syzkaller login: [ 37.095704] kauditd_printk_skb: 9 callbacks suppressed [ 37.095710] audit: type=1400 audit(1576175488.799:35): avc: denied { map } for pid=7119 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 43.449303] audit: type=1400 audit(1576175495.149:36): avc: denied { map } for pid=7130 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 44.365401] IPVS: ftp: loaded support on port[0] = 21 [ 44.749844] can: request_module (can-proto-0) failed. [ 45.947482] can: request_module (can-proto-0) failed. [ 46.093582] audit: type=1400 audit(1576175497.799:37): avc: denied { create } for pid=7130 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 46.117331] audit: type=1400 audit(1576175497.799:38): avc: denied { create } for pid=7130 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 46.143075] audit: type=1400 audit(1576175497.799:39): avc: denied { create } for pid=7130 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.0.203' (ECDSA) to the list of known hosts. 2019/12/12 18:31:44 parsed 1 programs 2019/12/12 18:31:45 executed programs: 0 [ 53.406548] IPVS: ftp: loaded support on port[0] = 21 [ 53.408832] IPVS: ftp: loaded support on port[0] = 21 [ 53.418407] IPVS: ftp: loaded support on port[0] = 21 [ 53.445717] IPVS: ftp: loaded support on port[0] = 21 [ 53.492479] IPVS: ftp: loaded support on port[0] = 21 [ 53.516406] IPVS: ftp: loaded support on port[0] = 21 [ 53.632340] chnl_net:caif_netlink_parms(): no params data found [ 53.734496] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.741339] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.748314] device bridge_slave_0 entered promiscuous mode [ 53.755576] chnl_net:caif_netlink_parms(): no params data found [ 53.785726] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.792931] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.799916] device bridge_slave_1 entered promiscuous mode [ 53.816821] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.827310] chnl_net:caif_netlink_parms(): no params data found [ 53.842555] chnl_net:caif_netlink_parms(): no params data found [ 53.852473] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.914252] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.921439] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.928553] device bridge_slave_0 entered promiscuous mode [ 53.938955] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.945605] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.952593] device bridge_slave_1 entered promiscuous mode [ 53.994416] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.001084] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.008085] device bridge_slave_0 entered promiscuous mode [ 54.016811] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.025415] team0: Port device team_slave_0 added [ 54.031527] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.039300] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.048030] team0: Port device team_slave_1 added [ 54.056552] chnl_net:caif_netlink_parms(): no params data found [ 54.068799] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.075635] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.082954] device bridge_slave_1 entered promiscuous mode [ 54.089854] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.098170] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.108818] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.115883] chnl_net:caif_netlink_parms(): no params data found [ 54.138630] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.151151] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.157554] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.164696] device bridge_slave_0 entered promiscuous mode [ 54.171768] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.178112] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.185185] device bridge_slave_1 entered promiscuous mode [ 54.211697] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.262937] device hsr_slave_0 entered promiscuous mode [ 54.300597] device hsr_slave_1 entered promiscuous mode [ 54.340774] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.348001] team0: Port device team_slave_0 added [ 54.357328] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.364580] team0: Port device team_slave_1 added [ 54.384539] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.396051] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.407976] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.415695] team0: Port device team_slave_0 added [ 54.421667] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.428907] team0: Port device team_slave_1 added [ 54.434829] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.442851] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.455150] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.463498] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.474363] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.482519] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.493279] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.499650] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.507722] device