syzkaller login: [ 34.764502] kauditd_printk_skb: 9 callbacks suppressed [ 34.764508] audit: type=1400 audit(1581368081.770:35): avc: denied { map } for pid=7037 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 41.143671] audit: type=1400 audit(1581368088.150:36): avc: denied { map } for pid=7048 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 41.900525] IPVS: ftp: loaded support on port[0] = 21 [ 42.313808] can: request_module (can-proto-0) failed. [ 43.363360] can: request_module (can-proto-0) failed. [ 43.527564] audit: type=1400 audit(1581368090.540:37): avc: denied { create } for pid=7048 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 43.551130] audit: type=1400 audit(1581368090.540:38): avc: denied { create } for pid=7048 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 43.574748] audit: type=1400 audit(1581368090.540:39): avc: denied { create } for pid=7048 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.0.27' (ECDSA) to the list of known hosts. 2020/02/10 20:54:57 parsed 1 programs 2020/02/10 20:54:57 executed programs: 0 [ 50.866586] IPVS: ftp: loaded support on port[0] = 21 [ 50.920154] IPVS: ftp: loaded support on port[0] = 21 [ 50.935644] IPVS: ftp: loaded support on port[0] = 21 [ 50.971510] IPVS: ftp: loaded support on port[0] = 21 [ 50.992369] IPVS: ftp: loaded support on port[0] = 21 [ 51.005459] IPVS: ftp: loaded support on port[0] = 21 [ 51.048013] chnl_net:caif_netlink_parms(): no params data found [ 51.092741] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.099640] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.106691] device bridge_slave_0 entered promiscuous mode [ 51.125411] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.131923] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.139590] device bridge_slave_1 entered promiscuous mode [ 51.160898] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.169886] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.214873] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.222749] team0: Port device team_slave_0 added [ 51.230680] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.238639] team0: Port device team_slave_1 added [ 51.262276] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.271414] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.284105] chnl_net:caif_netlink_parms(): no params data found [ 51.308346] chnl_net:caif_netlink_parms(): no params data found [ 51.367749] device hsr_slave_0 entered promiscuous mode [ 51.415621] device hsr_slave_1 entered promiscuous mode [ 51.455910] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.462913] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.487789] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.494260] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.501253] device bridge_slave_0 entered promiscuous mode [ 51.507958] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.514303] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.521399] device bridge_slave_1 entered promiscuous mode [ 51.541647] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.548132] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.554994] device bridge_slave_0 entered promiscuous mode [ 51.599500] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.606030] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.612980] device bridge_slave_1 entered promiscuous mode [ 51.642579] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.654884] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.667973] chnl_net:caif_netlink_parms(): no params data found [ 51.688143] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.697510] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.703926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.710800] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.717277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.745146] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.761075] chnl_net:caif_netlink_parms(): no params data found [ 51.777223] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.784479] team0: Port device team_slave_0 added [ 51.792187] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 51.799531] team0: Port device team_slave_0 added [ 51.805398] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.812608] team0: Port device team_slave_1 added [ 51.822626] chnl_net:caif_netlink_parms(): no params data found [ 51.840223] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 51.848180] team0: Port device team_slave_1 added [ 51.858084] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.873497] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.889147] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.903802] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.910385] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.917652] device bridge_slave_0 entered promiscuous mode [ 51.924133] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.950898] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.957349] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.964325] device