[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 58.678938][ T26] audit: type=1800 audit(1569039778.464:25): pid=8759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 58.732934][ T26] audit: type=1800 audit(1569039778.464:26): pid=8759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 58.798415][ T26] audit: type=1800 audit(1569039778.464:27): pid=8759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.221' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 68.852944][ T8914] IPVS: ftp: loaded support on port[0] = 21 [ 68.886155][ T8916] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:935 [ 68.895606][ T8916] in_atomic(): 1, irqs_disabled(): 0, pid: 8916, name: syz-executor820 [ 68.903978][ T8916] 2 locks held by syz-executor820/8916: [ 68.909539][ T8916] #0: ffffffff8999f9e0 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 [ 68.918548][ T8916] #1: ffff8880a15cb7c0 (&(&sch->q.lock)->rlock){+...}, at: sfb_change+0x257/0xe90 [ 68.927897][ T8916] Preemption disabled at: [ 68.927913][ T8916] [] sfb_change+0x257/0xe90 [ 68.938348][ T8916] CPU: 1 PID: 8916 Comm: syz-executor820 Not tainted 5.3.0+ #0 [ 68.946001][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.956145][ T8916] Call Trace: [ 68.959604][ T8916] dump_stack+0x172/0x1f0 [ 68.963929][ T8916] ? sfb_change+0x257/0xe90 [ 68.968428][ T8916] ___might_sleep.cold+0x1be/0x1f7 [ 68.973645][ T8916] __might_sleep+0x95/0x190 [ 68.978143][ T8916] __mutex_lock+0xc5/0x13c0 [ 68.982646][ T8916] ? tcf_chain0_head_change_cb_del.isra.0+0x34/0x3e0 [ 68.989513][ T8916] ? save_stack+0x5c/0x90 [ 68.993832][ T8916] ? save_stack+0x23/0x90 [ 68.998427][ T8916] ? mutex_lock_io_nested+0x1260/0x1260 [ 69.003967][ T8916] ? fifo_set_limit+0x1a9/0x210 [ 69.008922][ T8916] ? fifo_create_dflt+0x90/0xf0 [ 69.013773][ T8916] ? sfb_change+0x18d/0xe90 [ 69.018271][ T8916] ? tc_modify_qdisc+0xfcf/0x1c50 [ 69.023284][ T8916] ? rtnetlink_rcv_msg+0x463/0xb00 [ 69.028806][ T8916] ? netlink_rcv_skb+0x177/0x450 [ 69.033765][ T8916] ? rtnetlink_rcv+0x1d/0x30 [ 69.038595][ T8916] ? netlink_unicast+0x531/0x710 [ 69.043615][ T8916] ? netlink_sendmsg+0x8a5/0xd60 [ 69.048574][ T8916] ? sock_sendmsg+0xd7/0x130 [ 69.053337][ T8916] ? ___sys_sendmsg+0x803/0x920 [ 69.058291][ T8916] ? __sys_sendmsg+0x105/0x1d0 [ 69.063147][ T8916] ? __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 69.068772][ T8916] ? do_fast_syscall_32+0x27b/0xdb3 [ 69.074309][ T8916] ? entry_SYSENTER_compat+0x70/0x7f [ 69.079583][ T8916] ? __kasan_check_read+0x11/0x20 [ 69.084693][ T8916] ? mark_lock+0xc2/0x1220 [ 69.089093][ T8916] mutex_lock_nested+0x16/0x20 [ 69.093843][ T8916] ? mutex_lock_nested+0x16/0x20 [ 69.098769][ T8916] tcf_chain0_head_change_cb_del.isra.0+0x34/0x3e0 [ 69.105448][ T8916] ? __kasan_check_read+0x11/0x20 [ 69.110477][ T8916] ? mark_lock+0xc2/0x1220 [ 69.114887][ T8916] tcf_block_put_ext.part.0+0x2a/0x80 [ 69.120252][ T8916] tcf_block_put+0xbf/0x110 [ 69.124854][ T8916] ? tcf_block_put_ext+0x40/0x40 [ 69.129799][ T8916] ? sfb_destroy+0x80/0x80 [ 69.134403][ T8916] ? sfb_destroy+0x80/0x80 [ 69.138809][ T8916] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 69.145057][ T8916] ? prandom_u32+0x7d/0xb0 [ 69.149459][ T8916] ? sfb_zero_all_buckets+0x20/0x20 [ 69.154645][ T8916] sfb_destroy+0x37/0x80 [ 69.158895][ T8916] qdisc_destroy+0x11f/0x630 [ 69.163590][ T8916] qdisc_put+0x85/0xa0 [ 69.167750][ T8916] sfb_change+0x3d8/0xe90 [ 69.172069][ T8916] ? __sanitizer_cov_trace_cmp4+0x10/0x20 [ 69.177866][ T8916] ? sfb_graft+0x5f0/0x5f0 [ 69.182434][ T8916] ? nla_strcmp+0xe3/0x120 [ 69.186865][ T8916] ? sfb_graft+0x5f0/0x5f0 [ 69.191290][ T8916] tc_modify_qdisc+0xfcf/0x1c50 [ 69.196136][ T8916] ? qdisc_create+0x1210/0x1210 [ 69.200998][ T8916] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 69.207248][ T8916] ? qdisc_create+0x1210/0x1210 [ 69.212269][ T8916] rtnetlink_rcv_msg+0x463/0xb00 [ 69.217323][ T8916] ? rtnetlink_put_metrics+0x580/0x580 [ 69.222862][ T8916] ? lock_downgrade+0x920/0x920 [ 69.227708][ T8916] ? netlink_deliver_tap+0x22d/0xbf0 [ 69.232994][ T8916] ? find_held_lock+0x35/0x130 [ 69.237749][ T8916] netlink_rcv_skb+0x177/0x450 [ 69.242523][ T8916] ? rtnetlink_put_metrics+0x580/0x580 [ 69.247997][ T8916] ? netlink_ack+0xb30/0xb30 [ 69.252602][ T8916] ? __kasan_check_read+0x11/0x20 [ 69.257635][ T8916] ? netlink_deliver_tap+0x254/0xbf0 [ 69.262995][ T8916] rtnetlink_rcv+0x1d/0x30 [ 69.267403][ T8916] netlink_unicast+0x531/0x710 [ 69.272160][ T8916] ? netlink_attachskb+0x7c0/0x7c0 [ 69.277264][ T8916] ? _copy_from_iter_full+0x25d/0x8a0 [ 69.282627][ T8916] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 69.288475][ T8916] ? __check_object_size+0x3d/0x437 [ 69.293679][ T8916] netlink_sendmsg+0x8a5/0xd60 [ 69.298534][ T8916] ? netlink_unicast+0x710/0x710 [ 69.303480][ T8916] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 69.309018][ T8916] ? apparmor_socket_sendmsg+0x2a/0x30 [ 69.314620][ T8916] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 69.320976][ T8916] ? security_socket_sendmsg+0x8d/0xc0 [ 69.326422][ T8916] ? netlink_unicast+0x710/0x710 [ 69.331344][ T8916] sock_sendmsg+0xd7/0x130 [ 69.335758][ T8916] ___sys_sendmsg+0x803/0x920 [ 69.340420][ T8916] ? copy_msghdr_from_user+0x440/0x440 [ 69.345876][ T8916] ? __kasan_check_read+0x11/0x20 [ 69.350892][ T8916] ? __fget+0x384/0x560 [ 69.355035][ T8916] ? ksys_dup3+0x3e0/0x3e0 [ 69.359440][ T8916] ? __kasan_check_read+0x11/0x20 [ 69.364451][ T8916] ? __fget_light+0x1a9/0x230 [ 69.369109][ T8916] ? __fdget+0x1b/0x20 [ 69.373344][ T8916] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 69.379749][ T8916] __sys_sendmsg+0x105/0x1d0 [ 69.384465][ T8916] ? __sys_sendmsg_sock+0xd0/0xd0 [ 69.389533][ T8916] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 69.395671][ T8916] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 69.401117][ T8916] ? do_fast_syscall_32+0xd1/0xdb3 [ 69.406237][ T8916] ? entry_SYSENTER_compat+0x70/0x7f [ 69.411571][ T8916] ? do_fast_syscall_32+0xd1/0xdb3 [ 69.416682][ T8916] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 69.422142][ T8916] do_fast_syscall_32+0x27b/0xdb3 [ 69.427255][ T8916] entry_SYSENTER_compat+0x70/0x7f [ 69.432388][ T8916] RIP: 0023:0xf7fb2a29 [ 69.436448][ T8916] Code: b8 80 96 98 00 eb cc 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 69.456255][ T8916] RSP: 002b:00000000f7f8d1fc EFLAGS: 00000246 ORIG_RAX: 0000000000000172 [ 69.464673][ T8916] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000240 [ 69.472731][ T8916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.480693][ T8916] RBP: 00000000003d0f00 R08: 0000000000000000 R09: 0000000000000000 [ 69.488816][ T8916] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 69.496801][ T8916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000