bridge_slave_0 entered promiscuous mode [ 54.517970] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.524429] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.531895] device bridge_slave_1 entered promiscuous mode [ 54.537993] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.547095] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.555009] device bridge_slave_0 entered promiscuous mode [ 54.578499] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.586959] team0: Port device team_slave_0 added [ 54.595986] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.602827] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.609897] device bridge_slave_1 entered promiscuous mode [ 54.671719] device hsr_slave_0 entered promiscuous mode [ 54.740606] device hsr_slave_1 entered promiscuous mode [ 54.822879] device hsr_slave_0 entered promiscuous mode [ 54.860497] device hsr_slave_1 entered promiscuous mode [ 54.930827] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.938085] team0: Port device team_slave_1 added [ 54.947448] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.955082] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.976791] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.984185] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.992637] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.001939] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.016553] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.023586] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.033792] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.042412] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.112060] device hsr_slave_0 entered promiscuous mode [ 55.150544] device hsr_slave_1 entered promiscuous mode [ 55.190914] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.207713] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.226740] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.234037] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.242873] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 55.250046] team0: Port device team_slave_0 added [ 55.255856] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 55.264140] team0: Port device team_slave_0 added [ 55.270264] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.277523] team0: Port device team_slave_1 added [ 55.284698] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.293667] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.301077] team0: Port device team_slave_1 added [ 55.306458] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.320451] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.329427] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.346211] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.402348] device hsr_slave_0 entered promiscuous mode [ 55.440630] device hsr_slave_1 entered promiscuous mode [ 55.481116] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.488779] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.543115] device hsr_slave_0 entered promiscuous mode [ 55.580623] device hsr_slave_1 entered promiscuous mode [ 55.641005] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.648214] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.656226] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.698489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.712061] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.722865] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.732566] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.749376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.757804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.767641] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.774099] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.785470] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.802126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.809881] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.819362] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.835711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.845239] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.852184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.861972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.869935] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.876521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.885453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.893040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.905816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.914082] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.923645] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.934860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.942219