[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 91.775250][ T28] audit: type=1800 audit(1583592608.734:25): pid=9432 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 91.795175][ T28] audit: type=1800 audit(1583592608.734:26): pid=9432 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 91.815518][ T28] audit: type=1800 audit(1583592608.734:27): pid=9432 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.55' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 103.171852][ T9582] BUG: sleeping function called from invalid context at mm/slab.h:565 [ 103.180181][ T9582] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 9582, name: syz-executor610 [ 103.189687][ T9582] 2 locks held by syz-executor610/9582: [ 103.195257][ T9582] #0: ffffffff8a34eb80 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x3f9/0xad0 [ 103.204109][ T9582] #1: ffffffff8a3961b8 (zones_lock){+...}, at: tcf_ct_flow_table_get+0xa3/0x1700 [ 103.213335][ T9582] Preemption disabled at: [ 103.213344][ T9582] [<0000000000000000>] 0x0 [ 103.222095][ T9582] CPU: 0 PID: 9582 Comm: syz-executor610 Not tainted 5.6.0-rc3-syzkaller #0 [ 103.230763][ T9582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 103.240813][ T9582] Call Trace: [ 103.244092][ T9582] dump_stack+0x188/0x20d [ 103.248412][ T9582] ___might_sleep.cold+0x1f4/0x23d [ 103.253594][ T9582] kmem_cache_alloc_node_trace+0x272/0x790 [ 103.259378][ T9582] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 103.265170][ T9582] __kmalloc_node+0x38/0x60 [ 103.269655][ T9582] kvmalloc_node+0x61/0xf0 [ 103.274054][ T9582] bucket_table_alloc+0x8b/0x480 [ 103.278974][ T9582] rhashtable_init+0x3d2/0x750 [ 103.283761][ T9582] nf_flow_table_init+0x16d/0x310 [ 103.288811][ T9582] tcf_ct_flow_table_get+0xe33/0x1700 [ 103.294187][ T9582] ? tcf_ct_params_free+0x330/0x330 [ 103.299403][ T9582] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 103.304931][ T9582] ? memcpy+0x35/0x50 [ 103.308906][ T9582] tcf_ct_init+0xba4/0x18a6 [ 103.313422][ T9582] ? tcf_ct_flow_table_get+0x1700/0x1700 [ 103.319106][ T9582] ? find_held_lock+0x2d/0x110 [ 103.323974][ T9582] ? tc_lookup_action_n+0x1a/0xf0 [ 103.328991][ T9582] ? tcf_action_init_1+0x697/0xa20 [ 103.334144][ T9582] ? tc_lookup_action_n+0xcd/0xf0 [ 103.339180][ T9582] tcf_action_init_1+0x697/0xa20 [ 103.344129][ T9582] ? tcf_action_dump_old+0x80/0x80 [ 103.349236][ T9582] ? memset+0x20/0x40 [ 103.353220][ T9582] ? mark_lock+0xbc/0x1220 [ 103.357794][ T9582] ? __lock_acquire+0x80b/0x3ca0 [ 103.363593][ T9582] tcf_action_init+0x1e9/0x2f0 [ 103.368347][ T9582] ? tcf_action_init_1+0xa20/0xa20 [ 103.373465][ T9582] ? mark_lock+0xbc/0x1220 [ 103.377876][ T9582] tcf_action_add+0xdb/0x370 [ 103.382453][ T9582] ? tca_action_gd+0x15b0/0x15b0 [ 103.387464][ T9582] ? mark_held_locks+0xe0/0xe0 [ 103.392241][ T9582] ? nla_memcpy+0xa0/0xa0 [ 103.396568][ T9582] ? ns_capable_common+0xe2/0x100 [ 103.401580][ T9582] ? __nla_parse+0x2e/0x60 [ 103.405984][ T9582] tc_ctl_action+0x366/0x456 [ 103.410600][ T9582] ? tcf_action_add+0x370/0x370 [ 103.415444][ T9582] ? rtnetlink_rcv_msg+0x1d6/0xad0 [ 103.420540][ T9582] ? tcf_action_add+0x370/0x370 [ 103.425370][ T9582] rtnetlink_rcv_msg+0x44e/0xad0 [ 103.430292][ T9582] ? rtnl_bridge_getlink+0x870/0x870 [ 103.435574][ T9582] ? mark_held_locks+0xe0/0xe0 [ 103.440389][ T9582] ? netlink_deliver_tap+0x146/0xb50 [ 103.446287][ T9582] netlink_rcv_skb+0x15a/0x410 [ 103.451038][ T9582] ? rtnl_bridge_getlink+0x870/0x870 [ 103.456309][ T9582] ? netlink_ack+0xa80/0xa80 [ 103.460894][ T9582] netlink_unicast+0x537/0x740 [ 103.465657][ T9582] ? netlink_attachskb+0x810/0x810 [ 103.470774][ T9582] ? _copy_from_iter_full+0x25c/0x870 [ 103.476215][ T9582] ? __phys_addr_symbol+0x2c/0x70 [ 103.481219][ T9582] ? __check_object_size+0x171/0x437 [ 103.486505][ T9582] netlink_sendmsg+0x882/0xe10 [ 103.491251][ T9582] ? aa_af_perm+0x260/0x260 [ 103.495737][ T9582] ? netlink_unicast+0x740/0x740 [ 103.500661][ T9582] ? netlink_unicast+0x740/0x740 [ 103.505579][ T9582] sock_sendmsg+0xcf/0x120 [ 103.509978][ T9582] ____sys_sendmsg+0x6b9/0x7d0 [ 103.514740][ T9582] ? kernel_sendmsg+0x50/0x50 [ 103.519507][ T9582] ? mark_lock+0xbc/0x1220 [ 103.523940][ T9582] ___sys_sendmsg+0x100/0x170 [ 103.528732][ T9582] ? lockdep_hardirqs_on+0x417/0x5d0 [ 103.534002][ T9582] ? sendmsg_copy_msghdr+0x70/0x70 [ 103.539103][ T9582] ? prep_transhuge_page+0xa0/0xa0 [ 103.544205][ T9582] ? pud_val+0x7c/0xf0 [ 103.548259][ T9582] ? pmd_val+0xf0/0xf0 [ 103.552595][ T9582] ? find_held_lock+0x2d/0x110 [ 103.557353][ T9582] ? do_page_fault+0x58b/0x12da [ 103.562197][ T9582] ? apply_to_existing_page_range+0x40/0x40 [ 103.568155][ T9582] ? lock_downgrade+0x7f0/0x7f0 [ 103.573002][ T9582] ? __fget_light+0x1a5/0x270 [ 103.577674][ T9582] __sys_sendmsg+0xec/0x1b0 [ 103.582274][ T9582] ? __sys_sendmsg_sock+0xb0/0xb0 [ 103.587284][ T9582] ? mark_held_locks+0x9f/0xe0 [ 103.592043][ T9582] ? trace_hardirqs_off_caller+0x55/0x230 [ 103.597750][ T9582] ? do_syscall_64+0x21/0x790 [ 103.602413][ T9582] do_syscall_64+0xf6/0x790 [ 103.606980][ T9582] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 103.612876][ T9582] RIP: 0033:0x4403d9 [ 103.616778][ T9582] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 103.636574][ T9582] RSP: 002b:00007ffd719af218 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.644984][ T9582] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004403d9 [ 103.652949][ T9582] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 103.660920][ T9582] RBP: 00000000006ca018 R08: 0000000000000005 R09: 00000000004002c8 [ 103.668877][ T9582] R10: 0000000000000008 R11: 00000000000