audit: type=1400 audit(1572483462.506:183815): avc:  denied  { sys_admin } for  pid=19514 comm="syz-executor.1" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7927 sclass=netlink_route_socket pig=19561 comm=syz-executor.2
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7927 sclass=netlink_route_socket pig=19561 comm=syz-executor.2
input: syz1 as /devices/virtual/input/input61
input: failed to attach handler leds to device input61, error: -6
INFO: task syz-executor.0:15706 blocked for more than 140 seconds.
      Not tainted 4.9.141+ #23
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.0  D29608 15706  15702 0x20020000
 ffff8801a3d64740 ffff88007b375280 ffff8801d5e17900 ffff8801d6a15f00
 ffff8801db721018 ffff88005282fb50 ffffffff828075c2 0000000000000000
 ffffffff83cd74d0 ffff88005282fda0 0000000000005a85 ffff8801db7218f0
Call Trace:
 [<ffffffff82808aef>] schedule+0x7f/0x1b0 kernel/sched/core.c:3553
 [<ffffffff828142d5>] schedule_timeout+0x735/0xe20 kernel/time/timer.c:1771
 [<ffffffff81d4312c>] down_read_failed drivers/tty/tty_ldsem.c:241 [inline]
 [<ffffffff81d4312c>] __ldsem_down_read_nested+0x33c/0x610 drivers/tty/tty_ldsem.c:332
 [<ffffffff82815952>] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367
 [<ffffffff81d3ca85>] tty_ldisc_ref_wait+0x25/0x80 drivers/tty/tty_ldisc.c:275
 [<ffffffff81d21dfd>] tty_compat_ioctl+0x12d/0x270 drivers/tty/tty_io.c:3039
 [<ffffffff81619c8d>] C_SYSC_ioctl fs/compat_ioctl.c:1602 [inline]
 [<ffffffff81619c8d>] compat_SyS_ioctl+0x12d/0x1fd0 fs/compat_ioctl.c:1549
 [<ffffffff81006311>] do_syscall_32_irqs_on arch/x86/entry/common.c:328 [inline]
 [<ffffffff81006311>] do_fast_syscall_32+0x2f1/0xa10 arch/x86/entry/common.c:390
 [<ffffffff82818de0>] entry_SYSENTER_compat+0x90/0xa2 arch/x86/entry/entry_64_compat.S:137

Showing all locks held in the system:
2 locks held by khungtaskd/24:
 #0:  (rcu_read_lock){......}, at: [<ffffffff8131c2c0>] rcu_read_unlock include/linux/rcupdate.h:927 [inline]
 #0:  (rcu_read_lock){......}, at: [<ffffffff8131c2c0>] rcu_lock_break kernel/hung_task.c:143 [inline]
 #0:  (rcu_read_lock){......}, at: [<ffffffff8131c2c0>] check_hung_uninterruptible_tasks kernel/hung_task.c:177 [inline]
 #0:  (rcu_read_lock){......}, at: [<ffffffff8131c2c0>] watchdog+0x310/0xa20 kernel/hung_task.c:239
 #1:  (tasklist_lock){.+.+..}, at: [<ffffffff813fe63f>] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336
1 lock held by rsyslogd/1901:
 #0:  (&f->f_pos_lock){+.+.+.}, at: [<ffffffff8156cc7c>] __fdget_pos+0xac/0xd0 fs/file.c:781
2 locks held by getty/2028:
 #0:  (&tty->ldisc_sem){++++++}, at: [<ffffffff82815952>] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367
 #1:  (&ldata->atomic_read_lock){+.+.+.}, at: [<ffffffff81d37362>] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor.0/15702:
 #0:  (&tty->ldisc_sem){++++++}, at: [<ffffffff82815952>] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367
 #1:  (&ldata->atomic_read_lock){+.+.+.}, at: [<ffffffff81d37362>] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142
1 lock held by syz-executor.0/15706:
 #0:  (&tty->ldisc_sem){++++++}, at: [<ffffffff82815952>] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 24 Comm: khungtaskd Not tainted 4.9.141+ #23
 ffff8801d9907d08 ffffffff81b42e79 0000000000000000 0000000000000000
 0000000000000000 0000000000000001 ffffffff810983b0 ffff8801d9907d40
 ffffffff81b4df89 0000000000000000 0000000000000000 0000000000000003
Call Trace:
 [<ffffffff81b42e79>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81b42e79>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff81b4df89>] nmi_cpu_backtrace.cold.0+0x48/0x87 lib/nmi_backtrace.c:99
 [<ffffffff81b4df1c>] nmi_trigger_cpumask_backtrace+0x12c/0x151 lib/nmi_backtrace.c:60
 [<ffffffff810984b4>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37
 [<ffffffff8131c65d>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline]
 [<ffffffff8131c65d>] check_hung_task kernel/hung_task.c:125 [inline]
