audit: type=1400 audit(1571814515.259:36): avc: denied { map } for pid=6955 comm="syz-executor706" path="/root/syz-executor706321614" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 IPVS: ftp: loaded support on port[0] = 21 BUG: sleeping function called from invalid context at kernel/workqueue.c:2816 in_atomic(): 1, irqs_disabled(): 0, pid: 6959, name: syz-executor706 2 locks held by syz-executor706/6959: #0: (rtnl_mutex){+.+.}, at: [] rtnl_lock net/core/rtnetlink.c:72 [inline] #0: (rtnl_mutex){+.+.}, at: [] rtnetlink_rcv_msg+0x33a/0xb70 net/core/rtnetlink.c:4280 #1: (&qdisc_rx_lock){+...}, at: [] spin_lock_bh include/linux/spinlock.h:322 [inline] #1: (&qdisc_rx_lock){+...}, at: [] sch_tree_lock include/net/sch_generic.h:355 [inline] #1: (&qdisc_rx_lock){+...}, at: [] red_change+0x32e/0x1030 net/sched/sch_red.c:199 Preemption disabled at: [] spin_lock_bh include/linux/spinlock.h:322 [inline] [] sch_tree_lock include/net/sch_generic.h:355 [inline] [] red_change+0x32e/0x1030 net/sched/sch_red.c:199 CPU: 0 PID: 6959 Comm: syz-executor706 Not tainted 4.14.150 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x138/0x197 lib/dump_stack.c:53 ___might_sleep.cold+0x1bd/0x1f6 kernel/sched/core.c:6039 __might_sleep+0x93/0xb0 kernel/sched/core.c:5992 start_flush_work kernel/workqueue.c:2816 [inline] flush_work+0xdb/0x730 kernel/workqueue.c:2884 __cancel_work_timer+0x2f0/0x480 kernel/workqueue.c:2956 cancel_work_sync+0x18/0x20 kernel/workqueue.c:2992 htb_destroy+0x26/0x420 net/sched/sch_htb.c:1246 qdisc_destroy+0x157/0x320 net/sched/sch_generic.c:725 red_change+0x4d4/0x1030 net/sched/sch_red.c:205 qdisc_change net/sched/sch_api.c:1144 [inline] tc_modify_qdisc+0xc5a/0x1270 net/sched/sch_api.c:1410 rtnetlink_rcv_msg+0x3eb/0xb70 net/core/rtnetlink.c:4285 netlink_rcv_skb+0x14f/0x3c0 net/netlink/af_netlink.c:2432 rtnetlink_rcv+0x1d/0x30 net/core/rtnetlink.c:4297 netlink_unicast_kernel net/netlink/af_netlink.c:1286 [inline] netlink_unicast+0x45d/0x640 net/netlink/af_netlink.c:1312 netlink_sendmsg+0x7c4/0xc60 net/netlink/af_netlink.c:1877 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xce/0x110 net/socket.c:656 ___sys_sendmsg+0x70a/0x840 net/socket.c:2062 __sys_sendmsg+0xb9/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0x2d/0x50 net/socket.c:2103 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x4463a9 RSP: 002b:00007fe3e79fcd98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000006dbc68 RCX: 00000000004463a9 RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 RBP: 00000000006dbc60 R08: 00007fe3e79fd700 R09: 0000000000000000 R10: 00007fe3e79fd700 R11: 0000000000000246 R12: 00000000006dbc6c R13: 0000000000000000 R14: 0000000000000000 R15: 0507002400000148