[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 59.509137][ T26] audit: type=1800 audit(1569668701.832:25): pid=8733 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 59.531038][ T26] audit: type=1800 audit(1569668701.832:26): pid=8733 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 59.566314][ T26] audit: type=1800 audit(1569668701.832:27): pid=8733 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.158' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 69.645060][ T8885] IPVS: ftp: loaded support on port[0] = 21 [ 69.685635][ T8887] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:935 [ 69.695175][ T8887] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8887, name: syz-executor224 [ 69.704658][ T8887] 2 locks held by syz-executor224/8887: [ 69.710226][ T8887] #0: ffffffff89999920 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 [ 69.719072][ T8887] #1: ffff8880a915f100 (&(&sch->q.lock)->rlock){+...}, at: sfb_change+0x257/0xe90 [ 69.728422][ T8887] Preemption disabled at: [ 69.728436][ T8887] [] sfb_change+0x257/0xe90 [ 69.738872][ T8887] CPU: 1 PID: 8887 Comm: syz-executor224 Not tainted 5.3.0-next-20190926 #0 [ 69.747538][ T8887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.757574][ T8887] Call Trace: [ 69.760850][ T8887] dump_stack+0x172/0x1f0 [ 69.765175][ T8887] ? sfb_change+0x257/0xe90 [ 69.769665][ T8887] ___might_sleep.cold+0x1fb/0x23e [ 69.774763][ T8887] __might_sleep+0x95/0x190 [ 69.779250][ T8887] __mutex_lock+0xc5/0x13c0 [ 69.783740][ T8887] ? tcf_chain0_head_change_cb_del.isra.0+0x34/0x3e0 [ 69.790395][ T8887] ? save_stack+0x5c/0x90 [ 69.794715][ T8887] ? save_stack+0x23/0x90 [ 69.799404][ T8887] ? mutex_trylock+0x2d0/0x2d0 [ 69.804154][ T8887] ? fifo_set_limit+0x1a9/0x210 [ 69.808994][ T8887] ? fifo_create_dflt+0x90/0xf0 [ 69.813828][ T8887] ? sfb_change+0x18d/0xe90 [ 69.818309][ T8887] ? tc_modify_qdisc+0xfcf/0x1c50 [ 69.823327][ T8887] ? rtnetlink_rcv_msg+0x463/0xb00 [ 69.828441][ T8887] ? netlink_rcv_skb+0x177/0x450 [ 69.833360][ T8887] ? rtnetlink_rcv+0x1d/0x30 [ 69.837929][ T8887] ? netlink_unicast+0x531/0x710 [ 69.842845][ T8887] ? netlink_sendmsg+0x8a5/0xd60 [ 69.847764][ T8887] ? sock_sendmsg+0xd7/0x130 [ 69.852338][ T8887] ? ___sys_sendmsg+0x803/0x920 [ 69.857166][ T8887] ? __sys_sendmsg+0x105/0x1d0 [ 69.861955][ T8887] ? __x64_sys_sendmsg+0x78/0xb0 [ 69.866929][ T8887] ? do_syscall_64+0xfa/0x760 [ 69.871590][ T8887] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 69.877656][ T8887] ? __kasan_check_read+0x11/0x20 [ 69.882657][ T8887] ? mark_lock+0xc2/0x1220 [ 69.887054][ T8887] mutex_lock_nested+0x16/0x20 [ 69.891792][ T8887] ? mutex_lock_nested+0x16/0x20 [ 69.896709][ T8887] tcf_chain0_head_change_cb_del.isra.0+0x34/0x3e0 [ 69.903188][ T8887] ? __kasan_check_read+0x11/0x20 [ 69.908191][ T8887] ? mark_lock+0xc2/0x1220 [ 69.912585][ T8887] tcf_block_put_ext.part.0+0x2a/0x80 [ 69.918022][ T8887] tcf_block_put+0xbf/0x110 [ 69.922523][ T8887] ? tcf_block_put_ext+0x40/0x40 [ 69.927488][ T8887] ? sfb_destroy+0x80/0x80 [ 69.931894][ T8887] ? sfb_destroy+0x80/0x80 [ 69.936292][ T8887] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 69.942602][ T8887] ? prandom_u32+0x7d/0xb0 [ 69.946997][ T8887] ? sfb_zero_all_buckets+0x20/0x20 [ 69.952183][ T8887] sfb_destroy+0x37/0x80 [ 69.956425][ T8887] qdisc_destroy+0x11f/0x630 [ 69.961003][ T8887] qdisc_put+0x85/0xa0 [ 69.965049][ T8887] sfb_change+0x3d8/0xe90 [ 69.969387][ T8887] ? sfb_graft+0x5f0/0x5f0 [ 69.973897][ T8887] ? nla_strcmp+0xe3/0x120 [ 69.978335][ T8887] ? sfb_graft+0x5f0/0x5f0 [ 69.982758][ T8887] tc_modify_qdisc+0xfcf/0x1c50 [ 69.987621][ T8887] ? qdisc_create+0x1210/0x1210 [ 69.992475][ T8887] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 69.998717][ T8887] ? qdisc_create+0x1210/0x1210 [ 70.003556][ T8887] rtnetlink_rcv_msg+0x463/0xb00 [ 70.008512][ T8887] ? rtnl_bridge_getlink+0x910/0x910 [ 70.013782][ T8887] ? lock_downgrade+0x920/0x920 [ 70.018616][ T8887] ? netlink_deliver_tap+0x22d/0xbf0 [ 70.023911][ T8887] ? find_held_lock+0x35/0x130 [ 70.028670][ T8887] netlink_rcv_skb+0x177/0x450 [ 70.033416][ T8887] ? rtnl_bridge_getlink+0x910/0x910 [ 70.038952][ T8887] ? netlink_ack+0xb50/0xb50 [ 70.043519][ T8887] ? __kasan_check_read+0x11/0x20 [ 70.048535][ T8887] ? netlink_deliver_tap+0x254/0xbf0 [ 70.053798][ T8887] rtnetlink_rcv+0x1d/0x30 [ 70.058194][ T8887] netlink_unicast+0x531/0x710 [ 70.062940][ T8887] ? netlink_attachskb+0x7c0/0x7c0 [ 70.068042][ T8887] ? _copy_from_iter_full+0x25d/0x8c0 [ 70.073395][ T8887] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 70.079097][ T8887] ? __check_object_size+0x3d/0x437 [ 70.084362][ T8887] netlink_sendmsg+0x8a5/0xd60 [ 70.089107][ T8887] ? netlink_unicast+0x710/0x710 [ 70.094033][ T8887] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 70.099571][ T8887] ? apparmor_socket_sendmsg+0x2a/0x30 [ 70.105011][ T8887] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 70.111231][ T8887] ? security_socket_sendmsg+0x8d/0xc0 [ 70.116669][ T8887] ? netlink_unicast+0x710/0x710 [ 70.121588][ T8887] sock_sendmsg+0xd7/0x130 [ 70.125985][ T8887] ___sys_sendmsg+0x803/0x920 [ 70.130661][ T8887] ? copy_msghdr_from_user+0x440/0x440 [ 70.136111][ T8887] ? __kasan_check_read+0x11/0x20 [ 70.141126][ T8887] ? __fget+0x384/0x560 [ 70.145261][ T8887] ? ksys_dup3+0x3e0/0x3e0 [ 70.149670][ T8887] ? __kasan_check_read+0x11/0x20 [ 70.154671][ T8887] ? __fget_light+0x1a9/0x230 [ 70.159326][ T8887] ? __fdget+0x1b/0x20 [ 70.163381][ T8887] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 70.169600][ T8887] __sys_sendmsg+0x105/0x1d0 [ 70.174171][ T8887] ? __sys_sendmsg_sock+0xd0/0xd0 [ 70.179176][ T8887] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 70.185152][ T8887] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 70.190588][ T8887] ? do_syscall_64+0x26/0x760 [ 70.195247][ T8887] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 70.201315][ T8887] ? do_syscall_64+0x26/0x760 [ 70.205976][ T8887] __x64_sys_sendmsg+0x78/0xb0 [ 70.210730][ T8887] do_syscall_64+0xfa/0x760 [ 70.215214][ T8887] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 70.221085][ T8887] RIP: 0033:0x446d79 [ 70.224961][ T8887] Code: e8 5c 14 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 9b 0c fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 70.244628][ T8887] RSP: 002b:00007fbdb3e5ddb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.253023][ T8887] RAX: ffffffffffffffda RBX: 00000000006dcc78 RCX: 0000000000446d79 [ 70.260973][ T8887] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 [ 70.268920][ T8887] RBP: 00000000006dcc70 R08: 0000000000000000 R09: 0000000000000000 [ 70.276871][ T8887] R10: 00000000ffffffff R11: 0000000000000246 R12: 00000000006dcc7c [ 70.284821][ T8887] R13: 00007ffe2fea1e3f R14: 00007fbdb3e5e9c0 R15: 0000000000000001