bisecting cause commit starting from 9c7dc824d9a48f98b4ee20041e865d97bc73a626 building syzkaller on bab43553a904660266fdcd8fb974c7bdd96b3f58 testing commit 9c7dc824d9a48f98b4ee20041e865d97bc73a626 with gcc (GCC) 8.1.0 all runs: crashed: general protection fault in prepare_to_wait testing release v5.0 testing commit 1c163f4c7b3f621efff9b28a47abb36f7378d783 with gcc (GCC) 8.1.0 run #0: crashed: general protection fault in prepare_to_wait run #1: crashed: general protection fault in prepare_to_wait run #2: crashed: general protection fault in prepare_to_wait run #3: crashed: general protection fault in prepare_to_wait run #4: crashed: general protection fault in prepare_to_wait run #5: crashed: general protection fault in prepare_to_wait run #6: crashed: general protection fault in prepare_to_wait run #7: OK run #8: OK run #9: OK testing release v4.20 testing commit 8fe28cb58bcb235034b64cbbb7550a8a43fd88be with gcc (GCC) 8.1.0 run #0: crashed: general protection fault in prepare_to_wait run #1: crashed: general protection fault in prepare_to_wait run #2: crashed: general protection fault in prepare_to_wait run #3: crashed: general protection fault in prepare_to_wait run #4: crashed: general protection fault in prepare_to_wait run #5: crashed: general protection fault in prepare_to_wait run #6: crashed: inconsistent lock state in nr_find_socket run #7: crashed: WARNING: locking bug in corrupted run #8: OK run #9: OK testing release v4.19 testing commit 84df9525b0c27f3ebc2ebb1864fa62a97fdedb7d with gcc (GCC) 8.1.0 run #0: crashed: general protection fault in prepare_to_wait run #1: crashed: general protection fault in prepare_to_wait run #2: crashed: general protection fault in prepare_to_wait run #3: crashed: general protection fault in prepare_to_wait run #4: crashed: general protection fault in prepare_to_wait run #5: crashed: general protection fault in prepare_to_wait run #6: crashed: general protection fault in prepare_to_wait run #7: crashed: inconsistent lock state in nr_find_socket run #8: crashed: inconsistent lock state in nr_find_socket run #9: OK testing release v4.18 testing commit 94710cac0ef4ee177a63b5227664b38c95bbf703 with gcc (GCC) 8.1.0 run #0: crashed: general protection fault in prepare_to_wait run #1: crashed: general protection fault in prepare_to_wait run #2: crashed: general protection fault in prepare_to_wait run #3: crashed: general protection fault in prepare_to_wait run #4: crashed: KASAN: use-after-free Read in refcount_inc_not_zero run #5: crashed: general protection fault in prepare_to_wait run #6: crashed: general protection fault in prepare_to_wait run #7: crashed: general protection fault in prepare_to_wait run #8: crashed: inconsistent lock state in nr_find_socket run #9: OK testing release v4.17 testing commit 29dcea88779c856c7dc92040a0c01233263101d4 with gcc (GCC) 8.1.0 run #0: crashed: general protection fault in prepare_to_wait run #1: crashed: general protection fault in prepare_to_wait run #2: crashed: general protection fault in prepare_to_wait run #3: crashed: general protection fault in prepare_to_wait run #4: crashed: general protection fault in prepare_to_wait run #5: crashed: general protection fault in prepare_to_wait run #6: crashed: general protection fault in prepare_to_wait run #7: crashed: inconsistent lock state in nr_find_socket run #8: OK run #9: OK testing release v4.16 testing commit 0adb32858b0bddf4ada5f364a84ed60b196dbcda with gcc (GCC) 8.1.0 run #0: crashed: general protection fault in prepare_to_wait run #1: crashed: general protection fault in prepare_to_wait run #2: crashed: general protection fault in prepare_to_wait run #3: crashed: inconsistent lock state in nr_find_socket run #4: crashed: inconsistent lock state in nr_find_socket run #5: crashed: inconsistent lock state in nr_find_socket run #6: OK run #7: OK run #8: OK run #9: OK testing release v4.15 testing commit d8a5b80568a9cb66810e75b182018e9edb68e8ff with gcc (GCC) 8.1.0 run #0: crashed: general protection fault in prepare_to_wait run #1: crashed: KASAN: use-after-free Read in refcount_inc_not_zero run #2: crashed: inconsistent lock state in nr_find_socket run #3: crashed: inconsistent lock state in nr_find_socket run #4: OK run #5: crashed: inconsistent lock state in nr_find_socket run #6: OK run #7: OK run #8: OK run #9: OK testing release v4.14 testing commit bebc6082da0a9f5d47a1ea2edc099bf671058bd4 with gcc (GCC) 8.1.0 run #0: crashed: general protection fault in prepare_to_wait run #1: crashed: general protection fault in prepare_to_wait run #2: crashed: KASAN: use-after-free Read in refcount_inc_not_zero run #3: crashed: KASAN: use-after-free Read in refcount_inc_not_zero run #4: crashed: inconsistent lock state in nr_find_socket run #5: crashed: inconsistent lock state in nr_find_socket run #6: OK run #7: OK run #8: OK run #9: OK testing release v4.13 testing commit 569dbb88e80deb68974ef6fdd6a13edb9d686261 with gcc (GCC) 8.1.0 run #0: crashed: general protection fault in prepare_to_wait run #1: crashed: KASAN: use-after-free Read in refcount_inc_not_zero run #2: crashed: general protection fault in prepare_to_wait run #3: crashed: general protection fault in prepare_to_wait run #4: crashed: general protection fault in prepare_to_wait run #5: crashed: general protection fault in prepare_to_wait run #6: crashed: inconsistent lock state in nr_find_socket run #7: OK run #8: OK run #9: OK testing release v4.12 testing commit 6f7da290413ba713f0cdd9ff1a2a9bb129ef4f6c with gcc (GCC) 8.1.0 run #0: crashed: general protection fault in prepare_to_wait run #1: crashed: general protection fault in prepare_to_wait run #2: crashed: general protection fault in prepare_to_wait run #3: crashed: general protection fault in prepare_to_wait run #4: crashed: general protection fault in prepare_to_wait run #5: crashed: general protection fault in prepare_to_wait run #6: OK run #7: crashed: inconsistent lock state in nr_find_socket run #8: crashed: inconsistent lock state in nr_find_socket run #9: OK testing release v4.11 testing commit a351e9b9fc24e982ec2f0e76379a49826036da12 with gcc (GCC) 7.3.0 run #0: crashed: general protection fault in prepare_to_wait run #1: crashed: general protection fault in prepare_to_wait run #2: crashed: general protection fault in prepare_to_wait run #3: crashed: general protection fault in prepare_to_wait run #4: crashed: general protection fault in prepare_to_wait run #5: crashed: inconsistent lock state in nr_find_socket run #6: crashed: inconsistent lock state in nr_find_socket run #7: OK run #8: OK run #9: OK testing release v4.10 testing commit c470abd4fde40ea6a0846a2beab642a578c0b8cd with gcc (GCC) 5.5.0 run #0: crashed: general protection fault in prepare_to_wait run #1: crashed: general protection fault in prepare_to_wait run #2: crashed: general protection fault in prepare_to_wait run #3: crashed: inconsistent lock state in nr_find_socket run #4: crashed: inconsistent lock state in nr_find_socket run #5: crashed: inconsistent lock state in nr_find_socket run #6: OK run #7: OK run #8: OK run #9: OK testing release v4.9 testing commit 69973b830859bc6529a7a0468ba0d80ee5117826 with gcc (GCC) 5.5.0 run #0: crashed: general protection fault in prepare_to_wait run #1: crashed: general protection fault in prepare_to_wait run #2: crashed: general protection fault in prepare_to_wait run #3: crashed: inconsistent lock state in nr_find_socket run #4: crashed: inconsistent lock state in nr_find_socket run #5: crashed: inconsistent lock state in nr_find_socket run #6: crashed: inconsistent lock state in nr_find_socket run #7: crashed: inconsistent lock state in nr_find_socket run #8: OK run #9: OK testing release v4.8 testing commit c8d2bc9bc39ebea8437fd974fdbc21847bb897a3 with gcc (GCC) 5.5.0 run #0: crashed: inconsistent lock state in nr_find_socket run #1: crashed: inconsistent lock state in nr_find_socket run #2: crashed: inconsistent lock state in nr_find_socket run #3: crashed: inconsistent lock state in nr_find_socket run #4: crashed: inconsistent lock state in nr_find_socket run #5: crashed: