Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 29.240225] audit: type=1400 audit(1585303556.601:8): avc: denied { execmem } for pid=6345 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 29.482351] IPVS: ftp: loaded support on port[0] = 21 [ 30.650956] can: request_module (can-proto-0) failed. [ 30.659661] can: request_module (can-proto-0) failed. [ 30.667754] can: request_module (can-proto-0) failed. [ 30.693747] audit: type=1400 audit(1585303558.063:9): avc: denied { create } for pid=6322 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.10.36' (ECDSA) to the list of known hosts. 2020/03/27 10:06:05 parsed 1 programs 2020/03/27 10:06:05 executed programs: 0 [ 38.415377] audit: type=1400 audit(1585303565.789:10): avc: denied { execmem } for pid=6467 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 38.685219] IPVS: ftp: loaded support on port[0] = 21 [ 39.442642] IPVS: ftp: loaded support on port[0] = 21 [ 39.483144] chnl_net:caif_netlink_parms(): no params data found [ 39.520375] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.527389] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.534541] device bridge_slave_0 entered promiscuous mode [ 39.549076] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.555747] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.562646] device bridge_slave_1 entered promiscuous mode [ 39.582464] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 39.592729] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 39.610680] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.618173] team0: Port device team_slave_0 added [ 39.627052] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.634471] team0: Port device team_slave_1 added [ 39.654450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.660809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.686235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.698126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.705172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.730559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.731647] IPVS: ftp: loaded support on port[0] = 21 [ 39.741400] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.753119] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.815939] device hsr_slave_0 entered promiscuous mode [ 39.864212] device hsr_slave_1 entered promiscuous mode [ 39.922457] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 39.931011] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 39.989809] chnl_net:caif_netlink_parms(): no params data found [ 40.056504] IPVS: ftp: loaded support on port[0] = 21 [ 40.095549] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.101977] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.109439] device bridge_slave_0 entered promiscuous mode [ 40.118424] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.126123] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.133061] device bridge_slave_1 entered promiscuous mode [ 40.198186] chnl_net:caif_netlink_parms(): no params data found [ 40.207091] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.226801] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.248819] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.255275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.262111] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.268497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.277465] IPVS: ftp: loaded support on port[0] = 21 [ 40.365413] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 40.376082] team0: Port device team_slave_0 added [ 40.395861] chnl_net:caif_netlink_parms(): no params data found [ 40.405012] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 40.412178] team0: Port device team_slave_1 added [ 40.427250] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.433951] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.440733] device bridge_slave_0 entered promiscuous mode [ 40.450826] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.457614] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.465132] device bridge_slave_1 entered promiscuous mode [ 40.482348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.488904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.515349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.530270] IPVS: ftp: loaded support on port[0] = 21 [ 40.535163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.541711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.568152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.593074] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.600430] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.610049] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.628085] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.637007] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.650510] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.701304] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 40.710387] team0: Port device team_slave_0 added [ 40.738129] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 40.747605] team0: Port device team_slave_1 added [ 40.771060] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.778384] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.786436] device bridge_slave_0 entered promiscuous mode [ 40.836410] device hsr_slave_0 entered promiscuous mode [ 40.893565] device hsr_slave_1 entered promiscuous mode [ 40.946145] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.958429] chnl_net:caif_netlink_parms(): no params data found [ 40.971715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.978685] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.985264] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.992101] device bridge_slave_1 entered promiscuous mode [ 