bridge_slave_0 entered promiscuous mode [ 51.970784] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.979836] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.986961] device bridge_slave_1 entered promiscuous mode [ 52.047857] device hsr_slave_0 entered promiscuous mode [ 52.085841] device hsr_slave_1 entered promiscuous mode [ 52.145537] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.151940] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.159120] device bridge_slave_1 entered promiscuous mode [ 52.177630] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.184106] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.191182] device bridge_slave_0 entered promiscuous mode [ 52.246809] device hsr_slave_0 entered promiscuous mode [ 52.285568] device hsr_slave_1 entered promiscuous mode [ 52.335928] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.344788] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.352634] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.361877] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.373897] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.382262] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.390001] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.396865] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.403972] device bridge_slave_1 entered promiscuous mode [ 52.410491] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.427197] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.436176] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.455682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.466082] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.478585] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.486197] team0: Port device team_slave_0 added [ 52.498092] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 52.506452] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.516668] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.523797] team0: Port device team_slave_1 added [ 52.532179] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.540228] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.552480] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 52.561736] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.571411] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.588999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.597070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.604204] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.611449] team0: Port device team_slave_0 added [ 52.618409] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.624487] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.637982] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 52.645180] team0: Port device team_slave_0 added [ 52.696729] device hsr_slave_0 entered promiscuous mode [ 52.735568] device hsr_slave_1 entered promiscuous mode [ 52.785733] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.792916] team0: Port device team_slave_1 added [ 52.799193] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.807715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.816704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.826823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.834684] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.841064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.848343] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 52.855679] team0: Port device team_slave_1 added [ 52.861020] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.868425] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.875906] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.883263] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.892815] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.902228] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.912220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.920448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.928338] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.934696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.942428] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.996995] device hsr_slave_0 entered promiscuous mode [ 53.035623] device hsr_slave_1 entered promiscuous mode [ 53.077328] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.129091] device hsr_slave_0 entered promiscuous mode [ 53.165764] device hsr_slave_1 entered promiscuous mode [ 