inconsistent lock state in nr_find_socket run #6: OK run #7: OK run #8: OK run #9: OK testing release v4.7 testing commit 523d939ef98fd712632d93a5a2b588e477a7565e with gcc (GCC) 5.5.0 run #0: crashed: general protection fault in prepare_to_wait run #1: crashed: inconsistent lock state in nr_find_socket run #2: crashed: inconsistent lock state in nr_find_socket run #3: crashed: inconsistent lock state in nr_find_socket run #4: crashed: inconsistent lock state in nr_find_socket run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK testing release v4.6 testing commit 2dcd0af568b0cf583645c8a317dd12e344b1c72a with gcc (GCC) 5.5.0 run #0: crashed: general protection fault in prepare_to_wait run #1: crashed: general protection fault in prepare_to_wait run #2: crashed: KASAN: use-after-free Read in nr_release run #3: crashed: inconsistent lock state in nr_find_socket run #4: crashed: inconsistent lock state in nr_find_socket run #5: crashed: inconsistent lock state in nr_find_socket run #6: crashed: inconsistent lock state in nr_find_socket run #7: crashed: inconsistent lock state in nr_find_socket run #8: OK run #9: OK testing release v4.5 testing commit b562e44f507e863c6792946e4e1b1449fbbac85d with gcc (GCC) 5.5.0 run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #1: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #2: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #3: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #4: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #6: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #7: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #8: crashed: inconsistent lock state in nr_find_socket run #9: crashed: inconsistent lock state in nr_find_socket testing release v4.4 testing commit afd2ff9b7e1b367172f18ba7f693dfb62bdcb2dc with gcc (GCC) 5.5.0 run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #1: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #2: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #3: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #4: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #6: crashed: BUG: unable to handle kernel run #7: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #8: crashed: inconsistent lock state in nr_find_socket run #9: crashed: inconsistent lock state in nr_find_socket testing release v4.3 testing commit 6a13feb9c82803e2b815eca72fa7a9f5561d7861 with gcc (GCC) 5.5.0 run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #1: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #2: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #3: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #4: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #6: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #7: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #8: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #9: crashed: inconsistent lock state in nr_find_socket testing release v4.2 testing commit 64291f7db5bd8150a74ad2036f1037e6a0428df2 with gcc (GCC) 5.5.0 run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #1: OK run #2: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #3: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #4: OK run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #6: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #7: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #8: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #9: crashed: inconsistent lock state in nr_find_socket testing release v4.1 testing commit b953c0d234bc72e8489d3bf51a276c5c4ec85345 with gcc (GCC) 5.5.0 run #0: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #1: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #2: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #3: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #4: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #6: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #7: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #8: crashed: BUG: unable to handle kernel NULL