41.011527] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.033011] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.042302] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.051097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.059321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.085934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.119957] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.132958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.139604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.165433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.179137] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.188921] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.198165] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.210776] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.219075] team0: Port device team_slave_0 added [ 41.236719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.244942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.258012] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 41.264643] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.270859] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.278976] team0: Port device team_slave_1 added [ 41.302086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.308639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.335616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.355054] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.361470] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.369179] device bridge_slave_0 entered promiscuous mode [ 41.377972] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.384713] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.392315] device bridge_slave_1 entered promiscuous mode [ 41.436139] device hsr_slave_0 entered promiscuous mode [ 41.463344] device hsr_slave_1 entered promiscuous mode [ 41.503754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.510014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.535287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.546235] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.553666] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.579612] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 41.587004] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 41.596243] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.646417] device hsr_slave_0 entered promiscuous mode [ 41.693369] device hsr_slave_1 entered promiscuous mode [ 41.747557] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.757079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.765173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.772674] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.779072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.787302] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.805296] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 41.824217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.835864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.843855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.851746] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.858163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.868153] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.925120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 41.943377] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.950783] team0: Port device team_slave_0 added [ 41.957248] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.964459] team0: Port device team_slave_1 added [ 41.982029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.016593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.023397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.049050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.061381] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 42.080220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.088446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.095135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.120524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.141591] chnl_net:caif_netlink_parms(): no params data found [ 42.165253] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.177979] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 42.199767] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.214410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.222179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.285584] device hsr_slave_0 entered promiscuous mode [ 42.322820] device hsr_slave_1 entered promiscuous mode [ 42.363373] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 42.370343] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.379716] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.386815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.394534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.409213] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.418213] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.425938] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.435426] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 42.449729] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 42.461082] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.475632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.483678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.491088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.498773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.528444] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 42.535382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.545723] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.552190] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.559861] device bridge_slave_0 entered promiscuous mode [ 42.567230] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.574283] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.581130] device bridge_slave_1 entered promiscuous mode [ 42.626626] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.637010] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.667008] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 42.680204] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.689018] team0: Port device team_slave_0 added [ 42.696302] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.703896] team0: