syzkaller login: [ 39.299845] kauditd_printk_skb: 10 callbacks suppressed [ 39.299850] audit: type=1400 audit(1581131265.559:35): avc: denied { map } for pid=7433 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 45.836277] audit: type=1400 audit(1581131272.099:36): avc: denied { map } for pid=7443 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 46.643816] IPVS: ftp: loaded support on port[0] = 21 [ 47.110061] can: request_module (can-proto-0) failed. [ 48.189999] can: request_module (can-proto-0) failed. [ 48.199074] can: request_module (can-proto-0) failed. [ 48.390202] audit: type=1400 audit(1581131274.649:37): avc: denied { create } for pid=7443 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 48.414110] audit: type=1400 audit(1581131274.649:38): avc: denied { create } for pid=7443 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 48.438442] audit: type=1400 audit(1581131274.649:39): avc: denied { create } for pid=7443 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.15.204' (ECDSA) to the list of known hosts. 2020/02/08 03:08:01 parsed 1 programs 2020/02/08 03:08:02 executed programs: 0 [ 55.939340] IPVS: ftp: loaded support on port[0] = 21 [ 55.941613] IPVS: ftp: loaded support on port[0] = 21 [ 55.961338] IPVS: ftp: loaded support on port[0] = 21 [ 55.961502] IPVS: ftp: loaded support on port[0] = 21 [ 55.973139] IPVS: ftp: loaded support on port[0] = 21 [ 55.984274] IPVS: ftp: loaded support on port[0] = 21 [ 56.176757] chnl_net:caif_netlink_parms(): no params data found [ 56.234262] chnl_net:caif_netlink_parms(): no params data found [ 56.272975] chnl_net:caif_netlink_parms(): no params data found [ 56.297350] chnl_net:caif_netlink_parms(): no params data found [ 56.337438] chnl_net:caif_netlink_parms(): no params data found [ 56.359219] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.366191] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.373930] device bridge_slave_0 entered promiscuous mode [ 56.399511] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.406019] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.413300] device bridge_slave_1 entered promiscuous mode [ 56.419851] chnl_net:caif_netlink_parms(): no params data found [ 56.432417] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.438780] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.445910] device bridge_slave_0 entered promiscuous mode [ 56.482687] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.489069] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.496638] device bridge_slave_1 entered promiscuous mode [ 56.504490] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.549227] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.560651] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.567217] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.574581] device bridge_slave_0 entered promiscuous mode [ 56.580839] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.590142] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.597310] device bridge_slave_0 entered promiscuous mode [ 56.616353] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.623139] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.630128] device bridge_slave_0 entered promiscuous mode [ 56.636741] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.643512] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.650364] device bridge_slave_0 entered promiscuous mode [ 56.657098] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.663755] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.670597] device bridge_slave_1 entered promiscuous mode [ 56.677717] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.685623] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.692194] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.699053] device bridge_slave_1 entered promiscuous mode [ 56.713636] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.720009] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.727146] device bridge_slave_1 entered promiscuous mode [ 56.733276] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.739816] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.747464] device bridge_slave_1 entered promiscuous mode [ 56.761724] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.777397] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.788847] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.796337] team0: Port device team_slave_0 added [ 56.802300] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 56.809610] team0: Port device team_slave_1 added [ 56.828047] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.836926] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.845957] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.854397] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 56.862258] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 56.877947] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.887200] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.896181] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.920720] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.928295] team0: Port device team_slave_0 added [ 56.934423] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.954540] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 56.964420] team0: Port device team_slave_0 added [ 56.973615] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 56.980865] team0: Port device team_slave_1 added [ 56.986704] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 56.994107] team0: Port device team_slave_1 added [ 57.003856] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 57.012599] team0: Port device team_slave_0 added [ 57.017912] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 57.025665] team0: Port device team_slave_0 added [ 57.063488] device hsr_slave_0 entered promiscuous mode [ 57.101329] device hsr_slave_1 entered promiscuous mode [ 57.141518] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 57.149280] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 