env kobject: 'loop4' (00000000c3736a7e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop1' (00000000bbdad9fe): kobject_uevent_env kobject: 'loop1' (00000000bbdad9fe): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop2' (0000000036a8dcf7): kobject_uevent_env syz-executor1 uses obsolete (PF_INET,SOCK_PACKET) kobject: 'loop2' (0000000036a8dcf7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'brif' (000000000f25f850): kobject_cleanup, parent 00000000a9c99953 kobject: 'loop3' (000000003cd16c25): kobject_uevent_env kobject: 'brif' (000000000f25f850): auto cleanup kobject_del kobject: 'brif' (000000000f25f850): calling ktype release kobject: (000000000f25f850): dynamic_kobj_release kobject: 'loop3' (000000003cd16c25): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'brif': free name kobject: 'loop0' (0000000031f36e24): kobject_uevent_env kobject: 'loop0' (0000000031f36e24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop3' (000000003cd16c25): kobject_uevent_env kobject: 'loop3' (000000003cd16c25): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop4' (00000000c3736a7e): kobject_uevent_env kobject: 'loop4' (00000000c3736a7e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'rx-0' (000000005d7074ee): kobject_cleanup, parent 00000000b6d21018 kobject: 'rx-0' (000000005d7074ee): auto cleanup 'remove' event kobject: 'rx-0' (000000005d7074ee): kobject_uevent_env kobject: 'rx-0' (000000005d7074ee): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/rx-0' kobject: 'rx-0' (000000005d7074ee): auto cleanup kobject_del kobject: 'rx-0' (000000005d7074ee): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (00000000dad5c848): kobject_cleanup, parent 00000000b6d21018 kobject: 'tx-0' (00000000dad5c848): auto cleanup 'remove' event kobject: 'tx-0' (00000000dad5c848): kobject_uevent_env kobject: 'tx-0' (00000000dad5c848): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/tx-0' kobject: 'tx-0' (00000000dad5c848): auto cleanup kobject_del kobject: 'tx-0' (00000000dad5c848): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (00000000b6d21018): kobject_cleanup, parent (null) kobject: 'queues' (00000000b6d21018): calling ktype release kobject: 'queues' (00000000b6d21018): kset_release kobject: 'queues': free name kobject: '&@[' (00000000a9c99953): kobject_uevent_env kobject: '&@[' (00000000a9c99953): fill_kobj_path: path = '/devices/virtual/net/&@[' netlink: 15 bytes leftover after parsing attributes in process `syz-executor0'. kobject: 'nr0' (00000000cde2298a): kobject_add_internal: parent: 'net', set: 'devices' kobject: 'nr0' (00000000cde2298a): kobject_uevent_env kobject: 'nr0' (00000000cde2298a): fill_kobj_path: path = '/devices/virtual/net/nr0' kobject: 'queues' (00000000ad528a9e): kobject_add_internal: parent: 'nr0', set: '' kobject: 'queues' (00000000ad528a9e): kobject_uevent_env kobject: 'queues' (00000000ad528a9e): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (0000000025b3e304): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (0000000025b3e304): kobject_uevent_env kobject: 'rx-0' (0000000025b3e304): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' kobject: 'tx-0' (0000000066f96ab0): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-0' (0000000066f96ab0): kobject_uevent_env kobject: 'tx-0' (0000000066f96ab0): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' kobject: 'ip6_vti1' (00000000232864b5): kobject_add_internal: parent: 'net', set: 'devices' kobject: 'ip6_vti1' (00000000232864b5): kobject_uevent_env kobject: 'ip6_vti1' (00000000232864b5): fill_kobj_path: path = '/devices/virtual/net/ip6_vti1' kobject: 'queues' (0000000043d7c5c3): kobject_add_internal: parent: 'ip6_vti1', set: '' kobject: 'queues' (0000000043d7c5c3): kobject_uevent_env kobject: 'queues' (0000000043d7c5c3): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (0000000055f40fb3): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (0000000055f40fb3): kobject_uevent_env kobject: 'rx-0' (0000000055f40fb3): fill_kobj_path: path = '/devices/virtual/net/ip6_vti1/queues/rx-0' kobject: 'tx-0' (000000008aa99ea7): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-0' (000000008aa99ea7): kobject_uevent_env kobject: 'tx-0' (000000008aa99ea7): fill_kobj_path: path = '/devices/virtual/net/ip6_vti1/queues/tx-0' device nr0 entered promiscuous mode kobject: '&@[' (00000000a9c99953): kobject_cleanup, parent (null) kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: '&@[' (00000000a9c99953): calling ktype release kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: '&@[': free name kobject: 'loop4' (00000000c3736a7e): kobject_uevent_env kobject: 'loop4' (00000000c3736a7e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop1' (00000000bbdad9fe): kobject_uevent_env kobject: 'loop1' (00000000bbdad9fe): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop2' (0000000036a8dcf7): kobject_uevent_env kobject: 'loop2' (0000000036a8dcf7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'rx-0' (0000000025b3e304): kobject_cleanup, parent 