device bridge_slave_0 left promiscuous mode bridge889: port 2(bridge_slave_0) entered disabled state device bridge_slave_1 left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state INFO: task kworker/1:2:3256 blocked for more than 140 seconds. Not tainted 4.19.86-syzkaller #0 kobject: 'batman_adv' (0000000099fa3115): kobject_uevent_env "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kobject: 'batman_adv' (0000000099fa3115): kobject_uevent_env: filter function caused the event to drop! kobject: 'batman_adv' (0000000099fa3115): kobject_cleanup, parent (null) kworker/1:2 D24992 3256 2 0x80000000 kobject: 'batman_adv' (0000000099fa3115): calling ktype release Workqueue: events linkwatch_event kobject: (0000000099fa3115): dynamic_kobj_release Call Trace: context_switch kernel/sched/core.c:2826 [inline] __schedule+0x866/0x1dc0 kernel/sched/core.c:3515 kobject: 'batman_adv': free name kobject: 'rx-0' (00000000a23dc812): kobject_cleanup, parent 00000000c8ad1873 schedule+0x92/0x1c0 kernel/sched/core.c:3559 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3617 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072 kobject: 'rx-0' (00000000a23dc812): auto cleanup 'remove' event kobject: 'rx-0' (00000000a23dc812): kobject_uevent_env kobject: 'rx-0' (00000000a23dc812): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'rx-0' (00000000a23dc812): auto cleanup kobject_del mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 kobject: 'rx-0' (00000000a23dc812): calling ktype release rtnl_lock+0x17/0x20 net/core/rtnetlink.c:77 linkwatch_event+0xf/0x70 net/core/link_watch.c:236 process_one_work+0x989/0x1750 kernel/workqueue.c:2153 kobject: 'rx-0': free name kobject: 'tx-0' (00000000c675b998): kobject_cleanup, parent 00000000c8ad1873 kobject: 'tx-0' (00000000c675b998): auto cleanup 'remove' event kobject: 'tx-0' (00000000c675b998): kobject_uevent_env kobject: 'tx-0' (00000000c675b998): kobject_uevent_env: uevent_suppress caused the event to drop! worker_thread+0x98/0xe40 kernel/workqueue.c:2296 kthread+0x354/0x420 kernel/kthread.c:246 kobject: 'tx-0' (00000000c675b998): auto cleanup kobject_del kobject: 'tx-0' (00000000c675b998): calling ktype release ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 kobject: 'tx-0': free name kobject: 'queues' (00000000c8ad1873): kobject_cleanup, parent (null) INFO: task kworker/1:1:28512 blocked for more than 140 seconds. Not tainted 4.19.86-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kobject: 'queues' (00000000c8ad1873): calling ktype release kobject: 'queues' (00000000c8ad1873): kset_release kworker/1:1 D28576 28512 2 0x80000000 kobject: 'queues': free name Workqueue: ipv6_addrconf addrconf_verify_work kobject: 'veth453' (000000002cfe8e2e): kobject_uevent_env Call Trace: context_switch kernel/sched/core.c:2826 [inline] __schedule+0x866/0x1dc0 kernel/sched/core.c:3515 kobject: 'veth453' (000000002cfe8e2e): kobject_uevent_env: uevent_suppress caused the event to drop! schedule+0x92/0x1c0 kernel/sched/core.c:3559 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3617 __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072 kobject: 'batman_adv' (00000000401e7604): kobject_uevent_env kobject: 'batman_adv' (00000000401e7604): kobject_uevent_env: filter function caused the event to drop! kobject: 'batman_adv' (00000000401e7604): kobject_cleanup, parent (null) mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 kobject: 'batman_adv' (00000000401e7604): calling ktype release kobject: (00000000401e7604): dynamic_kobj_release rtnl_lock+0x17/0x20 net/core/rtnetlink.c:77 addrconf_verify_work+0xe/0x20 net/ipv6/addrconf.c:4459 process_one_work+0x989/0x1750 kernel/workqueue.c:2153 kobject: 'batman_adv': free name kobject: 'rx-0' (00000000fd59f888): kobject_cleanup, parent 