57.160167] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 57.167790] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 57.175583] team0: Port device team_slave_1 added [ 57.181123] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 57.188399] team0: Port device team_slave_1 added [ 57.194903] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 57.202634] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 57.209845] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 57.217407] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 57.224707] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 57.232308] team0: Port device team_slave_0 added [ 57.237603] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 57.245391] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 57.314710] device hsr_slave_0 entered promiscuous mode [ 57.361263] device hsr_slave_1 entered promiscuous mode [ 57.431543] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 57.438904] team0: Port device team_slave_1 added [ 57.448289] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 57.456030] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 57.467482] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 57.485706] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 57.532489] device hsr_slave_0 entered promiscuous mode [ 57.581409] device hsr_slave_1 entered promiscuous mode [ 57.631583] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 57.638543] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 57.703501] device hsr_slave_0 entered promiscuous mode [ 57.741312] device hsr_slave_1 entered promiscuous mode [ 57.784178] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 57.805103] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 57.832805] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 57.882690] device hsr_slave_0 entered promiscuous mode [ 57.921372] device hsr_slave_1 entered promiscuous mode [ 58.002416] device hsr_slave_0 entered promiscuous mode [ 58.041210] device hsr_slave_1 entered promiscuous mode [ 58.101823] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 58.135314] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 58.142404] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 58.149356] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 58.176160] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 58.275779] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 58.288226] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 58.296953] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 58.322967] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 58.339521] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 58.392701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.416090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.433992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.455832] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.468246] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.478228] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.487309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.495655] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.505184] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.518778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.525891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.534267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.542071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.548913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.558131] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.566062] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 58.574143] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.583499] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.590677] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 58.599461] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.607356] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.616457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.626103] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.632919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.639926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.648619] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.657814] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.665499] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.674349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.682930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.691874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.699589] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.706263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.714262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.721872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.728816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.735801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.743380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.751621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.759298] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.765695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.775026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.782122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.790576] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 58.799440] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.808446] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 58.816412] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.825971] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.834432] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.845734] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.854287] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 