00000000ad528a9e kobject: 'rx-0' (0000000025b3e304): auto cleanup 'remove' event kobject: 'rx-0' (0000000025b3e304): kobject_uevent_env kobject: 'rx-0' (0000000025b3e304): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' kobject: 'rx-0' (0000000025b3e304): auto cleanup kobject_del kobject: 'loop2' (0000000036a8dcf7): kobject_uevent_env kobject: 'rx-0' (0000000025b3e304): calling ktype release kobject: 'loop2' (0000000036a8dcf7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'rx-0': free name kobject: 'tx-0' (0000000066f96ab0): kobject_cleanup, parent 00000000ad528a9e kobject: 'tx-0' (0000000066f96ab0): auto cleanup 'remove' event kobject: 'tx-0' (0000000066f96ab0): kobject_uevent_env kobject: 'tx-0' (0000000066f96ab0): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' kobject: 'loop2' (0000000036a8dcf7): kobject_uevent_env kobject: 'tx-0' (0000000066f96ab0): auto cleanup kobject_del kobject: 'loop2' (0000000036a8dcf7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'tx-0' (0000000066f96ab0): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (00000000ad528a9e): kobject_cleanup, parent (null) kobject: 'queues' (00000000ad528a9e): calling ktype release kobject: 'queues' (00000000ad528a9e): kset_release kobject: 'queues': free name kobject: 'nr0' (00000000cde2298a): kobject_uevent_env kobject: 'nr0' (00000000cde2298a): fill_kobj_path: path = '/devices/virtual/net/nr0' netlink: 15 bytes leftover after parsing attributes in process `syz-executor0'. kobject: '&@[' (00000000a035b1de): kobject_add_internal: parent: 'net', set: 'devices' kobject: '&@[' (00000000a035b1de): kobject_uevent_env kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: '&@[' (00000000a035b1de): fill_kobj_path: path = '/devices/virtual/net/&@[' kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'queues' (000000001e1e4b17): kobject_add_internal: parent: '&@[', set: '' kobject: 'queues' (000000001e1e4b17): kobject_uevent_env kobject: 'queues' (000000001e1e4b17): kobject_uevent_env: filter function caused the event to drop! kobject: 'loop4' (00000000c3736a7e): kobject_uevent_env kobject: 'rx-0' (00000000b593956e): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'loop4' (00000000c3736a7e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'rx-0' (00000000b593956e): kobject_uevent_env kobject: 'loop1' (00000000bbdad9fe): kobject_uevent_env kobject: 'rx-0' (00000000b593956e): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/rx-0' kobject: 'loop1' (00000000bbdad9fe): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'tx-0' (000000000b8fd9c7): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-0' (000000000b8fd9c7): kobject_uevent_env kobject: 'tx-0' (000000000b8fd9c7): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/tx-0' kobject: 'brif' (00000000d7fc74f4): kobject_add_internal: parent: '&@[', set: '' kobject: 'nr0' (00000000cde2298a): kobject_cleanup, parent (null) kobject: 'brif' (00000000d7fc74f4): kobject_cleanup, parent 00000000a035b1de kobject: 'brif' (00000000d7fc74f4): auto cleanup kobject_del kobject: 'nr0' (00000000cde2298a): calling ktype release kobject: 'brif' (00000000d7fc74f4): calling ktype release kobject: 'nr0': free name kobject: (00000000d7fc74f4): dynamic_kobj_release kobject: 'brif': free name kobject: 'rx-0' (00000000b593956e): kobject_cleanup, parent 000000001e1e4b17 kobject: 'rx-0' (00000000b593956e): auto cleanup 'remove' event kobject: 'rx-0' (00000000b593956e): kobject_uevent_env kobject: 'rx-0' (00000000b593956e): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/rx-0' kobject: 'rx-0' (00000000b593956e): auto cleanup kobject_del kobject: 'rx-0' (00000000b593956e): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (000000000b8fd9c7): kobject_cleanup, parent 000000001e1e4b17 kobject: 'tx-0' (000000000b8fd9c7): auto cleanup 'remove' event kobject: 'tx-0' (000000000b8fd9c7): kobject_uevent_env kobject: 'tx-0' (000000000b8fd9c7): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/tx-0' kobject: 'tx-0' (000000000b8fd9c7): auto cleanup kobject_del kobject: 'tx-0' (000000000b8fd9c7): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (000000001e1e4b17): kobject_cleanup, parent (null) kobject: 'queues' (000000001e1e4b17): calling ktype release kobject: 'queues' (000000001e1e4b17): kset_release kobject: 'queues': free name kobject: '&@[' (00000000a035b1de): kobject_uevent_env kobject: '&@[' (00000000a035b1de): fill_kobj_path: path = '/devices/virtual/net/&@[' kobject: 'loop3' (000000003cd16c25): kobject_uevent_env kobject: 'loop3' (000000003cd16c25): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: '&@[' (00000000a035b1de): kobject_cleanup, parent (null) kobject: 'loop0' (0000000031f36e24): kobject_uevent_env kobject: 'loop0' (0000000031f36e24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: '&@[' (00000000a035b1de): calling ktype release kobject: '&@[': free name audit: type=1804 audit(1545251799.086:42): pid=8378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir702018304/syzkaller.28cs7I/18/memory.events" dev="sda1" ino=16604 