protocol 88fb is buggy, dev hsr_slave_1
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_1
protocol 88fb is buggy, dev hsr_slave_0
protocol 88fb is buggy, dev hsr_slave_1
INFO: task kworker/0:2:6298 blocked for more than 140 seconds.
kobject: 'rx-0' (0000000041210631): kobject_cleanup, parent 00000000da33c8fa
      Not tainted 4.19.85-syzkaller #0
kobject: 'rx-0' (0000000041210631): auto cleanup 'remove' event
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kobject: 'rx-0' (0000000041210631): kobject_uevent_env
kworker/0:2     D
kobject: 'rx-0' (0000000041210631): kobject_uevent_env: uevent_suppress caused the event to drop!
23728  6298      2 0x80000000
kobject: 'rx-0' (0000000041210631): auto cleanup kobject_del
kobject: 'rx-0' (0000000041210631): calling ktype release
Workqueue: events linkwatch_event
kobject: 'rx-0': free name
kobject: 'tx-0' (0000000011020383): kobject_cleanup, parent 00000000da33c8fa
Call Trace:
kobject: 'tx-0' (0000000011020383): auto cleanup 'remove' event
 context_switch kernel/sched/core.c:2826 [inline]
 __schedule+0x866/0x1dc0 kernel/sched/core.c:3515
kobject: 'tx-0' (0000000011020383): kobject_uevent_env
kobject: 'tx-0' (0000000011020383): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tx-0' (0000000011020383): auto cleanup kobject_del
 schedule+0x92/0x1c0 kernel/sched/core.c:3559
kobject: 'tx-0' (0000000011020383): calling ktype release
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3617
kobject: 'tx-0': free name
kobject: 'queues' (00000000da33c8fa): kobject_cleanup, parent           (null)
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072
kobject: 'queues' (00000000da33c8fa): calling ktype release
kobject: 'queues' (00000000da33c8fa): kset_release
kobject: 'queues': free name
kobject: 'bridge265' (00000000f5cdc50d): kobject_uevent_env
kobject: 'bridge265' (00000000f5cdc50d): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'batman_adv' (00000000f365783d): kobject_uevent_env
kobject: 'batman_adv' (00000000f365783d): kobject_uevent_env: filter function caused the event to drop!
 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
kobject: 'batman_adv' (00000000f365783d): kobject_cleanup, parent           (null)
kobject: 'batman_adv' (00000000f365783d): calling ktype release
 rtnl_lock+0x17/0x20 net/core/rtnetlink.c:77
kobject: (00000000f365783d): dynamic_kobj_release
 linkwatch_event+0xf/0x70 net/core/link_watch.c:236
kobject: 'batman_adv': free name
 process_one_work+0x989/0x1750 kernel/workqueue.c:2153
 worker_thread+0x98/0xe40 kernel/workqueue.c:2296
 kthread+0x354/0x420 kernel/kthread.c:246
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
INFO: task kworker/1:2:28884 blocked for more than 140 seconds.
      Not tainted 4.19.85-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/1:2     D27008 28884      2 0x80000000
Workqueue: events switchdev_deferred_process_work
Call Trace:
 context_switch kernel/sched/core.c:2826 [inline]
 __schedule+0x866/0x1dc0 kernel/sched/core.c:3515
 schedule+0x92/0x1c0 kernel/sched/core.c:3559
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3617
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072
 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
 rtnl_lock+0x17/0x20 net/core/rtnetlink.c:77
 switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:150
 process_one_work+0x989/0x1750 kernel/workqueue.c:2153
 worker_thread+0x98/0xe40 kernel/workqueue.c:2296
 kthread+0x354/0x420 kernel/kthread.c:246
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
INFO: task syz-executor.2:17032 blocked for more than 140 seconds.
      Not tainted 4.19.85-syzkaller #0
kobject: 'rx-0' (000000007e66df75): kobject_cleanup, parent 00000000afde0a2f
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.2  D
kobject: 'rx-0' (000000007e66df75): auto cleanup 'remove' event
28216 17032      1 0x00000004
kobject: 'rx-0' (000000007e66df75): kobject_uevent_env
Call Trace:
 context_switch kernel/sched/core.c:2826 [inline]
 __schedule+0x866/0x1dc0 kernel/sched/core.c:3515
 schedule+0x92/0x1c0 kernel/sched/core.c:3559
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3617
kobject: 'rx-0' (000000007e66df75): kobject_uevent_env: uevent_suppress caused the event to drop!