Port device team_slave_1 added [ 42.722420] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 42.737158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.743872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.769507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.781570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.788248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.813720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.835635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.842661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.853815] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.862024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.876707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.886791] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.904882] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.913068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.927767] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.945763] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.985571] device hsr_slave_0 entered promiscuous mode [ 43.005374] device hsr_slave_1 entered promiscuous mode [ 43.045710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.053383] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.060841] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.070278] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.078275] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.087513] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.105004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.111843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.120156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.127397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.136409] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.142904] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.151180] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.159972] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.167133] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.187284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.194266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.203214] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.210960] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.218586] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.229547] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.244480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.252766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.260390] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.268157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.275174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.283465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.290974] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.297420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.304485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.311442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.320702] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 43.329590] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.346062] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.356179] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 43.364642] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.371726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.383499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.391110] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.397491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.404773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.412680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.420176] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.426678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.433635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.441274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.449362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.457180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.464924] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.471273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.478209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.492526] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.500939] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.511016] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.520203] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.530045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.540547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.548681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.556475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.564452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.572255] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.578597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.585608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.595103] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.602462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.610033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.618835] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.634618] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.643005] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.651403] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.668521] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 43.675868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.684392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.691852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.700231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.708179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.718916] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.726942] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.738039] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 43.746076] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 