res=1 kobject: 'loop4' (00000000c3736a7e): kobject_uevent_env kobject: 'loop4' (00000000c3736a7e): fill_kobj_path: path = '/devices/virtual/block/loop4' audit: type=1804 audit(1545251799.176:43): pid=8378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir702018304/syzkaller.28cs7I/18/memory.events" dev="sda1" ino=16604 res=1 kobject: 'loop1' (00000000bbdad9fe): kobject_uevent_env kobject: 'loop1' (00000000bbdad9fe): fill_kobj_path: path = '/devices/virtual/block/loop1' audit: type=1804 audit(1545251799.176:44): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir702018304/syzkaller.28cs7I/18/memory.events" dev="sda1" ino=16604 res=1 kobject: 'loop2' (0000000036a8dcf7): kobject_uevent_env kobject: '&@[' (00000000b0afcbd3): kobject_add_internal: parent: 'net', set: 'devices' kobject: '&@[' (00000000b0afcbd3): kobject_uevent_env kobject: '&@[' (00000000b0afcbd3): fill_kobj_path: path = '/devices/virtual/net/&@[' kobject: 'queues' (00000000be6d8244): kobject_add_internal: parent: '&@[', set: '' audit: type=1804 audit(1545251799.396:45): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir702018304/syzkaller.28cs7I/19/memory.events" dev="sda1" ino=16604 res=1 kobject: 'loop2' (0000000036a8dcf7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'queues' (00000000be6d8244): kobject_uevent_env kobject: 'queues' (00000000be6d8244): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (000000003e07a8a0): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (000000003e07a8a0): kobject_uevent_env kobject: 'rx-0' (000000003e07a8a0): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/rx-0' kobject: 'loop0' (0000000031f36e24): kobject_uevent_env kobject: 'loop0' (0000000031f36e24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'tx-0' (00000000d8a37215): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'tx-0' (00000000d8a37215): kobject_uevent_env kobject: 'loop3' (000000003cd16c25): kobject_uevent_env kobject: 'tx-0' (00000000d8a37215): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/tx-0' kobject: 'loop3' (000000003cd16c25): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop4' (00000000c3736a7e): kobject_uevent_env kobject: 'brif' (00000000e2d6f5bf): kobject_add_internal: parent: '&@[', set: '' kobject: 'loop4' (00000000c3736a7e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop3' (000000003cd16c25): kobject_uevent_env kobject: 'brif' (00000000e2d6f5bf): kobject_cleanup, parent 00000000b0afcbd3 kobject: 'loop3' (000000003cd16c25): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'brif' (00000000e2d6f5bf): auto cleanup kobject_del kobject: 'brif' (00000000e2d6f5bf): calling ktype release kobject: (00000000e2d6f5bf): dynamic_kobj_release kobject: 'brif': free name kobject: 'loop0' (0000000031f36e24): kobject_uevent_env kobject: 'loop0' (0000000031f36e24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop1' (00000000bbdad9fe): kobject_uevent_env kobject: 'loop1' (00000000bbdad9fe): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop1' (00000000bbdad9fe): kobject_uevent_env kobject: 'loop1' (00000000bbdad9fe): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop1' (00000000bbdad9fe): kobject_uevent_env kobject: 'loop1' (00000000bbdad9fe): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'rx-0' (000000003e07a8a0): kobject_cleanup, parent 00000000be6d8244 kobject: 'rx-0' (000000003e07a8a0): auto cleanup 'remove' event kobject: 'rx-0' (000000003e07a8a0): kobject_uevent_env kobject: 'rx-0' (000000003e07a8a0): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/rx-0' kobject: 'rx-0' (000000003e07a8a0): auto cleanup kobject_del kobject: 'rx-0' (000000003e07a8a0): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (00000000d8a37215): kobject_cleanup, parent 00000000be6d8244 kobject: 'tx-0' (00000000d8a37215): auto cleanup 'remove' event kobject: 'tx-0' (00000000d8a37215): kobject_uevent_env kobject: 'tx-0' (00000000d8a37215): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/tx-0' kobject: 'tx-0' (00000000d8a37215): auto cleanup kobject_del kobject: 'tx-0' (00000000d8a37215): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (00000000be6d8244): kobject_cleanup, parent (null) kobject: 'queues' (00000000be6d8244): calling ktype release kobject: 'queues' (00000000be6d8244): kset_release kobject: 'queues': free name kobject: '&@[' (00000000b0afcbd3): kobject_uevent_env kobject: '&@[' (00000000b0afcbd3): fill_kobj_path: path = '/devices/virtual/net/&@[' kobject: '&@[' (00000000b0afcbd3): kobject_cleanup, parent (null) kobject: '&@[' (00000000b0afcbd3): calling ktype release kobject: '&@[': free name kobject: '&@[' (00000000ee70e6ed): kobject_add_internal: parent: 'net', set: 'devices' kobject: '&@[' (00000000ee70e6ed): kobject_uevent_env kobject: '&@[' (00000000ee70e6ed): fill_kobj_path: path = '/devices/virtual/net/&@[' kobject: 'queues' (000000007bbc1b42): kobject_add_internal: parent: '&@[', set: '' kobject: 'queues' (000000007bbc1b42): kobject_uevent_env kobject: 