pointer dereference in prepare_to_wait run #9: crashed: inconsistent lock state in nr_find_socket revisions tested: 22, total time: 4h26m52.536978348s (build: 1h23m46.055422711s, test: 2h58m37.207589058s) the crash already happened on the oldest tested release crash: inconsistent lock state in nr_find_socket bridge0: port 1(bridge_slave_0) entered forwarding state bridge0: port 2(bridge_slave_1) entered forwarding state ================================= [ INFO: inconsistent lock state ] 4.1.0 #1 Not tainted --------------------------------- inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage. syz-executor.4/8827 [HC0[0]:SC0[0]:HE1:SE1] takes: (slock-AF_NETROM){+.?...}, at: [] spin_lock include/linux/spinlock.h:312 [inline] (slock-AF_NETROM){+.?...}, at: [] nr_find_socket+0x5d/0x80 net/netrom/af_netrom.c:177 {IN-SOFTIRQ-W} state was registered at: [] mark_irqflags kernel/locking/lockdep.c:2799 [inline] [] __lock_acquire+0x86b/0x1c70 kernel/locking/lockdep.c:3161 [] lock_acquire+0xe6/0x310 kernel/locking/lockdep.c:3623 [] __raw_spin_lock include/linux/spinlock_api_smp.h:144 [inline] [] _raw_spin_lock+0x36/0x50 kernel/locking/spinlock.c:151 [] spin_lock include/linux/spinlock.h:312 [inline] [] nr_find_listener net/netrom/af_netrom.c:156 [inline] [] nr_rx_frame+0x2be/0x6c0 net/netrom/af_netrom.c:953 [] nr_loopback_timer+0x3e/0xb0 net/netrom/nr_loopback.c:62 [] call_timer_fn+0xa5/0x520 kernel/time/timer.c:1153 [] __run_timers kernel/time/timer.c:1225 [inline] [] run_timer_softirq+0x2ac/0x4a0 kernel/time/timer.c:1415 [] __do_softirq+0x15c/0x6c0 kernel/softirq.c:273 [] invoke_softirq kernel/softirq.c:350 [inline] [] irq_exit+0xc5/0xe0 kernel/softirq.c:391 [] exiting_irq arch/x86/include/asm/apic.h:649 [inline] [] smp_apic_timer_interrupt+0x41/0x50 arch/x86/kernel/apic/apic.c:915 [] apic_timer_interrupt+0x73/0x80 arch/x86/kernel/entry_64.S:923 [] __destroy_inode+0x21/0xe0 fs/inode.c:226 [] destroy_inode+0x21/0x70 fs/inode.c:253 [] evict+0x109/0x190 fs/inode.c:559 [] iput_final fs/inode.c:1459 [inline] [] iput+0x283/0x430 fs/inode.c:1486 [] dentry_iput fs/dcache.c:358 [inline] [] __dentry_kill+0x198/0x210 fs/dcache.c:543 [] dentry_kill fs/dcache.c:587 [inline] [] dput+0x36b/0x3a0 fs/dcache.c:793 [] __fput+0x191/0x250 fs/file_table.c:226 [] ____fput+0x9/0x10 fs/file_table.c:244 [] task_work_run+0xc4/0xf0 kernel/task_work.c:123 [] tracehook_notify_resume include/linux/tracehook.h:190 [inline] [] do_notify_resume+0x68/0x70 arch/x86/kernel/signal.c:739 [] int_signal+0x12/0x17 irq event stamp: 104 hardirqs last enabled at (101): [] __local_bh_enable_ip+0x7d/0x140 kernel/softirq.c:175 hardirqs last disabled at (103): [] __local_bh_enable_ip+0x45/0x140 kernel/softirq.c:152 softirqs last enabled at (104): [] spin_unlock_bh include/linux/spinlock.h:362 [inline] softirqs last enabled at (104): [] nr_find_socket+0x69/0x80 net/netrom/af_netrom.c:183 softirqs last disabled at (102): [] spin_lock_bh include/linux/spinlock.h:317 [inline] softirqs last disabled at (102): [] nr_find_socket+0x1f/0x80 net/netrom/af_netrom.c:172 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(slock-AF_NETROM); lock(slock-AF_NETROM); *** DEADLOCK *** 1 lock held by syz-executor.4/8827: #0: (slock-AF_NETROM){+.?...}, at: [] spin_lock include/linux/spinlock.h:312 [inline] #0: (slock-AF_NETROM){+.?...}, at: [] nr_find_socket+0x5d/0x80 net/netrom/af_netrom.c:177 stack backtrace: CPU: 0 PID: 8827 Comm: syz-executor.4 Not tainted 4.1.0 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014 ffff880038cc0190 ffff88003936fc48 ffffffff8263933b 0000000000000011 ffffffff83dd0680 ffff88003936fca8 ffffffff811c334d 0000000000000000 0000000000000001 ffff880000000001 ffffffff8108ff1a ffff880038cc09f8 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0x4f/0x7b lib/dump_stack.c:50 [] print_usage_bug+0x27d/0x2a0 kernel/locking/lockdep.c:2267 [] valid_state kernel/locking/lockdep.c:2280 [inline] [] mark_lock_irq kernel/locking/lockdep.c:2478 [inline] [] mark_lock+0x654/0x750 kernel/locking/lockdep.c:2933 [] mark_held_locks+0x75/0xc0 kernel/locking/lockdep.c:2536 [] __trace_hardirqs_on_caller kernel/locking/lockdep.c:2565 [inline] [] trace_hardirqs_on_caller+0x155/0x200 kernel/locking/lockdep.c:2612 [] trace_hardirqs_on+0xd/0x10 kernel/locking/lockdep.c:2619 [] __local_bh_enable_ip+0x7d/0x140 kernel/softirq.c:175 [] __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:178 [inline] [] _raw_spin_unlock_bh+0x34/0x40 kernel/locking/spinlock.c:207 [] spin_unlock_bh include/linux/spinlock.h:362 [inline] [] nr_find_socket+0x69/0x80 net/netrom/af_netrom.c:183 [] nr_find_next_circuit+0x3e/0x50 net/netrom/af_netrom.c:225 [] nr_connect+0xc1/0x3f0 net/netrom/af_netrom.c:704 [] SYSC_connect+0xc7/0x100 net/socket.c:1552 [] SyS_connect+0x9/0x10 net/socket.c:1533 [] system_call_fastpath+0x16/0x7a kobject: 'loop4' (ffff88003d6430a0): kobject_uevent_env kobject: 'loop4' (ffff88003d6430a0): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop3' (ffff88003d6438a0): kobject_uevent_env kobject: 'loop3' (ffff88003d6438a0): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop2' (ffff88003d5f10a0): kobject_uevent_env kobject: 'loop2' (ffff88003d5f10a0): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop3' (ffff88003d6438a0): kobject_uevent_env kobject: 'loop3' (ffff88003d6438a0): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop0' (ffff88003d5da0a0): kobject_uevent_env kobject: 'loop0' (ffff88003d5da0a0): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop5' (ffff88003d6a78a0): kobject_uevent_env kobject: 'loop5' (ffff88003d6a78a0): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop1' (ffff88003d5f18a0): kobject_uevent_env kobject: 'loop1' (ffff88003d5f18a0): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop4' (ffff88003d6430a0): kobject_uevent_env kobject: 'loop4' (ffff88003d6430a0): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop2' (ffff88003d5f10a0): kobject_uevent_env kobject: 'loop2' (ffff88003d5f10a0): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop3' (ffff88003d6438a0): kobject_uevent_env kobject: 'loop3' (ffff88003d6438a0): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop5' (ffff88003d6a78a0): kobject_uevent_env kobject: 'loop5' (ffff88003d6a78a0): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop0' (ffff88003d5da0a0): kobject_uevent_env kobject: 'loop0' (ffff88003d5da0a0): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop1' (ffff88003d5f18a0): kobject_uevent_env kobject: 'loop1' (ffff88003d5f18a0): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop4' (ffff88003d6430a0): kobject_uevent_env kobject: 'loop4' (ffff88003d6430a0): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop2' (ffff88003d5f10a0): kobject_uevent_env kobject: 'loop2' (ffff88003d5f10a0): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop3' (ffff88003d6438a0): kobject_uevent_env kobject: 'loop3' (ffff88003d6438a0): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop5' (ffff88003d6a78a0): kobject_uevent_env kobject: 'loop5' (ffff88003d6a78a0): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop0' (ffff88003d5da0a0): kobject_uevent_env kobject: 'loop0' (ffff88003d5da0a0): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop1' (ffff88003d5f18a0): kobject_uevent_env kobject: 'loop1' (ffff88003d5f18a0): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop4' (ffff88003d6430a0): kobject_uevent_env kobject: 'loop4' (ffff88003d6430a0): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop2' (ffff88003d5f10a0): kobject_uevent_env kobject: 'loop2' (ffff88003d5f10a0): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop1' (ffff88003d5f18a0): kobject_uevent_env kobject: 'loop1' (ffff88003d5f18a0): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop3' (ffff88003d6438a0): kobject_uevent_env kobject: 'loop3' (ffff88003d6438a0): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop5' (ffff88003d6a78a0): kobject_uevent_env kobject: 'loop5' (ffff88003d6a78a0): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'rx-0' (ffff88003a4af990): kobject_cleanup, parent