43.753026] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 43.760885] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.771154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.779121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.788277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.796129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.806139] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.813021] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.824333] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 43.831219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.838950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.848269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.856863] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.866709] device veth0_vlan entered promiscuous mode [ 43.873625] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.884736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.891556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.898825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.906612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.914288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.921909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.929336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.937050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.944711] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.951046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.958074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.965183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.972043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.980801] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.990911] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.000981] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.018626] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.026535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.034932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.042667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.050063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.057692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.065469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.073497] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.079956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.086817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.096567] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.105553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.114374] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.123285] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.130163] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.140693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.152119] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.159147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.167005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.174905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.182591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.189943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.198568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.207626] device veth1_vlan entered promiscuous mode [ 44.214645] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.220653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.233814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.242901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.250995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.259320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.269160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.276896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.285074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.301024] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 44.310849] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.326369] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.335839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.344946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.354141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.361525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.370980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.380589] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 44.399826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.408732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.416914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.424988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.432906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.443211] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.451025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.463192] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.469332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.478403] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.487347] device veth0_macvtap entered promiscuous mode [ 44.495341] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 44.502867] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.510237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.518235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.526678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.534478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.545881] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 44.553666] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.563189] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 44.573406] device veth1_macvtap entered promiscuous mode [ 44.579536] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 44.587733] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.595538] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.602222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.609915] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.619685] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 