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072
kobject: 'rx-0' (000000007e66df75): auto cleanup kobject_del
kobject: 'rx-0' (000000007e66df75): calling ktype release
kobject: 'rx-0': free name
 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
 rtnl_lock net/core/rtnetlink.c:77 [inline]
 rtnetlink_rcv_msg+0x40a/0xb00 net/core/rtnetlink.c:4744
kobject: 'tx-0' (00000000f15d55bc): kobject_cleanup, parent 00000000afde0a2f
kobject: 'tx-0' (00000000f15d55bc): auto cleanup 'remove' event
 netlink_rcv_skb+0x17d/0x460 net/netlink/af_netlink.c:2454
kobject: 'tx-0' (00000000f15d55bc): kobject_uevent_env
kobject: 'tx-0' (00000000f15d55bc): kobject_uevent_env: uevent_suppress caused the event to drop!
kobject: 'tx-0' (00000000f15d55bc): auto cleanup kobject_del
kobject: 'tx-0' (00000000f15d55bc): calling ktype release
kobject: 'tx-0': free name
kobject: 'queues' (00000000afde0a2f): kobject_cleanup, parent           (null)
kobject: 'queues' (00000000afde0a2f): calling ktype release
kobject: 'queues' (00000000afde0a2f): kset_release
kobject: 'queues': free name
kobject: 'bridge264' (0000000049f077e6): kobject_uevent_env
 rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:4765
kobject: 'bridge264' (0000000049f077e6): kobject_uevent_env: uevent_suppress caused the event to drop!
 netlink_unicast_kernel net/netlink/af_netlink.c:1317 [inline]
 netlink_unicast+0x537/0x720 net/netlink/af_netlink.c:1343
kobject: 'batman_adv' (000000007e645a21): kobject_uevent_env
kobject: 'batman_adv' (000000007e645a21): kobject_uevent_env: filter function caused the event to drop!
 netlink_sendmsg+0x8ae/0xd70 net/netlink/af_netlink.c:1908
kobject: 'batman_adv' (000000007e645a21): kobject_cleanup, parent           (null)
kobject: 'batman_adv' (000000007e645a21): calling ktype release
 sock_sendmsg_nosec net/socket.c:622 [inline]
 sock_sendmsg+0xd7/0x130 net/socket.c:632
kobject: (000000007e645a21): dynamic_kobj_release
 __sys_sendto+0x262/0x380 net/socket.c:1787
kobject: 'batman_adv': free name
 __do_sys_sendto net/socket.c:1799 [inline]
 __se_sys_sendto net/socket.c:1795 [inline]
 __x64_sys_sendto+0xe1/0x1a0 net/socket.c:1795
 do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x414333
Code: 44 24 50 48 8b 6c 24 38 48 83 c4 40 c3 48 8d 05 43 fa 49 01 48 89 04 24 e8 8a 28 00 00 48 8b 4c 24 28 eb a2 e8 ae 8d 03 00 48 <8b> 4c 24 28 eb 8c e8 72 84 03 00 48 8b 4c 24 28 e9 f9 fe ff ff 48
RSP: 002b:00007ffc80cad6c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414333
RDX: 0000000000000028 RSI: 0000000000a72250 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007ffc80cad6d0 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003

Showing all locks held in the system:
1 lock held by khungtaskd/1039:
 #0: 00000000ee893bb9 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e kernel/locking/lockdep.c:4438
2 locks held by getty/7604:
 #0: 0000000057e1e770 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362
 #1: 000000000a565a37 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154
2 locks held by getty/7605:
 #0: 000000000e49ca7f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362
 #1: 000000004eb755f7 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154
2 locks held by getty/7606:
 #0: 00000000d6bb9d4c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362
 #1: 0000000095be5e88 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154
2 locks held by getty/7607:
 #0: 00000000ec6071c4 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362
 #1: 00000000f4ddf3a2 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154
2 locks held by getty/7608:
 #0: 0000000033f11b20 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362
 #1: 000000006b51dcf5 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154
2 locks held by getty/7609:
 #0: 000000009dea64e2 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362
 #1: 00000000e863bd9b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154
2 locks held by getty/7610:
 #0: 00000000b0850a93 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362
 #1: 00000000129b7790 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154
3 locks held by kworker/0:2/6298:
 #0: 0000000091196efe ((wq_completion)"events"){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline]
 #0: 0000000091196efe ((wq_completion)"events"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: 0000000091196efe ((wq_completion)"events"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline]