ffff88003e0bf688 kobject: 'rx-0' (ffff88003a4af990): auto cleanup 'remove' event kobject: 'rx-0' (ffff88003a4af990): kobject_uevent_env kobject: 'rx-0' (ffff88003a4af990): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' kobject: 'rx-0' (ffff88003a4af990): auto cleanup kobject_del kobject: 'rx-0' (ffff88003a4af990): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (ffff880039970c18): kobject_cleanup, parent ffff88003e0bf688 kobject: 'tx-0' (ffff880039970c18): auto cleanup 'remove' event kobject: 'tx-0' (ffff880039970c18): kobject_uevent_env kobject: 'tx-0' (ffff880039970c18): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' kobject: 'tx-0' (ffff880039970c18): auto cleanup kobject_del kobject: 'tx-0' (ffff880039970c18): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (ffff88003e0bf688): kobject_cleanup, parent (null) kobject: 'queues' (ffff88003e0bf688): calling ktype release kobject: 'queues' (ffff88003e0bf688): kset_release kobject: 'queues': free name kobject: 'syz_tun' (ffff88003a5144f8): kobject_uevent_env kobject: 'syz_tun' (ffff88003a5144f8): fill_kobj_path: path = '/devices/virtual/net/syz_tun' kobject: 'rx-0' (ffff88003ebd1d90): kobject_cleanup, parent ffff880000114d48 kobject: 'rx-0' (ffff88003ebd1d90): auto cleanup 'remove' event kobject: 'rx-0' (ffff88003ebd1d90): kobject_uevent_env kobject: 'rx-0' (ffff88003ebd1d90): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' kobject: 'rx-0' (ffff88003ebd1d90): auto cleanup kobject_del kobject: 'rx-0' (ffff88003ebd1d90): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (ffff88003991a018): kobject_cleanup, parent ffff880000114d48 kobject: 'tx-0' (ffff88003991a018): auto cleanup 'remove' event kobject: 'tx-0' (ffff88003991a018): kobject_uevent_env kobject: 'tx-0' (ffff88003991a018): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' kobject: 'tx-0' (ffff88003991a018): auto cleanup kobject_del kobject: 'tx-0' (ffff88003991a018): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (ffff880000114d48): kobject_cleanup, parent (null) kobject: 'queues' (ffff880000114d48): calling ktype release kobject: 'queues' (ffff880000114d48): kset_release kobject: 'queues': free name kobject: 'syz_tun' (ffff88003b6284f8): kobject_uevent_env kobject: 'syz_tun' (ffff88003b6284f8): fill_kobj_path: path = '/devices/virtual/net/syz_tun' kobject: 'rx-0' (ffff88007de61790): kobject_cleanup, parent ffff88007da1d808 kobject: 'rx-0' (ffff88007de61790): auto cleanup 'remove' event kobject: 'rx-0' (ffff88007de61790): kobject_uevent_env kobject: 'rx-0' (ffff88007de61790): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' kobject: 'rx-0' (ffff88007de61790): auto cleanup kobject_del kobject: 'rx-0' (ffff88007de61790): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (ffff8800784d8c18): kobject_cleanup, parent ffff88007da1d808 kobject: 'tx-0' (ffff8800784d8c18): auto cleanup 'remove' event kobject: 'tx-0' (ffff8800784d8c18): kobject_uevent_env kobject: 'tx-0' (ffff8800784d8c18): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' kobject: 'tx-0' (ffff8800784d8c18): auto cleanup kobject_del kobject: 'tx-0' (ffff8800784d8c18): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (ffff88007da1d808): kobject_cleanup, parent (null) kobject: 'queues' (ffff88007da1d808): calling ktype release kobject: 'queues' (ffff88007da1d808): kset_release kobject: 'queues': free name kobject: 'syz_tun' (ffff880077f644f8): kobject_uevent_env kobject: 'syz_tun' (ffff880077f644f8): fill_kobj_path: path = '/devices/virtual/net/syz_tun' kobject: 'rx-0' (ffff88003e074610): kobject_cleanup, parent ffff88003db982c8 kobject: 'rx-0' (ffff88003e074610): auto cleanup 'remove' event kobject: 'rx-0' (ffff88003e074610): kobject_uevent_env kobject: 'rx-0' (ffff88003e074610): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' kobject: 'rx-0' (ffff88003e074610): auto cleanup kobject_del kobject: 'rx-0' (ffff88003e074610): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (ffff88003a565e18): kobject_cleanup, parent ffff88003db982c8 kobject: 