[ 98.464811][ T39] audit: type=1400 audit(1663387834.942:74): avc: denied { write } for pid=3604 comm="sh" path="pipe:[28282]" dev="pipefs" ino=28282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 Warning: Permanently added '[localhost]:45099' (ECDSA) to the list of known hosts. [ 104.541415][ T39] audit: type=1400 audit(1663387841.042:75): avc: denied { execute } for pid=3676 comm="sh" name="syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 104.566394][ T39] audit: type=1400 audit(1663387841.042:76): avc: denied { execute_no_trans } for pid=3676 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2022/09/17 04:10:41 fuzzer started 2022/09/17 04:10:41 connecting to host at localhost:33227 2022/09/17 04:10:42 checking machine... 2022/09/17 04:10:42 checking revisions... [ 105.833572][ T39] audit: type=1400 audit(1663387842.332:77): avc: denied { getattr } for pid=3676 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.857515][ T39] audit: type=1400 audit(1663387842.332:78): avc: denied { read } for pid=3676 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 2022/09/17 04:10:42 testing simple program... [ 105.878197][ T39] audit: type=1400 audit(1663387842.332:79): avc: denied { open } for pid=3676 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.902082][ T39] audit: type=1400 audit(1663387842.382:80): avc: denied { read } for pid=3676 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.924203][ T39] audit: type=1400 audit(1663387842.382:81): avc: denied { open } for pid=3676 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.949855][ T39] audit: type=1400 audit(1663387842.382:82): avc: denied { read } for pid=3676 comm="syz-fuzzer" name="vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 105.955301][ T3686] cgroup: Unknown subsys name 'net' [ 105.972238][ T39] audit: type=1400 audit(1663387842.382:83): avc: denied { open } for pid=3676 comm="syz-fuzzer" path="/dev/vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 105.997420][ T39] audit: type=1400 audit(1663387842.432:84): avc: denied { mounton } for pid=3686 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 106.220165][ T3686] cgroup: Unknown subsys name 'rlimit' [ 107.856471][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.867186][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.879069][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.890658][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.898120][ T64] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 107.907343][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.180554][ T3688] chnl_net:caif_netlink_parms(): no params data found [ 108.365858][ T3688] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.372794][ T3688] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.381610][ T3688] device bridge_slave_0 entered promiscuous mode [ 108.397879][ T3688] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.403858][ T3688] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.411455][ T3688] device bridge_slave_1 entered promiscuous mode [ 108.482790][ T3688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.497301][ T3688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link executing program [ 108.581968][ T3688] team0: Port device team_slave_0 added [ 108.592856][ T3688] team0: Port device team_slave_1 added [ 108.665015][ T3688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.672266][ T3688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.692923][ T3688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.706861][ T3688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.713393][ T3688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.734372][ T3688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.811890][ T3688] device hsr_slave_0 entered promiscuous mode [ 108.818228][ T3688] device hsr_slave_1 entered promiscuous mode [ 109.197027][ T3688] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.217766][ T3688] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.234423][ T3688] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.257195][ T3688] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.396018][ T3688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.436950][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.447540][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.464751][ T3688] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.484606][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.492700][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.502804][ T3155] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.509704][ T3155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.546746][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.571035][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.579289][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.589769][ T3155] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.597127][ T3155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.621068][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.673540][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.685037][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.696945][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.706283][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.716683][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.726214][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.734288][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.743660][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.760560][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.773475][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.797844][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.843846][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.851106][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.877645][ T3688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.915183][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.927866][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.960970][ T41] Bluetooth: hci0: command 0x0409 tx timeout [ 109.979495][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.995014][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.006638][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.017938][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.028319][ T3688] device veth0_vlan entered promiscuous mode [ 110.051491][ T3688] device veth1_vlan entered promiscuous mode [ 110.101685][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.112714][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 110.124354][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.134109][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.149553][ T3688] device veth0_macvtap entered promiscuous mode [ 110.164288][ T3688] device veth1_macvtap entered promiscuous mode [ 110.200999][ T3688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.207624][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 110.217015][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.227975][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.242341][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.264520][ T3688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.272074][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.280013][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.298800][ T3688] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.305932][ T3688] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.320881][ T3688] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.332141][ T3688] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.402417][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 110.402436][ T39] audit: type=1400 audit(1663387846.902:98): avc: denied { mounton } for pid=3688 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=2383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 110.432687][ T39] audit: type=1400 audit(1663387846.922:99): avc: denied { mount } for pid=3688 comm="syz-executor.0" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 110.549929][ T39] audit: type=1400 audit(1663387847.052:100): avc: denied { read write } for pid=3688 comm="syz-executor.0" name="loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.575754][ T39] audit: type=1400 audit(1663387847.052:101): avc: denied { open } for pid=3688 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.611891][ T39] audit: type=1400 audit(1663387847.052:102): avc: denied { ioctl } for pid=3688 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 2022/09/17 04:10:47 building call list... [ 110.904731][ T10] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 113.607022][ T10] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 114.981567][ T39] audit: type=1400 audit(1663387851.482:103): avc: denied { read } for pid=3676 comm="syz-fuzzer" name="fuse" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 115.006985][ T39] audit: type=1400 audit(1663387851.482:104): avc: denied { open } for pid=3676 comm="syz-fuzzer" path="/dev/fuse" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 115.052583][ T39] audit: type=1400 audit(1663387851.552:105): avc: denied { read } for pid=3676 comm="syz-fuzzer" name="autofs" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 115.076391][ T39] audit: type=1400 audit(1663387851.552:106): avc: denied { open } for pid=3676 comm="syz-fuzzer" path="/dev/autofs" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 115.102433][ T39] audit: type=1400 audit(1663387851.552:107): avc: denied { read } for pid=3676 comm="syz-fuzzer" name="btrfs-control" dev="devtmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 115.414755][ T39] kauditd_printk_skb: 33 callbacks suppressed [ 115.414855][ T39] audit: type=1400 audit(1663387851.912:141): avc: denied { read write } for pid=3676 comm="syz-fuzzer" name="video36" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 115.446782][ T39] audit: type=1400 audit(1663387851.922:142): avc: denied { open } for pid=3676 comm="syz-fuzzer" path="/dev/video36" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 115.470407][ T39] audit: type=1400 audit(1663387851.952:143): avc: denied { create } for pid=3676 comm="syz-fuzzer" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.489123][ T39] audit: type=1400 audit(1663387851.962:144): avc: denied { create } for pid=3676 comm="syz-fuzzer" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 115.502978][ T3685] can: request_module (can-proto-0) failed. [ 115.511526][ T39] audit: type=1400 audit(1663387851.962:145): avc: denied { create } for pid=3676 comm="syz-fuzzer" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.532353][ T39] audit: type=1400 audit(1663387851.962:146): avc: denied { module_request } for pid=3676 comm="syz-fuzzer" kmod="can-proto-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 115.559852][ T39] audit: type=1400 audit(1663387852.012:147): avc: denied { read } for pid=3116 comm="syslogd" name="log" dev="sda1" ino=1125 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 115.591647][ T39] audit: type=1400 audit(1663387852.012:148): avc: denied { append } for pid=3116 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.624775][ T3685] can: request_module (can-proto-0) failed. [ 115.624837][ T39] audit: type=1400 audit(1663387852.012:149): avc: denied { open } for pid=3116 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.654713][ T39] audit: type=1400 audit(1663387852.012:150): avc: denied { getattr } for pid=3116 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.674193][ T3685] can: request_module (can-proto-0) failed. [ 115.677998][ T10] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.774399][ T10] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.300765][ T10] device hsr_slave_0 left promiscuous mode [ 117.309973][ T10] device hsr_slave_1 left promiscuous mode [ 117.320447][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.330582][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.342563][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.354175][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.367137][ T10] device bridge_slave_1 left promiscuous mode [ 117.376249][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.399700][ T10] device bridge_slave_0 left promiscuous mode [ 117.407134][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.447240][ T10] device veth1_macvtap left promiscuous mode [ 117.459094][ T10] device veth0_macvtap left promiscuous mode [ 117.468079][ T10] device veth1_vlan left promiscuous mode [ 117.497056][ T10] device veth0_vlan left promiscuous mode executing program [ 117.958382][ T10] team0 (unregistering): Port device team_slave_1 removed [ 117.976837][ T10] team0 (unregistering): Port device team_slave_0 removed [ 118.001258][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.024338][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.147568][ T10] bond0 (unregistering): Released all slaves [ 118.939141][ T10] ------------[ cut here ]------------ [ 118.943286][ T10] ODEBUG: free active (active state 0) object type: timer_list hint: batadv_dat_purge+0x0/0x60 [ 118.955721][ T10] WARNING: CPU: 0 PID: 10 at lib/debugobjects.c:502 debug_print_object+0x16e/0x250 [ 118.966985][ T10] Modules linked in: [ 118.974649][ T10] CPU: 0 PID: 10 Comm: kworker/u16:0 Not tainted 6.0.0-rc5-syzkaller-00094-ga335366bad13 #0 [ 118.989777][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 118.999349][ T10] Workqueue: netns cleanup_net [ 119.006229][ T10] RIP: 0010:debug_print_object+0x16e/0x250 [ 119.011771][ T10] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd 00 01 49 8a 4c 89 ee 48 c7 c7 a0 f4 48 8a e8 a4 4e 39 05 <0f> 0b 83 05 55 08 dd 09 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3 [ 119.037894][ T10] RSP: 0018:ffffc900005df8d8 EFLAGS: 00010086 [ 119.042767][ T10] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 119.049858][ T10] RDX: ffff8880124b2000 RSI: ffffffff81611e08 RDI: fffff520000bbf0d [ 119.055453][ T10] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 119.061074][ T10] R10: 0000000080000000 R11: 0000000000000000 R12: ffffffff89eeed80 [ 119.066858][ T10] R13: ffffffff8a48f9c0 R14: ffffffff816a4eb0 R15: dffffc0000000000 [ 119.072218][ T10] FS: 0000000000000000(0000) GS:ffff88802c800000(0000) knlGS:0000000000000000 [ 119.080525][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.084705][ T10] CR2: 0000564b4c8cd300 CR3: 00000000267bf000 CR4: 0000000000150ef0 [ 119.091667][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 119.099575][ T10] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 119.108174][ T10] Call Trace: [ 119.111528][ T10] [ 119.113678][ T10] ? do_raw_spin_unlock+0x171/0x230 [ 119.117965][ T10] debug_check_no_obj_freed+0x301/0x420 [ 119.123423][ T10] ? lockdep_hardirqs_off+0x90/0xd0 [ 119.128128][ T10] kfree+0xda/0x390 [ 119.132389][ T10] kvfree+0x42/0x50 [ 119.136656][ T10] ? net_get_ownership+0x50/0x50 [ 119.140568][ T10] device_release+0x9f/0x240 [ 119.145200][ T10] kobject_put+0x1be/0x4c0 [ 119.151211][ T10] netdev_run_todo+0x75e/0x1100 [ 119.155663][ T10] ? generic_xdp_install+0x4a0/0x4a0 [ 119.161027][ T10] ? netdev_pick_tx+0xbd0/0xbd0 [ 119.165536][ T10] ? unregister_netdevice_many+0x1980/0x1980 [ 119.172430][ T10] ? sysfs_remove_group+0xc2/0x170 [ 119.177012][ T10] ? br_dev_delete+0x112/0x190 [ 119.181062][ T10] default_device_exit_batch+0x44e/0x590 [ 119.186564][ T10] ? __dev_change_net_namespace+0x13c0/0x13c0 [ 119.191137][ T10] ? __dev_change_net_namespace+0x13c0/0x13c0 [ 119.196940][ T10] ops_exit_list+0x125/0x170 [ 119.201277][ T10] cleanup_net+0x4ea/0xb00 [ 119.205019][ T10] ? lockdep_hardirqs_on+0x79/0x100 [ 119.210039][ T10] ? unregister_pernet_device+0x70/0x70 [ 119.215171][ T10] process_one_work+0x991/0x1610 [ 119.220645][ T10] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 119.226769][ T10] ? rwlock_bug.part.0+0x90/0x90 [ 119.231922][ T10] ? _raw_spin_lock_irq+0x41/0x50 [ 119.236906][ T10] worker_thread+0x665/0x1080 [ 119.241616][ T10] ? process_one_work+0x1610/0x1610 [ 119.246269][ T10] kthread+0x2e4/0x3a0 [ 119.249534][ T10] ? kthread_complete_and_exit+0x40/0x40 [ 119.254740][ T10] ret_from_fork+0x1f/0x30 [ 119.258971][ T10] [ 119.261547][ T10] Kernel panic - not syncing: panic_on_warn set ... [ 119.266859][ T10] CPU: 0 PID: 10 Comm: kworker/u16:0 Not tainted 6.0.0-rc5-syzkaller-00094-ga335366bad13 #0 [ 119.275777][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 119.283466][ T10] Workqueue: netns cleanup_net [ 119.287999][ T10] Call Trace: [ 119.290535][ T10] [ 119.292794][ T10] dump_stack_lvl+0xcd/0x134 [ 119.298209][ T10] panic+0x2c8/0x627 [ 119.302127][ T10] ? panic_print_sys_info.part.0+0x10b/0x10b [ 119.307554][ T10] ? __warn.cold+0x248/0x2c4 [ 119.312673][ T10] ? debug_print_object+0x16e/0x250 [ 119.317114][ T10] __warn.cold+0x259/0x2c4 [ 119.321752][ T10] ? debug_print_object+0x16e/0x250 [ 119.327704][ T10] report_bug+0x1bc/0x210 [ 119.331231][ T10] handle_bug+0x3c/0x60 [ 119.335409][ T10] exc_invalid_op+0x14/0x40 [ 119.340441][ T10] asm_exc_invalid_op+0x16/0x20 [ 119.344401][ T10] RIP: 0010:debug_print_object+0x16e/0x250 [ 119.349944][ T10] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd 00 01 49 8a 4c 89 ee 48 c7 c7 a0 f4 48 8a e8 a4 4e 39 05 <0f> 0b 83 05 55 08 dd 09 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3 [ 119.367519][ T10] RSP: 0018:ffffc900005df8d8 EFLAGS: 00010086 [ 119.373328][ T10] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 119.379350][ T10] RDX: ffff8880124b2000 RSI: ffffffff81611e08 RDI: fffff520000bbf0d [ 119.385832][ T10] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 119.392460][ T10] R10: 0000000080000000 R11: 0000000000000000 R12: ffffffff89eeed80 [ 119.399813][ T10] R13: ffffffff8a48f9c0 R14: ffffffff816a4eb0 R15: dffffc0000000000 [ 119.406070][ T10] ? calc_wheel_index+0x3d0/0x3d0 [ 119.410325][ T10] ? vprintk+0x88/0x90 [ 119.414199][ T10] ? debug_print_object+0x16e/0x250 [ 119.418196][ T10] ? do_raw_spin_unlock+0x171/0x230 [ 119.422166][ T10] debug_check_no_obj_freed+0x301/0x420 [ 119.427462][ T10] ? lockdep_hardirqs_off+0x90/0xd0 [ 119.433290][ T10] kfree+0xda/0x390 [ 119.437423][ T10] kvfree+0x42/0x50 [ 119.442591][ T10] ? net_get_ownership+0x50/0x50 [ 119.447502][ T10] device_release+0x9f/0x240 [ 119.452274][ T10] kobject_put+0x1be/0x4c0 [ 119.457527][ T10] netdev_run_todo+0x75e/0x1100 [ 119.461577][ T10] ? generic_xdp_install+0x4a0/0x4a0 [ 119.467627][ T10] ? netdev_pick_tx+0xbd0/0xbd0 [ 119.472721][ T10] ? unregister_netdevice_many+0x1980/0x1980 [ 119.477972][ T10] ? sysfs_remove_group+0xc2/0x170 [ 119.482568][ T10] ? br_dev_delete+0x112/0x190 [ 119.486629][ T10] default_device_exit_batch+0x44e/0x590 [ 119.491668][ T10] ? __dev_change_net_namespace+0x13c0/0x13c0 [ 119.496908][ T10] ? __dev_change_net_namespace+0x13c0/0x13c0 [ 119.502311][ T10] ops_exit_list+0x125/0x170 [ 119.505628][ T10] cleanup_net+0x4ea/0xb00 [ 119.509469][ T10] ? lockdep_hardirqs_on+0x79/0x100 [ 119.515023][ T10] ? unregister_pernet_device+0x70/0x70 [ 119.519435][ T10] process_one_work+0x991/0x1610 [ 119.525010][ T10] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 119.530042][ T10] ? rwlock_bug.part.0+0x90/0x90 [ 119.533174][ T10] ? _raw_spin_lock_irq+0x41/0x50 [ 119.537703][ T10] worker_thread+0x665/0x1080 [ 119.541983][ T10] ? process_one_work+0x1610/0x1610 [ 119.546437][ T10] kthread+0x2e4/0x3a0 [ 119.550186][ T10] ? kthread_complete_and_exit+0x40/0x40 [ 119.556327][ T10] ret_from_fork+0x1f/0x30 [ 119.560541][ T10] [ 119.566524][ T10] Kernel Offset: disabled [ 119.571934][ T10] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:11:06 Registers: info registers vcpu 0 RAX=0000000080000001 RBX=00000049ce0fa105 RCX=0000000000000001 RDX=0000000000000004 RSI=0000000000000002 RDI=0000000000000001 RBP=00000049cdf38ad6 RSP=ffffc900005df668 R8 =0000000000000007 R9 =0000000000000000 R10=000000000000003f R11=6e69746f6f626552 R12=0000000000000000 R13=0000000000231870 R14=000000000000003e R15=000000000000003e RIP=ffffffff842504fe RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564b4c8cd300 CR3=00000000267bf000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffff000000 XMM01=5e280000564b4c000000000000706d63 XMM02=ffff000000000000ffffffffff000000 XMM03=00000000000000000403010201008881 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000000000ff00ffffff000000000000 XMM06=ffff0000000000000000000000ff0000 XMM07=00000000000000000000000000000000 XMM08=0000564b4c8decf00000000000706d63 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000007 RBX=0000000000000340 RCX=0000000000000340 RDX=0000000000000000 RSI=ffffffff812cf5ef RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90000748f70 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff812cf608 RFL=00000042 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff88802c900000 ffffffff 00000000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564b4c8cd300 CR3=000000000bc8e000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffff000000000000ff0000 XMM02=0000564b4c8dec400000564b4c8dea10 XMM03=00000000000000656c69665f70006d72 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000000000ff00ffffff000000000000 XMM06=ffff0000000000000000000000ff0000 XMM07=00000000000000000000000000000000 XMM08=00000000000000656c69665f70006d72 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000007 RBX=0000000000000340 RCX=0000000000000340 RDX=0000000000000000 RSI=ffffffff812cf5ef RDI=0000000000000001 RBP=0000000000000002 RSP=ffffc900007a0f70 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff812cf608 RFL=00000042 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564b4c8cd300 CR3=00000000267bf000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000635f70746e0182880000000084 XMM01=080a002075676f00878684828183883a XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=635f70746e01828800000000843d7365 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000000000ff00ffffff000000000000 XMM06=ffff0000000000000000000000ff0000 XMM07=00000000000000000000000000000000 XMM08=65746e6900000000883d656d616e6669 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000007 RBX=0000000000000340 RCX=0000000000000340 RDX=0000000000000000 RSI=ffffffff812cf5ef RDI=0000000000000001 RBP=0000000000000003 RSP=ffffc900007f8f70 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff812cf608 RFL=00000042 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff88802cb00000 ffffffff 00000000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffeba8c6088 CR3=000000000bc8e000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff00ff0000ff0000ff0000ff0000ff00 XMM02=ffff000000000000ffffffffffffff00 XMM03=00000000000000000000000000000000 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000000000ff00ffffff000000000000 XMM06=ffff0000000000000000000000ff0000 XMM07=00000000000000000000000000000000 XMM08=2d2a29282726242221200a09030b010a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000