syzkaller login: [ 31.816455] kauditd_printk_skb: 9 callbacks suppressed [ 31.816460] audit: type=1400 audit(1578774631.240:35): avc: denied { map } for pid=6920 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 38.123416] audit: type=1400 audit(1578774637.550:36): avc: denied { map } for pid=6931 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 38.880706] IPVS: ftp: loaded support on port[0] = 21 [ 39.277833] can: request_module (can-proto-0) failed. [ 40.427848] can: request_module (can-proto-0) failed. [ 40.582394] audit: type=1400 audit(1578774640.010:37): avc: denied { create } for pid=6931 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 40.606280] audit: type=1400 audit(1578774640.010:38): avc: denied { create } for pid=6931 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 40.629877] audit: type=1400 audit(1578774640.010:39): avc: denied { create } for pid=6931 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.10.36' (ECDSA) to the list of known hosts. 2020/01/11 20:30:46 parsed 1 programs 2020/01/11 20:30:47 executed programs: 0 [ 47.951279] IPVS: ftp: loaded support on port[0] = 21 [ 47.953108] IPVS: ftp: loaded support on port[0] = 21 [ 47.991124] IPVS: ftp: loaded support on port[0] = 21 [ 48.017072] IPVS: ftp: loaded support on port[0] = 21 [ 48.017076] IPVS: ftp: loaded support on port[0] = 21 [ 48.038818] IPVS: ftp: loaded support on port[0] = 21 [ 48.193060] chnl_net:caif_netlink_parms(): no params data found [ 48.246192] chnl_net:caif_netlink_parms(): no params data found [ 48.271679] chnl_net:caif_netlink_parms(): no params data found [ 48.307633] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.315310] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.323206] device bridge_slave_0 entered promiscuous mode [ 48.330782] chnl_net:caif_netlink_parms(): no params data found [ 48.363440] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.370258] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.378121] device bridge_slave_1 entered promiscuous mode [ 48.415209] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.422177] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.429266] device bridge_slave_0 entered promiscuous mode [ 48.438510] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.445081] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.452381] device bridge_slave_1 entered promiscuous mode [ 48.460055] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.498864] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.509886] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.520993] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.535821] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.544531] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.552416] device bridge_slave_0 entered promiscuous mode [ 48.560576] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.566927] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.573899] device bridge_slave_1 entered promiscuous mode [ 48.597118] chnl_net:caif_netlink_parms(): no params data found [ 48.621670] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.628044] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.635117] device bridge_slave_0 entered promiscuous mode [ 48.644196] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.650679] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.657656] device bridge_slave_1 entered promiscuous mode [ 48.668571] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.676786] team0: Port device team_slave_0 added [ 48.683235] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.690779] team0: Port device team_slave_1 added [ 48.704501] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.713130] team0: Port device team_slave_0 added [ 48.718602] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.726051] team0: Port device team_slave_1 added [ 48.741850] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.749787] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.775241] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.783972] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.797711] chnl_net:caif_netlink_parms(): no params data found [ 48.807290] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.815177] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.822264] device bridge_slave_0 entered promiscuous mode [ 48.828652] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.838639] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.846873] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.861735] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.868073] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.875116] device bridge_slave_1 entered promiscuous mode [ 48.894256] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.907167] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.915735] team0: Port device team_slave_0 added [ 48.928791] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.948562] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.957489] team0: Port device team_slave_0 added [ 49.002240] device hsr_slave_0 entered promiscuous mode [ 49.060009] device hsr_slave_1 entered promiscuous mode [ 49.104107] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.111617] team0: Port device team_slave_1 added [ 49.117506] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.192049] device hsr_slave_0 entered promiscuous mode [ 49.230688] device hsr_slave_1 entered promiscuous mode [ 49.300132] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.307317] team0: Port device team_slave_1 added [ 49.312825] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.319727] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.330937] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.348567] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.355679] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.362600] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.373910] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.385165] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.405436] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.412561] team0: Port device team_slave_0 added [ 49.426997] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.434206] team0: Port device team_slave_1 added [ 49.443095] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.450497] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.457438] device bridge_slave_0 entered promiscuous mode [ 49.467577] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.474230] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.481828] device bridge_slave_1 entered promiscuous mode [ 49.488924] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.497389] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.506083] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.561105] device hsr_slave_0 entered promiscuous mode [ 49.599848] device hsr_slave_1 entered promiscuous mode [ 49.701128] device hsr_slave_0 entered promiscuous mode [ 49.739908] device hsr_slave_1 entered promiscuous mode [ 49.803730] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.813055] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 49.824692] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.835250] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.842279] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.911194] device hsr_slave_0 entered promiscuous mode [ 49.959960] device hsr_slave_1 entered promiscuous mode [ 50.010785] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.018512] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.035477] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.043629] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.079971] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.088170] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.095330] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.104809] team0: Port device team_slave_0 added [ 50.112472] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.130865] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.138072] team0: Port device team_slave_1 added [ 50.144422] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.155020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.167414] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.231441] device hsr_slave_0 entered promiscuous mode [ 50.279997] device hsr_slave_1 entered promiscuous mode [ 50.343209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.350421] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.359876] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.371809] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.385560] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.396123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.409400] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.416427] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.427049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.435540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.452006] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.461201] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.471016] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.477080] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.485134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.492328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.504824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.512230] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.520792] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.526864] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.538911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.547666] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.554011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.561743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.570895] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.580476] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.591134] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.599003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.607513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.615745] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.622242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.629225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.638217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.645885] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.652250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.659187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.667616] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.677369] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.685764] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.692484] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.702028] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.712529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.720320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.727852] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.734226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.741596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.749208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.756495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.763772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.773719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.782116] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.789514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.798500] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.804810] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.811711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.819378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.827088] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.833454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.840562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.847425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.854331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.862286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.869920] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.876306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.885382] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.892176] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.900095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 50.908251] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 50.919270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.927554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.935744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.943758] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.950141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.957092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.968083] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.977014] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 50.985347] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 50.994202] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.001678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.009365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.019411] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.026069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.033723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.041438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.049109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.057024] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.063401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.071311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.079775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.086827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.095852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.104121] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.112592] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.120991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.128715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.136966] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.143366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.150664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.158360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.166126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.174187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.181798] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.188140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.195337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.204853] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.216429] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.225025] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.233161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.241760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.251398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.261524] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.272272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.280054] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.289044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.304283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.312466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.320807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.328569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.336086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.343758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.354152] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.363759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.372881] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.380834] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.389778] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.399136] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.406496] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.413911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.421561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.429193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.437051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.445077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.452641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.460467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.467884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.475999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.483754] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.490666] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.497504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.506813] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.521921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.529466] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.540701] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.546873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.556028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.563624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.571636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.579011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.586768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.595400] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.603368] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.612822] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.621814] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.627833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.638469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.648628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.656509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.664318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.671950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.679382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.688789] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.697677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.706845] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.715631] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.723164] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.734633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.743164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.751213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.758683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.766415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.774137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.781606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.789029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.796820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.803862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.813188] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.821989] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.831826] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.837848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.847167] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.856507] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 51.866178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.874294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.881791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.889223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.896672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.904387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.913361] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.919380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.933220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.940501] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 