 [<ffffffff8131c65d>] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline]
 [<ffffffff8131c65d>] watchdog+0x6ad/0xa20 kernel/hung_task.c:239
 [<ffffffff81142c3d>] kthread+0x26d/0x300 kernel/kthread.c:211
 [<ffffffff82817a5c>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 15839 Comm: kworker/u4:18 Not tainted 4.9.141+ #23
Workqueue: netns cleanup_net
c
task: ffff8801a1a98000 task.stack: ffff88006a9a0000
RIP: 0010:[<ffffffff81208173>] 
c [<ffffffff81208173>] hlock_class kernel/locking/lockdep.c:142 [inline]
RIP: 0010:[<ffffffff81208173>] 
c [<ffffffff81208173>] lookup_chain_cache kernel/locking/lockdep.c:2122 [inline]
RIP: 0010:[<ffffffff81208173>] 
c [<ffffffff81208173>] validate_chain kernel/locking/lockdep.c:2236 [inline]
RIP: 0010:[<ffffffff81208173>] 
c [<ffffffff81208173>] __lock_acquire+0xdc3/0x4a10 kernel/locking/lockdep.c:3345
RSP: 0000:ffff88006a9a7580  EFLAGS: 00000803
RAX: 0449172111ed9ff7 RBX: ffff8801a1a98928 RCX: 000000004ef8d19b
RDX: 0000000000000004 RSI: ffff8801a1a98928 RDI: 0000000000000000
RBP: ffff88006a9a7730 R08: ffff8801a1a98948 R09: cf78c651fe73ed25
R10: ffff8801a1a98000 R11: 0000000000000000 R12: 0000000000000002
R13: 0000000000000000 R14: 0000000026980121 R15: 00000000d7dbec04
FS:  0000000000000000(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f461bc43000 CR3: 00000001c4d95000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffffffff81206da7
c ffff8801a1a98000
c ffffffff83c67d20
c 0000000600000007
c
 00000000000023c3
c ffff8801a1a98940
c ffff8801a1a988a0
c ffff8801a1a98948
c
 ffff8801a1a988a8
c ffff8801a1a988b0
c 1ffff1000d534ebc
c ffffffff83c31798
c
Call Trace:
 [<ffffffff8120c8d0>] lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756
 [<ffffffff82816dde>] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:112 [inline]
 [<ffffffff82816dde>] _raw_spin_lock_irqsave+0x4e/0x70 kernel/locking/spinlock.c:159
 [<ffffffff81baaa24>] __debug_check_no_obj_freed lib/debugobjects.c:711 [inline]
 [<ffffffff81baaa24>] debug_check_no_obj_freed+0x164/0x890 lib/debugobjects.c:749
 [<ffffffff814ef3a4>] slab_free_hook mm/slub.c:1348 [inline]
 [<ffffffff814ef3a4>] slab_free_freelist_hook mm/slub.c:1377 [inline]
 [<ffffffff814ef3a4>] slab_free mm/slub.c:2958 [inline]
 [<ffffffff814ef3a4>] kmem_cache_free+0x1a4/0x310 mm/slub.c:2980
 [<ffffffff822af836>] sk_prot_free net/core/sock.c:1375 [inline]
 [<ffffffff822af836>] __sk_destruct+0x3c6/0x5a0 net/core/sock.c:1455
 [<ffffffff822b2a43>] sk_destruct+0x63/0x80 net/core/sock.c:1463
 [<ffffffff822b2aaf>] __sk_free+0x4f/0x220 net/core/sock.c:1471
 [<ffffffff822b2cab>] sk_free+0x2b/0x40 net/core/sock.c:1482
 [<ffffffff822b2f1a>] sock_put include/net/sock.h:1588 [inline]
 [<ffffffff822b2f1a>] sk_common_release+0x1fa/0x300 net/core/sock.c:2757
 [<ffffffff8255c071>] raw_close+0x21/0x30 net/ipv4/raw.c:689
 [<ffffffff8259329f>] inet_release+0xff/0x1d0 net/ipv4/af_inet.c:434
 [<ffffffff8229bee5>] __sock_release+0x1e5/0x260 net/socket.c:605
 [<ffffffff8229bf97>] sock_release+0x17/0x20 net/socket.c:625
 [<ffffffff8253694e>] inet_ctl_sock_destroy include/net/inet_common.h:50 [inline]
 [<ffffffff8253694e>] tcp_sk_exit+0x11e/0x1c0 net/ipv4/tcp_ipv4.c:2435
 [<ffffffff822e3d70>] ops_exit_list.isra.0+0xb0/0x160 net/core/net_namespace.c:136
 [<ffffffff822e6ad2>] cleanup_net+0x3f2/0x8b0 net/core/net_namespace.c:473
 [<ffffffff81131001>] process_one_work+0x831/0x15f0 kernel/workqueue.c:2092
 [<ffffffff81131e96>] worker_thread+0xd6/0x1140 kernel/workqueue.c:2226
 [<ffffffff81142c3d>] kthread+0x26d/0x300 kernel/kthread.c:211
 [<ffffffff82817a5c>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
Code: 
cf4 
cae 
c2e 
c00 
c4c 
c8b 
c54 
c24 
c58 
c44 
c8b 
c5c 
c24 
c60 
c4c 
c8b 
c8c 
c24 
c98 
c00 
c00 
c00 
c48 
cb8 
ceb 
c83 
cb5 
c80 
c46 
c86 
cc8 
c61 
c44 
c8b 
c2d 
cd1 
c36 
cfe 
c02 
c49 
c0f 
caf 
cc1 
c<48> 
cc1 
ce8 
c31 
c66 
c45 
c85 
ce4 
c48 
c89 
c44 
c24 
c60 
c48 
c8d 
c04 
cc5 
c80 
cf9 
cc1 
c83 
c