44.627517] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.635106] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.642178] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.648892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.655858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.666001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.679075] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 44.689947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.699562] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 44.708150] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.720213] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.729017] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.736576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.744169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.751045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.760429] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 44.773301] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.780365] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 44.788031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.798874] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.805995] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.815127] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.828417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.843585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.849892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.857755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.865257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.873832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.882095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.889859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.897980] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.904509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.915140] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 44.922432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.931336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.939188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.956180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.965479] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.975387] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.987043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.002024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.022285] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.028646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.036934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.047050] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.059783] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.069596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.077999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.090792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.101714] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.111234] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.123103] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.130183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.145152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.154115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.162007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.172832] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 45.182856] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 45.193674] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.209437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.217750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.234370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.247708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.258785] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 45.287379] ODEBUG: free active (active state 1) object type: rcu_head hint: (null) [ 45.296751] ------------[ cut here ]------------ [ 45.301498] WARNING: CPU: 0 PID: 7669 at lib/debugobjects.c:290 debug_print_object.cold.13+0xa7/0xdb [ 45.310848] Kernel panic - not syncing: panic_on_warn set ... [ 45.310848] [ 45.318192] CPU: 0 PID: 7669 Comm: syz-executor.2 Not tainted 4.14.174-syzkaller #0 [ 45.325991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.335345] Call Trace: [ 45.337914] dump_stack+0xf7/0x13b [ 45.341434] ? debug_print_object.cold.13+0xa7/0xdb [ 45.346450] panic+0x1b0/0x358 [ 45.349619] ? add_taint.cold.5+0x11/0x11 [ 45.353744] ? lock_downgrade+0x7f0/0x7f0 [ 45.358227] ? debug_print_object.cold.13+0xa7/0xdb [ 45.363221] __warn.cold.8+0x25/0x2c [ 45.366913] ? debug_print_object.cold.13+0xa7/0xdb [ 45.371918] report_bug+0x1a4/0x1f3 [ 45.375534] do_error_trap+0x1bd/0x310 [ 45.379472] ? math_error+0x300/0x300 [ 45.383268] ? vprintk_emit+0x1be/0x4e0 [ 45.387222] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 45.392046] do_invalid_op+0x1b/0x20 [ 45.395752] invalid_op+0x1b/0x40 [ 45.399191] RIP: 0010:debug_print_object.cold.13+0xa7/0xdb [ 45.404792] RSP: 0018:ffff88808d4d7000 EFLAGS: 00010086 [ 45.410130] RAX: 0000000000000051 RBX: 0000000000000003 RCX: 0000000000000000 [ 45.417379] RDX: 0000000000000051 RSI: ffffffff86cc17c0 RDI: ffffed1011a9adf7 [ 45.424656] RBP: ffff88808d4d7028 R08: 0000000000000000 R09: 0000000000000000 [ 45.431903] R10: fffffbfff13452f7 R11: dffffc0000000000 R12: ffffffff86cb6e80 [ 45.439150] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88808bb97650 [ 45.446430] debug_check_no_obj_freed+0x506/0x930 [ 45.451255] ? free_obj_work+0x660/0x660 [ 45.455291] kfree+0xbd/0x270 [ 45.458374] free_tcf+0x114/0x160 [ 45.461808] __tcf_idr_release+0x17f/0x1c0 [ 45.466028] tcf_sample_init+0x80f/0x920 [ 45.470069] ? tcf_sample_act+0xa00/0xa00 [ 45.474199] ? rcu_read_lock_sched_held+0x108/0x120 [ 45.479990] ? _raw_read_unlock+0x2c/0x50 [ 45.484128] tcf_action_init_1+0x51a/0xb10 [ 45.488348] ? tcf_action_dump_old+0x90/0x90 [ 45.492744] ? avc_has_perm_noaudit+0x236/0x400 [ 45.497393] ? lock_downgrade+0x7f0/0x7f0 [ 45.501533] ? nla_parse+0x34/0x250 [ 45.505139] ? avc_has_extended_perms+0x1100/0x1100 [ 45.510135] tcf_action_init+0x13b/0x460 [ 45.514178] ? tcf_action_init_1+0xb10/0xb10 [ 45.518565] ? memset+0x31/0x40 [ 45.521829] ? nla_parse+0x34/0x250 [ 45.525444] tc_ctl_action+0x3c4/0x573 [ 45.529307] ? tca_action_gd+0x7e0/0x7e0 [ 45.533353] rtnetlink_rcv_msg+0x34c/0x9e0 [ 45.537562] ? rtnl_bridge_getlink+0x760/0x760 [ 45.542129] ? find_held_lock+0x36/0x1d0 [ 45.546177] netlink_rcv_skb+0x133/0x370 [ 45.550215] ? rtnl_bridge_getlink+0x760/0x760 [ 45.554772] ? netlink_ack+0xa00/0xa00 [ 45.558645] ? netlink_deliver_tap+0x8e/0x920 [ 45.563129] rtnetlink_rcv+0x10/0x20 [ 45.566835] netlink_unicast+0x40b/0x600 [ 45.570877] ? netlink_attachskb+0x6d0/0x6d0 [ 45.575264] netlink_sendmsg+0x730/0xbd0 [ 45.579300] ? netlink_unicast+0x600/0x600 [ 45.583599] ? selinux_socket_sendmsg+0x31/0x40 [ 45.588244] ? security_socket_sendmsg+0x6a/0xa0 [ 45.592975] ? netlink_unicast+0x600/0x600 [ 45.597217] sock_sendmsg+0xb5/0xf0 [ 45.600820] ___sys_sendmsg+0x625/0x920 [ 45.604786] ? trace_hardirqs_off+0x10/0x10 [ 45.609083] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 45.613816] ? find_held_lock+0x36/0x1d0 [ 45.617909] ? lock_downgrade+0x7f0/0x7f0 [ 45.622054] ? __fget+0x1ca/0x2f0 [ 45.625510] ? __fget_light+0x166/0x200 [ 45.629652] ? __fdget+0xe/0x10 [ 45.632973] ? sockfd_lookup_light+0x1c/0x150 [ 45.637495] __sys_sendmsg+0xc1/0x140 [ 45.641289] ? SyS_shutdown+0x180/0x180 [ 45.645252] ? put_timespec64+0xa4/0xf0 [ 45.649982] ? nsecs_to_jiffies+0x20/0x20 [ 45.654113] ? do_syscall_64+0x4c/0x5b0 [ 45.658061] ? __sys_sendmsg+0x140/0x140 [ 45.662103] SyS_sendmsg+0xd/0x20 [ 45.665550] do_syscall_64+0x1c7/0x5b0 [ 45.669457] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 45.674278] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 45.679444] RIP: 0033:0x45b349 [ 45.682609] RSP: 002b:00007fa729187c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.690294] RAX: ffffffffffffffda RBX: 00007fa7291886d4 RCX: 000000000045b349 [ 45.697554] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000003 [ 45.705237] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 45.712657] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 45.719910] R13: 000000000000099f R14: 00000000004cb163 R15: 000000000075bf2c [ 45.727180] [ 45.727181] ====================================================== [ 45.727182] WARNING: possible circular locking dependency detected [ 45.727183] 4.14.174-syzkaller #0 Not tainted [ 45.727184] ------------------------------------------------------ [ 45.727184] syz-executor.2/7669 is trying to acquire lock: [ 45.727185] ((console_sem).lock){-...}, at: [] down_trylock+0x13/0x70 [ 45.727188] [ 45.727188] but task is already holding lock: [ 45.727189] (&obj_hash[i].lock){-.-.}, at: [] debug_check_no_obj_freed+0x153/0x930 [ 45.727191] [ 45.727192] which lock already depends on the new lock. [ 45.727192] [ 45.727193] [ 45.727194] the existing dependency chain (in reverse order) is: [ 45.727194] [ 45.727195] -> #5 (&obj_hash[i].lock){-.-.}: [ 45.727197] lock_acquire+0x173/0x400 [ 45.727198] _raw_spin_lock_irqsave+0x99/0xd0 [ 45.727199] debug_object_activate+0x112/0x4b0 [ 45.727199] enqueue_hrtimer+0x1f/0x330 [ 45.727200] hrtimer_start_range_ns+0x4f2/0x1070 [ 45.727201] schedule_hrtimeout_range_clock+0x138/0x2f0 [ 45.727201] schedule_hrtimeout+0x12/0x20 [ 45.727202] wait_task_inactive+0x49b/0x560 [ 45.727203] __kthread_bind_mask+0x19/0xa0 [ 45.727203] kthread_bind_mask+0xe/0x10 [ 45.727204] create_worker+0x2ea/0x570 [ 45.727205] workqueue_init+0x456/0x52d [ 45.727206] kernel_init_freeable+0x285/0x4ae [ 45.727206] kernel_init+0xc/0x105 [ 45.727207] ret_from_fork+0x24/0x30 [ 45.727207] [ 45.727208] -> #4 (hrtimer_bases.lock){-.-.}: [ 45.727210] lock_acquire+0x173/0x400 [ 45.727211] _raw_spin_lock_irqsave+0x99/0xd0 [ 45.727211] lock_hrtimer_base.isra.19+0x6b/0x140 [ 45.727212] hrtimer_start_range_ns+0x85/0x1070 [ 45.727213] enqueue_task_rt+0x971/0xdb0 [ 45.727214] __sched_setscheduler.constprop.75+0xd12/0x2670 [ 45.727214] _sched_setscheduler+0x113/0x190 [ 45.727215] sched_setscheduler+0xe/0x10 [ 45.727216] watchdog_enable+0x10c/0x170 [ 45.727216] smpboot_thread_fn+0x3c4/0x850 [ 45.727217] kthread+0x338/0x400 [ 45.727217] ret_from_fork+0x24/0x30 [ 45.727218] [ 45.727218] -> #3 (&rt_b->rt_runtime_lock){-.-.}: [ 45.727221] lock_acquire+0x173/0x400 [ 45.727221] _raw_spin_lock+0x2d/0x40 [ 45.727222] enqueue_task_rt+0x528/0xdb0 [ 45.727223] __sched_setscheduler.constprop.75+0xd12/0x2670 [ 45.727223] _sched_setscheduler+0x113/0x190 [ 45.727224] sched_setscheduler+0xe/0x10 [ 45.727225] watchdog_enable+0x10c/0x170 [ 45.727225] smpboot_thread_fn+0x3c4/0x850 [ 45.727226] kthread+0x338/0x400 [ 45.727227] ret_from_fork+0x24/0x30 [ 45.727227] [ 45.727228] -> #2 (&rq->lock){-.-.}: [ 45.727230] lock_acquire+0x173/0x400 [ 45.727230] _raw_spin_lock+0x2d/0x40 [ 45.727231] task_fork_fair+0x62/0x5b0 [ 45.727232] sched_fork+0x3a6/0xbd0 [ 45.727232] copy_process.part.37+0x1656/0x66e0 [ 45.727233] _do_fork+0x155/0xbb0 [ 45.727234] kernel_thread+0x24/0x30 [ 45.727234] rest_init+0x1d/0x199 [ 45.727235] start_kernel+0x61d/0x642 [ 45.727236] x86_64_start_reservations+0x29/0x2b [ 45.727236] x86_64_start_kernel+0x76/0x79 [ 45.727237] secondary_startup_64+0xa5/0xb0 [ 45.727238] [ 45.727238] -> #1 (&p->pi_lock){-.-.}: [ 45.727240] lock_acquire+0x173/0x400 [ 45.727241] _raw_spin_lock_irqsave+0x99/0xd0 [ 45.727242] try_to_wake_up+0x82/0xf80 [ 45.727242] wake_up_process+0x10/0x20 [ 45.727243] __up.isra.1+0x136/0x1a0 [ 45.727243] up+0x95/0xe0 [ 45.727244] __up_console_sem+0xa0/0x150 [ 45.727245] console_unlock+0x569/0xe30 [ 45.727245] vprintk_emit+0x1b4/0x4e0 [ 45.727246] vprintk_default+0x1a/0x20 [ 45.727247] vprintk_func+0x49/0x12c [ 45.727247] printk+0x91/0xab [ 45.727248] kauditd_hold_skb.cold.24+0x3a/0x49 [ 45.727249] kauditd_send_queue+0xe6/0x100 [ 45.727249] kauditd_thread+0x4df/0x6a0 [ 45.727250] kthread+0x338/0x400 [ 45.727251] ret_from_fork+0x24/0x30 [ 45.727251] [ 45.727251] -> #0 ((console_sem).lock){-...