'queues' (000000007bbc1b42): kobject_uevent_env: filter function caused the event to drop! kobject: 'loop2' (0000000036a8dcf7): kobject_uevent_env kobject: 'loop2' (0000000036a8dcf7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'rx-0' (000000007a0b5d22): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'rx-0' (000000007a0b5d22): kobject_uevent_env kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'rx-0' (000000007a0b5d22): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/rx-0' kobject: 'loop4' (00000000c3736a7e): kobject_uevent_env kobject: 'loop4' (00000000c3736a7e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'tx-0' (00000000416187f0): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'loop1' (00000000bbdad9fe): kobject_uevent_env kobject: 'loop1' (00000000bbdad9fe): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'tx-0' (00000000416187f0): kobject_uevent_env kobject: 'tx-0' (00000000416187f0): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/tx-0' kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'brif' (00000000b47e6059): kobject_add_internal: parent: '&@[', set: '' kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'nr0' (00000000ed1fe412): kobject_add_internal: parent: 'net', set: 'devices' kobject: 'loop0' (0000000031f36e24): kobject_uevent_env kobject: 'nr0' (00000000ed1fe412): kobject_uevent_env kobject: 'loop0' (0000000031f36e24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'nr0' (00000000ed1fe412): fill_kobj_path: path = '/devices/virtual/net/nr0' kobject: 'queues' (000000005b1ddfcc): kobject_add_internal: parent: 'nr0', set: '' kobject: 'queues' (000000005b1ddfcc): kobject_uevent_env kobject: 'queues' (000000005b1ddfcc): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (000000005d4fb744): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (000000005d4fb744): kobject_uevent_env kobject: 'rx-0' (000000005d4fb744): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' kobject: 'tx-0' (00000000717892ec): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-0' (00000000717892ec): kobject_uevent_env kobject: 'tx-0' (00000000717892ec): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' kobject: 'brif' (00000000b47e6059): kobject_cleanup, parent 00000000ee70e6ed kobject: 'brif' (00000000b47e6059): auto cleanup kobject_del kobject: 'brif' (00000000b47e6059): calling ktype release kobject: (00000000b47e6059): dynamic_kobj_release kobject: 'brif': free name kobject: 'rx-0' (000000007a0b5d22): kobject_cleanup, parent 000000007bbc1b42 kobject: 'rx-0' (000000007a0b5d22): auto cleanup 'remove' event kobject: 'rx-0' (000000007a0b5d22): kobject_uevent_env kobject: 'rx-0' (000000007a0b5d22): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/rx-0' kobject: 'rx-0' (000000007a0b5d22): auto cleanup kobject_del kobject: 'rx-0' (000000007a0b5d22): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (00000000416187f0): kobject_cleanup, parent 000000007bbc1b42 kobject: 'tx-0' (00000000416187f0): auto cleanup 'remove' event kobject: 'tx-0' (00000000416187f0): kobject_uevent_env kobject: 'tx-0' (00000000416187f0): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/tx-0' kobject: 'tx-0' (00000000416187f0): auto cleanup kobject_del kobject: 'tx-0' (00000000416187f0): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (000000007bbc1b42): kobject_cleanup, parent (null) kobject: 'queues' (000000007bbc1b42): calling ktype release kobject: 'queues' (000000007bbc1b42): kset_release kobject: 'queues': free name kobject: '&@[' (00000000ee70e6ed): kobject_uevent_env kobject: '&@[' (00000000ee70e6ed): fill_kobj_path: path = '/devices/virtual/net/&@[' ¹á6›Íaï~IyMá‡ì: renamed from nr0 kobject: 'nr0' (00000000ed1fe412): fill_kobj_path: path = '/devices/virtual/net/nr0' kobject: '¹á6›Íaï~IyMá‡ì' (00000000ed1fe412): kobject_uevent_env kobject: '¹á6›Íaï~IyMá‡ì' (00000000ed1fe412): fill_kobj_path: path = '/devices/virtual/net/¹á6›Íaï~IyMá‡ì' kobject: 'rx-0' (000000005d4fb744): kobject_cleanup, parent 000000005b1ddfcc kobject: 'rx-0' (000000005d4fb744): auto cleanup 'remove' event kobject: 'rx-0' (000000005d4fb744): kobject_uevent_env kobject: 'rx-0' (000000005d4fb744): fill_kobj_path: path = '/devices/virtual/net/¹á6›Íaï~IyMá‡ì/queues/rx-0' kobject: 'rx-0' (000000005d4fb744): auto cleanup kobject_del kobject: 'rx-0' (000000005d4fb744): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (00000000717892ec): kobject_cleanup, parent 000000005b1ddfcc kobject: 'tx-0' (00000000717892ec): auto cleanup 'remove' event kobject: 'tx-0' (00000000717892ec): kobject_uevent_env kobject: 'tx-0' (00000000717892ec): fill_kobj_path: path = '/devices/virtual/net/¹á6›Íaï~IyMá‡ì/queues/tx-0' kobject: 'tx-0' (00000000717892ec): auto cleanup kobject_del kobject: 'tx-0' (00000000717892ec): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (000000005b1ddfcc): kobject_cleanup, parent (null) kobject: 'queues' (000000005b1ddfcc): calling ktype release kobject: 'queues' (000000005b1ddfcc): kset_release kobject: 'queues': free name kobject: '¹á6›Íaï~IyMá‡ì' (00000000ed1fe412): kobject_uevent_env kobject: '¹á6›Íaï~IyMá‡ì' (00000000ed1fe412): fill_kobj_path: path = '/devices/virtual/net/¹á6›Íaï~IyMá‡ì' kobject: 'nr0' (00000000833db0eb): kobject_add_internal: parent: 'net', set: 'devices' kobject: 'nr0' (00000000833db0eb): kobject_uevent_env kobject: 'nr0' (00000000833db0eb): fill_kobj_path: path = '/devices/virtual/net/nr0' kobject: 'queues' (0000000086cc4499): kobject_add_internal: parent: 'nr0', set: '' kobject: 'queues' (0000000086cc4499): kobject_uevent_env kobject: 'queues' (0000000086cc4499): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (00000000a9676a86): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (00000000a9676a86): kobject_uevent_env kobject: 'rx-0' (00000000a9676a86): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' kobject: 'tx-0' (000000002e43f664): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-0' (000000002e43f664): kobject_uevent_env kobject: 'tx-0' (000000002e43f664): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' kobject: 'rx-0' (00000000a9676a86): kobject_cleanup, parent 0000000086cc4499 kobject: 'rx-0' (00000000a9676a86): auto cleanup 'remove' event kobject: 'rx-0' (00000000a9676a86): kobject_uevent_env kobject: 'rx-0' (00000000a9676a86): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' kobject: 'rx-0' (00000000a9676a86): auto cleanup kobject_del kobject: 'rx-0' (00000000a9676a86): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (000000002e43f664): kobject_cleanup, parent 0000000086cc4499 kobject: 'tx-0' (000000002e43f664): auto cleanup 'remove' event kobject: 'tx-0' (000000002e43f664): kobject_uevent_env kobject: 'tx-0' (000000002e43f664): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' kobject: 'tx-0' (000000002e43f664): auto cleanup kobject_del kobject: 'tx-0' (000000002e43f664): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (0000000086cc4499): kobject_cleanup, parent (null) kobject: 'queues' (0000000086cc4499): calling ktype release kobject: 'queues' (0000000086cc4499): kset_release kobject: 'queues': free name kobject: 'nr0' (00000000833db0eb): kobject_uevent_env kobject: 'nr0' (00000000833db0eb): fill_kobj_path: path = '/devices/virtual/net/nr0' kobject: '&@[' (00000000ee70e6ed): kobject_cleanup, parent (null) kobject: '¹á6›Íaï~IyMá‡ì' (00000000ed1fe412): kobject_cleanup, parent (null) kobject: '&@[' (00000000ee70e6ed): calling ktype release kobject: '¹á6›Íaï~IyMá‡ì' (00000000ed1fe412): calling ktype release kobject: '¹á6›Íaï~IyMá‡ì': free name kobject: '&@[': free name kobject: '&@[' (00000000945f9551): kobject_add_internal: parent: 'net', set: 'devices' kobject: '&@[' (00000000945f9551): kobject_uevent_env kobject: 'loop3' (000000003cd16c25): kobject_uevent_env kobject: '&@[' (00000000945f9551): fill_kobj_path: path = '/devices/virtual/net/&@[' kobject: 'loop3' (000000003cd16c25): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'queues' (00000000a6f7599e): kobject_add_internal: parent: '&@[', set: '' kobject: 'queues' (00000000a6f7599e): kobject_uevent_env kobject: 'queues' (00000000a6f7599e): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (00000000ad99dda2): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (00000000ad99dda2): kobject_uevent_env kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'rx-0' (00000000ad99dda2): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/rx-0' kobject: 'loop0' (0000000031f36e24): kobject_uevent_env kobject: 'loop0' (0000000031f36e24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'tx-0' (000000004b0a8973): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-0' (000000004b0a8973): kobject_uevent_env kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'tx-0' (000000004b0a8973): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/tx-0' kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'brif' (000000001d4adeb7): kobject_add_internal: parent: '&@[', set: '' kobject: 'loop1' (00000000bbdad9fe): kobject_uevent_env kobject: 'nr0' (00000000833db0eb): kobject_cleanup, parent (null) kobject: 'brif' (000000001d4adeb7): kobject_cleanup, parent 00000000945f9551 kobject: 'loop1' (00000000bbdad9fe): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'nr0' (00000000833db0eb): calling ktype release kobject: 'loop0' (0000000031f36e24): kobject_uevent_env kobject: 'brif' (000000001d4adeb7): auto cleanup kobject_del kobject: 'loop0' (0000000031f36e24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'nr0': free name kobject: 'brif' (000000001d4adeb7): calling ktype release kobject: (000000001d4adeb7): dynamic_kobj_release kobject: 'loop4' (00000000c3736a7e): kobject_uevent_env kobject: 'brif': free name kobject: 'loop4' (00000000c3736a7e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'rx-0' (00000000ad99dda2): kobject_cleanup, parent 00000000a6f7599e kobject: 'rx-0' (00000000ad99dda2): auto cleanup 'remove' event kobject: 'rx-0' (00000000ad99dda2): kobject_uevent_env kobject: 'rx-0' (00000000ad99dda2): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/rx-0' kobject: 