0000000014d5d3ab kobject: 'rx-0' (00000000fd59f888): auto cleanup 'remove' event kobject: 'rx-0' (00000000fd59f888): kobject_uevent_env worker_thread+0x98/0xe40 kernel/workqueue.c:2296 kobject: 'rx-0' (00000000fd59f888): kobject_uevent_env: uevent_suppress caused the event to drop! kthread+0x354/0x420 kernel/kthread.c:246 kobject: 'rx-0' (00000000fd59f888): auto cleanup kobject_del kobject: 'rx-0' (00000000fd59f888): calling ktype release ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 INFO: task kworker/1:0:29194 blocked for more than 140 seconds. kobject: 'rx-0': free name kobject: 'tx-0' (00000000df6bab59): kobject_cleanup, parent 0000000014d5d3ab Not tainted 4.19.86-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kobject: 'tx-0' (00000000df6bab59): auto cleanup 'remove' event kworker/1:0 D28816 29194 2 0x80000000 Workqueue: events switchdev_deferred_process_work kobject: 'tx-0' (00000000df6bab59): kobject_uevent_env Call Trace: kobject: 'tx-0' (00000000df6bab59): kobject_uevent_env: uevent_suppress caused the event to drop! context_switch kernel/sched/core.c:2826 [inline] __schedule+0x866/0x1dc0 kernel/sched/core.c:3515 schedule+0x92/0x1c0 kernel/sched/core.c:3559 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3617 kobject: 'tx-0' (00000000df6bab59): auto cleanup kobject_del kobject: 'tx-0' (00000000df6bab59): calling ktype release __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072 kobject: 'tx-0': free name kobject: 'queues' (0000000014d5d3ab): kobject_cleanup, parent (null) kobject: 'queues' (0000000014d5d3ab): calling ktype release kobject: 'queues' (0000000014d5d3ab): kset_release kobject: 'queues': free name kobject: 'veth452' (000000006dbc61bb): kobject_uevent_env kobject: 'veth452' (000000006dbc61bb): kobject_uevent_env: uevent_suppress caused the event to drop! mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 rtnl_lock+0x17/0x20 net/core/rtnetlink.c:77 kobject: 'batman_adv' (000000000a91e9d9): kobject_uevent_env switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:150 kobject: 'batman_adv' (000000000a91e9d9): kobject_uevent_env: filter function caused the event to drop! process_one_work+0x989/0x1750 kernel/workqueue.c:2153 kobject: 'batman_adv' (000000000a91e9d9): kobject_cleanup, parent (null) kobject: 'batman_adv' (000000000a91e9d9): calling ktype release kobject: (000000000a91e9d9): dynamic_kobj_release worker_thread+0x98/0xe40 kernel/workqueue.c:2296 kthread+0x354/0x420 kernel/kthread.c:246 kobject: 'batman_adv': free name kobject: 'rx-0' (00000000ab6a95de): kobject_cleanup, parent 0000000035801079 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 kobject: 'rx-0' (00000000ab6a95de): auto cleanup 'remove' event INFO: task syz-executor.1:6480 blocked for more than 140 seconds. kobject: 'rx-0' (00000000ab6a95de): kobject_uevent_env Not tainted 4.19.86-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kobject: 'rx-0' (00000000ab6a95de): kobject_uevent_env: uevent_suppress caused the event to drop! syz-executor.1 D24152 6480 1 0x00000004 Call Trace: kobject: 'rx-0' (00000000ab6a95de): auto cleanup kobject_del context_switch kernel/sched/core.c:2826 [inline] __schedule+0x866/0x1dc0 kernel/sched/core.c:3515 kobject: 'rx-0' (00000000ab6a95de): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (00000000a49d8e0e): kobject_cleanup, parent 0000000035801079 schedule+0x92/0x1c0 kernel/sched/core.c:3559 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3617 kobject: 'tx-0' (00000000a49d8e0e): auto cleanup 'remove' event __mutex_lock_common kernel/locking/mutex.c:1002 [inline] __mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072 kobject: 'tx-0' (00000000a49d8e0e): kobject_uevent_env kobject: 'tx-0' (00000000a49d8e0e): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tx-0' (00000000a49d8e0e): auto