 #0: 0000000091196efe ((wq_completion)"events"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline]
 #0: 0000000091196efe ((wq_completion)"events"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline]
 #0: 0000000091196efe ((wq_completion)"events"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline]
 #0: 0000000091196efe ((wq_completion)"events"){+.+.}, at: process_one_work+0x87e/0x1750 kernel/workqueue.c:2124
 #1: 0000000030d4bff2 ((linkwatch_work).work){+.+.}, at: process_one_work+0x8b4/0x1750 kernel/workqueue.c:2128
 #2: 00000000f82c9d96 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:77
3 locks held by kworker/1:5/6299:
 #0: 00000000c1300977 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline]
 #0: 00000000c1300977 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: 00000000c1300977 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline]
 #0: 00000000c1300977 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline]
 #0: 00000000c1300977 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline]
 #0: 00000000c1300977 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline]
 #0: 00000000c1300977 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: process_one_work+0x87e/0x1750 kernel/workqueue.c:2124
 #1: 00000000e7758fac ((addr_chk_work).work){+.+.}, at: process_one_work+0x8b4/0x1750 kernel/workqueue.c:2128
 #2: 00000000f82c9d96 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:77
4 locks held by kworker/u4:4/26074:
 #0: 000000002fc80916 ((wq_completion)"%s""netns"){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline]
 #0: 000000002fc80916 ((wq_completion)"%s""netns"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: 000000002fc80916 ((wq_completion)"%s""netns"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline]
 #0: 000000002fc80916 ((wq_completion)"%s""netns"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline]
 #0: 000000002fc80916 ((wq_completion)"%s""netns"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline]
 #0: 000000002fc80916 ((wq_completion)"%s""netns"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline]
 #0: 000000002fc80916 ((wq_completion)"%s""netns"){+.+.}, at: process_one_work+0x87e/0x1750 kernel/workqueue.c:2124
 #1: 00000000421abc86 (net_cleanup_work){+.+.}, at: process_one_work+0x8b4/0x1750 kernel/workqueue.c:2128
 #2: 000000006ca21691 (pernet_ops_rwsem){++++}, at: cleanup_net+0xae/0x970 net/core/net_namespace.c:520
 #3: 00000000f82c9d96 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:77
3 locks held by kworker/1:2/28884:
 #0: 0000000091196efe ((wq_completion)"events"){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline]
 #0: 0000000091196efe ((wq_completion)"events"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: 0000000091196efe ((wq_completion)"events"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline]
 #0: 0000000091196efe ((wq_completion)"events"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline]
 #0: 0000000091196efe ((wq_completion)"events"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline]
 #0: 0000000091196efe ((wq_completion)"events"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline]
 #0: 0000000091196efe ((wq_completion)"events"){+.+.}, at: process_one_work+0x87e/0x1750 kernel/workqueue.c:2124
 #1: 000000004898308c (deferred_process_work){+.+.}, at: process_one_work+0x8b4/0x1750 kernel/workqueue.c:2128
 #2: 00000000f82c9d96 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:77
1 lock held by syz-executor.2/17032:
 #0: 00000000f82c9d96 (rtnl_mutex){+.+.}, at: rtnl_lock net/core/rtnetlink.c:77 [inline]
 #0: 00000000f82c9d96 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 net/core/rtnetlink.c:4744

kobject: 'rx-0' (000000001d177dd9): kobject_cleanup, parent 000000008c589b86
=============================================

kobject: 'rx-0' (000000001d177dd9): auto cleanup 'remove' event
NMI backtrace for cpu 1
CPU: 1 PID: 1039 Comm: khungtaskd Not tainted 4.19.85-syzkaller #0
kobject: 'rx-0' (000000001d177dd9): kobject_uevent_env
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x197/0x210 lib/dump_stack.c:118
 nmi_cpu_backtrace.cold+0x63/0xa4 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 lib/nmi_backtrace.c:62
kobject: 'rx-0' (000000001d177dd9): kobject_uevent_env: uevent_suppress caused the event to drop!