53.210064] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.217215] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.224751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.236268] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.245791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.261713] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.269285] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.282216] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.302997] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.314742] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.334358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.342469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.350526] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.360865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.373250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.383442] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 53.393470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.402302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.413238] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 53.422202] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.432391] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.441497] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.447935] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.457878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.467771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.476144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.483395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.493769] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 53.503428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.511844] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.522991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.530974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.539995] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.547296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.562710] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.572366] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.584048] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.592024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.602377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.609577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.619594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.627421] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.633926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.641173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.649605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.657785] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.664165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.671787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.683853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.693624] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 53.705629] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 53.721691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.731820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.740370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.751851] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.760002] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.766957] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.776288] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 53.784087] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.792992] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.802415] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.810609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.819227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.828081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.836469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.844199] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.850917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.858258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.865151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.872671] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.880985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.889568] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.899021] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 53.910154] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.920574] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.929382] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.936885] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.942995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.950820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.958592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.967659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.976070] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.982420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.989394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.997641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.007689] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.019190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.031095] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.040099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.048355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.057988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.066413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.074328] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.081068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.088344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.099659] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.108689] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 54.115101] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.127144] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.138985] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.146208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.154259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.163085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.171247] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.177981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.185526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.193847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.203248] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.213585] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.213588] audit: type=1400 audit(1581368101.220:40): avc: denied { associate } for pid=7141 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 54.246128] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.256403] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.264574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.273169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.282090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.292183] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.298737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.306208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.314042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.322930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.331011] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.337241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.346594] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.356477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.364159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.374442] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.380969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.390210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.403291] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.412917] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.437496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.449742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.459721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.467816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.475796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.483600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.492011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.499943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.508675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.516292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.525623] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.533492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.544660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.552547] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.562240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.571058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.579662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.588590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.596248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.606112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 54.614029] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.622439] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 54.630450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.644108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.652555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.660489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.671440] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 54.680409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.691253] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.697835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.709269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.718098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.731142] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.738428] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 54.745022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.760722] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.773754] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.781532] BUG: sleeping function called from invalid context at kernel/workqueue.c:2862 [ 54.790443] in_atomic(): 1, irqs_disabled(): 0, pid: 7170, name: syz-executor.0 [ 54.797946] 2 locks held by syz-executor.0/7170: [ 54.803046] #0: 0000000082498f20 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x301/0x8f0 [ 54.811589] #1: 00000000a6309113 (&qdisc_rx_lock){+...