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.949991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.958058] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.964458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.977359] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.984741] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.991243] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.001664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.008631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.020303] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.028259] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.035038] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.044390] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.056375] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.065327] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.072087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.079963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.088431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.096754] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.103636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.111320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.119708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.127918] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.135151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.142838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.154537] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.165002] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.176880] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.187504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.196789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.205199] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.212072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.219869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.227932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.235169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.242908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.252230] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.262915] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.272147] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.281020] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.287098] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.294540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.302751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.310650] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.317109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.325210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.333600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.346316] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.356756] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.368724] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.378510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.386571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.396583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.406962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.414956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.422877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.430925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.438619] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.445111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.452307] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.459266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.468288] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.476199] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.488326] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.497993] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.508346] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.517860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.526312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.534560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.542362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.549884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.557884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.565602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.573620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.581332] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.587673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.594660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.602710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.615295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.622865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.632324] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.639740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.652927] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.659229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.668256] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.676550] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.684010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.691868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.699569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.707414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.715191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.722997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.730984] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.738655] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.749436] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.762833] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.770427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.779682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.790911] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.798553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.808378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.819704] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.827210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.837488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.845395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.854370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.862200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.870211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.878295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.886243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.895713] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.904042] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.912347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.919043] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.932344] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.939922] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.949606] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.956944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.964779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.971817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.979421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.987049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.994752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.002413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.009851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.018805] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 57.025423] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.034095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 57.044855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.056662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.064369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.072704] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.080292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.093412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.107957] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 57.118745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.127137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.135524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.144771] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.151151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.157927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.165947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.173618] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.180168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.188540] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 57.199301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.208483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.215419] audit: type=1400 audit(1576175508.929:40): avc: denied { associate } for pid=7227 comm="syz-executor.4" name="syz4" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 57.238685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.248791] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 57.269183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.287090] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 57.300019] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.311372] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 57.339146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.351453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.358345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.368344] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 57.378415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.387482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.397190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.405746] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.421529] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 57.429127] BUG: sleeping function called from invalid context at kernel/workqueue.c:2856 [ 57.438075] in_atomic(): 1, irqs_disabled(): 0, pid: 7249, name: syz-executor.4 [ 57.445589] 2 locks held by syz-executor.4/7249: [ 57.450734] #0: 000000008198e5fd (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x301/0x8f0 [ 57.458888] #1: 0000000092d5dc98 (&qdisc_rx_lock){+...