58.860531] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.868824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.879313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.887205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.895641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.903814] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.910163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.917282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.925615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.933631] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.940127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.949193] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 58.955845] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.964040] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.975254] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.984495] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.993057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.000774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.008861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.016700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.024698] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.031195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.039912] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.049147] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.056961] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.067817] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.076236] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.083375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.090441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.098413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.106551] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.112974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.119999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.128249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.135957] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.142448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.149424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.157284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.165151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.172956] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.179426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.186290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.194465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.201947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.209558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.218324] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.230314] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.239014] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.248379] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.258796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.267255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.276102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.284363] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.290878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.297847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.305720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.313347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.321356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.329026] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.335442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.343214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.351342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.359009] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.365422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.372725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.380429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.388171] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.394693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.402005] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.410200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.419744] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.430560] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.438981] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.448360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.458891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.466727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.474901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.482524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.490130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.497873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.505612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.515421] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.524602] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.535953] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.545273] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.556264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.565570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.574016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.582294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.590078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.598009] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.607704] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 59.618961] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.627241] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.636103] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.646476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.654604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.662866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.670609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.678681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.686395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.695124] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.704677] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 59.715590] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.724946] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.735421] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 59.743284] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.750241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.760497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.768250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.776132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.784755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.792588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.800042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.807802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.815468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.823340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.831170] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.838084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.847099] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 59.853997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.863402] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.871980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.879862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.888384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.898636] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.910718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 59.924573] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 59.931722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.939527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.947932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.955920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.964095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.972207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.979725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.987839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.995272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.004524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 60.017342] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 60.025866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 60.034977] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 60.045002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.054782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.062590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.070209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.078421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.086033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.094138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 60.101343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.108968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.118111] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 60.126440] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 60.136003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.146944] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 60.153321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.163967] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 60.173134] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 60.179208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.186681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.196357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.203171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.210814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.218632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.226590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.236464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 60.247055] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 60.253578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.277673] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 60.284933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.297315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.305125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.314554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.325093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.333391] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 60.339428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.349711] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 60.358952] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 60.367777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.381739] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 60.389008] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 60.399594] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 60.412638] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 60.425842] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 60.434301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.441773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.448493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.455767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.464305] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 60.473496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.484660] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 60.492848] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 60.500574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.511254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.519600] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 60.530208] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 60.540666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.554013] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.560868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.568194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.576517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.591589] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 60.600471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.608505] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 