[ 37.490575] audit: type=1800 audit(1539001579.598:21): pid=5720 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [ 37.510172] audit: type=1800 audit(1539001579.598:22): pid=5720 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2447 res=0 [ 37.537108] audit: type=1800 audit(1539001579.598:23): pid=5720 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rsyslog" dev="sda1" ino=2442 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.95' (ECDSA) to the list of known hosts. 2018/10/08 12:26:33 parsed 1 programs 2018/10/08 12:26:35 executed programs: 0 syzkaller login: [ 53.146770] IPVS: ftp: loaded support on port[0] = 21 [ 53.338368] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.345057] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.352156] device bridge_slave_0 entered promiscuous mode [ 53.367987] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.374425] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.381194] device bridge_slave_1 entered promiscuous mode [ 53.395532] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.410802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.450225] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.467099] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.524015] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.531195] team0: Port device team_slave_0 added [ 53.544799] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.552059] team0: Port device team_slave_1 added [ 53.566575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.582648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.599118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.616061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.726979] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.733358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.739924] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.746466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.125218] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 54.131414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.170905] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.213984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.221207] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 54.262877] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.269104] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.281999] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.510571] BUG: sleeping function called from invalid context at net/core/dev.c:9010 [ 54.518772] in_atomic(): 1, irqs_disabled(): 0, pid: 6142, name: syz-executor0 [ 54.526316] INFO: lockdep is turned off. [ 54.530378] Preemption disabled at: [ 54.530395] [] map_update_elem+0x423/0xd50 [ 54.539955] CPU: 0 PID: 6142 Comm: syz-executor0 Not tainted 4.19.0-rc7+ #273 [ 54.547214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.556664] Call Trace: [ 54.559251] dump_stack+0x1c4/0x2b4 [ 54.562871] ? dump_stack_print_info.cold.2+0x52/0x52 [ 54.568057] ? vprintk_func+0x85/0x181 [ 54.571932] ? vprintk_func+0x85/0x181 [ 54.575812] ? map_update_elem+0x423/0xd50 [ 54.580038] ___might_sleep.cold.82+0x1ba/0x1f3 [ 54.584701] ? arch_local_save_flags+0x40/0x40 [ 54.589343] ? lock_downgrade+0x900/0x900 [ 54.593501] __might_sleep+0x95/0x190 [ 54.597296] synchronize_net+0x1d/0x60 [ 54.601173] xsk_map_update_elem+0x2b0/0x470 [ 54.605681] ? xsk_map_lookup_elem+0x10/0x10 [ 54.610111] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 54.615658] ? check_preemption_disabled+0x48/0x200 [ 54.620680] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 54.626206] ? xsk_map_lookup_elem+0x10/0x10 [ 54.630604] map_update_elem+0x60c/0xd50 [ 54.634657] __x64_sys_bpf+0x32d/0x510 [ 54.638534] ? bpf_prog_get+0x20/0x20 [ 54.642335] do_syscall_64+0x1b9/0x820 [ 54.646226] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 54.651579] ? syscall_return_slowpath+0x5e0/0x5e0 [ 54.656508] ? trace_hardirqs_on_caller+0x310/0x310 [ 54.661510] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 54.666517] ? recalc_sigpending_tsk+0x180/0x180 [ 54.671259] ? kasan_check_write+0x14/0x20 [ 54.675591] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 54.680438] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.685638] RIP: 0033:0x457579 [ 54.688819] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.707772] RSP: 002b:00007f6f4758dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.715475] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 54.722818] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000002 [ 54.730090] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 54.737359] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6f4758e6d4 [ 54.744726] R13: 00000000004bd93a R14: 00000000004cc2b0 R15: 00000000ffffffff [ 54.752070] BUG: scheduling while atomic: syz-executor0/6142/0x00000002 [ 54.758829] INFO: lockdep is turned off. [ 54.762929] Modules linked in: [ 54.766126] Preemption disabled at: [ 54.766143] [] map_update_elem+0x423/0xd50 [ 54.775564] Kernel panic - not syncing: scheduling while atomic [ 54.775564] [ 54.783109] CPU: 0 PID: 6142 Comm: syz-executor0 Tainted: G W 4.19.0-rc7+ #273 [ 54.791751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.801086] Call Trace: [ 54.803667] dump_stack+0x1c4/0x2b4 [ 54.807288] ? dump_stack_print_info.cold.2+0x52/0x52 [ 54.812471] panic+0x238/0x4e7 [ 54.815654] ? add_taint.cold.5+0x16/0x16 [ 54.819791] ? trace_hardirqs_off+0xb8/0x310 [ 54.824189] ? vprintk_func+0x85/0x181 [ 54.828068] ? map_update_elem+0x423/0xd50 [ 54.832291] __schedule_bug.cold.84+0x11c/0x14d [ 54.836955] __schedule+0x1456/0x1ed0 [ 54.840748] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 54.845754] ? mark_held_locks+0x130/0x130 [ 54.849978] ? __sched_text_start+0x8/0x8 [ 54.854164] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 54.859692] ? irq_work_claim+0xac/0xd0 [ 54.863675] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 54.869297] ? irq_work_queue+0x36/0x1d0 [ 54.873374] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 54.878910] ? wake_up_klogd+0x11a/0x180 [ 54.882966] ? console_device+0xc0/0xc0 [ 54.886927] ? vprintk_emit+0x322/0x930 [ 54.890895] ? __down_trylock_console_sem+0x155/0x200 [ 54.896093] ? debug_object_active_state+0x2f5/0x4d0 [ 54.901197] schedule+0xfe/0x460 [ 54.904581] ? __schedule+0x1ed0/0x1ed0 [ 54.908560] ? debug_object_active_state+0x2f5/0x4d0 [ 54.913666] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 54.919116] ? kasan_check_write+0x14/0x20 [ 54.923344] ? wait_for_completion+0x41f/0x8a0 [ 54.927914] schedule_timeout+0x1cc/0x260 [ 54.932051] ? usleep_range+0x1a0/0x1a0 [ 54.936015] ? wait_for_completion+0x41f/0x8a0 [ 54.940691] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 54.946150] ? kasan_check_write+0x14/0x20 [ 54.950375] ? do_raw_spin_lock+0xc1/0x200 [ 54.954601] wait_for_completion+0x427/0x8a0 [ 54.958999] ? wait_for_completion_interruptible+0x840/0x840 [ 54.964786] ? wake_up_q+0x100/0x100 [ 54.968493] ? __lockdep_init_map+0x105/0x590 [ 54.972980] ? __init_waitqueue_head+0x9e/0x150 [ 54.977699] __wait_rcu_gp+0x265/0x360 [ 54.981621] synchronize_rcu.part.65+0x104/0x120 [ 54.986382] ? synchronize_rcu_expedited+0xb0/0xb0 [ 54.991302] ? __call_rcu.constprop.69+0xbc0/0xbc0 [ 54.996222] ? add_taint+0x29/0x70 [ 54.999761] ? map_update_elem+0x423/0xd50 [ 55.003994] ? ___might_sleep.cold.82+0x1c6/0x1f3 [ 55.008822] ? rcu_unexpedite_gp+0x20/0x20 [ 55.013051] ? __might_sleep+0x95/0x190 [ 55.017015] synchronize_rcu+0x27/0xa0 [ 55.020900] synchronize_net+0x4d/0x60 [ 55.024777] xsk_map_update_elem+0x2b0/0x470 [ 55.029177] ? xsk_map_lookup_elem+0x10/0x10 [ 55.033577] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 55.039105] ? check_preemption_disabled+0x48/0x200 [ 55.044123] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 55.049648] ? xsk_map_lookup_elem+0x10/0x10 [ 55.054045] map_update_elem+0x60c/0xd50 [ 55.058100] __x64_sys_bpf+0x32d/0x510 [ 55.061979] ? bpf_prog_get+0x20/0x20 [ 55.065772] do_syscall_64+0x1b9/0x820 [ 55.069651] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 55.075107] ? syscall_return_slowpath+0x5e0/0x5e0 [ 55.080032] ? trace_hardirqs_on_caller+0x310/0x310 [ 55.085041] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 55.090053] ? recalc_sigpending_tsk+0x180/0x180 [ 55.094815] ? kasan_check_write+0x14/0x20 [ 55.099052] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 55.103887] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.109066] RIP: 0033:0x457579 [ 55.112250] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 55.131137] RSP: 002b:00007f6f4758dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.138835] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 55.146091] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000002 [ 55.153351] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 55.160603] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6f4758e6d4 [ 55.167858] R13: 00000000004bd93a R14: 00000000004cc2b0 R15: 00000000ffffffff [ 55.176090] Kernel Offset: disabled [ 55.179723] Rebooting in 86400 seconds..