}, at: red_change+0x388/0x1790 [ 57.466929] Preemption disabled at: [ 57.466942] [] red_change+0x388/0x1790 [ 57.466966] CPU: 1 PID: 7249 Comm: syz-executor.4 Not tainted 4.19.88-syzkaller #0 [ 57.466969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.466971] Call Trace: [ 57.466985] dump_stack+0x123/0x177 [ 57.466989] ? red_change+0x388/0x1790 [ 57.466998] ___might_sleep.cold.88+0x1bb/0x1f4 [ 57.467006] __might_sleep+0x95/0x190 [ 57.467015] __flush_work+0xbd/0x7f0 [ 57.467022] ? save_stack+0x43/0xd0 [ 57.467025] ? __kasan_slab_free+0x102/0x150 [ 57.467028] ? kasan_slab_free+0xe/0x10 [ 57.467032] ? insert_work+0x350/0x350 [ 57.467040] ? mark_held_locks+0xc7/0x130 [ 57.467044] ? try_to_grab_pending+0xaf/0x5e0 [ 57.467049] ? __cancel_work_timer+0x14f/0x430 [ 57.467052] ? cancel_work_sync+0xb/0x10 [ 57.467057] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 57.467061] ? __cancel_work_timer+0x14f/0x430 [ 57.467068] ? trace_hardirqs_on+0x28/0x190 [ 57.467074] __cancel_work_timer+0x2f1/0x430 [ 57.467078] ? try_to_grab_pending+0x5e0/0x5e0 [ 57.467089] ? hrtimer_try_to_cancel+0x6c/0x510 [ 57.467095] ? hrtimer_run_softirq+0x250/0x250 [ 57.467098] ? mark_held_locks+0xc7/0x130 [ 57.467111] cancel_work_sync+0xb/0x10 [ 57.467116] htb_destroy+0x20/0x4c0 [ 57.467120] ? htb_reset+0x2cd/0x4c0 [ 57.467130] qdisc_destroy+0x134/0x660 [ 57.467136] ? do_raw_spin_lock+0xc1/0x230 [ 57.467146] red_change+0x6ee/0x1790 [ 57.467157] ? red_enqueue+0x1670/0x1670 [ 57.467170] ? nla_strcmp+0x9b/0xe0 [ 57.467176] tc_modify_qdisc+0xc2f/0x18f4 [ 57.467182] ? rtnetlink_rcv_msg+0x301/0x8f0 [ 57.467190] ? qdisc_create+0xf60/0xf60 [ 57.467196] ? find_held_lock+0x36/0x1d0 [ 57.467212] rtnetlink_rcv_msg+0x34f/0x8f0 [ 57.467218] ? rtnetlink_put_metrics+0x490/0x490 [ 57.467222] ? find_held_lock+0x36/0x1d0 [ 57.467231] netlink_rcv_skb+0x142/0x390 [ 57.467234] ? lock_downgrade+0x860/0x860 [ 57.467238] ? rtnetlink_put_metrics+0x490/0x490 [ 57.467242] ? netlink_ack+0x990/0x990 [ 57.467249] ? netlink_deliver_tap+0x182/0xb00 [ 57.467256] rtnetlink_rcv+0x10/0x20 [ 57.467259] netlink_unicast+0x445/0x640 [ 57.467266] ? netlink_attachskb+0x6d0/0x6d0 [ 57.467274] netlink_sendmsg+0x765/0xc50 [ 57.702825] ? netlink_unicast+0x640/0x640 [ 57.707042] ? copy_msghdr_from_user+0x20b/0x3e0 [ 57.712028] ? selinux_socket_sendmsg+0x31/0x40 [ 57.716720] ? netlink_unicast+0x640/0x640 [ 57.720960] sock_sendmsg+0xb5/0xf0 [ 57.724571] ___sys_sendmsg+0x647/0x950 [ 57.728784] ? find_held_lock+0x36/0x1d0 [ 57.733047] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 57.737865] ? __fget+0x278/0x400 [ 57.741320] ? kasan_check_read+0x11/0x20 [ 57.745462] ? __fget+0x295/0x400 [ 57.749042] ? ksys_dup3+0x2e0/0x2e0 [ 57.752775] ? find_held_lock+0x36/0x1d0 [ 57.757745] ? __fget_light+0x174/0x1e0 [ 57.761723] ? lock_downgrade+0x860/0x860 [ 57.765858] ? __fdget+0xe/0x10 [ 57.769121] __sys_sendmsg+0xd9/0x180 [ 57.773009] ? __ia32_sys_shutdown+0x70/0x70 [ 57.777411] ? kasan_check_read+0x11/0x20 [ 57.781557] ? _copy_to_user+0x91/0xb0 [ 57.785431] ? put_timespec64+0xa9/0x100 [ 57.790172] ? nsecs_to_jiffies+0x20/0x20 [ 57.794307] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.799655] __x64_sys_sendmsg+0x73/0xb0 [ 57.803799] do_syscall_64+0xd0/0x4e0 [ 57.807584] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.812767] RIP: 0033:0x459a59 [ 57.815941] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.835428] RSP: 002b:00007fc1dab15c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.843144] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 57.850484] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 57.857754] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 57.866516] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc1dab166d4 [ 57.873871] R13: 00000000004c7c0c R14: 00000000004ddad8 R15: 00000000ffffffff [ 57.896663] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 57.905068] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.913485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.933050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.959502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 57.974630] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 57.994891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.017518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.027674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.037146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.045272] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.051648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.062298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 