[ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 28.008049] audit: type=1400 audit(1587975147.731:8): avc: denied { execmem } for pid=6117 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 28.258421] IPVS: ftp: loaded support on port[0] = 21 [ 29.387584] can: request_module (can-proto-0) failed. [ 29.396079] can: request_module (can-proto-0) failed. [ 29.422802] audit: type=1400 audit(1587975149.143:9): avc: denied { create } for pid=6096 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.15.208' (ECDSA) to the list of known hosts. 2020/04/27 08:12:36 parsed 1 programs 2020/04/27 08:12:36 executed programs: 0 [ 36.783698] audit: type=1400 audit(1587975156.517:10): avc: denied { execmem } for pid=6237 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 37.092563] IPVS: ftp: loaded support on port[0] = 21 [ 37.851885] IPVS: ftp: loaded support on port[0] = 21 [ 37.917938] chnl_net:caif_netlink_parms(): no params data found [ 37.962088] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.968456] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.976489] device bridge_slave_0 entered promiscuous mode [ 37.976840] IPVS: ftp: loaded support on port[0] = 21 [ 37.986244] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.995266] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.003703] device bridge_slave_1 entered promiscuous mode [ 38.043078] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.071806] chnl_net:caif_netlink_parms(): no params data found [ 38.083770] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.115097] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 38.122813] team0: Port device team_slave_0 added [ 38.129819] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 38.137510] team0: Port device team_slave_1 added [ 38.145103] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.152628] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 38.214853] device hsr_slave_0 entered promiscuous mode [ 38.222620] IPVS: ftp: loaded support on port[0] = 21 [ 38.252126] device hsr_slave_1 entered promiscuous mode [ 38.301815] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 38.308533] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.315090] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.322006] device bridge_slave_0 entered promiscuous mode [ 38.330070] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.336719] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.344065] device bridge_slave_1 entered promiscuous mode [ 38.350592] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 38.389715] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.406431] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.412956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.419857] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.426262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.439124] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.496114] chnl_net:caif_netlink_parms(): no params data found [ 38.505952] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 38.518422] team0: Port device team_slave_0 added [ 38.518502] IPVS: ftp: loaded support on port[0] = 21 [ 38.542406] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 38.549690] team0: Port device team_slave_1 added [ 38.610664] chnl_net:caif_netlink_parms(): no params data found [ 38.620314] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.628573] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 38.723284] device hsr_slave_0 entered promiscuous mode [ 38.761719] device hsr_slave_1 entered promiscuous mode [ 38.819853] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 38.827775] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 38.828151] IPVS: ftp: loaded support on port[0] = 21 [ 38.842686] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.849115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.855770] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.862163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.878338] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.884887] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.892702] device bridge_slave_0 entered promiscuous mode [ 38.914829] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.921711] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.930209] device bridge_slave_1 entered promiscuous mode [ 38.952493] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.958916] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.967179] device bridge_slave_0 entered promiscuous mode [ 38.976987] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.984331] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.991915] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.998501] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.017448] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.024224] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.032174] device bridge_slave_1 entered promiscuous mode [ 39.047246] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 39.056889] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 39.077139] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.084318] team0: Port device team_slave_0 added [ 39.089777] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.098155] team0: Port device team_slave_1 added [ 39.108219] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.134543] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.184537] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 39.195419] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 39.263124] device hsr_slave_0 entered promiscuous mode [ 39.311002] device hsr_slave_1 entered promiscuous mode [ 39.369256] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.377222] team0: Port device team_slave_0 added [ 39.383171] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 39.389960] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.397797] team0: Port device team_slave_1 added [ 39.403451] chnl_net:caif_netlink_parms(): no params data found [ 39.422120] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 39.429746] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.442735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.452228] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.466510] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 39.493859] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.502391] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.509192] device bridge_slave_0 entered promiscuous mode [ 39.562818] device hsr_slave_0 entered promiscuous mode [ 39.600694] device hsr_slave_1 entered promiscuous mode [ 39.640982] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 39.648497] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 39.662140] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.668495] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.675782] device bridge_slave_1 entered promiscuous mode [ 39.688915] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 39.697265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.705099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.714905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.778107] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 39.787287] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 39.795950] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 39.806826] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 39.823902] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 39.829972] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.838718] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 