}, at: red_change+0x388/0x1790 [ 54.819968] Preemption disabled at: [ 54.819979] [] red_change+0x388/0x1790 [ 54.829582] CPU: 0 PID: 7170 Comm: syz-executor.0 Not tainted 4.19.102-syzkaller #0 [ 54.837379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.847082] Call Trace: [ 54.849832] dump_stack+0x123/0x177 [ 54.853470] ? red_change+0x388/0x1790 [ 54.857355] ___might_sleep.cold.88+0x1bb/0x1f4 [ 54.862147] __might_sleep+0x95/0x190 [ 54.865943] __flush_work+0xbd/0x7f0 [ 54.869706] ? save_stack+0x43/0xd0 [ 54.873412] ? __kasan_slab_free+0x102/0x150 [ 54.877817] ? kasan_slab_free+0xe/0x10 [ 54.881979] ? insert_work+0x350/0x350 [ 54.885943] ? mark_held_locks+0xc7/0x130 [ 54.890090] ? try_to_grab_pending+0xaf/0x5e0 [ 54.894858] ? __cancel_work_timer+0x14f/0x430 [ 54.899934] ? cancel_work_sync+0xb/0x10 [ 54.904293] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 54.908872] ? __cancel_work_timer+0x14f/0x430 [ 54.913733] ? trace_hardirqs_on+0x28/0x190 [ 54.918061] __cancel_work_timer+0x2f1/0x430 [ 54.922686] ? try_to_grab_pending+0x5e0/0x5e0 [ 54.927356] ? hrtimer_try_to_cancel+0x6c/0x510 [ 54.932175] ? hrtimer_run_softirq+0x250/0x250 [ 54.936998] ? mark_held_locks+0xc7/0x130 [ 54.941150] cancel_work_sync+0xb/0x10 [ 54.945034] htb_destroy+0x20/0x4c0 [ 54.949029] ? htb_reset+0x2cd/0x4c0 [ 54.953592] qdisc_destroy+0x134/0x660 [ 54.957752] ? do_raw_spin_lock+0xd0/0x240 [ 54.961983] red_change+0x6ee/0x1790 [ 54.965809] ? red_enqueue+0x1670/0x1670 [ 54.972260] ? nla_strcmp+0x9b/0xe0 [ 54.976291] tc_modify_qdisc+0xc2f/0x18f4 [ 54.980430] ? rtnetlink_rcv_msg+0x301/0x8f0 [ 54.984833] ? qdisc_create+0xf60/0xf60 [ 54.988801] ? find_held_lock+0x36/0x1d0 [ 54.992864] rtnetlink_rcv_msg+0x34f/0x8f0 [ 54.997261] ? rtnetlink_put_metrics+0x490/0x490 [ 55.002192] ? find_held_lock+0x36/0x1d0 [ 55.006634] netlink_rcv_skb+0x142/0x390 [ 55.010689] ? lock_downgrade+0x860/0x860 [ 55.014847] ? rtnetlink_put_metrics+0x490/0x490 [ 55.019743] ? netlink_ack+0x990/0x990 [ 55.024982] ? netlink_deliver_tap+0x182/0xb00 [ 55.029558] rtnetlink_rcv+0x10/0x20 [ 55.033355] netlink_unicast+0x445/0x640 [ 55.037460] ? netlink_attachskb+0x6d0/0x6d0 [ 55.041865] netlink_sendmsg+0x765/0xc50 [ 55.046000] ? netlink_unicast+0x640/0x640 [ 55.050424] ? copy_msghdr_from_user+0x20b/0x3e0 [ 55.055527] ? selinux_socket_sendmsg+0x31/0x40 [ 55.060205] ? netlink_unicast+0x640/0x640 [ 55.064586] sock_sendmsg+0xb5/0xf0 [ 55.068213] ___sys_sendmsg+0x647/0x950 [ 55.072178] ? find_held_lock+0x36/0x1d0 [ 55.076841] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 55.081884] ? __fget+0x278/0x400 [ 55.085505] ? kasan_check_read+0x11/0x20 [ 55.089773] ? __fget+0x295/0x400 [ 55.093301] ? ksys_dup3+0x2e0/0x2e0 [ 55.097013] ? find_held_lock+0x36/0x1d0 [ 55.101077] ? __fget_light+0x174/0x1e0 [ 55.105137] ? lock_downgrade+0x860/0x860 [ 55.109785] ? __fdget+0xe/0x10 [ 55.113334] __sys_sendmsg+0xd9/0x180 [ 55.117241] ? __ia32_sys_shutdown+0x70/0x70 [ 55.121923] ? kasan_check_read+0x11/0x20 [ 55.126152] ? _copy_to_user+0x91/0xb0 [ 55.130058] ? put_timespec64+0xa9/0x100 [ 55.134262] ? nsecs_to_jiffies+0x20/0x20 [ 55.138434] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.143791] __x64_sys_sendmsg+0x73/0xb0 [ 55.147870] do_syscall_64+0xd0/0x4e0 [ 55.151668] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.156850] RIP: 0033:0x459a59 [ 55.160044] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 55.179265] RSP: 002b:00007fb5ef1cdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.187292] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 55.194944] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 55.202213] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 55.209595] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb5ef1ce6d4 [ 55.216861] R13: 00000000004c7c0c R14: 00000000004ddad8 R15: 00000000ffffffff [ 55.232568] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.242456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.254586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.265754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.273854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.281839] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.290310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.306518] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.317037] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.330298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.337980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.347833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.355040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.362810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.377377] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.383677] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.391229] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.400343] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.415497