cleanup kobject_del kobject: 'tx-0' (00000000a49d8e0e): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (0000000035801079): kobject_cleanup, parent (null) kobject: 'queues' (0000000035801079): calling ktype release kobject: 'queues' (0000000035801079): kset_release kobject: 'queues': free name kobject: 'veth451' (00000000d19c935c): kobject_uevent_env kobject: 'veth451' (00000000d19c935c): kobject_uevent_env: uevent_suppress caused the event to drop! mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087 kobject: 'batman_adv' (00000000c0b947c0): kobject_uevent_env kobject: 'batman_adv' (00000000c0b947c0): kobject_uevent_env: filter function caused the event to drop! rtnl_lock net/core/rtnetlink.c:77 [inline] rtnetlink_rcv_msg+0x40a/0xb00 net/core/rtnetlink.c:4744 kobject: 'batman_adv' (00000000c0b947c0): kobject_cleanup, parent (null) netlink_rcv_skb+0x17d/0x460 net/netlink/af_netlink.c:2454 kobject: 'batman_adv' (00000000c0b947c0): calling ktype release kobject: (00000000c0b947c0): dynamic_kobj_release rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:4765 netlink_unicast_kernel net/netlink/af_netlink.c:1317 [inline] netlink_unicast+0x53a/0x730 net/netlink/af_netlink.c:1343 kobject: 'batman_adv': free name kobject: 'rx-0' (0000000049af6d3d): kobject_cleanup, parent 0000000049d420ea kobject: 'rx-0' (0000000049af6d3d): auto cleanup 'remove' event netlink_sendmsg+0x8ae/0xd70 net/netlink/af_netlink.c:1908 kobject: 'rx-0' (0000000049af6d3d): kobject_uevent_env kobject: 'rx-0' (0000000049af6d3d): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'rx-0' (0000000049af6d3d): auto cleanup kobject_del sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xd7/0x130 net/socket.c:632 kobject: 'rx-0' (0000000049af6d3d): calling ktype release __sys_sendto+0x262/0x380 net/socket.c:1787 kobject: 'rx-0': free name kobject: 'tx-0' (00000000ff29b366): kobject_cleanup, parent 0000000049d420ea kobject: 'tx-0' (00000000ff29b366): auto cleanup 'remove' event kobject: 'tx-0' (00000000ff29b366): kobject_uevent_env kobject: 'tx-0' (00000000ff29b366): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tx-0' (00000000ff29b366): auto cleanup kobject_del kobject: 'tx-0' (00000000ff29b366): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (0000000049d420ea): kobject_cleanup, parent (null) kobject: 'queues' (0000000049d420ea): calling ktype release kobject: 'queues' (0000000049d420ea): kset_release __do_sys_sendto net/socket.c:1799 [inline] __se_sys_sendto net/socket.c:1795 [inline] __x64_sys_sendto+0xe1/0x1a0 net/socket.c:1795 kobject: 'queues': free name kobject: 'veth450' (000000003d545034): kobject_uevent_env kobject: 'veth450' (000000003d545034): kobject_uevent_env: uevent_suppress caused the event to drop! do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293 kobject: 'batman_adv' (00000000e03e5b03): kobject_uevent_env entry_SYSCALL_64_after_hwframe+0x49/0xbe kobject: 'batman_adv' (00000000e03e5b03): kobject_uevent_env: filter function caused the event to drop! kobject: 'batman_adv' (00000000e03e5b03): kobject_cleanup, parent (null) RIP: 0033:0x414373 kobject: 'batman_adv' (00000000e03e5b03): calling ktype release Code: 00 00 00 00 48 39 f8 48 0f 44 c2 c3 90 90 90 90 90 90 90 90 90 90 90 48 85 ff 74 1b 48 8b 57 10 48 8b 07 48 83 c2 08 48 39 d0 00 00 00 00 48 0f 44 c2 c3 0f 1f 00 31 c0 c3 90 90 90 90 90 90 kobject: (00000000e03e5b03): dynamic_kobj_release kobject: 'batman_adv': free name kobject: 'rx-0' (00000000c76a82da): kobject_cleanup, parent 0000000068e2eac7 kobject: 'rx-0' (00000000c76a82da): auto cleanup 'remove' event RSP: 002b:00007ffd69b1efb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c kobject: 'rx-0' (00000000c76a82da): kobject_uevent_env kobject: 