58.071655] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.078925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.094807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.106506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.114265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.122915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.131246] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.137653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.148205] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 58.155125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.174218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 58.193173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.228911] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 58.249073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.276633] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 58.311602] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 58.328683] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 58.336271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.345147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.353457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.361778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.369425] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.380523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.389533] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 58.403610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 2019/12/12 18:31:50 executed programs: 17 [ 58.411476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.423791] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 58.433742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.445087] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 58.451636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.460016] BUG: sleeping function called from invalid context at kernel/workqueue.c:2856 [ 58.468437] in_atomic(): 1, irqs_disabled(): 0, pid: 7294, name: syz-executor.4 [ 58.475952] 2 locks held by syz-executor.4/7294: [ 58.480720] #0: 000000008198e5fd (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x301/0x8f0 [ 58.488913] #1: 00000000647f8701 (&qdisc_rx_lock){+...}, at: red_change+0x388/0x1790 [ 58.496949] Preemption disabled at: [ 58.496961] [] red_change+0x388/0x1790 [ 58.506441] CPU: 0 PID: 7294 Comm: syz-executor.4 Tainted: G W 4.19.88-syzkaller #0 [ 58.515531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.525406] Call Trace: [ 58.528721] dump_stack+0x123/0x177 [ 58.532472] ? red_change+0x388/0x1790 [ 58.536889] ___might_sleep.cold.88+0x1bb/0x1f4 [ 58.541966] __might_sleep+0x95/0x190 [ 58.546192] __flush_work+0xbd/0x7f0 [ 58.549894] ? save_stack+0x43/0xd0 [ 58.553504] ? __kasan_slab_free+0x102/0x150 [ 58.557910] ? kasan_slab_free+0xe/0x10 [ 58.562009] ? insert_work+0x350/0x350 [ 58.565907] ? mark_held_locks+0xc7/0x130 [ 58.570188] ? try_to_grab_pending+0xaf/0x5e0 [ 58.574702] ? __cancel_work_timer+0x14f/0x430 [ 58.579272] ? cancel_work_sync+0xb/0x10 [ 58.583555] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 58.588581] ? __cancel_work_timer+0x14f/0x430 [ 58.593280] ? trace_hardirqs_on+0x28/0x190 [ 58.597608] __cancel_work_timer+0x2f1/0x430 [ 58.602097] ? try_to_grab_pending+0x5e0/0x5e0 [ 58.606691] ? hrtimer_try_to_cancel+0x6c/0x510 [ 58.611426] ? hrtimer_run_softirq+0x250/0x250 [ 58.615999] ? mark_held_locks+0xc7/0x130 [ 58.620753] cancel_work_sync+0xb/0x10 [ 58.625606] htb_destroy+0x20/0x4c0 [ 58.629679] ? htb_reset+0x2cd/0x4c0 [ 58.633868] qdisc_destroy+0x134/0x660 [ 58.637964] ? do_raw_spin_lock+0xc1/0x230 [ 58.643298] red_change+0x6ee/0x1790 [ 58.647022] ? red_enqueue+0x1670/0x1670 [ 58.651340] ? nla_strcmp+0x9b/0xe0 [ 58.655068] tc_modify_qdisc+0xc2f/0x18f4 [ 58.659618] ? rtnetlink_rcv_msg+0x301/0x8f0 [ 58.664131] ? qdisc_create+0xf60/0xf60 [ 58.669149] ? find_held_lock+0x36/0x1d0 [ 58.673980] rtnetlink_rcv_msg+0x34f/0x8f0 [ 58.678503] ? rtnetlink_put_metrics+0x490/0x490 [ 58.683676] ? find_held_lock+0x36/0x1d0 [ 58.688867] netlink_rcv_skb+0x142/0x390 [ 58.693106] ? lock_downgrade+0x860/0x860 [ 58.697243] ? rtnetlink_put_metrics+0x490/0x490 [ 58.702148] ? netlink_ack+0x990/0x990 [ 58.706167] ? netlink_deliver_tap+0x182/0xb00 [ 58.710809] rtnetlink_rcv+0x10/0x20 [ 58.714522] netlink_unicast+0x445/0x640 [ 58.718571] ? netlink_attachskb+0x6d0/0x6d0 [ 58.722993] netlink_sendmsg+0x765/0xc50 [ 58.727129] ? netlink_unicast+0x640/0x640 [ 58.731345] ? copy_msghdr_from_user+0x20b/0x3e0 [ 58.736088] ? selinux_socket_sendmsg+0x31/0x40 [ 58.740774] ? netlink_unicast+0x640/0x640 [ 58.745205] sock_sendmsg+0xb5/0xf0 [ 58.748832] ___sys_sendmsg+0x647/0x950 [ 58.752799] ? find_held_lock+0x36/0x1d0 [ 58.756874] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 58.761751] ? __fget+0x278/0x400 [ 