51.947919] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.954962] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.963228] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.969259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.976942] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 51.985532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.997660] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.007788] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.008391] audit: type=1400 audit(1578774651.430:40): avc: denied { associate } for pid=7035 comm="syz-executor.4" name="syz4" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 52.024173] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.054814] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.072959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.093282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.100851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.108613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.119426] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.125877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.135680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.145266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.156519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.168913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.183153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.192296] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.198667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.205800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.215496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.226601] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.237384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.246151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.254450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.262771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.270870] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.282366] BUG: sleeping function called from invalid context at kernel/workqueue.c:2862 [ 52.290873] in_atomic(): 1, irqs_disabled(): 0, pid: 7051, name: syz-executor.4 [ 52.298313] 2 locks held by syz-executor.4/7051: [ 52.303105] #0: 00000000dcf8d870 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x301/0x8f0 [ 52.311292] #1: 00000000f71ef8cd (&qdisc_rx_lock){+...}, at: red_change+0x388/0x1790 [ 52.319271] Preemption disabled at: [ 52.319282] [] red_change+0x388/0x1790 [ 52.328422] CPU: 1 PID: 7051 Comm: syz-executor.4 Not tainted 4.19.94-syzkaller #0 [ 52.336170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.345509] Call Trace: [ 52.348084] dump_stack+0x123/0x177 [ 52.351699] ? red_change+0x388/0x1790 [ 52.355577] ___might_sleep.cold.88+0x1bb/0x1f4 [ 52.360231] __might_sleep+0x95/0x190 [ 52.364015] __flush_work+0xbd/0x7f0 [ 52.367713] ? save_stack+0x43/0xd0 [ 52.371348] ? __kasan_slab_free+0x102/0x150 [ 52.375736] ? kasan_slab_free+0xe/0x10 [ 52.379699] ? insert_work+0x350/0x350 [ 52.383575] ? mark_held_locks+0xc7/0x130 [ 52.387715] ? try_to_grab_pending+0xaf/0x5e0 [ 52.392191] ? __cancel_work_timer+0x14f/0x430 [ 52.396755] ? cancel_work_sync+0xb/0x10 [ 52.400816] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 52.405380] ? __cancel_work_timer+0x14f/0x430 [ 52.409942] ? trace_hardirqs_on+0x28/0x190 [ 52.414245] __cancel_work_timer+0x2f1/0x430 [ 52.418636] ? try_to_grab_pending+0x5e0/0x5e0 [ 52.423201] ? hrtimer_try_to_cancel+0x6c/0x510 [ 52.429676] ? hrtimer_run_softirq+0x250/0x250 [ 52.434243] ? mark_held_locks+0xc7/0x130 [ 52.438381] cancel_work_sync+0xb/0x10 [ 52.442253] htb_destroy+0x20/0x4c0 [ 52.445866] ? htb_reset+0x2cd/0x4c0 [ 52.449569] qdisc_destroy+0x134/0x660 [ 52.453435] ? do_raw_spin_lock+0xc1/0x230 [ 52.457856] red_change+0x6ee/0x1790 [ 52.461663] ? red_enqueue+0x1670/0x1670 [ 52.465724] ? nla_strcmp+0x9b/0xe0 [ 52.469366] tc_modify_qdisc+0xc2f/0x18f4 [ 52.473590] ? rtnetlink_rcv_msg+0x301/0x8f0 [ 52.478004] ? qdisc_create+0xf60/0xf60 [ 52.481979] ? find_held_lock+0x36/0x1d0 [ 52.486039] rtnetlink_rcv_msg+0x34f/0x8f0 [ 52.490262] ? rtnetlink_put_metrics+0x490/0x490 [ 52.495011] ? find_held_lock+0x36/0x1d0 [ 52.499069] netlink_rcv_skb+0x142/0x390 [ 52.503129] ? lock_downgrade+0x860/0x860 [ 52.507278] ? rtnetlink_put_metrics+0x490/0x490 [ 52.512029] ? netlink_ack+0x990/0x990 [ 52.515900] ? netlink_deliver_tap+0x182/0xb00 [ 52.520481] rtnetlink_rcv+0x10/0x20 [ 52.524178] netlink_unicast+0x445/0x640 [ 52.528485] ? netlink_attachskb+0x6d0/0x6d0 [ 52.532895] netlink_sendmsg+0x765/0xc50 [ 52.536954] ? netlink_unicast+0x640/0x640 [ 52.541271] ? copy_msghdr_from_user+0x20b/0x3e0 [ 52.546025] ? selinux_socket_sendmsg+0x31/0x40 [ 52.550698] ? netlink_unicast+0x640/0x640 [ 52.554916] sock_sendmsg+0xb5/0xf0 [ 52.558534] ___sys_sendmsg+0x647/0x950 [ 52.562493] ? find_held_lock+0x36/0x1d0 [ 52.566541] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 