'rx-0' (00000000c76a82da): kobject_uevent_env: uevent_suppress caused the event to drop! RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414373 kobject: 'rx-0' (00000000c76a82da): auto cleanup kobject_del kobject: 'rx-0' (00000000c76a82da): calling ktype release kobject: 'rx-0': free name RDX: 0000000000000038 RSI: 0000000000a72250 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007ffd69b1efc0 R09: 000000000000000c kobject: 'tx-0' (000000000d1ef1e5): kobject_cleanup, parent 0000000068e2eac7 kobject: 'tx-0' (000000000d1ef1e5): auto cleanup 'remove' event R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 kobject: 'tx-0' (000000000d1ef1e5): kobject_uevent_env kobject: 'tx-0' (000000000d1ef1e5): kobject_uevent_env: uevent_suppress caused the event to drop! R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003 Showing all locks held in the system: kobject: 'tx-0' (000000000d1ef1e5): auto cleanup kobject_del kobject: 'tx-0' (000000000d1ef1e5): calling ktype release 1 lock held by khungtaskd/1057: #0: 00000000d6ee4bbd (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e kernel/locking/lockdep.c:4438 kobject: 'tx-0': free name kobject: 'queues' (0000000068e2eac7): kobject_cleanup, parent (null) 3 locks held by kworker/1:2/3256: #0: 00000000586da8da ((wq_completion)"events"){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000586da8da ((wq_completion)"events"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000586da8da ((wq_completion)"events"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 00000000586da8da ((wq_completion)"events"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] #0: 00000000586da8da ((wq_completion)"events"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 00000000586da8da ((wq_completion)"events"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 00000000586da8da ((wq_completion)"events"){+.+.}, at: process_one_work+0x87e/0x1750 kernel/workqueue.c:2124 kobject: 'queues' (0000000068e2eac7): calling ktype release #1: 00000000e96fcd08 ((linkwatch_work).work){+.+.}, at: process_one_work+0x8b4/0x1750 kernel/workqueue.c:2128 kobject: 'queues' (0000000068e2eac7): kset_release kobject: 'queues': free name kobject: 'veth449' (000000006a2eaa9d): kobject_uevent_env #2: 00000000323fd249 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:77 2 locks held by udevd/3640: 1 lock held by rsyslogd/7529: #0: 00000000a5c6188e (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 fs/file.c:767 kobject: 'veth449' (000000006a2eaa9d): kobject_uevent_env: uevent_suppress caused the event to drop! 2 locks held by getty/7652: kobject: 'batman_adv' (0000000064aa597b): kobject_uevent_env #0: 00000000e468be11 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362 kobject: 'batman_adv' (0000000064aa597b): kobject_uevent_env: filter function caused the event to drop! #1: 000000001e4aa64b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154 kobject: 'batman_adv' (0000000064aa597b): kobject_cleanup, parent (null) 2 locks held by getty/7653: #0: 00000000f5fff134 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362 #1: 00000000dae3ab33 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154 kobject: 'batman_adv' (0000000064aa597b): calling ktype release kobject: (0000000064aa597b): dynamic_kobj_release 2 locks held by getty/7654: #0: 0000000034bd2490 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362 kobject: 'batman_adv': free name kobject: 'rx-0' (0000000027d89997): kobject_cleanup, parent 00000000fe9f509c #1: 000000000b4ef464 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154 kobject: 'rx-0' (0000000027d89997): auto cleanup 'remove' event 2 locks held by getty/7655: #0: 00000000b0ad8c3d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362 kobject: 