[ 37.461089] audit: type=1800 audit(1571409195.612:32): pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 38.314376] audit: type=1800 audit(1571409196.542:33): pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.2' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 47.009650] kauditd_printk_skb: 2 callbacks suppressed [ 47.009664] audit: type=1400 audit(1571409205.232:36): avc: denied { map } for pid=7519 comm="syz-executor757" path="/root/syz-executor757678020" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 47.031285] IPVS: ftp: loaded support on port[0] = 21 [ 47.070667] BUG: sleeping function called from invalid context at kernel/workqueue.c:2856 [ 47.079163] in_atomic(): 1, irqs_disabled(): 0, pid: 7521, name: syz-executor757 [ 47.086738] 2 locks held by syz-executor757/7521: [ 47.091574] #0: 000000006557c17d (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 [ 47.099826] #1: 00000000daabbd2f (&qdisc_rx_lock){+...}, at: red_change+0x3b8/0x1150 [ 47.107857] Preemption disabled at: [ 47.107874] [] red_change+0x3b8/0x1150 [ 47.116993] CPU: 0 PID: 7521 Comm: syz-executor757 Not tainted 4.19.80 #0 [ 47.123940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.133278] Call Trace: [ 47.135868] dump_stack+0x172/0x1f0 [ 47.139544] ? red_change+0x3b8/0x1150 [ 47.143421] ___might_sleep.cold+0x1bd/0x1f6 [ 47.147853] __might_sleep+0x95/0x190 [ 47.151663] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 47.156819] __flush_work+0x103/0x870 [ 47.160611] ? insert_work+0x3a0/0x3a0 [ 47.164486] ? save_stack+0x45/0xd0 [ 47.168127] ? __kasan_slab_free+0x102/0x150 [ 47.172528] ? kasan_slab_free+0xe/0x10 [ 47.176617] ? kfree+0xcf/0x220 [ 47.179888] ? fifo_set_limit+0x1a9/0x210 [ 47.184035] ? fifo_create_dflt+0x90/0xf0 [ 47.188178] ? red_change+0x2ef/0x1150 [ 47.192113] ? tc_modify_qdisc+0xfc7/0x1bdc [ 47.196481] ? rtnetlink_rcv_msg+0x463/0xb00 [ 47.200893] ? mark_held_locks+0xb1/0x100 [ 47.205034] ? __cancel_work_timer+0x1d3/0x520 [ 47.209602] ? cancel_work_sync+0x18/0x20 [ 47.213819] ? __cancel_work_timer+0x1d3/0x520 [ 47.218396] ? lockdep_hardirqs_on+0x19b/0x5d0 [ 47.222968] ? trace_hardirqs_on+0x67/0x220 [ 47.227331] __cancel_work_timer+0x3bf/0x520 [ 47.231729] ? try_to_grab_pending+0x710/0x710 [ 47.236298] ? hrtimer_try_to_cancel+0x8a/0x5b0 [ 47.240950] ? hrtimer_run_softirq+0x270/0x270 [ 47.245526] ? htb_destroy_class.isra.0+0x100/0x100 [ 47.250565] cancel_work_sync+0x18/0x20 [ 47.254570] htb_destroy+0x26/0x4b0 [ 47.258232] ? htb_destroy_class.isra.0+0x100/0x100 [ 47.263234] qdisc_destroy+0x195/0x690 [ 47.267107] ? qdisc_tree_reduce_backlog+0x39/0x570 [ 47.272234] red_change+0x55d/0x1150 [ 47.275953] ? red_enqueue+0x1820/0x1820 [ 47.280010] ? __lock_is_held+0xb6/0x140 [ 47.284223] ? nla_strcmp+0xe3/0x120 [ 47.287930] ? red_enqueue+0x1820/0x1820 [ 47.291982] tc_modify_qdisc+0xfc7/0x1bdc [ 47.296161] ? qdisc_create+0x1230/0x1230 [ 47.300292] ? find_held_lock+0x35/0x130 [ 47.304348] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 47.309871] ? qdisc_create+0x1230/0x1230 [ 47.314008] rtnetlink_rcv_msg+0x463/0xb00 [ 47.318231] ? rtnetlink_put_metrics+0x560/0x560 [ 47.322973] ? netlink_deliver_tap+0x22d/0xc20 [ 47.327541] ? find_held_lock+0x35/0x130 [ 47.331600] netlink_rcv_skb+0x17d/0x460 [ 47.335646] ? rtnetlink_put_metrics+0x560/0x560 [ 47.340391] ? netlink_ack+0xb30/0xb30 [ 47.344277] ? kasan_check_read+0x11/0x20 [ 47.348411] ? netlink_deliver_tap+0x254/0xc20 [ 47.352981] rtnetlink_rcv+0x1d/0x30 [ 47.356679] netlink_unicast+0x537/0x720 [ 47.360728] ? netlink_attachskb+0x770/0x770 [ 47.365140] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 47.370792] netlink_sendmsg+0x8ae/0xd70 [ 47.374855] ? netlink_unicast+0x720/0x720 [ 47.379084] ? selinux_socket_sendmsg+0x36/0x40 [ 47.383824] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 47.389351] ? security_socket_sendmsg+0x8d/0xc0 [ 47.394961] ? netlink_unicast+0x720/0x720 [ 47.399225] sock_sendmsg+0xd7/0x130 [ 47.402924] ___sys_sendmsg+0x803/0x920 [ 47.406885] ? copy_msghdr_from_user+0x430/0x430 [ 47.411672] ? lock_downgrade+0x880/0x880 [ 47.415979] ? kasan_check_read+0x11/0x20 [ 47.420128] ? __fget+0x367/0x540 [ 47.423575] ? iterate_fd+0x360/0x360 [ 47.427366] ? find_held_lock+0x35/0x130 [ 47.431413] ? __fd_install+0x1bc/0x640 [ 47.435375] ? __fget_light+0x1a9/0x230 [ 47.439335] ? __fdget+0x1b/0x20 [ 47.442683] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 47.448206] __sys_sendmsg+0x105/0x1d0 [ 47.452078] ? __ia32_sys_shutdown+0x80/0x80 [ 47.456481] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 47.461219] ? do_syscall_64+0x26/0x620 [ 47.465180] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 47.470529] ? do_syscall_64+0x26/0x620 [ 47.474491] __x64_sys_sendmsg+0x78/0xb0 [ 47.478583] do_syscall_64+0xfd/0x620 [ 47.482409] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 47.487591] RIP: 0033:0x4463b9 [ 47.490771] Code: e8 1c ba 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 ab 0e fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 47.509696] RSP: 002b:00007f425aa04d98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.517392] RAX: ffffffffffffffda RBX: 00000000006dbc48 RCX: 00000000004463b9 [ 47.524648] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 47.531902] RBP: 00000000006dbc40 R08: 0000000000000000 R09: 0000000000000000 [ 47.539155] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc4c [ 47.546410] R13: 0000000000000000 R14: 0000000000000000 R15: 0507002400000148