'tx-0' (ffff88003a565e18): auto cleanup 'remove' event kobject: 'tx-0' (ffff88003a565e18): kobject_uevent_env kobject: 'tx-0' (ffff88003a565e18): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' kobject: 'tx-0' (ffff88003a565e18): auto cleanup kobject_del kobject: 'tx-0' (ffff88003a565e18): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (ffff88003db982c8): kobject_cleanup, parent (null) kobject: 'queues' (ffff88003db982c8): calling ktype release kobject: 'queues' (ffff88003db982c8): kset_release kobject: 'queues': free name kobject: 'syz_tun' (ffff88003a7e84f8): kobject_uevent_env kobject: 'syz_tun' (ffff88003a7e84f8): fill_kobj_path: path = '/devices/virtual/net/syz_tun' kobject: 'rx-0' (ffff88003eb6e690): kobject_cleanup, parent ffff88003e09dec8 kobject: 'rx-0' (ffff88003eb6e690): auto cleanup 'remove' event kobject: 'rx-0' (ffff88003eb6e690): kobject_uevent_env kobject: 'rx-0' (ffff88003eb6e690): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' kobject: 'rx-0' (ffff88003eb6e690): auto cleanup kobject_del kobject: 'rx-0' (ffff88003eb6e690): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (ffff880039877218): kobject_cleanup, parent ffff88003e09dec8 kobject: 'tx-0' (ffff880039877218): auto cleanup 'remove' event kobject: 'tx-0' (ffff880039877218): kobject_uevent_env kobject: 'tx-0' (ffff880039877218): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' kobject: 'tx-0' (ffff880039877218): auto cleanup kobject_del kobject: 'tx-0' (ffff880039877218): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (ffff88003e09dec8): kobject_cleanup, parent (null) kobject: 'queues' (ffff88003e09dec8): calling ktype release kobject: 'queues' (ffff88003e09dec8): kset_release kobject: 'queues': free name kobject: 'syz_tun' (ffff8800390404f8): kobject_uevent_env kobject: 'syz_tun' (ffff8800390404f8): fill_kobj_path: path = '/devices/virtual/net/syz_tun' kobject: 'rx-0' (ffff88003d777490): kobject_cleanup, parent ffff88003e008d48 kobject: 'rx-0' (ffff88003d777490): auto cleanup 'remove' event kobject: 'rx-0' (ffff88003d777490): kobject_uevent_env kobject: 'rx-0' (ffff88003d777490): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' kobject: 'rx-0' (ffff88003d777490): auto cleanup kobject_del kobject: 'rx-0' (ffff88003d777490): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (ffff88003a55da18): kobject_cleanup, parent ffff88003e008d48 kobject: 'tx-0' (ffff88003a55da18): auto cleanup 'remove' event kobject: 'tx-0' (ffff88003a55da18): kobject_uevent_env kobject: 'tx-0' (ffff88003a55da18): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' kobject: 'tx-0' (ffff88003a55da18): auto cleanup kobject_del kobject: 'tx-0' (ffff88003a55da18): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (ffff88003e008d48): kobject_cleanup, parent (null) kobject: 'queues' (ffff88003e008d48): calling ktype release kobject: 'queues' (ffff88003e008d48): kset_release kobject: 'queues': free name kobject: 'syz_tun' (ffff88003b6444f8): kobject_uevent_env kobject: 'syz_tun' (ffff88003b6444f8): fill_kobj_path: path = '/devices/virtual/net/syz_tun' kobject: 'syz_tun' (ffff88003b6284f8): kobject_cleanup, parent (null) kobject: 'syz_tun' (ffff88003a5144f8): kobject_cleanup, parent (null) kobject: 'syz_tun' (ffff88003a5144f8): calling ktype release kobject: 'syz_tun': free name kobject: 'syz_tun' (ffff88003b6284f8): calling ktype release kobject: 'syz_tun': free name kobject: 'syz_tun' (ffff88003a7e84f8): kobject_cleanup, parent (null) kobject: 'syz_tun' (ffff88003a7e84f8): calling ktype release kobject: 'syz_tun' (ffff880077f644f8): kobject_cleanup, parent (null) kobject: 'syz_tun' (ffff880077f644f8): calling ktype release kobject: 'syz_tun': free name kobject: 'syz_tun': free name kobject: 'syz_tun' (ffff8800390404f8): kobject_cleanup, parent (null) kobject: 'syz_tun' (ffff8800390404f8): calling ktype release kobject: 'syz_tun' (ffff88003b6444f8): kobject_cleanup, parent (null) kobject: 'syz_tun' (ffff88003b6444f8): calling ktype release kobject: 'syz_tun': free name kobject: 'syz_tun': free name