39.855782] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.863885] team0: Port device team_slave_0 added [ 39.869669] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.877881] team0: Port device team_slave_1 added [ 39.884397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.892811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.901228] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.907636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.915420] chnl_net:caif_netlink_parms(): no params data found [ 39.927819] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 39.938129] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 39.945634] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.955389] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 39.967163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.974956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.981924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.991074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.998643] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.005047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.014673] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 40.020857] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.029913] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.044906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 40.059076] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 40.068928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 40.079438] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 40.086780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.094796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.102496] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.108828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.115783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.123711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.131488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.138991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.162569] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.202924] device hsr_slave_0 entered promiscuous mode [ 40.240689] device hsr_slave_1 entered promiscuous mode [ 40.300664] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 40.309137] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 40.316984] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.323670] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.331014] device bridge_slave_0 entered promiscuous mode [ 40.337600] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.344044] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.351363] device bridge_slave_1 entered promiscuous mode [ 40.358153] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 40.365917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.374402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.382170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.389639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.397334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.405342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.413089] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.419435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.426513] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.436172] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 40.451794] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 40.464017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.471621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.478895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.488587] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 40.495054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.503970] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 40.516826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 40.527019] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.535648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.554861] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.568111] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 40.584305] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 40.593358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.599473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.607698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.615892] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.624995] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 40.640913] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 40.649051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.657354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.665791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.673794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.682030] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 40.689300] team0: Port device team_slave_0 added [ 40.695648] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 40.703143] team0: Port device team_slave_1 added [ 40.708809] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 40.717783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.726121] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.735509] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.745018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.753069] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 40.765620] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.775492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.783839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.793199] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.804843] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 40.818924] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 40.826196] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.834951] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 40.842671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.849484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.856679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.864553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.872543] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.878992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.892291] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 40.898320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.907050] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 40.918245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 40.926454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.935178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.943290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.950253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.958916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.966958] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.973370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.012710] [ 41.014419] ====================================================== [ 41.020719] WARNING: possible circular locking dependency detected [ 41.027140] 4.14.177-syzkaller #0 Not tainted [ 41.031625] ------------------------------------------------------ [ 41.037938] syz-executor.2/7126 is trying to acquire lock: [ 41.043549] (event_mutex){+.+.}, at: [] perf_trace_destroy+0x1c/0x100 [ 41.051763] [ 41.051763] but task is already holding lock: [ 41.057724] (&event->child_mutex){+.+.}, at: [] perf_event_release_kernel+0x1e3/0x7b0 [ 41.067587] [ 41.067587] which lock already depends on the new lock. [ 41.067587] [ 41.075872] [ 41.075872] the existing dependency chain (in reverse order) is: [ 41.083461] [ 41.083461] -> #5 (&event->child_mutex){+.