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline]
 watchdog+0x9df/0xee0 kernel/hung_task.c:287
 kthread+0x354/0x420 kernel/kthread.c:246
kobject: 'rx-0' (000000001d177dd9): auto cleanup kobject_del
kobject: 'rx-0' (000000001d177dd9): calling ktype release
kobject: 'rx-0': free name
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
Sending NMI from CPU 1 to CPUs 0:
kobject: 'tx-0' (00000000cbc3dc59): kobject_cleanup, parent 000000008c589b86
NMI backtrace for cpu 0
CPU: 0 PID: 26074 Comm: kworker/u4:4 Not tainted 4.19.85-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x11/0x20 kernel/kcov.c:188
Code: bf 03 00 00 00 48 89 e5 48 8b 4d 08 e8 d8 fe ff ff 5d c3 66 0f 1f 44 00 00 55 89 f2 89 fe bf 05 00 00 00 48 89 e5 48 8b 4d 08 <e8> ba fe ff ff 5d c3 0f 1f 84 00 00 00 00 00 55 48 89 f2 48 89 fe
RSP: 0018:ffff88801927f320 EFLAGS: 00000046
RAX: ffff8880923ba080 RBX: 00000000fffffffe RCX: ffffffff86eef8bf
RDX: 00000000fffffffe RSI: 0000000000000000 RDI: 0000000000000005
RBP: ffff88801927f320 R08: ffff8880923ba080 R09: fffffbfff1467455
R10: fffffbfff1467454 R11: ffffffff8a33a2a0 R12: ffffffff8a33a2a2
R13: 0000000000000000 R14: 0000000000000003 R15: ffffffff8a33a2a2
FS:  0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c43319fab0 CR3: 000000008f8bb000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 number+0x6bf/0xc70 lib/vsprintf.c:505
 vsnprintf+0x26b/0x19a0 lib/vsprintf.c:2359
 sprintf+0xc0/0x100 lib/vsprintf.c:2495
 print_time kernel/printk/printk.c:1229 [inline]
 print_prefix+0x386/0x3f0 kernel/printk/printk.c:1252
 msg_print_text+0xc9/0x1c0 kernel/printk/printk.c:1279
 console_unlock+0x392/0x10b0 kernel/printk/printk.c:2384
 vprintk_emit+0x238/0x690 kernel/printk/printk.c:1927
 vprintk_default+0x28/0x30 kernel/printk/printk.c:1968
 vprintk_func+0x7e/0x189 kernel/printk/printk_safe.c:398
 printk+0xba/0xed kernel/printk/printk.c:2001
 kobject_cleanup lib/kobject.c:638 [inline]
 kobject_release lib/kobject.c:691 [inline]
 kref_put include/linux/kref.h:70 [inline]
 kobject_put.cold+0x88/0x2e6 lib/kobject.c:708
 netdev_queue_update_kobjects+0x250/0x3d0 net/core/net-sysfs.c:1515
 remove_queue_kobjects net/core/net-sysfs.c:1568 [inline]
 netdev_unregister_kobject+0x162/0x1f0 net/core/net-sysfs.c:1718
 rollback_registered_many+0x6bb/0xda0 net/core/dev.c:8029
 unregister_netdevice_many.part.0+0x1b/0x1f0 net/core/dev.c:9115
 unregister_netdevice_many net/core/dev.c:9114 [inline]
 default_device_exit_batch+0x34e/0x410 net/core/dev.c:9586
 ops_exit_list.isra.0+0xfc/0x150 net/core/net_namespace.c:156
 cleanup_net+0x404/0x970 net/core/net_namespace.c:553
 process_one_work+0x989/0x1750 kernel/workqueue.c:2153
 worker_thread+0x98/0xe40 kernel/workqueue.c:2296
 kthread+0x354/0x420 kernel/kthread.c:246
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415