60.616662] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 60.627389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.635285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.647213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.661873] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 60.670053] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 60.687409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.694398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.703633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.717313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.725578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.737842] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 60.752719] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 60.759889] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 60.771133] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 60.780675] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 60.791594] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 60.800171] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 60.817624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.831637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.842528] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 60.850306] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 60.857691] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 60.865295] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 60.874371] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 60.882099] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 60.888733] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 60.896848] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 60.907734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.924690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.933103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.944195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.952901] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.959782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.971563] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 60.978988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.987364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.996543] device veth0_vlan entered promiscuous mode [ 61.011165] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 61.019802] device veth0_vlan entered promiscuous mode [ 61.039204] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 61.047803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.055717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.065972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.073714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.085433] device veth1_vlan entered promiscuous mode [ 61.092097] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 61.102542] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 61.111762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.119076] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.132571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.139565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.150531] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.157874] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.168469] device veth1_vlan entered promiscuous mode [ 61.175033] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 61.201851] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 61.208866] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 61.216281] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 61.223521] device veth0_vlan entered promiscuous mode [ 61.232841] audit: type=1400 audit(1581131287.499:40): avc: denied { associate } for pid=7551 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 61.237281] device veth1_vlan entered promiscuous mode [ 61.262955] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 61.289052] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 61.297071] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 61.304309] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 61.312695] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 61.323130] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 61.333764] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 61.356070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.374020] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.382384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.389880] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.397737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.405223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.413704] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 61.452440] device veth0_vlan entered promiscuous mode [ 61.463286] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 61.478316] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 61.489117] ------------[ cut here ]------------ [ 61.491770] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 61.494480] ODEBUG: free active (active state 0) object type: timer_list hint: rfcomm_dlc_timeout+0x0/0x50 [ 61.494568] WARNING: CPU: 0 PID: 7617 at lib/debugobjects.c:328 debug_print_object+0x168/0x210 [ 61.520225] Kernel panic - not syncing: panic_on_warn set ... [ 61.520225] [ 61.527680] CPU: 0 PID: 7617 Comm: syz-executor.3 Not tainted 4.19.102-syzkaller #0 [ 61.535540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.544877] Call Trace: [ 61.547454] dump_stack+0x123/0x177 [ 61.551079] ? debug_print_object+0x168/0x210 [ 61.555566] panic+0x1cd/0x375 [ 61.558743] ? __warn_printk+0xd6/0xd6 [ 61.562617] __warn.cold.8+0x1b/0x3e [ 61.566325] ? debug_print_object+0x168/0x210 [ 61.570809] report_bug+0x1a4/0x200 [ 61.574431] do_error_trap+0x200/0x350 [ 61.578513] ? math_error+0x340/0x340 [ 61.582362] ? irq_work_queue+0xd/0x50 [ 61.586311] ? wake_up_klogd+0x71/0xa0 [ 61.590192] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 61.595019] ? trace_hardirqs_off_caller+0x49/0x180 [ 61.600030] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 61.604854] do_invalid_op+0x1b/0x20 [ 61.608548] invalid_op+0x14/0x20 [ 61.611986] RIP: 0010:debug_print_object+0x168/0x210 [ 61.617160] Code: 67 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 92 00 00 00 48 8b 14 dd 80 c6 67 87 4c 89 fe 48 c7 c7 c0 bb 67 87 e8 1b 2f 0b fe <0f> 0b 83 05 2b d8 f5 05 01 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f [ 61.636265] RSP: 0018:ffff88808d9cf828 EFLAGS: 00010082 [ 61.641627] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 61.649082] RDX: 0000000000000004 RSI: 0000000000000008 RDI: ffffffff8a19fae0 [ 61.656502] RBP: ffff88808d9cf868 R08: ffffed1015d43ee3 R09: ffffed1015d43ee2 [ 61.663874] R10: ffffed1015d43ee2 R11: ffff8880aea1f717 R12: 0000000000000001 [ 61.671302] R13: ffffffff8859d240 R14: ffffffff815309b0 R15: ffffffff8767c2a0 [ 61.678724] ? __internal_add_timer+0x1e0/0x1e0 [ 61.683410] ? debug_print_object+0x168/0x210 [ 61.687896] debug_check_no_obj_freed+0x264/0x472 [ 61.692751] kfree+0xbd/0x220 [ 61.695849] rfcomm_dlc_free+0x19/0x20 [ 61.699805] rfcomm_dev_ioctl+0x14f3/0x1970 [ 61.704303] ? mark_held_locks+0xc7/0x130 [ 61.708564] ? __local_bh_enable_ip+0x160/0x260 [ 61.713448] ? rfcomm_tty_install+0x190/0x190 [ 61.717933] ? lockdep_hardirqs_on+0x421/0x5c0 [ 61.722603] ? __local_bh_enable_ip+0x160/0x260 [ 61.727449] ? lock_sock_nested+0x82/0x100 [ 61.731679] ? trace_hardirqs_on+0x28/0x190 [ 61.735988] ? lock_sock_nested+0x82/0x100 [ 61.740304] ? lock_sock_nested+0x82/0x100 [ 61.744542] ? __local_bh_enable_ip+0x160/0x260 [ 61.749231] rfcomm_sock_ioctl+0x71/0xa0 [ 61.753287] sock_do_ioctl+0xd9/0x230 [ 61.757081] ? compat_ifr_data_ioctl+0x100/0x100 [ 61.761955] ? avc_has_extended_perms+0x4e2/0x1170 [ 61.766882] ? __lock_acquire+0x792/0x4980 [ 61.771102] ? avc_ss_reset+0x130/0x130 [ 61.775080] sock_ioctl+0x281/0x500 [ 61.778793] ? dlci_ioctl_set+0x30/0x30 [ 61.782773] do_vfs_ioctl+0x196/0x10c0 [ 61.786738] ? ioctl_preallocate+0x1c0/0x1c0 [ 61.791136] ? selinux_file_mprotect+0x5f0/0x5f0 [ 61.795903] ? ksys_dup3+0x2e0/0x2e0 [ 61.799607] ? put_timespec64+0xa9/0x100 [ 61.803662] ? nsecs_to_jiffies+0x20/0x20 [ 61.807828] ? security_file_ioctl+0x4a/0x90 [ 61.812428] ? __fget_light+0x174/0x1e0 [ 61.816408] ksys_ioctl+0x62/0x90 [ 61.819850] ? lockdep_hardirqs_on+0x421/0x5c0 [ 61.824465] __x64_sys_ioctl+0x6e/0xb0 [ 61.828357] do_syscall_64+0xd0/0x4e0 [ 61.832159] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 61.837355] RIP: 0033:0x45af49 [ 61.840545] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 61.859777] RSP: 002b:00007f2405c4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.868093] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 61.875393] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000005 [ 61.882702] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 61.889966] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2405c4e6d4 [ 61.897226] R13: 00000000004c3c64 R14: 00000000004da258 R15: 00000000ffffffff [ 61.904521] [ 61.904523] ====================================================== [ 61.904524] WARNING: possible circular locking dependency detected [ 61.904524] 4.19.102-syzkaller #0 Not tainted [ 61.904526] ------------------------------------------------------ [ 61.904526] syz-executor.3/7617 is trying to acquire lock: [ 61.904527] 000000009510beb1 ((console_sem).lock){-...}, at: down_trylock+0x13/0x70 [ 61.904530] [ 61.904531] but task is already holding lock: [ 61.904531] 00000000a8fbac38 (&obj_hash[i].lock){-.-.}, at: debug_check_no_obj_freed+0xad/0x472 [ 61.904534] [ 61.904535] which lock already depends on the new lock. [ 61.904535] [ 61.904536] [ 61.904537] the existing dependency chain (in reverse order) is: [ 61.904537] [ 61.904538] -> #5 (&obj_hash[i].lock){-.-.}: [ 61.904540] _raw_spin_lock_irqsave+0x99/0xd0 [ 61.904541] debug_object_activate+0x11c/0x4e0 [ 61.904542] enqueue_hrtimer+0x26/0x300 [ 61.904543] hrtimer_start_range_ns+0x4b0/0xa40 [ 61.904543] schedule_hrtimeout_range_clock+0x140/0x310 [ 61.904544] schedule_hrtimeout+0x12/0x20 [ 61.904545] wait_task_inactive+0x47c/0x570 [ 61.904545] __kthread_bind_mask+0x19/0x90 [ 61.904546] kthread_bind_mask+0xe/0x10 [ 61.904547] init_rescuer.part.25+0xde/0x160 [ 61.904548] workqueue_init+0x386/0x5c1 [ 61.904548] kernel_init_freeable+0x285/0x505 [ 61.904549] kernel_init+0xc/0x113 [ 61.904550] ret_from_fork+0x24/0x30 [ 61.904550] [ 61.904551] -> #4 (hrtimer_bases.lock){-.-.}: [ 61.904553] _raw_spin_lock_irqsave+0x99/0xd0 [ 61.904554] lock_hrtimer_base.isra.16+0x6b/0x140 [ 61.904555] hrtimer_start_range_ns+0xd4/0xa40 [ 61.904555] enqueue_task_rt+0x9af/0xe00 [ 61.904556] __sched_setscheduler.constprop.79+0xd71/0x22d0 [ 61.904557] _sched_setscheduler+0xfd/0x1a0 [ 61.904558] sched_setscheduler+0xe/0x10 [ 61.904558] watchdog_dev_init+0xbe/0x15f [ 61.904559] watchdog_init+0x12/0x13b [ 61.904559] do_one_initcall+0xbc/0x518 [ 61.904560] kernel_init_freeable+0x461/0x505 [ 61.904561] kernel_init+0xc/0x113 [ 61.904562] ret_from_fork+0x24/0x30 [ 61.904562] [ 61.904563] -> #3 (&rt_b->rt_runtime_lock){-...}: [ 61.904565] _raw_spin_lock+0x2d/0x40 [ 61.904566] rq_online_rt+0xb7/0x390 [ 61.904566] set_rq_online.part.77+0xe1/0x140 [ 61.904567] sched_cpu_activate+0x17b/0x270 [ 61.904568] cpuhp_invoke_callback+0x188/0x1360 [ 61.904568] cpuhp_thread_fun+0x39b/0x6f0 [ 61.904569] smpboot_thread_fn+0x55f/0x8a0 [ 61.904570] kthread+0x324/0x3e0 [ 61.904570] ret_from_fork+0x24/0x30 [ 61.904571] [ 61.904571] -> #2 (&rq->lock){-.-.}: [ 61.904574] _raw_spin_lock+0x2d/0x40 [ 61.904574] task_fork_fair+0x65/0x4b0 [ 61.904575] sched_fork+0x3ad/0x8b0 [ 61.904576] copy_process.part.34+0x1ad9/0x75b0 [ 61.904576] _do_fork+0x15d/0xba0 [ 61.904577] kernel_thread+0x24/0x30 [ 61.904578] rest_init+0x1d/0x199 [ 61.904578] start_kernel+0x70d/0x746 [ 61.904579] x86_64_start_reservations+0x29/0x2b [ 61.904580] x86_64_start_kernel+0x76/0x79 [ 61.904580] secondary_startup_64+0xa4/0xb0 [ 61.904581] [ 61.904581] -> #1 (&p->pi_lock){-.-.