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.431030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.452496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.463762] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.470803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.489416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.497481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.505844] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.512240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.521285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.534387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.556685] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.581664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.590687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.617109] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.623553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.640114] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.662515] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.684897] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.706699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.714956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.727846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.741988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 2020/02/10 20:55:02 executed programs: 15 [ 55.774050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.800340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.829337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.847936] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.859634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.869729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.884700] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.899149] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.922917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.939475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.951617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.964145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.976717] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.983521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.992020] BUG: sleeping function called from invalid context at kernel/workqueue.c:2862 [ 56.000766] in_atomic(): 1, irqs_disabled(): 0, pid: 7223, name: syz-executor.5 [ 56.008437] 2 locks held by syz-executor.5/7223: [ 56.013497] #0: 0000000082498f20 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x301/0x8f0 [ 56.022033] #1: 00000000b0f529a1 (&qdisc_rx_lock){+...}, at: red_change+0x388/0x1790 [ 56.030057] Preemption disabled at: [ 56.030066] [] red_change+0x388/0x1790 [ 56.039296] CPU: 1 PID: 7223 Comm: syz-executor.5 Tainted: G W 4.19.102-syzkaller #0 [ 56.049165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.058805] Call Trace: [ 56.061610] dump_stack+0x123/0x177 [ 56.065574] ? red_change+0x388/0x1790 [ 56.069462] ___might_sleep.cold.88+0x1bb/0x1f4 [ 56.074594] __might_sleep+0x95/0x190 [ 56.078614] __flush_work+0xbd/0x7f0 [ 56.082336] ? save_stack+0x43/0xd0 [ 56.085964] ? __kasan_slab_free+0x102/0x150 [ 56.090639] ? kasan_slab_free+0xe/0x10 [ 56.094633] ? insert_work+0x350/0x350 [ 56.098650] ? mark_held_locks+0xc7/0x130 [ 56.102903] ? try_to_grab_pending+0xaf/0x5e0 [ 56.107526] ? __cancel_work_timer+0x14f/0x430 [ 56.112107] ? cancel_work_sync+0xb/0x10 [ 56.116174] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 56.120752] ? __cancel_work_timer+0x14f/0x430 [ 56.125948] ? trace_hardirqs_on+0x28/0x190 [ 56.130677] __cancel_work_timer+0x2f1/0x430 [ 56.135414] ? try_to_grab_pending+0x5e0/0x5e0 [ 56.140500] ? hrtimer_try_to_cancel+0x6c/0x510 [ 56.145442] ? hrtimer_run_softirq+0x250/0x250 [ 56.150177] ? mark_held_locks+0xc7/0x130 [ 56.154829] cancel_work_sync+0xb/0x10 [ 56.158741] htb_destroy+0x20/0x4c0 [ 56.162511] ? htb_reset+0x2cd/0x4c0 [ 56.166231] qdisc_destroy+0x134/0x660 [ 56.170435] ? do_raw_spin_lock+0xd0/0x240 [ 56.174802] red_change+0x6ee/0x1790 [ 56.178935] ? red_enqueue+0x1670/0x1670 [ 56.183225] ? nla_strcmp+0x9b/0xe0 [ 56.186968] tc_modify_qdisc+0xc2f/0x18f4 [ 56.191439] ? rtnetlink_rcv_msg+0x301/0x8f0 [ 56.195849] ? qdisc_create+0xf60/0xf60 [ 56.199817] ? find_held_lock+0x36/0x1d0 [ 56.204085] rtnetlink_rcv_msg+0x34f/0x8f0 [ 56.208864] ? rtnetlink_put_metrics+0x490/0x490 [ 56.214172] ? find_held_lock+0x36/0x1d0 [ 56.218709] netlink_rcv_skb+0x142/0x390 [ 56.222901] ? lock_downgrade+0x860/0x860 [ 56.227300] ? rtnetlink_put_metrics+0x490/0x490 [ 56.232082] ? netlink_ack+0x990/0x990 [ 56.236145] ? netlink_deliver_tap+0x182/0xb00 [ 56.240889] rtnetlink_rcv+0x10/0x20 [ 56.244607] netlink_unicast+0x445/0x640 [ 56.248665] ? netlink_attachskb+0x6d0/0x6d0 [ 56.253394] netlink_sendmsg+0x765/0xc50 [ 56.257626] ? netlink_unicast+0x640/0x640 [ 56.261910] ? copy_msghdr_from_user+0x20b/0x3e0 [ 56.267121] ? selinux_socket_sendmsg+0x31/0x40 [ 56.271795] ? netlink_unicast+0x640/0x640 [ 