+.}: [ 41.089511] lock_acquire+0x173/0x400 [ 41.093925] __mutex_lock+0xef/0x14c0 [ 41.098222] mutex_lock_nested+0x16/0x20 [ 41.102772] perf_read+0x2aa/0x860 [ 41.106820] do_iter_read+0x35e/0x570 [ 41.111111] vfs_readv+0xb6/0x110 [ 41.115067] do_readv+0x10d/0x320 [ 41.119211] SyS_readv+0xb/0x10 [ 41.122985] do_syscall_64+0x1c7/0x5b0 [ 41.127375] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 41.133068] [ 41.133068] -> #4 (&cpuctx_mutex){+.+.}: [ 41.138595] lock_acquire+0x173/0x400 [ 41.142889] __mutex_lock+0xef/0x14c0 [ 41.147184] mutex_lock_nested+0x16/0x20 [ 41.151739] perf_event_init_cpu+0xb6/0x160 [ 41.156552] perf_event_init+0x2cd/0x301 [ 41.161146] start_kernel+0x365/0x642 [ 41.165638] x86_64_start_reservations+0x29/0x2b [ 41.170888] x86_64_start_kernel+0x76/0x79 [ 41.175616] secondary_startup_64+0xa5/0xb0 [ 41.180445] [ 41.180445] -> #3 (pmus_lock){+.+.}: [ 41.185613] lock_acquire+0x173/0x400 [ 41.190192] __mutex_lock+0xef/0x14c0 [ 41.194491] mutex_lock_nested+0x16/0x20 [ 41.199070] perf_event_init_cpu+0x2a/0x160 [ 41.203883] cpuhp_invoke_callback+0x191/0x1610 [ 41.209130] _cpu_up+0x21e/0x540 [ 41.213072] do_cpu_up+0xf1/0x110 [ 41.217013] cpu_up+0xe/0x10 [ 41.220521] smp_init+0x69/0x10c [ 41.224388] kernel_init_freeable+0x2d2/0x4ae [ 41.229388] kernel_init+0xc/0x105 [ 41.233417] ret_from_fork+0x24/0x30 [ 41.237629] [ 41.237629] -> #2 (cpu_hotplug_lock.rw_sem){++++}: [ 41.244042] lock_acquire+0x173/0x400 [ 41.248362] cpus_read_lock+0x38/0xa0 [ 41.252655] static_key_slow_inc+0xd/0x20 [ 41.257311] tracepoint_probe_register_prio+0x4de/0x6e0 [ 41.263403] tracepoint_probe_register+0xe/0x10 [ 41.268575] trace_event_reg+0x14d/0x340 [ 41.273136] perf_trace_init+0x3ce/0x9d0 [ 41.277698] perf_tp_event_init+0x68/0xd0 [ 41.282336] perf_try_init_event+0x138/0x1c0 [ 41.287253] perf_event_alloc+0xe0b/0x2220 [ 41.291976] SYSC_perf_event_open+0x447/0x21b0 [ 41.297057] SyS_perf_event_open+0x9/0x10 [ 41.301709] do_syscall_64+0x1c7/0x5b0 [ 41.306102] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 41.312742] [ 41.312742] -> #1 (tracepoints_mutex){+.+.}: [ 41.318603] lock_acquire+0x173/0x400 [ 41.322893] __mutex_lock+0xef/0x14c0 [ 41.327207] mutex_lock_nested+0x16/0x20 [ 41.331758] tracepoint_probe_register_prio+0x30/0x6e0 [ 41.337524] tracepoint_probe_register+0xe/0x10 [ 41.342698] trace_event_reg+0x14d/0x340 [ 41.347248] perf_trace_init+0x3ce/0x9d0 [ 41.351819] perf_tp_event_init+0x68/0xd0 [ 41.356455] perf_try_init_event+0x138/0x1c0 [ 41.361381] perf_event_alloc+0xe0b/0x2220 [ 41.366108] SYSC_perf_event_open+0x447/0x21b0 [ 41.371189] SyS_perf_event_open+0x9/0x10 [ 41.375830] do_syscall_64+0x1c7/0x5b0 [ 41.380226] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 41.385912] [ 41.385912] -> #0 (event_mutex){+.+.}: [ 41.391250] __lock_acquire+0x2e94/0x4500 [ 41.395898] lock_acquire+0x173/0x400 [ 41.400205] __mutex_lock+0xef/0x14c0 [ 41.404493] mutex_lock_nested+0x16/0x20 [ 41.409043] perf_trace_destroy+0x1c/0x100 [ 41.413874] tp_perf_event_destroy+0x9/0x10 [ 41.418687] _free_event+0x2e9/0xd50 [ 41.422892] free_event+0x27/0x30 [ 41.426835] perf_event_release_kernel+0x311/0x7b0 [ 41.432253] perf_release+0x32/0x50 [ 41.436371] __fput+0x232/0x750 [ 41.440162] ____fput+0x9/0x10 [ 41.443853] task_work_run+0xe5/0x170 [ 41.448145] exit_to_usermode_loop+0x16a/0x1b0 [ 41.453217] do_syscall_64+0x416/0x5b0 [ 41.457763] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 41.463461] [ 41.463461] other info that might help us debug this: [ 41.463461] [ 41.471579] Chain exists of: [ 41.471579] event_mutex --> &cpuctx_mutex --> &event->child_mutex [ 41.471579] [ 41.482311] Possible unsafe locking scenario: [ 41.482311] [ 41.488787] CPU0 CPU1 [ 41.493435] ---- ---- [ 41.498081] lock(&event->child_mutex); [ 41.502122] lock(&cpuctx_mutex); [ 41.508149] lock(&event->child_mutex); [ 41.514708] lock(event_mutex); [ 41.518041] [ 41.518041] *** DEADLOCK *** [ 41.518041] [ 41.524080] 2 locks held by syz-executor.2/7126: [ 41.528819] #0: (&ctx->mutex){+.+.}, at: [] perf_event_release_kernel+0x1d9/0x7b0 [ 41.538166] #1: (&event->child_mutex){+.+.}, at: [] perf_event_release_kernel+0x1e3/0x7b0 [ 41.548279] [ 41.548279] stack backtrace: [ 41.552760] CPU: 0 PID: 7126 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 41.560626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.570057] Call Trace: [ 41.572630] dump_stack+0xf7/0x13b [ 41.576143] print_circular_bug.isra.40.cold.67+0x1bd/0x27d [ 41.582173] ? save_trace+0xe0/0x290 [ 41.585860] __lock_acquire+0x2e94/0x4500 [ 41.590077] ? save_stack_trace+0x16/0x20 [ 41.594195] ? trace_hardirqs_on+0x10/0x10 [ 41.598414] ? trace_hardirqs_off+0x10/0x10 [ 41.602706] ? perf_trace_destroy+0x1c/0x100 [ 41.607096] lock_acquire+0x173/0x400 [ 41.610888] ? perf_trace_destroy+0x1c/0x100 [ 41.615265] ? perf_trace_destroy+0x1c/0x100 [ 41.619644] ? perf_trace_destroy+0x1c/0x100 [ 41.624024] __mutex_lock+0xef/0x14c0 [ 41.627793] ? perf_trace_destroy+0x1c/0x100 [ 41.632174] ? find_held_lock+0x36/0x1d0 [ 41.636204] ? perf_trace_destroy+0x1c/0x100 [ 41.640584] ? mutex_lock_io_nested+0x1380/0x1380 [ 41.645410] ? mark_held_locks+0xc7/0x130 [ 41.649530] ? trace_hardirqs_off+0x10/0x10 [ 41.653836] ? _raw_spin_unlock_irq+0x27/0x80 [ 41.660039] ? trace_hardirqs_on_caller+0x40c/0x580 [ 41.665136] ? __lock_is_held+0xb5/0x140 [ 41.669188] mutex_lock_nested+0x16/0x20 [ 41.673218] ? _free_event+0x2b6/0xd50 [ 41.677086] ? mutex_lock_nested+0x16/0x20 [ 41.681290] perf_trace_destroy+0x1c/0x100 [ 41.685495] tp_perf_event_destroy+0x9/0x10 [ 41.689875] _free_event+0x2e9/0xd50 [ 41.693573] free_event+0x27/0x30 [ 41.697016] perf_event_release_kernel+0x311/0x7b0 [ 41.702177] perf_release+0x32/0x50 [ 41.705772] __fput+0x232/0x750 [ 41.709019] ? _raw_spin_unlock_irq+0x27/0x80 [ 41.713483] ____fput+0x9/0x10 [ 41.716642] task_work_run+0xe5/0x170 [ 41.720413] exit_to_usermode_loop+0x16a/0x1b0 [ 41.724963] do_syscall_64+0x416/0x5b0 [ 41.728829] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 41.733644] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 41.738811] RIP: 0033:0x413ae1 [ 41.741971] RSP: 002b:00007ffdcc5bbd10 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 41.749661] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413ae1 [ 41.756915] RDX: 0000001b31920000 RSI: 0000000000000000 RDI: 0000000000000003 [ 41.764871] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 41.772204] R10: 00007ffdcc5bbdf0 R11: 0000000000000293 R12: 000000000075bf20 [ 41.779443] R13: 000000000000a052 R14: 0000000000761270 R15: 000000000075bf2c [ 41.802952] device hsr_slave_0 entered promiscuous mode [ 41.829727] device hsr_slave_1 entered promiscuous mode [ 41.869933] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 41.878826] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 41.885252] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.893257] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.904969] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 2020/04/27 08:12:41 executed programs: 6 [ 41.914727] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 41.922137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.930804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.938396] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.944755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.952605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.962085] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 41.975099] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 