52.571296] ? __fget+0x278/0x400 [ 52.574752] ? kasan_check_read+0x11/0x20 [ 52.578884] ? __fget+0x295/0x400 [ 52.582326] ? ksys_dup3+0x2e0/0x2e0 [ 52.586039] ? find_held_lock+0x36/0x1d0 [ 52.590283] ? __fget_light+0x174/0x1e0 [ 52.594239] ? lock_downgrade+0x860/0x860 [ 52.598378] ? __fdget+0xe/0x10 [ 52.601644] __sys_sendmsg+0xd9/0x180 [ 52.605427] ? __ia32_sys_shutdown+0x70/0x70 [ 52.609817] ? kasan_check_read+0x11/0x20 [ 52.613966] ? _copy_to_user+0x91/0xb0 [ 52.617840] ? put_timespec64+0xa9/0x100 [ 52.622158] ? nsecs_to_jiffies+0x20/0x20 [ 52.626311] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.631664] __x64_sys_sendmsg+0x73/0xb0 [ 52.635799] do_syscall_64+0xd0/0x4e0 [ 52.639586] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.644861] RIP: 0033:0x459a59 [ 52.648043] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 52.667048] RSP: 002b:00007f7a781f4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.674771] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 52.682027] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 52.689282] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 52.696535] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7a781f56d4 [ 52.703789] R13: 00000000004c7c0c R14: 00000000004ddad8 R15: 00000000ffffffff [ 52.719132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.757168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.785101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.797935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.831059] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.862281] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.883676] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.904752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.917094] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.924294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 2020/01/11 20:30:52 executed programs: 9 [ 52.932068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.940603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.948093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.956074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.989417] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 53.048359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.295752] BUG: sleeping function called from invalid context at kernel/workqueue.c:2862 [ 53.304187] in_atomic(): 1, irqs_disabled(): 0, pid: 7144, name: syz-executor.0 [ 53.311714] 2 locks held by syz-executor.0/7144: [ 53.316709] #0: 00000000dcf8d870 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x301/0x8f0 [ 53.324936] #1: 00000000060ef11b (&qdisc_rx_lock){+...}, at: red_change+0x388/0x1790 [ 53.332973] Preemption disabled at: [ 53.332987] [] red_change+0x388/0x1790 [ 53.342132] CPU: 1 PID: 7144 Comm: syz-executor.0 Tainted: G W 4.19.94-syzkaller #0 [ 53.351231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.360586] Call Trace: [ 53.363182] dump_stack+0x123/0x177 [ 53.366812] ? red_change+0x388/0x1790 [ 53.370717] ___might_sleep.cold.88+0x1bb/0x1f4 [ 53.375419] __might_sleep+0x95/0x190 [ 53.379209] __flush_work+0xbd/0x7f0 [ 53.382907] ? save_stack+0x43/0xd0 [ 53.386533] ? __kasan_slab_free+0x102/0x150 [ 53.390936] ? kasan_slab_free+0xe/0x10 [ 53.394906] ? insert_work+0x350/0x350 [ 53.399124] ? mark_held_locks+0xc7/0x130 [ 53.403266] ? try_to_grab_pending+0xaf/0x5e0 [ 53.408562] ? __cancel_work_timer+0x14f/0x430 [ 53.413151] ? cancel_work_sync+0xb/0x10 [ 53.418326] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 53.422899] ? __cancel_work_timer+0x14f/0x430 [ 53.427471] ? trace_hardirqs_on+0x28/0x190 [ 53.431785] __cancel_work_timer+0x2f1/0x430 [ 53.436180] ? try_to_grab_pending+0x5e0/0x5e0 [ 53.440916] ? hrtimer_try_to_cancel+0x6c/0x510 [ 53.445577] ? hrtimer_run_softirq+0x250/0x250 [ 53.450141] ? mark_held_locks+0xc7/0x130 [ 53.454279] cancel_work_sync+0xb/0x10 [ 53.458176] htb_destroy+0x20/0x4c0 [ 53.461815] ? htb_reset+0x2cd/0x4c0 [ 53.465515] qdisc_destroy+0x134/0x660 [ 53.469386] ? do_raw_spin_lock+0xc1/0x230 [ 53.473615] red_change+0x6ee/0x1790 [ 53.477347] ? red_enqueue+0x1670/0x1670 [ 53.481405] ? nla_strcmp+0x9b/0xe0 [ 53.485017] tc_modify_qdisc+0xc2f/0x18f4 [ 53.489371] ? rtnetlink_rcv_msg+0x301/0x8f0 [ 53.493768] ? qdisc_create+0xf60/0xf60 [ 53.497775] ? find_held_lock+0x36/0x1d0 [ 53.501829] rtnetlink_rcv_msg+0x34f/0x8f0 [ 53.506074] ? rtnetlink_put_metrics+0x490/0x490 [ 53.510832] ? find_held_lock+0x36/0x1d0 [ 53.514885] netlink_rcv_skb+0x142/0x390 [ 53.518932] ? lock_downgrade+0x860/0x860 [ 53.523080] ? rtnetlink_put_metrics+0x490/0x490 [ 53.527829] ? netlink_ack+0x990/0x990 [ 53.531708] ? netlink_deliver_tap+0x182/0xb00 [ 53.536289] rtnetlink_rcv+0x10/0x20 [ 53.539994] netlink_unicast+0x445/0x640 [ 53.544115] ? netlink_attachskb+0x6d0/0x6d0 [ 53.548545] netlink_sendmsg+0x765/0xc50 [ 53.552701] ? netlink_unicast+0x640/0x640 [ 53.556946] ? copy_msghdr_from_user+0x20b/0x3e0 [ 