56.276029] sock_sendmsg+0xb5/0xf0 [ 56.279653] ___sys_sendmsg+0x647/0x950 [ 56.284018] ? find_held_lock+0x36/0x1d0 [ 56.288516] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 56.293442] ? __fget+0x278/0x400 [ 56.296892] ? kasan_check_read+0x11/0x20 [ 56.301245] ? __fget+0x295/0x400 [ 56.304694] ? ksys_dup3+0x2e0/0x2e0 [ 56.308647] ? find_held_lock+0x36/0x1d0 [ 56.312894] ? __fget_light+0x174/0x1e0 [ 56.316958] ? lock_downgrade+0x860/0x860 [ 56.321275] ? __fdget+0xe/0x10 [ 56.324557] __sys_sendmsg+0xd9/0x180 [ 56.328508] ? __ia32_sys_shutdown+0x70/0x70 [ 56.333058] ? kasan_check_read+0x11/0x20 [ 56.337360] ? _copy_to_user+0x91/0xb0 [ 56.341917] ? put_timespec64+0xa9/0x100 [ 56.346284] ? nsecs_to_jiffies+0x20/0x20 [ 56.350614] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.356288] __x64_sys_sendmsg+0x73/0xb0 [ 56.360613] do_syscall_64+0xd0/0x4e0 [ 56.364716] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.370305] RIP: 0033:0x459a59 [ 56.373750] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 56.395167] RSP: 002b:00007fa18b2b0c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.403762] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 56.411995] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 56.420201] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 56.428521] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa18b2b16d4 [ 56.436202] R13: 00000000004c7c0c R14: 00000000004ddad8 R15: 00000000ffffffff [ 56.497248] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.521022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.006256] BUG: sleeping function called from invalid context at kernel/workqueue.c:2862 [ 57.015240] in_atomic(): 1, irqs_disabled(): 0, pid: 7347, name: syz-executor.2 [ 57.022883] 2 locks held by syz-executor.2/7347: [ 57.027922] #0: 0000000082498f20 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x301/0x8f0 [ 57.036860] #1: 000000007ad832cc (&qdisc_rx_lock){+...}, at: red_change+0x388/0x1790 [ 57.045670] Preemption disabled at: [ 57.045686] [] red_change+0x388/0x1790 [ 57.055810] CPU: 0 PID: 7347 Comm: syz-executor.2 Tainted: G W 4.19.102-syzkaller #0 [ 57.066370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.076441] Call Trace: [ 57.079348] dump_stack+0x123/0x177 [ 57.088644] ? red_change+0x388/0x1790 [ 57.092555] ___might_sleep.cold.88+0x1bb/0x1f4 [ 57.097608] __might_sleep+0x95/0x190 [ 57.101430] __flush_work+0xbd/0x7f0 [ 57.105510] ? save_stack+0x43/0xd0 [ 57.109294] ? __kasan_slab_free+0x102/0x150 [ 57.114006] ? kasan_slab_free+0xe/0x10 [ 57.117999] ? insert_work+0x350/0x350 [ 57.122003] ? mark_held_locks+0xc7/0x130 [ 57.126359] ? try_to_grab_pending+0xaf/0x5e0 [ 57.131196] ? __cancel_work_timer+0x14f/0x430 [ 57.136086] ? cancel_work_sync+0xb/0x10 [ 57.140313] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 57.145438] ? __cancel_work_timer+0x14f/0x430 [ 57.150132] ? trace_hardirqs_on+0x28/0x190 [ 57.155869] __cancel_work_timer+0x2f1/0x430 [ 57.160442] ? try_to_grab_pending+0x5e0/0x5e0 [ 57.165309] ? hrtimer_try_to_cancel+0x6c/0x510 [ 57.170324] ? hrtimer_run_softirq+0x250/0x250 [ 57.175152] ? mark_held_locks+0xc7/0x130 [ 57.179574] cancel_work_sync+0xb/0x10 [ 57.183651] htb_destroy+0x20/0x4c0 [ 57.187746] ? htb_reset+0x2cd/0x4c0 [ 57.192299] qdisc_destroy+0x134/0x660 [ 57.196623] ? do_raw_spin_lock+0xd0/0x240 [ 57.201456] red_change+0x6ee/0x1790 [ 57.205864] ? red_enqueue+0x1670/0x1670 [ 57.210672] ? nla_strcmp+0x9b/0xe0 [ 57.214586] tc_modify_qdisc+0xc2f/0x18f4 [ 57.219054] ? rtnetlink_rcv_msg+0x301/0x8f0 [ 57.224109] ? qdisc_create+0xf60/0xf60 [ 57.229405] ? find_held_lock+0x36/0x1d0 [ 57.234751] rtnetlink_rcv_msg+0x34f/0x8f0 [ 57.239898] ? rtnetlink_put_metrics+0x490/0x490 [ 57.245230] ? find_held_lock+0x36/0x1d0 [ 57.249442] netlink_rcv_skb+0x142/0x390 [ 57.253961] ? lock_downgrade+0x860/0x860 [ 57.258204] ? rtnetlink_put_metrics+0x490/0x490 [ 57.263406] ? netlink_ack+0x990/0x990 [ 57.267481] ? netlink_deliver_tap+0x182/0xb00 [ 57.272097] rtnetlink_rcv+0x10/0x20 [ 57.275829] netlink_unicast+0x445/0x640 [ 57.280177] ? netlink_attachskb+0x6d0/0x6d0 [ 57.286407] netlink_sendmsg+0x765/0xc50 [ 57.290759] ? netlink_unicast+0x640/0x640 [ 57.295304] ? copy_msghdr_from_user+0x20b/0x3e0 [ 57.300742] ? selinux_socket_sendmsg+0x31/0x40 [ 57.305768] ? netlink_unicast+0x640/0x640 [ 57.310143] sock_sendmsg+0xb5/0xf0 [ 57.314026] ___sys_sendmsg+0x647/0x950 [ 57.318422] ? find_held_lock+0x36/0x1d0 [ 57.322783] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 57.327808] ? __fget+0x278/0x400 [ 57.331374] ? kasan_check_read+0x11/0x20 [ 57.335689] ? __fget+0x295/0x400 [ 57.339159] ? ksys_dup3+0x2e0/0x2e0 [ 57.342967] ? find_held_lock+0x36/0x1d0 [ 57.347296] ? __fget_light+0x174/0x1e0 [ 57.351309] ? lock_downgrade+0x860/0x860 [ 57.355618] ? __fdget+0xe/0x10 [ 57.359109] __sys_sendmsg+0xd9/0x180 [ 57.363002] ? __ia32_sys_shutdown+0x70/0x70 [ 57.367724] ? kasan_check_read+0x11/0x20 [ 57.372446] ? _copy_to_user+0x91/0xb0 [ 57.376467] ? put_timespec64+0xa9/0x100 [ 