58.765203] ? kasan_check_read+0x11/0x20 [ 58.769751] ? __fget+0x295/0x400 [ 58.773255] ? ksys_dup3+0x2e0/0x2e0 [ 58.776963] ? find_held_lock+0x36/0x1d0 [ 58.781026] ? __fget_light+0x174/0x1e0 [ 58.785001] ? lock_downgrade+0x860/0x860 [ 58.789223] ? __fdget+0xe/0x10 [ 58.792498] __sys_sendmsg+0xd9/0x180 [ 58.796289] ? __ia32_sys_shutdown+0x70/0x70 [ 58.800826] ? kasan_check_read+0x11/0x20 [ 58.804969] ? _copy_to_user+0x91/0xb0 [ 58.808951] ? put_timespec64+0xa9/0x100 [ 58.813013] ? nsecs_to_jiffies+0x20/0x20 [ 58.817174] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.822556] __x64_sys_sendmsg+0x73/0xb0 [ 58.826630] do_syscall_64+0xd0/0x4e0 [ 58.830426] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.835608] RIP: 0033:0x459a59 [ 58.838780] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 58.857701] RSP: 002b:00007fc1dab36c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.865407] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 58.872675] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 58.879946] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 58.887213] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc1dab376d4 [ 58.894471] R13: 00000000004c7c0c R14: 00000000004ddad8 R15: 00000000ffffffff [ 58.911086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.936762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.958818] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 58.994120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.452239] BUG: sleeping function called from invalid context at kernel/workqueue.c:2856 [ 59.460950] in_atomic(): 1, irqs_disabled(): 0, pid: 7406, name: syz-executor.1 [ 59.468438] 2 locks held by syz-executor.1/7406: [ 59.473263] #0: 000000008198e5fd (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x301/0x8f0 [ 59.481473] #1: 00000000b63699bc (&qdisc_rx_lock){+...}, at: red_change+0x388/0x1790 [ 59.489497] Preemption disabled at: [ 59.489515] [] red_change+0x388/0x1790 [ 59.498710] CPU: 0 PID: 7406 Comm: syz-executor.1 Tainted: G W 4.19.88-syzkaller #0 [ 59.507808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.517335] Call Trace: [ 59.519920] dump_stack+0x123/0x177 [ 59.523552] ? red_change+0x388/0x1790 [ 59.527652] ___might_sleep.cold.88+0x1bb/0x1f4 [ 59.527664] __might_sleep+0x95/0x190 [ 59.527673] __flush_work+0xbd/0x7f0 [ 59.527683] ? save_stack+0x43/0xd0 [ 59.527687] ? __kasan_slab_free+0x102/0x150 [ 59.527691] ? kasan_slab_free+0xe/0x10 [ 59.527696] ? insert_work+0x350/0x350 [ 59.527706] ? mark_held_locks+0xc7/0x130 [ 59.527711] ? try_to_grab_pending+0xaf/0x5e0 [ 59.527716] ? __cancel_work_timer+0x14f/0x430 [ 59.527720] ? cancel_work_sync+0xb/0x10 [ 59.527725] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 59.527729] ? __cancel_work_timer+0x14f/0x430 [ 59.527739] ? trace_hardirqs_on+0x28/0x190 [ 59.536248] __cancel_work_timer+0x2f1/0x430 [ 59.536256] ? try_to_grab_pending+0x5e0/0x5e0 [ 59.536265] ? hrtimer_try_to_cancel+0x6c/0x510 [ 59.536272] ? hrtimer_run_softirq+0x250/0x250 [ 59.536278] ? mark_held_locks+0xc7/0x130 [ 59.536292] cancel_work_sync+0xb/0x10 [ 59.613884] htb_destroy+0x20/0x4c0 [ 59.617493] ? htb_reset+0x2cd/0x4c0 [ 59.621214] qdisc_destroy+0x134/0x660 [ 59.625180] ? do_raw_spin_lock+0xc1/0x230 [ 59.629415] red_change+0x6ee/0x1790 [ 59.633118] ? red_enqueue+0x1670/0x1670 [ 59.637176] ? nla_strcmp+0x9b/0xe0 [ 59.640991] tc_modify_qdisc+0xc2f/0x18f4 [ 59.645136] ? rtnetlink_rcv_msg+0x301/0x8f0 [ 59.649546] ? qdisc_create+0xf60/0xf60 [ 59.653514] ? find_held_lock+0x36/0x1d0 [ 59.657600] rtnetlink_rcv_msg+0x34f/0x8f0 [ 59.661902] ? rtnetlink_put_metrics+0x490/0x490 [ 59.666658] ? find_held_lock+0x36/0x1d0 [ 59.670719] netlink_rcv_skb+0x142/0x390 [ 59.674768] ? lock_downgrade+0x860/0x860 [ 59.678923] ? rtnetlink_put_metrics+0x490/0x490 [ 59.683687] ? netlink_ack+0x990/0x990 [ 59.687579] ? netlink_deliver_tap+0x182/0xb00 [ 59.692185] rtnetlink_rcv+0x10/0x20 [ 59.695908] netlink_unicast+0x445/0x640 [ 59.700025] ? netlink_attachskb+0x6d0/0x6d0 [ 59.704710] netlink_sendmsg+0x765/0xc50 [ 59.708771] ? netlink_unicast+0x640/0x640 [ 59.713549] ? copy_msghdr_from_user+0x20b/0x3e0 [ 59.718316] ? selinux_socket_sendmsg+0x31/0x40 [ 59.722986] ? netlink_unicast+0x640/0x640 [ 59.727221] sock_sendmsg+0xb5/0xf0 [ 59.730990] ___sys_sendmsg+0x647/0x950 [ 59.735101] ? find_held_lock+0x36/0x1d0 [ 59.739173] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 59.744030] ? __fget+0x278/0x400 [ 59.747491] ? kasan_check_read+0x11/0x20 [ 59.751631] ? __fget+0x295/0x400 [ 59.755093] ? ksys_dup3+0x2e0/0x2e0 [ 59.759753] ? find_held_lock+0x36/0x1d0 [ 59.764046] ? __fget_light+0x174/0x1e0 [ 59.768024] ? lock_downgrade+0x860/0x860 [ 59.772187] ? __fdget+0xe/0x10 [ 59.775458] __sys_sendmsg+0xd9/0x180 [ 59.779250] ? __ia32_sys_shutdown+0x70/0x70 [ 59.783658] ? kasan_check_read+0x11/0x20 [ 59.787812] ? _copy_to_user+0x91/0xb0 [ 59.791688] ? put_timespec64+0xa9/0x100 [ 59.795734] ? nsecs_to_jiffies+0x20/0x20 [ 