'rx-0' (00000000ad99dda2): auto cleanup kobject_del kobject: 'rx-0' (00000000ad99dda2): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (000000004b0a8973): kobject_cleanup, parent 00000000a6f7599e kobject: 'tx-0' (000000004b0a8973): auto cleanup 'remove' event kobject: 'tx-0' (000000004b0a8973): kobject_uevent_env kobject: 'tx-0' (000000004b0a8973): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/tx-0' kobject: 'tx-0' (000000004b0a8973): auto cleanup kobject_del kobject: 'tx-0' (000000004b0a8973): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (00000000a6f7599e): kobject_cleanup, parent (null) kobject: 'queues' (00000000a6f7599e): calling ktype release kobject: 'queues' (00000000a6f7599e): kset_release kobject: 'queues': free name kobject: '&@[' (00000000945f9551): kobject_uevent_env kobject: '&@[' (00000000945f9551): fill_kobj_path: path = '/devices/virtual/net/&@[' kobject: '&@[' (00000000945f9551): kobject_cleanup, parent (null) kobject: '&@[' (00000000945f9551): calling ktype release kobject: '&@[': free name kobject: '&@[' (00000000dcc798e6): kobject_add_internal: parent: 'net', set: 'devices' kobject: '&@[' (00000000dcc798e6): kobject_uevent_env kobject: '&@[' (00000000dcc798e6): fill_kobj_path: path = '/devices/virtual/net/&@[' kobject: 'queues' (0000000028a07af7): kobject_add_internal: parent: '&@[', set: '' kobject: 'loop2' (0000000036a8dcf7): kobject_uevent_env kobject: 'loop2' (0000000036a8dcf7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'queues' (0000000028a07af7): kobject_uevent_env kobject: 'queues' (0000000028a07af7): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (000000002404026b): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'loop4' (00000000c3736a7e): kobject_uevent_env kobject: 'rx-0' (000000002404026b): kobject_uevent_env kobject: 'loop4' (00000000c3736a7e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'rx-0' (000000002404026b): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/rx-0' kobject: 'tx-0' (0000000064d077c6): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'tx-0' (0000000064d077c6): kobject_uevent_env kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'tx-0' (0000000064d077c6): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/tx-0' kobject: 'loop0' (0000000031f36e24): kobject_uevent_env kobject: 'loop0' (0000000031f36e24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop4' (00000000c3736a7e): kobject_uevent_env kobject: 'brif' (00000000f31da2e6): kobject_add_internal: parent: '&@[', set: '' kobject: 'loop4' (00000000c3736a7e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'brif' (00000000f31da2e6): kobject_cleanup, parent 00000000dcc798e6 kobject: 'loop1' (00000000bbdad9fe): kobject_uevent_env kobject: 'brif' (00000000f31da2e6): auto cleanup kobject_del kobject: 'loop1' (00000000bbdad9fe): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'brif' (00000000f31da2e6): calling ktype release kobject: (00000000f31da2e6): dynamic_kobj_release kobject: 'brif': free name kobject: 'rx-0' (000000002404026b): kobject_cleanup, parent 0000000028a07af7 kobject: 'rx-0' (000000002404026b): auto cleanup 'remove' event kobject: 'rx-0' (000000002404026b): kobject_uevent_env kobject: 'rx-0' (000000002404026b): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/rx-0' kobject: 'rx-0' (000000002404026b): auto cleanup kobject_del kobject: 'rx-0' (000000002404026b): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (0000000064d077c6): kobject_cleanup, parent 0000000028a07af7 kobject: 'tx-0' (0000000064d077c6): auto cleanup 'remove' event kobject: 'tx-0' (0000000064d077c6): kobject_uevent_env kobject: 'tx-0' (0000000064d077c6): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/tx-0' kobject: 'tx-0' (0000000064d077c6): auto cleanup kobject_del kobject: 'tx-0' (0000000064d077c6): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (0000000028a07af7): kobject_cleanup, parent (null) kobject: 'queues' (0000000028a07af7): calling ktype release kobject: 'queues' (0000000028a07af7): kset_release kobject: 'queues': free name kobject: '&@[' (00000000dcc798e6): kobject_uevent_env kobject: '&@[' (00000000dcc798e6): fill_kobj_path: path = '/devices/virtual/net/&@[' kobject: '&@[' (00000000dcc798e6): kobject_cleanup, parent (null) kobject: '&@[' (00000000dcc798e6): calling ktype release kobject: '&@[': free name kobject: '&@[' (00000000e04dd6ae): kobject_add_internal: parent: 'net', set: 'devices' kobject: '&@[' (00000000e04dd6ae): kobject_uevent_env netlink: 'syz-executor4': attribute type 3 has an invalid length. kobject: '&@[' (00000000e04dd6ae): fill_kobj_path: path = '/devices/virtual/net/&@[' kobject: 'loop3' (000000003cd16c25): kobject_uevent_env kobject: 'queues' (000000002fd264de): kobject_add_internal: parent: '&@[', set: '' kobject: 'loop3' (000000003cd16c25): fill_kobj_path: path = '/devices/virtual/block/loop3' netlink: 'syz-executor4': attribute type 3 has an invalid length. kobject: 'queues' (000000002fd264de): kobject_uevent_env kobject: 