57.380714] ? nsecs_to_jiffies+0x20/0x20 [ 57.384989] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.390522] __x64_sys_sendmsg+0x73/0xb0 [ 57.394596] do_syscall_64+0xd0/0x4e0 [ 57.398406] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.403672] RIP: 0033:0x459a59 [ 57.406956] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.427061] RSP: 002b:00007f8a28cc0c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.434872] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 57.442162] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 57.449737] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 57.457143] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a28cc16d4 [ 57.464889] R13: 00000000004c7c0c R14: 00000000004ddad8 R15: 00000000ffffffff [ 58.021423] BUG: sleeping function called from invalid context at kernel/workqueue.c:2862 [ 58.030059] in_atomic(): 1, irqs_disabled(): 0, pid: 7491, name: syz-executor.3 [ 58.037742] 2 locks held by syz-executor.3/7491: [ 58.042738] #0: 0000000082498f20 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x301/0x8f0 [ 58.051387] #1: 00000000e5248a71 (&qdisc_rx_lock){+...}, at: red_change+0x388/0x1790 [ 58.059567] Preemption disabled at: [ 58.059577] [] red_change+0x388/0x1790 [ 58.068922] CPU: 1 PID: 7491 Comm: syz-executor.3 Tainted: G W 4.19.102-syzkaller #0 [ 58.078245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.087982] Call Trace: [ 58.090577] dump_stack+0x123/0x177 [ 58.094203] ? red_change+0x388/0x1790 [ 58.098545] ___might_sleep.cold.88+0x1bb/0x1f4 [ 58.103229] __might_sleep+0x95/0x190 [ 58.107141] __flush_work+0xbd/0x7f0 [ 58.111053] ? save_stack+0x43/0xd0 [ 58.114805] ? __kasan_slab_free+0x102/0x150 [ 58.119249] ? kasan_slab_free+0xe/0x10 [ 58.123227] ? insert_work+0x350/0x350 [ 58.127398] ? mark_held_locks+0xc7/0x130 [ 58.131732] ? try_to_grab_pending+0xaf/0x5e0 [ 58.137095] ? __cancel_work_timer+0x14f/0x430 [ 58.141915] ? cancel_work_sync+0xb/0x10 [ 58.146142] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 58.150737] ? __cancel_work_timer+0x14f/0x430 [ 58.155324] ? trace_hardirqs_on+0x28/0x190 [ 58.159840] __cancel_work_timer+0x2f1/0x430 [ 58.164277] ? try_to_grab_pending+0x5e0/0x5e0 [ 58.169023] ? hrtimer_try_to_cancel+0x6c/0x510 [ 58.173780] ? hrtimer_run_softirq+0x250/0x250 [ 58.180460] ? mark_held_locks+0xc7/0x130 [ 58.184621] cancel_work_sync+0xb/0x10 [ 58.188508] htb_destroy+0x20/0x4c0 [ 58.192138] ? htb_reset+0x2cd/0x4c0 [ 58.195878] qdisc_destroy+0x134/0x660 [ 58.199787] ? do_raw_spin_lock+0xd0/0x240 [ 58.204207] red_change+0x6ee/0x1790 [ 58.207923] ? red_enqueue+0x1670/0x1670 [ 58.211987] ? nla_strcmp+0x9b/0xe0 [ 58.215619] tc_modify_qdisc+0xc2f/0x18f4 [ 58.220059] ? rtnetlink_rcv_msg+0x301/0x8f0 [ 58.224479] ? qdisc_create+0xf60/0xf60 [ 58.228456] ? find_held_lock+0x36/0x1d0 [ 58.232530] rtnetlink_rcv_msg+0x34f/0x8f0 [ 58.236798] ? rtnetlink_put_metrics+0x490/0x490 [ 58.241642] ? find_held_lock+0x36/0x1d0 [ 58.245749] netlink_rcv_skb+0x142/0x390 [ 58.249960] ? lock_downgrade+0x860/0x860 [ 58.254109] ? rtnetlink_put_metrics+0x490/0x490 [ 58.258994] ? netlink_ack+0x990/0x990 [ 58.262881] ? netlink_deliver_tap+0x182/0xb00 [ 58.267869] rtnetlink_rcv+0x10/0x20 [ 58.271698] netlink_unicast+0x445/0x640 [ 58.275977] ? netlink_attachskb+0x6d0/0x6d0 [ 58.280836] netlink_sendmsg+0x765/0xc50 [ 58.284915] ? netlink_unicast+0x640/0x640 [ 58.289270] ? copy_msghdr_from_user+0x20b/0x3e0 [ 58.294234] ? selinux_socket_sendmsg+0x31/0x40 [ 58.298912] ? netlink_unicast+0x640/0x640 [ 58.303217] sock_sendmsg+0xb5/0xf0 [ 58.307691] ___sys_sendmsg+0x647/0x950 [ 58.311845] ? find_held_lock+0x36/0x1d0 [ 58.316423] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 58.321205] ? __fget+0x278/0x400 [ 58.324694] ? kasan_check_read+0x11/0x20 [ 58.329174] ? __fget+0x295/0x400 [ 58.332760] ? ksys_dup3+0x2e0/0x2e0 [ 58.336653] ? find_held_lock+0x36/0x1d0 [ 58.340830] ? __fget_light+0x174/0x1e0 [ 58.345608] ? lock_downgrade+0x860/0x860 [ 58.350025] ? __fdget+0xe/0x10 [ 58.353572] __sys_sendmsg+0xd9/0x180 [ 58.357959] ? __ia32_sys_shutdown+0x70/0x70 [ 58.362571] ? kasan_check_read+0x11/0x20 [ 58.366945] ? _copy_to_user+0x91/0xb0 [ 58.370945] ? put_timespec64+0xa9/0x100 [ 58.375105] ? nsecs_to_jiffies+0x20/0x20 [ 58.379632] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.385091] __x64_sys_sendmsg+0x73/0xb0 [ 58.389381] do_syscall_64+0xd0/0x4e0 [ 58.393439] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.399161] RIP: 0033:0x459a59 [ 58.402529] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 58.427618] RSP: 002b:00007f4edbdfec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.435631] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 58.443661] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 58.451763] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 58.459199] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4edbdff6d4 [ 58.466899] R13: 00000000004c7c0c R14: 00000000004ddad8 R15: 00000000ffffffff 2020/02/10 20:55:07 executed programs: 223