41.983452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.990604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.999156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 42.010165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.017920] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.026296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 42.034199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.042352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.050224] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.056573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.063563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.071115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.082078] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.089700] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.096566] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 42.105393] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.120372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.132090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.138959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.148150] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 42.157926] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 42.167572] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 42.175832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.183767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.191817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.199238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.206819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.215311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.222965] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 42.229028] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.248804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 42.256903] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 42.270545] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 42.278937] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 42.287574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.298580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.306118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.314836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.322672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.332503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.340435] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.346792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.355744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.363636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.372302] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.379355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.386429] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.393429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.402879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 42.411778] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 42.424980] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 42.432258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.439052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.449469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.457028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.467486] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 42.475951] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 42.484409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.493737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.509889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.519135] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 42.529166] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 42.536555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.544591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.552484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.560759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.569554] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 42.575577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.586954] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 42.594085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.602487] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 42.612171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.620288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.628704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.640214] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.647353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.656981] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 42.666536] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.673066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.681002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.700052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.707227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.715747] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 42.723625] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 42.732648] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 42.738727] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.748938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.756192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.763906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.772905] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 42.778909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.789670] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 42.798032] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 42.817378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.827192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.835639] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.842716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.849972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.857609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.865252] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.871614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.878502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.887556] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 42.897640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.910689] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 42.921720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.931040] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 42.942566] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 42.954309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.962172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.970059] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.977651] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.000221] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.007166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.025765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.036672] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 43.053235] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 43.061025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.068592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.077231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.086894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.096575] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 43.103535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.119323] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 43.128817] 8021q: adding VLAN 0 to HW filter on device batadv0 2020/04/27 08:12:46 executed programs: 580