'queues' (000000002fd264de): kobject_uevent_env: filter function caused the event to drop! kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop1' (00000000bbdad9fe): kobject_uevent_env kobject: 'rx-0' (0000000095beabf2): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'loop1' (00000000bbdad9fe): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop0' (0000000031f36e24): kobject_uevent_env kobject: 'rx-0' (0000000095beabf2): kobject_uevent_env kobject: 'loop0' (0000000031f36e24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'rx-0' (0000000095beabf2): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/rx-0' kobject: 'loop4' (00000000c3736a7e): kobject_uevent_env kobject: 'tx-0' (000000008f0ec509): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'loop4' (00000000c3736a7e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'tx-0' (000000008f0ec509): kobject_uevent_env kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'tx-0' (000000008f0ec509): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/tx-0' kobject: 'brif' (00000000ca38121b): kobject_add_internal: parent: '&@[', set: '' kobject: 'brif' (00000000ca38121b): kobject_cleanup, parent 00000000e04dd6ae kobject: 'brif' (00000000ca38121b): auto cleanup kobject_del kobject: 'brif' (00000000ca38121b): calling ktype release kobject: (00000000ca38121b): dynamic_kobj_release kobject: 'brif': free name kobject: 'rx-0' (0000000095beabf2): kobject_cleanup, parent 000000002fd264de kobject: 'rx-0' (0000000095beabf2): auto cleanup 'remove' event kobject: 'rx-0' (0000000095beabf2): kobject_uevent_env kobject: 'rx-0' (0000000095beabf2): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/rx-0' kobject: 'rx-0' (0000000095beabf2): auto cleanup kobject_del kobject: 'rx-0' (0000000095beabf2): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (000000008f0ec509): kobject_cleanup, parent 000000002fd264de kobject: 'tx-0' (000000008f0ec509): auto cleanup 'remove' event kobject: 'tx-0' (000000008f0ec509): kobject_uevent_env kobject: 'tx-0' (000000008f0ec509): fill_kobj_path: path = '/devices/virtual/net/&@[/queues/tx-0' kobject: 'tx-0' (000000008f0ec509): auto cleanup kobject_del kobject: 'tx-0' (000000008f0ec509): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (000000002fd264de): kobject_cleanup, parent (null) kobject: 'queues' (000000002fd264de): calling ktype release kobject: 'queues' (000000002fd264de): kset_release kobject: 'queues': free name kobject: '&@[' (00000000e04dd6ae): kobject_uevent_env kobject: '&@[' (00000000e04dd6ae): fill_kobj_path: path = '/devices/virtual/net/&@[' kobject: '&@[' (00000000e04dd6ae): kobject_cleanup, parent (null) kobject: '&@[' (00000000e04dd6ae): calling ktype release kobject: '&@[': free name kobject: 'loop2' (0000000036a8dcf7): kobject_uevent_env netlink: 'syz-executor4': attribute type 3 has an invalid length. kobject: 'loop2' (0000000036a8dcf7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' netlink: 'syz-executor4': attribute type 3 has an invalid length. kobject: 'loop0' (0000000031f36e24): kobject_uevent_env kobject: 'loop0' (0000000031f36e24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop4' (00000000c3736a7e): kobject_uevent_env kobject: 'loop4' (00000000c3736a7e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop1' (00000000bbdad9fe): kobject_uevent_env netlink: 'syz-executor4': attribute type 3 has an invalid length. kobject: 'loop1' (00000000bbdad9fe): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop2' (0000000036a8dcf7): kobject_uevent_env kobject: 'loop2' (0000000036a8dcf7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop4' (00000000c3736a7e): kobject_uevent_env kobject: 'loop4' (00000000c3736a7e): fill_kobj_path: path = '/devices/virtual/block/loop4' netlink: 'syz-executor4': attribute type 3 has an invalid length. kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop3' (000000003cd16c25): kobject_uevent_env netlink: 10 bytes leftover after parsing attributes in process `syz-executor3'. kobject: 'loop3' (000000003cd16c25): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop0' (0000000031f36e24): kobject_uevent_env kobject: 'loop0' (0000000031f36e24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop2' (0000000036a8dcf7): kobject_uevent_env kobject: 'loop2' (0000000036a8dcf7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop3' (000000003cd16c25): kobject_uevent_env kobject: 'loop3' (000000003cd16c25): fill_kobj_path: path = '/devices/virtual/block/loop3' netlink: 10 bytes leftover after parsing attributes in process `syz-executor3'. kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop0' (0000000031f36e24): kobject_uevent_env kobject: 'loop0' (0000000031f36e24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop2' (0000000036a8dcf7): kobject_uevent_env kobject: 'loop2' (0000000036a8dcf7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop4' (00000000c3736a7e): kobject_uevent_env kobject: 'loop4' (00000000c3736a7e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop0' (0000000031f36e24): kobject_uevent_env