59.799958] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.805510] __x64_sys_sendmsg+0x73/0xb0 [ 59.809795] do_syscall_64+0xd0/0x4e0 [ 59.813637] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.818826] RIP: 0033:0x459a59 [ 59.822027] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.841307] RSP: 002b:00007f7976f54c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.849136] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 59.856529] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 59.864284] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 59.871567] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7976f556d4 [ 59.878938] R13: 00000000004c7c0c R14: 00000000004ddad8 R15: 00000000ffffffff [ 60.461144] BUG: sleeping function called from invalid context at kernel/workqueue.c:2856 [ 60.469579] in_atomic(): 1, irqs_disabled(): 0, pid: 7550, name: syz-executor.2 [ 60.477088] 2 locks held by syz-executor.2/7550: [ 60.481890] #0: 000000008198e5fd (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x301/0x8f0 [ 60.490050] #1: 00000000dbe280e6 (&qdisc_rx_lock){+...}, at: red_change+0x388/0x1790 [ 60.498164] Preemption disabled at: [ 60.498177] [] red_change+0x388/0x1790 [ 60.507337] CPU: 1 PID: 7550 Comm: syz-executor.2 Tainted: G W 4.19.88-syzkaller #0 [ 60.516440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.526010] Call Trace: [ 60.528713] dump_stack+0x123/0x177 [ 60.532449] ? red_change+0x388/0x1790 [ 60.536345] ___might_sleep.cold.88+0x1bb/0x1f4 [ 60.541062] __might_sleep+0x95/0x190 [ 60.544864] __flush_work+0xbd/0x7f0 [ 60.548559] ? save_stack+0x43/0xd0 [ 60.553218] ? __kasan_slab_free+0x102/0x150 [ 60.557811] ? kasan_slab_free+0xe/0x10 [ 60.561783] ? insert_work+0x350/0x350 [ 60.565867] ? mark_held_locks+0xc7/0x130 [ 60.570525] ? try_to_grab_pending+0xaf/0x5e0 [ 60.575267] ? __cancel_work_timer+0x14f/0x430 [ 60.579956] ? cancel_work_sync+0xb/0x10 [ 60.584865] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 60.589446] ? __cancel_work_timer+0x14f/0x430 [ 60.594630] ? trace_hardirqs_on+0x28/0x190 [ 60.599526] __cancel_work_timer+0x2f1/0x430 [ 60.604840] ? try_to_grab_pending+0x5e0/0x5e0 [ 60.609886] ? hrtimer_try_to_cancel+0x6c/0x510 [ 60.614577] ? hrtimer_run_softirq+0x250/0x250 [ 60.619861] ? mark_held_locks+0xc7/0x130 [ 60.624018] cancel_work_sync+0xb/0x10 [ 60.627900] htb_destroy+0x20/0x4c0 [ 60.631516] ? htb_reset+0x2cd/0x4c0 [ 60.635281] qdisc_destroy+0x134/0x660 [ 60.639162] ? do_raw_spin_lock+0xc1/0x230 [ 60.643501] red_change+0x6ee/0x1790 [ 60.647385] ? red_enqueue+0x1670/0x1670 [ 60.651446] ? nla_strcmp+0x9b/0xe0 [ 60.655056] tc_modify_qdisc+0xc2f/0x18f4 [ 60.659205] ? rtnetlink_rcv_msg+0x301/0x8f0 [ 60.664117] ? qdisc_create+0xf60/0xf60 [ 60.668253] ? find_held_lock+0x36/0x1d0 [ 60.672346] rtnetlink_rcv_msg+0x34f/0x8f0 [ 60.676584] ? rtnetlink_put_metrics+0x490/0x490 [ 60.681334] ? find_held_lock+0x36/0x1d0 [ 60.685497] netlink_rcv_skb+0x142/0x390 [ 60.689540] ? lock_downgrade+0x860/0x860 [ 60.693780] ? rtnetlink_put_metrics+0x490/0x490 [ 60.698526] ? netlink_ack+0x990/0x990 [ 60.702852] ? netlink_deliver_tap+0x182/0xb00 [ 60.707525] rtnetlink_rcv+0x10/0x20 [ 60.711578] netlink_unicast+0x445/0x640 [ 60.715636] ? netlink_attachskb+0x6d0/0x6d0 [ 60.720121] netlink_sendmsg+0x765/0xc50 [ 60.724176] ? netlink_unicast+0x640/0x640 [ 60.728499] ? copy_msghdr_from_user+0x20b/0x3e0 [ 60.733249] ? selinux_socket_sendmsg+0x31/0x40 [ 60.737913] ? netlink_unicast+0x640/0x640 [ 60.742157] sock_sendmsg+0xb5/0xf0 [ 60.745880] ___sys_sendmsg+0x647/0x950 [ 60.749855] ? find_held_lock+0x36/0x1d0 [ 60.754468] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 60.759221] ? __fget+0x278/0x400 [ 60.762676] ? kasan_check_read+0x11/0x20 [ 60.767619] ? __fget+0x295/0x400 [ 60.771099] ? ksys_dup3+0x2e0/0x2e0 [ 60.775072] ? find_held_lock+0x36/0x1d0 [ 60.779142] ? __fget_light+0x174/0x1e0 [ 60.783224] ? lock_downgrade+0x860/0x860 [ 60.787378] ? __fdget+0xe/0x10 [ 60.791551] __sys_sendmsg+0xd9/0x180 [ 60.795648] ? __ia32_sys_shutdown+0x70/0x70 [ 60.800577] ? kasan_check_read+0x11/0x20 [ 60.804979] ? _copy_to_user+0x91/0xb0 [ 60.808877] ? put_timespec64+0xa9/0x100 [ 60.813118] ? nsecs_to_jiffies+0x20/0x20 [ 60.820161] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.825636] __x64_sys_sendmsg+0x73/0xb0 [ 60.830012] do_syscall_64+0xd0/0x4e0 [ 60.833821] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.839041] RIP: 0033:0x459a59 [ 60.842224] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 60.861527] RSP: 002b:00007f1065e14c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.869496] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 60.876766] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 60.885161] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 60.892453] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1065e156d4 [ 60.900411] R13: 00000000004c7c0c R14: 00000000004ddad8 R15: 00000000ffffffff 2019/12/12 18:31:55 executed programs: 238