'rx-0' (0000000027d89997): kobject_uevent_env #1: 000000005dc21eb6 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154 2 locks held by getty/7656: #0: 00000000523182ce (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362 #1: kobject: 'rx-0' (0000000027d89997): kobject_uevent_env: uevent_suppress caused the event to drop! 000000000c137a5a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154 2 locks held by getty/7657: kobject: 'rx-0' (0000000027d89997): auto cleanup kobject_del #0: 0000000081c62465 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362 kobject: 'rx-0' (0000000027d89997): calling ktype release kobject: 'rx-0': free name #1: 000000009329cb6f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154 2 locks held by getty/7658: #0: 00000000ad04c0be (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362 kobject: 'tx-0' (00000000d46ef2c3): kobject_cleanup, parent 00000000fe9f509c kobject: 'tx-0' (00000000d46ef2c3): auto cleanup 'remove' event kobject: 'tx-0' (00000000d46ef2c3): kobject_uevent_env #1: kobject: 'tx-0' (00000000d46ef2c3): kobject_uevent_env: uevent_suppress caused the event to drop! 000000008c21cdd7 kobject: 'tx-0' (00000000d46ef2c3): auto cleanup kobject_del (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154 3 locks held by kworker/1:1/28512: kobject: 'tx-0' (00000000d46ef2c3): calling ktype release #0: 000000005f284a3c kobject: 'tx-0': free name kobject: 'queues' (00000000fe9f509c): kobject_cleanup, parent (null) ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: process_one_work+0x87e/0x1750 kernel/workqueue.c:2124 #1: 00000000953fa9b4 ((addr_chk_work).work){+.+.}, at: process_one_work+0x8b4/0x1750 kernel/workqueue.c:2128 #2: 00000000323fd249 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:77 kobject: 'queues' (00000000fe9f509c): calling ktype release 7 locks held by kworker/u4:0/16812: kobject: 'queues' (00000000fe9f509c): kset_release 3 locks held by kworker/1:0/29194: #0: 00000000586da8da ((wq_completion)"events"){+.+.}, at: __write_once_size include/linux/compiler.h:220 [inline] #0: 00000000586da8da ((wq_completion)"events"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000586da8da ((wq_completion)"events"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 00000000586da8da ((wq_completion)"events"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] #0: 00000000586da8da ((wq_completion)"events"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 00000000586da8da ((wq_completion)"events"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 00000000586da8da ((wq_completion)"events"){+.+.}, at: process_one_work+0x87e/0x1750 kernel/workqueue.c:2124 kobject: 'queues': free name #1: 00000000882a6c9e (deferred_process_work){+.+.}, at: process_one_work+0x8b4/0x1750 kernel/workqueue.c:2128 kobject: 'veth448' (000000000532a9c2): kobject_uevent_env kobject: 'veth448' (000000000532a9c2): kobject_uevent_env: uevent_suppress caused the event to drop! #2: 00000000323fd249 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 net/core/rtnetlink.c:77 kobject: 'batman_adv' (000000007e61b5d2): kobject_uevent_env 1 lock held by syz-executor.1/6480: #0: 00000000323fd249 (rtnl_mutex){+.+.}, at: rtnl_lock net/core/rtnetlink.c:77 [inline] #0: 00000000323fd249 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 net/core/rtnetlink.c:4744 kobject: 'batman_adv' (000000007e61b5d2): kobject_uevent_env: filter function caused the event to drop! kobject: 'batman_adv' (000000007e61b5d2): kobject_cleanup, parent (null) kobject: 'batman_adv' (000000007e61b5d2): calling ktype release kobject: (000000007e61b5d2): dynamic_kobj_release kobject: 'batman_adv': free name kobject: 'rx-0' (00000000b1e554f9): kobject_cleanup, parent 00000000aa7d5796 kobject: 'rx-0' (00000000b1e554f9): auto