}: [ 61.904584] _raw_spin_lock_irqsave+0x99/0xd0 [ 61.904585] try_to_wake_up+0x8a/0xf20 [ 61.904585] wake_up_process+0x10/0x20 [ 61.904586] __up.isra.1+0x136/0x1a0 [ 61.904586] up+0x95/0xe0 [ 61.904587] __up_console_sem+0xa0/0x150 [ 61.904588] console_unlock+0x54f/0xde0 [ 61.904589] vprintk_emit+0x191/0x540 [ 61.904590] vprintk_default+0x1a/0x20 [ 61.904590] vprintk_func+0x49/0x12c [ 61.904591] printk+0x9a/0xc0 [ 61.904592] kauditd_hold_skb.cold.23+0x3a/0x49 [ 61.904592] kauditd_send_queue+0xe6/0x100 [ 61.904593] kauditd_thread+0x4ad/0x700 [ 61.904594] kthread+0x324/0x3e0 [ 61.904594] ret_from_fork+0x24/0x30 [ 61.904595] [ 61.904595] -> #0 ((console_sem).lock){-...}: [ 61.904598] lock_acquire+0x173/0x3d0 [ 61.904598] _raw_spin_lock_irqsave+0x99/0xd0 [ 61.904599] down_trylock+0x13/0x70 [ 61.904600] __down_trylock_console_sem+0x93/0x190 [ 61.904600] console_trylock+0x11/0x50 [ 61.904601] vprintk_emit+0x184/0x540 [ 61.904602] vprintk_default+0x1a/0x20 [ 61.904602] vprintk_func+0x49/0x12c [ 61.904603] printk+0x9a/0xc0 [ 61.904604] __warn_printk+0x86/0xd6 [ 61.904604] debug_print_object+0x168/0x210 [ 61.904605] debug_check_no_obj_freed+0x264/0x472 [ 61.904606] kfree+0xbd/0x220 [ 61.904606] rfcomm_dlc_free+0x19/0x20 [ 61.904607] rfcomm_dev_ioctl+0x14f3/0x1970 [ 61.904608] rfcomm_sock_ioctl+0x71/0xa0 [ 61.904608] sock_do_ioctl+0xd9/0x230 [ 61.904609] sock_ioctl+0x281/0x500 [ 61.904610] do_vfs_ioctl+0x196/0x10c0 [ 61.904610] ksys_ioctl+0x62/0x90 [ 61.904611] __x64_sys_ioctl+0x6e/0xb0 [ 61.904612] do_syscall_64+0xd0/0x4e0 [ 61.904613] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 61.904613] [ 61.904614] other info that might help us debug this: [ 61.904614] [ 61.904615] Chain exists of: [ 61.904615] (console_sem).lock --> hrtimer_bases.lock --> &obj_hash[i].lock [ 61.904619] [ 61.904619] Possible unsafe locking scenario: [ 61.904620] [ 61.904620] CPU0 CPU1 [ 61.904621] ---- ---- [ 61.904622] lock(&obj_hash[i].lock); [ 61.904623] lock(hrtimer_bases.lock); [ 61.904625] lock(&obj_hash[i].lock); [ 61.904626] lock((console_sem).lock); [ 61.904628] [ 61.904628] *** DEADLOCK *** [ 61.904629] [ 61.904630] 3 locks held by syz-executor.3/7617: [ 61.904630] #0: 0000000040ae88e0 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}, at: rfcomm_sock_ioctl+0x63/0xa0 [ 61.904633] #1: 00000000f57b89e1 (rfcomm_ioctl_mutex){+.+.}, at: rfcomm_dev_ioctl+0x2dd/0x1970 [ 61.904636] #2: 00000000a8fbac38 (&obj_hash[i].lock){-.-.}, at: debug_check_no_obj_freed+0xad/0x472 [ 61.904639] [ 61.904639] stack backtrace: [ 61.904640] CPU: 0 PID: 7617 Comm: syz-executor.3 Not tainted 4.19.102-syzkaller #0 [ 61.904641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.904642] Call Trace: [ 61.904643] dump_stack+0x123/0x177 [ 61.904643] print_circular_bug.isra.34.cold.55+0x1bd/0x27d [ 61.904644] ? save_trace+0xe0/0x290 [ 61.904645] __lock_acquire+0x30df/0x4980 [ 61.904645] ? mark_held_locks+0x130/0x130 [ 61.904646] ? enable_ptr_key_workfn+0x30/0x30 [ 61.904647] ? is_bpf_text_address+0x60/0xe0 [ 61.904647] ? kvm_clock_read+0x18/0x30 [ 61.904648] ? kvm_sched_clock_read+0x9/0x20 [ 61.904649] lock_acquire+0x173/0x3d0 [ 61.904649] ? down_trylock+0x13/0x70 [ 61.904650] ? vprintk_emit+0x184/0x540 [ 61.904650] ? vprintk_emit+0x184/0x540 [ 61.904651] _raw_spin_lock_irqsave+0x99/0xd0 [ 61.904652] ? down_trylock+0x13/0x70 [ 61.904652] down_trylock+0x13/0x70 [ 61.904653] ? vprintk_emit+0x184/0x540 [ 61.904654] __down_trylock_console_sem+0x93/0x190 [ 61.904654] console_trylock+0x11/0x50 [ 61.904655] vprintk_emit+0x184/0x540 [ 61.904656] ? __internal_add_timer+0x1e0/0x1e0 [ 61.904656] vprintk_default+0x1a/0x20 [ 61.904657] vprintk_func+0x49/0x12c [ 61.904658] printk+0x9a/0xc0 [ 61.904658] ? kmsg_dump_rewind_nolock+0xdf/0xdf [ 61.904659] ? rfcomm_session_get+0x310/0x310 [ 61.904660] __warn_printk+0x86/0xd6 [ 61.904660] ? add_taint.cold.5+0x11/0x11 [ 61.904661] ? rfcomm_session_get+0x310/0x310 [ 61.904662] debug_print_object+0x168/0x210 [ 61.904663] debug_check_no_obj_freed+0x264/0x472 [ 61.904663] kfree+0xbd/0x220 [ 61.904664] rfcomm_dlc_free+0x19/0x20 [ 61.904665] rfcomm_dev_ioctl+0x14f3/0x1970 [ 61.904665] ? mark_held_locks+0xc7/0x130 [ 61.904666] ? __local_bh_enable_ip+0x160/0x260 [ 61.904667] ? rfcomm_tty_install+0x190/0x190 [ 61.904667] ? lockdep_hardirqs_on+0x421/0x5c0 [ 61.904668] ? __local_bh_enable_ip+0x160/0x260 [ 61.904669] ? lock_sock_nested+0x82/0x100 [ 61.904669] ? trace_hardirqs_on+0x28/0x190 [ 61.904670] ? lock_sock_nested+0x82/0x100 [ 61.904671] ? lock_sock_nested+0x82/0x100 [ 61.904671] ? __local_bh_enable_ip+0x160/0x260 [ 61.904672] rfcomm_sock_ioctl+0x71/0xa0 [ 61.904673] sock_do_ioctl+0xd9/0x230 [ 61.904673] ? compat_ifr_data_ioctl+0x100/0x100 [ 61.904674] ? avc_has_extended_perms+0x4e2/0x1170 [ 61.904675] ? __lock_acquire+0x792/0x4980 [ 61.904676] ? avc_ss_reset+0x130/0x130 [ 61.904676] sock_ioctl+0x281/0x500 [ 61.904677] ? dlci_ioctl_set+0x30/0x30 [ 61.904678] do_vfs_ioctl+0x196/0x10c0 [ 61.904678] ? ioctl_preallocate+0x1c0/0x1c0 [ 61.904679] ? selinux_file_mprotect+0x5f0/0x5f0 [ 61.904680] ? ksys_dup3+0x2e0/0x2e0 [ 61.904680] ? put_timespec64+0xa9/0x100 [ 61.904681] ? nsecs_to_jiffies+0x20/0x20 [ 61.904682] ? security_file_ioctl+0x4a/0x90 [ 61.904682] ? __fget_light+0x174/0x1e0 [ 61.904683] ksys_ioctl+0x62/0x90 [ 61.904684] ? lockdep_hardirqs_on+0x421/0x5c0 [ 61.904684] __x64_sys_ioctl+0x6e/0xb0 [ 61.904685] do_syscall_64+0xd0/0x4e0 [ 61.904686] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 61.904686] RIP: 0033:0x45af49 [ 61.904688] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 61.904689] RSP: 002b:00007f2405c4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.904690] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 61.904691] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000005 [ 61.904692] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 61.904693] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2405c4e6d4 [ 61.904694] R13: 00000000004c3c64 R14: 00000000004da258 R15: 00000000ffffffff [ 61.906237] Kernel Offset: disabled [ 62.881241] Rebooting in 86400 seconds..