53.561698] ? selinux_socket_sendmsg+0x31/0x40 [ 53.566361] ? netlink_unicast+0x640/0x640 [ 53.570612] sock_sendmsg+0xb5/0xf0 [ 53.574227] ___sys_sendmsg+0x647/0x950 [ 53.578186] ? find_held_lock+0x36/0x1d0 [ 53.582233] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 53.586979] ? __fget+0x278/0x400 [ 53.590422] ? kasan_check_read+0x11/0x20 [ 53.594557] ? __fget+0x295/0x400 [ 53.598002] ? ksys_dup3+0x2e0/0x2e0 [ 53.601701] ? find_held_lock+0x36/0x1d0 [ 53.605747] ? __fget_light+0x174/0x1e0 [ 53.609706] ? lock_downgrade+0x860/0x860 [ 53.613874] ? __fdget+0xe/0x10 [ 53.617137] __sys_sendmsg+0xd9/0x180 [ 53.620927] ? __ia32_sys_shutdown+0x70/0x70 [ 53.625329] ? kasan_check_read+0x11/0x20 [ 53.629473] ? _copy_to_user+0x91/0xb0 [ 53.633364] ? put_timespec64+0xa9/0x100 [ 53.637413] ? nsecs_to_jiffies+0x20/0x20 [ 53.641575] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.646929] __x64_sys_sendmsg+0x73/0xb0 [ 53.651026] do_syscall_64+0xd0/0x4e0 [ 53.654821] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.659998] RIP: 0033:0x459a59 [ 53.663183] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 53.682071] RSP: 002b:00007fad28a49c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.689777] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 53.697123] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 53.704745] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 53.712000] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad28a4a6d4 [ 53.719266] R13: 00000000004c7c0c R14: 00000000004ddad8 R15: 00000000ffffffff [ 54.296047] BUG: sleeping function called from invalid context at kernel/workqueue.c:2862 [ 54.304443] in_atomic(): 1, irqs_disabled(): 0, pid: 7297, name: syz-executor.5 [ 54.312115] 2 locks held by syz-executor.5/7297: [ 54.316985] #0: 00000000dcf8d870 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x301/0x8f0 [ 54.325202] #1: 00000000459bbd59 (&qdisc_rx_lock){+...}, at: red_change+0x388/0x1790 [ 54.333232] Preemption disabled at: [ 54.333241] [] red_change+0x388/0x1790 [ 54.342369] CPU: 1 PID: 7297 Comm: syz-executor.5 Tainted: G W 4.19.94-syzkaller #0 [ 54.351462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.360815] Call Trace: [ 54.363402] dump_stack+0x123/0x177 [ 54.367026] ? red_change+0x388/0x1790 [ 54.370917] ___might_sleep.cold.88+0x1bb/0x1f4 [ 54.375597] __might_sleep+0x95/0x190 [ 54.379386] __flush_work+0xbd/0x7f0 [ 54.383088] ? save_stack+0x43/0xd0 [ 54.386701] ? __kasan_slab_free+0x102/0x150 [ 54.391119] ? kasan_slab_free+0xe/0x10 [ 54.395088] ? insert_work+0x350/0x350 [ 54.398989] ? mark_held_locks+0xc7/0x130 [ 54.403146] ? try_to_grab_pending+0xaf/0x5e0 [ 54.407674] ? __cancel_work_timer+0x14f/0x430 [ 54.412251] ? cancel_work_sync+0xb/0x10 [ 54.416309] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 54.420879] ? __cancel_work_timer+0x14f/0x430 [ 54.425449] ? trace_hardirqs_on+0x28/0x190 [ 54.429762] __cancel_work_timer+0x2f1/0x430 [ 54.434159] ? try_to_grab_pending+0x5e0/0x5e0 [ 54.438742] ? hrtimer_try_to_cancel+0x6c/0x510 [ 54.443397] ? hrtimer_run_softirq+0x250/0x250 [ 54.447975] ? mark_held_locks+0xc7/0x130 [ 54.452122] cancel_work_sync+0xb/0x10 [ 54.455998] htb_destroy+0x20/0x4c0 [ 54.459609] ? htb_reset+0x2cd/0x4c0 [ 54.463311] qdisc_destroy+0x134/0x660 [ 54.467290] ? do_raw_spin_lock+0xc1/0x230 [ 54.471511] red_change+0x6ee/0x1790 [ 54.475226] ? red_enqueue+0x1670/0x1670 [ 54.479278] ? nla_strcmp+0x9b/0xe0 [ 54.482893] tc_modify_qdisc+0xc2f/0x18f4 [ 54.487030] ? rtnetlink_rcv_msg+0x301/0x8f0 [ 54.491423] ? qdisc_create+0xf60/0xf60 [ 54.495380] ? find_held_lock+0x36/0x1d0 [ 54.499443] rtnetlink_rcv_msg+0x34f/0x8f0 [ 54.503667] ? rtnetlink_put_metrics+0x490/0x490 [ 54.508421] ? find_held_lock+0x36/0x1d0 [ 54.512483] netlink_rcv_skb+0x142/0x390 [ 54.516526] ? lock_downgrade+0x860/0x860 [ 54.520656] ? rtnetlink_put_metrics+0x490/0x490 [ 54.525396] ? netlink_ack+0x990/0x990 [ 54.529274] ? netlink_deliver_tap+0x182/0xb00 [ 54.533839] rtnetlink_rcv+0x10/0x20 [ 54.537535] netlink_unicast+0x445/0x640 [ 54.541592] ? netlink_attachskb+0x6d0/0x6d0 [ 54.546072] netlink_sendmsg+0x765/0xc50 [ 54.550131] ? netlink_unicast+0x640/0x640 [ 54.554365] ? copy_msghdr_from_user+0x20b/0x3e0 [ 54.559114] ? selinux_socket_sendmsg+0x31/0x40 [ 54.563767] ? netlink_unicast+0x640/0x640 [ 54.567985] sock_sendmsg+0xb5/0xf0 [ 54.571596] ___sys_sendmsg+0x647/0x950 [ 54.575554] ? find_held_lock+0x36/0x1d0 [ 54.579602] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 54.584361] ? __fget+0x278/0x400 [ 54.587934] ? kasan_check_read+0x11/0x20 [ 54.592246] ? __fget+0x295/0x400 [ 54.595698] ? ksys_dup3+0x2e0/0x2e0 [ 54.599409] ? find_held_lock+0x36/0x1d0 [ 54.603484] ? __fget_light+0x174/0x1e0 [ 54.607460] ? lock_downgrade+0x860/0x860 [ 54.611606] ? __fdget+0xe/0x10 [ 54.614887] __sys_sendmsg+0xd9/0x180 [ 54.619049] ? __ia32_sys_shutdown+0x70/0x70 [ 54.623454] ? kasan_check_read+0x11/0x20 [ 54.627595] ? _copy_to_user+0x91/0xb0 [ 54.631470] ? put_timespec64+0xa9/0x100 [ 54.635514] ? nsecs_to_jiffies+0x20/0x20 [ 54.639750] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.645102] __x64_sys_sendmsg+0x73/0xb0 [ 54.649158] do_syscall_64+0xd0/0x4e0 [ 54.652963] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.658144] RIP: 0033:0x459a59 [ 54.661322] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.680227] RSP: 002b:00007f56d325fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.687930] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 54.695192] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 54.702475] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 54.709731] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56d32606d4 [ 54.716999] R13: 00000000004c7c0c R14: 00000000004ddad8 R15: 00000000ffffffff [ 55.308831] BUG: sleeping function called from invalid context at kernel/workqueue.c:2862 [ 55.317231] in_atomic(): 1, irqs_disabled(): 0, pid: 7449, name: syz-executor.3 [ 55.324828] 2 locks held by syz-executor.3/7449: [ 55.329607] #0: 00000000dcf8d870 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x301/0x8f0 [ 55.337756] #1: 000000005af9f395 (&qdisc_rx_lock){+...}, at: red_change+0x388/0x1790 [ 55.347996] Preemption disabled at: [ 55.348008] [] red_change+0x388/0x1790 [ 55.357160] CPU: 1 PID: 7449 Comm: syz-executor.3 Tainted: G W 4.19.94-syzkaller #0 [ 55.366249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.375649] Call Trace: [ 55.378234] dump_stack+0x123/0x177 [ 55.381863] ? red_change+0x388/0x1790 [ 55.385799] ___might_sleep.cold.88+0x1bb/0x1f4 [ 55.390509] __might_sleep+0x95/0x190 [ 55.394316] __flush_work+0xbd/0x7f0 [ 55.398014] ? save_stack+0x43/0xd0 [ 55.401635] ? __kasan_slab_free+0x102/0x150 [ 55.406033] ? kasan_slab_free+0xe/0x10 [ 55.409994] ? insert_work+0x350/0x350 [ 55.413874] ? mark_held_locks+0xc7/0x130 [ 55.418005] ? try_to_grab_pending+0xaf/0x5e0 [ 55.422485] ? __cancel_work_timer+0x14f/0x430 [ 55.427052] ? cancel_work_sync+0xb/0x10 [ 55.431111] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 55.435690] ? __cancel_work_timer+0x14f/0x430 [ 55.440290] ? trace_hardirqs_on+0x28/0x190 [ 55.444662] __cancel_work_timer+0x2f1/0x430 [ 55.449061] ? try_to_grab_pending+0x5e0/0x5e0 [ 55.453848] ? hrtimer_try_to_cancel+0x6c/0x510 [ 55.458540] ? hrtimer_run_softirq+0x250/0x250 [ 55.463124] ? mark_held_locks+0xc7/0x130 [ 55.467403] cancel_work_sync+0xb/0x10 [ 55.471302] htb_destroy+0x20/0x4c0 [ 55.474934] ? htb_reset+0x2cd/0x4c0 [ 55.478649] qdisc_destroy+0x134/0x660 [ 55.482621] ? do_raw_spin_lock+0xc1/0x230 [ 55.486849] red_change+0x6ee/0x1790 [ 55.490559] ? red_enqueue+0x1670/0x1670 [ 55.494610] ? nla_strcmp+0x9b/0xe0 [ 55.498237] tc_modify_qdisc+0xc2f/0x18f4 [ 55.502412] ? rtnetlink_rcv_msg+0x301/0x8f0 [ 55.506837] ? qdisc_create+0xf60/0xf60 [ 55.510803] ? find_held_lock+0x36/0x1d0 [ 55.514880] rtnetlink_rcv_msg+0x34f/0x8f0 [ 55.519112] ? rtnetlink_put_metrics+0x490/0x490 [ 55.523916] ? find_held_lock+0x36/0x1d0 [ 55.527991] netlink_rcv_skb+0x142/0x390 [ 55.532049] ? lock_downgrade+0x860/0x860 [ 55.536190] ? rtnetlink_put_metrics+0x490/0x490 [ 55.540951] ? netlink_ack+0x990/0x990 [ 55.544822] ? netlink_deliver_tap+0x182/0xb00 [ 55.549395] rtnetlink_rcv+0x10/0x20 [ 55.553115] netlink_unicast+0x445/0x640 [ 55.557173] ? netlink_attachskb+0x6d0/0x6d0 [ 55.561580] netlink_sendmsg+0x765/0xc50 [ 55.565628] ? netlink_unicast+0x640/0x640 [ 55.569855] ? copy_msghdr_from_user+0x20b/0x3e0 [ 55.574610] ? selinux_socket_sendmsg+0x31/0x40 [ 55.579260] ? netlink_unicast+0x640/0x640 [ 55.583474] sock_sendmsg+0xb5/0xf0 [ 55.587097] ___sys_sendmsg+0x647/0x950 [ 55.591053] ? find_held_lock+0x36/0x1d0 [ 55.595102] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 55.599862] ? __fget+0x278/0x400 [ 55.603298] ? kasan_check_read+0x11/0x20 [ 55.607444] ? __fget+0x295/0x400 [ 55.610880] ? ksys_dup3+0x2e0/0x2e0 [ 55.614602] ? find_held_lock+0x36/0x1d0 [ 55.618662] ? __fget_light+0x174/0x1e0 [ 55.622618] ? lock_downgrade+0x860/0x860 [ 55.626748] ? __fdget+0xe/0x10 [ 55.630010] __sys_sendmsg+0xd9/0x180 [ 55.633796] ? __ia32_sys_shutdown+0x70/0x70 [ 55.638213] ? kasan_check_read+0x11/0x20 [ 55.642382] ? _copy_to_user+0x91/0xb0 [ 55.646259] ? put_timespec64+0xa9/0x100 [ 55.650322] ? nsecs_to_jiffies+0x20/0x20 [ 55.654508] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.659867] __x64_sys_sendmsg+0x73/0xb0 [ 55.663931] do_syscall_64+0xd0/0x4e0 [ 55.669744] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.675050] RIP: 0033:0x459a59 [ 55.678325] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 55.697228] RSP: 002b:00007fb86b44fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.704949] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 55.712224] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 55.719476] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 55.726827] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb86b4506d4 [ 55.734093] R13: 00000000004c7c0c R14: 00000000004ddad8 R15: 00000000ffffffff 2020/01/11 20:30:57 executed programs: 243