cleanup 'remove' event ============================================= kobject: 'rx-0' (00000000b1e554f9): kobject_uevent_env kobject: 'rx-0' (00000000b1e554f9): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'rx-0' (00000000b1e554f9): auto cleanup kobject_del kobject: 'rx-0' (00000000b1e554f9): calling ktype release NMI backtrace for cpu 1 kobject: 'rx-0': free name CPU: 1 PID: 1057 Comm: khungtaskd Not tainted 4.19.86-syzkaller #0 kobject: 'tx-0' (000000005d6cde76): kobject_cleanup, parent 00000000aa7d5796 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x197/0x210 lib/dump_stack.c:118 nmi_cpu_backtrace.cold+0x63/0xa4 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline] watchdog+0x9df/0xee0 kernel/hung_task.c:287 kobject: 'tx-0' (000000005d6cde76): auto cleanup 'remove' event kthread+0x354/0x420 kernel/kthread.c:246 kobject: 'tx-0' (000000005d6cde76): kobject_uevent_env ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 Sending NMI from CPU 1 to CPUs 0: kobject: 'tx-0' (000000005d6cde76): kobject_uevent_env: uevent_suppress caused the event to drop! NMI backtrace for cpu 0 CPU: 0 PID: 16812 Comm: kworker/u4:0 Not tainted 4.19.86-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net RIP: 0010:io_serial_in+0x6b/0x90 drivers/tty/serial/8250/8250_port.c:450 Code: e1 00 00 00 49 8d 7c 24 38 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 d3 e3 80 3c 02 00 75 17 41 03 5c 24 38 89 da ec <5b> 0f b6 c0 41 5c 5d c3 e8 28 5b f5 fd eb c2 e8 81 5b f5 fd eb e2 RSP: 0018:ffff88801a6cf410 EFLAGS: 00000002 RAX: dffffc0000000060 RBX: 00000000000003fd RCX: 0000000000000000 RDX: 00000000000003fd RSI: ffffffff83ad4a81 RDI: ffffffff8b6aba58 RBP: ffff88801a6cf420 R08: ffff8880332ec440 R09: fffffbfff16d5745 R10: fffffbfff16d5744 R11: ffffffff8b6aba23 R12: ffffffff8b6aba20 R13: 0000000000000020 R14: ffffffff8b6aba20 R15: fffffbfff16d574d FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 00000000963d8000 CR4: 00000000001426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: serial_in drivers/tty/serial/8250/8250.h:111 [inline] wait_for_xmitr+0xa1/0x230 drivers/tty/serial/8250/8250_port.c:2028 serial8250_console_putchar+0x1f/0x60 drivers/tty/serial/8250/8250_port.c:3199 uart_console_write+0x54/0x110 drivers/tty/serial/serial_core.c:1884 serial8250_console_write+0x638/0x9f0 drivers/tty/serial/8250/8250_port.c:3265 univ8250_console_write+0x5f/0x70 drivers/tty/serial/8250/8250_core.c:590 call_console_drivers kernel/printk/printk.c:1736 [inline] console_unlock+0xbdf/0x10d0 kernel/printk/printk.c:2425 vprintk_emit+0x238/0x690 kernel/printk/printk.c:1934 vprintk_default+0x28/0x30 kernel/printk/printk.c:1975 vprintk_func+0x7e/0x189 kernel/printk/printk_safe.c:398 printk+0xba/0xed kernel/printk/printk.c:2008 kobject_uevent_env+0x1f5/0x101f lib/kobject_uevent.c:494 kobject_uevent+0x20/0x26 lib/kobject_uevent.c:639 kobject_cleanup lib/kobject.c:649 [inline] kobject_release lib/kobject.c:691 [inline] kref_put include/linux/kref.h:70 [inline] kobject_put.cold+0x177/0x2e6 lib/kobject.c:708 netdev_queue_update_kobjects+0x250/0x3d0 net/core/net-sysfs.c:1515 remove_queue_kobjects net/core/net-sysfs.c:1568 [inline] netdev_unregister_kobject+0x162/0x1f0 net/core/net-sysfs.c:1718 rollback_registered_many+0x6bb/0xda0 net/core/dev.c:8043 unregister_netdevice_many.part.0+0x1b/0x1f0 net/core/dev.c:9129 unregister_netdevice_many net/core/dev.c:9128 [inline] default_device_exit_batch+0x34e/0x410 net/core/dev.c:9600 ops_exit_list.isra.0+0xfc/0x150 net/core/net_namespace.c:156 cleanup_net+0x404/0x960 net/core/net_namespace.c:553 process_one_work+0x989/0x1750 kernel/workqueue.c:2153 worker_thread+0x98/0xe40 kernel/workqueue.c:2296 kthread+0x354/0x420 kernel/kthread.c:246 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415