kobject: 'loop0' (0000000031f36e24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop3' (000000003cd16c25): kobject_uevent_env kobject: 'loop3' (000000003cd16c25): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop1' (00000000bbdad9fe): kobject_uevent_env kobject: 'loop1' (00000000bbdad9fe): fill_kobj_path: path = '/devices/virtual/block/loop1' do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app kobject: 'loop4' (00000000c3736a7e): kobject_uevent_env kobject: 'loop4' (00000000c3736a7e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop1' (00000000bbdad9fe): kobject_uevent_env kobject: 'loop1' (00000000bbdad9fe): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop0' (0000000031f36e24): kobject_uevent_env kobject: 'loop0' (0000000031f36e24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop2' (0000000036a8dcf7): kobject_uevent_env kobject: 'loop2' (0000000036a8dcf7): fill_kobj_path: path = '/devices/virtual/block/loop2' sctp: [Deprecated]: syz-executor2 (pid 8699) Use of int in max_burst socket option deprecated. Use struct sctp_assoc_value instead kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop3' (000000003cd16c25): kobject_uevent_env kobject: 'loop3' (000000003cd16c25): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop2' (0000000036a8dcf7): kobject_uevent_env kobject: 'loop2' (0000000036a8dcf7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop0' (0000000031f36e24): kobject_uevent_env kobject: 'loop0' (0000000031f36e24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'nr0' (00000000b0442584): kobject_add_internal: parent: 'net', set: 'devices' kobject: 'loop4' (00000000c3736a7e): kobject_uevent_env kobject: 'loop4' (00000000c3736a7e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'nr0' (00000000b0442584): kobject_uevent_env kobject: 'nr0' (00000000b0442584): fill_kobj_path: path = '/devices/virtual/net/nr0' kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'queues' (00000000447b8983): kobject_add_internal: parent: 'nr0', set: '' kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop4' (00000000c3736a7e): kobject_uevent_env kobject: 'loop4' (00000000c3736a7e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'queues' (00000000447b8983): kobject_uevent_env kobject: 'loop2' (0000000036a8dcf7): kobject_uevent_env kobject: 'queues' (00000000447b8983): kobject_uevent_env: filter function caused the event to drop! FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 1 kobject: 'loop2' (0000000036a8dcf7): fill_kobj_path: path = '/devices/virtual/block/loop2' CPU: 0 PID: 8756 Comm: syz-executor5 Not tainted 4.20.0-rc6+ #184 kobject: 'rx-0' (0000000023c6d2aa): kobject_add_internal: parent: 'queues', set: 'queues' Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x244/0x39d lib/dump_stack.c:113 kobject: 'rx-0' (0000000023c6d2aa): kobject_uevent_env fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0xa/0x17 lib/fault-inject.c:149 kobject: 'rx-0' (0000000023c6d2aa): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' kobject: 'tx-0' (000000000f23f5f0): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-0' (000000000f23f5f0): kobject_uevent_env __should_failslab+0x124/0x180 mm/failslab.c:32 should_failslab+0x9/0x14 mm/slab_common.c:1578 kobject: 'loop0' (0000000031f36e24): kobject_uevent_env slab_pre_alloc_hook mm/slab.h:423 [inline] slab_alloc_node mm/slab.c:3299 [inline] kmem_cache_alloc_node+0x26e/0x730 mm/slab.c:3642 __alloc_skb+0x119/0x770 net/core/skbuff.c:193 kobject: 'loop0' (0000000031f36e24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'tx-0' (000000000f23f5f0): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' alloc_skb include/linux/skbuff.h:1008 [inline] alloc_skb_with_frags+0x133/0x7d0 net/core/skbuff.c:5249 kobject: 'loop3' (000000003cd16c25): kobject_uevent_env sock_alloc_send_pskb+0x87a/0xaf0 net/core/sock.c:2091 kobject: 'loop3' (000000003cd16c25): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop4' (00000000c3736a7e): kobject_uevent_env sock_alloc_send_skb+0x32/0x40 net/core/sock.c:2108 kobject: 'loop4' (00000000c3736a7e): fill_kobj_path: path = '/devices/virtual/block/loop4' __ip6_append_data.isra.47+0x255d/0x3f90 net/ipv6/ip6_output.c:1441 kobject: 'loop5' (000000004b4334da): kobject_uevent_env kobject: 'loop5' (000000004b4334da): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop2' (0000000036a8dcf7): kobject_uevent_env ip6_append_data+0x1bc/0x2d0 net/ipv6/ip6_output.c:1617 udpv6_sendmsg+0xa2d/0x36a0 net/ipv6/udp.c:1524 kobject: 'loop2' (0000000036a8dcf7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop3' (000000003cd16c25): kobject_uevent_env kobject: 'loop3' (000000003cd16c25): fill_kobj_path: path = '/devices/virtual/block/loop3' inet_sendmsg+0x1a1/0x690 net/ipv4/af_inet.c:798 sock_sendmsg_nosec net/socket.c:621 [inline] sock_sendmsg+0xd5/0x120 net/socket.c:631 ___sys_sendmsg+0x7fd/0x930 net/socket.c:2116 kobject: 'loop0' (0000000031f36e24): kobject_uevent_env __sys_sendmsg+0x11d/0x280 net/socket.c:2154