}: [ 45.727254] __lock_acquire+0x2e94/0x4500 [ 45.727254] lock_acquire+0x173/0x400 [ 45.727255] _raw_spin_lock_irqsave+0x99/0xd0 [ 45.727256] down_trylock+0x13/0x70 [ 45.727256] __down_trylock_console_sem+0x93/0x190 [ 45.727257] console_trylock+0x11/0x50 [ 45.727258] vprintk_emit+0x1ab/0x4e0 [ 45.727258] vprintk_default+0x1a/0x20 [ 45.727259] vprintk_func+0x49/0x12c [ 45.727260] printk+0x91/0xab [ 45.727260] debug_print_object.cold.13+0xa7/0xdb [ 45.727261] debug_check_no_obj_freed+0x506/0x930 [ 45.727262] kfree+0xbd/0x270 [ 45.727262] free_tcf+0x114/0x160 [ 45.727263] __tcf_idr_release+0x17f/0x1c0 [ 45.727263] tcf_sample_init+0x80f/0x920 [ 45.727264] tcf_action_init_1+0x51a/0xb10 [ 45.727265] tcf_action_init+0x13b/0x460 [ 45.727266] tc_ctl_action+0x3c4/0x573 [ 45.727266] rtnetlink_rcv_msg+0x34c/0x9e0 [ 45.727267] netlink_rcv_skb+0x133/0x370 [ 45.727267] rtnetlink_rcv+0x10/0x20 [ 45.727268] netlink_unicast+0x40b/0x600 [ 45.727269] netlink_sendmsg+0x730/0xbd0 [ 45.727269] sock_sendmsg+0xb5/0xf0 [ 45.727270] ___sys_sendmsg+0x625/0x920 [ 45.727271] __sys_sendmsg+0xc1/0x140 [ 45.727271] SyS_sendmsg+0xd/0x20 [ 45.727272] do_syscall_64+0x1c7/0x5b0 [ 45.727273] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 45.727273] [ 45.727274] other info that might help us debug this: [ 45.727274] [ 45.727275] Chain exists of: [ 45.727275] (console_sem).lock --> hrtimer_bases.lock --> &obj_hash[i].lock [ 45.727278] [ 45.727279] Possible unsafe locking scenario: [ 45.727279] [ 45.727280] CPU0 CPU1 [ 45.727281] ---- ---- [ 45.727281] lock(&obj_hash[i].lock); [ 45.727283] lock(hrtimer_bases.lock); [ 45.727284] lock(&obj_hash[i].lock); [ 45.727286] lock((console_sem).lock); [ 45.727287] [ 45.727288] *** DEADLOCK *** [ 45.727288] [ 45.727289] 2 locks held by syz-executor.2/7669: [ 45.727289] #0: (rtnl_mutex){+.+.}, at: [] rtnetlink_rcv_msg+0x2c0/0x9e0 [ 45.727292] #1: (&obj_hash[i].lock){-.-.}, at: [] debug_check_no_obj_freed+0x153/0x930 [ 45.727294] [ 45.727295] stack backtrace: [ 45.727296] CPU: 0 PID: 7669 Comm: syz-executor.2 Not tainted 4.14.174-syzkaller #0 [ 45.727297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.727297] Call Trace: [ 45.727298] dump_stack+0xf7/0x13b [ 45.727299] print_circular_bug.isra.40.cold.67+0x1bd/0x27d [ 45.727299] ? save_trace+0xe0/0x290 [ 45.727300] __lock_acquire+0x2e94/0x4500 [ 45.727301] ? widen_string+0x1c0/0x1c0 [ 45.727301] ? trace_hardirqs_on+0x10/0x10 [ 45.727302] ? netdev_bits+0xa0/0xa0 [ 45.727302] ? trace_hardirqs_off+0x10/0x10 [ 45.727303] ? kvm_clock_read+0x23/0x40 [ 45.727304] lock_acquire+0x173/0x400 [ 45.727304] ? down_trylock+0x13/0x70 [ 45.727305] ? vprintk_emit+0x1ab/0x4e0 [ 45.727306] _raw_spin_lock_irqsave+0x99/0xd0 [ 45.727306] ? down_trylock+0x13/0x70 [ 45.727307] down_trylock+0x13/0x70 [ 45.727307] ? vprintk_emit+0x1ab/0x4e0 [ 45.727308] __down_trylock_console_sem+0x93/0x190 [ 45.727309] console_trylock+0x11/0x50 [ 45.727309] vprintk_emit+0x1ab/0x4e0 [ 45.727310] vprintk_default+0x1a/0x20 [ 45.727311] vprintk_func+0x49/0x12c [ 45.727311] printk+0x91/0xab [ 45.727312] ? show_regs_print_info+0x5d/0x5d [ 45.727312] ? lock_acquire+0x173/0x400 [ 45.727313] ? debug_check_no_obj_freed+0x153/0x930 [ 45.727314] debug_print_object.cold.13+0xa7/0xdb [ 45.727315] debug_check_no_obj_freed+0x506/0x930 [ 45.727315] ? free_obj_work+0x660/0x660 [ 45.727316] kfree+0xbd/0x270 [ 45.727316] free_tcf+0x114/0x160 [ 45.727317] __tcf_idr_release+0x17f/0x1c0 [ 45.727318] tcf_sample_init+0x80f/0x920 [ 45.727318] ? tcf_sample_act+0xa00/0xa00 [ 45.727319] ? rcu_read_lock_sched_held+0x108/0x120 [ 45.727320] ? _raw_read_unlock+0x2c/0x50 [ 45.727320] tcf_action_init_1+0x51a/0xb10 [ 45.727321] ? tcf_action_dump_old+0x90/0x90 [ 45.727322] ? avc_has_perm_noaudit+0x236/0x400 [ 45.727322] ? lock_downgrade+0x7f0/0x7f0 [ 45.727323] ? nla_parse+0x34/0x250 [ 45.727324] ? avc_has_extended_perms+0x1100/0x1100 [ 45.727324] tcf_action_init+0x13b/0x460 [ 45.727325] ? tcf_action_init_1+0xb10/0xb10 [ 45.727326] ? memset+0x31/0x40 [ 45.727326] ? nla_parse+0x34/0x250 [ 45.727327] tc_ctl_action+0x3c4/0x573 [ 45.727328] ? tca_action_gd+0x7e0/0x7e0 [ 45.727328] rtnetlink_rcv_msg+0x34c/0x9e0 [ 45.727329] ? rtnl_bridge_getlink+0x760/0x760 [ 45.727330] ? find_held_lock+0x36/0x1d0 [ 45.727330] netlink_rcv_skb+0x133/0x370 [ 45.727331] ? rtnl_bridge_getlink+0x760/0x760 [ 45.727332] ? netlink_ack+0xa00/0xa00 [ 45.727332] ? netlink_deliver_tap+0x8e/0x920 [ 45.727333] rtnetlink_rcv+0x10/0x20 [ 45.727334] netlink_unicast+0x40b/0x600 [ 45.727334] ? netlink_attachskb+0x6d0/0x6d0 [ 45.727335] netlink_sendmsg+0x730/0xbd0 [ 45.727336] ? netlink_unicast+0x600/0x600 [ 45.727336] ? selinux_socket_sendmsg+0x31/0x40 [ 45.727337] ? security_socket_sendmsg+0x6a/0xa0 [ 45.727338] ? netlink_unicast+0x600/0x600 [ 45.727338] sock_sendmsg+0xb5/0xf0 [ 45.727339] ___sys_sendmsg+0x625/0x920 [ 45.727340] ? trace_hardirqs_off+0x10/0x10 [ 45.727340] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 45.727341] ? find_held_lock+0x36/0x1d0 [ 45.727342] ? lock_downgrade+0x7f0/0x7f0 [ 45.727342] ? __fget+0x1ca/0x2f0 [ 45.727343] ? __fget_light+0x166/0x200 [ 45.727343] ? __fdget+0xe/0x10 [ 45.727344] ? sockfd_lookup_light+0x1c/0x150 [ 45.727345] __sys_sendmsg+0xc1/0x140 [ 45.727345] ? SyS_shutdown+0x180/0x180 [ 45.727346] ? put_timespec64+0xa4/0xf0 [ 45.727346] ? nsecs_to_jiffies+0x20/0x20 [ 45.727347] ? do_syscall_64+0x4c/0x5b0 [ 45.727348] ? __sys_sendmsg+0x140/0x140 [ 45.727348] SyS_sendmsg+0xd/0x20 [ 45.727349] do_syscall_64+0x1c7/0x5b0 [ 45.727350] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 45.727350] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 45.727351] RIP: 0033:0x45b349 [ 45.727352] RSP: 002b:00007fa729187c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.727353] RAX: ffffffffffffffda RBX: 00007fa7291886d4 RCX: 000000000045b349 [ 45.727354] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000003 [ 45.727355] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 45.727356] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 45.727357] R13: 000000000000099f R14: 00000000004cb163 R15: 000000000075bf2c [ 45.728767] Kernel Offset: disabled [ 46.773212] Rebooting in 86400 seconds..