[ 44.130384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.143228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.151975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.168869] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.174928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.199700] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.215092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.103210] random: crng init done [ 378.106847] random: 7 urandom warning(s) missed due to ratelimiting [ 459.307320] syz-executor.1 (6250) used greatest stack depth: 24504 bytes left [ 459.947314] device bridge_slave_1 left promiscuous mode [ 459.953139] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.008550] device bridge_slave_0 left promiscuous mode [ 460.014065] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.128929] device hsr_slave_1 left promiscuous mode [ 460.179498] device hsr_slave_0 left promiscuous mode [ 460.219040] team0 (unregistering): Port device team_slave_1 removed [ 460.230728] team0 (unregistering): Port device team_slave_0 removed [ 460.240138] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 460.279422] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 460.333331] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.137' (ECDSA) to the list of known hosts. [ 464.805947] device bridge_slave_1 left promiscuous mode [ 464.811511] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.866623] device bridge_slave_0 left promiscuous mode [ 464.872275] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.917011] device bridge_slave_1 left promiscuous mode [ 464.922763] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.966283] device bridge_slave_0 left promiscuous mode [ 464.971903] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.026619] device bridge_slave_1 left promiscuous mode [ 465.032103] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.076296] device bridge_slave_0 left promiscuous mode [ 465.081749] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.126517] device bridge_slave_1 left promiscuous mode [ 465.132164] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.196369] device bridge_slave_0 left promiscuous mode [ 465.201927] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.236899] device bridge_slave_1 left promiscuous mode [ 465.242385] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.288352] device bridge_slave_0 left promiscuous mode [ 465.293815] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.479918] device hsr_slave_1 left promiscuous mode [ 465.518534] device hsr_slave_0 left promiscuous mode [ 465.559048] team0 (unregistering): Port device team_slave_1 removed [ 465.568106] team0 (unregistering): Port device team_slave_0 removed [ 465.576967] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 465.629649] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 465.690513] bond0 (unregistering): Released all slaves [ 465.777572] device hsr_slave_1 left promiscuous mode [ 465.827867] device hsr_slave_0 left promiscuous mode [ 465.869133] team0 (unregistering): Port device team_slave_1 removed [ 465.877878] team0 (unregistering): Port device team_slave_0 removed [ 465.887010] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 465.937983] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 465.989805] bond0 (unregistering): Released all slaves [ 466.087679] device hsr_slave_1 left promiscuous mode [ 466.128507] device hsr_slave_0 left promiscuous mode [ 466.168810] team0 (unregistering): Port device team_slave_1 removed [ 466.177537] team0 (unregistering): Port device team_slave_0 removed [ 466.185915] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 466.230480] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 466.279704] bond0 (unregistering): Released all slaves [ 466.367418] device hsr_slave_1 left promiscuous mode [ 466.408639] device hsr_slave_0 left promiscuous mode [ 466.447788] team0 (unregistering): Port device team_slave_1 removed [ 466.457682] team0 (unregistering): Port device team_slave_0 removed [ 466.466752] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 466.509787] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 466.559749] bond0 (unregistering): Released all slaves [ 466.646787] device hsr_slave_1 left promiscuous mode [ 466.687358] device hsr_slave_0 left promiscuous mode [ 466.738759] team0 (unregistering): Port device team_slave_1 removed [ 466.747999] team0 (unregistering): Port device team_slave_0 removed [ 466.761137] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 466.807949] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 466.860237] bond0 (unregistering): Released all slaves [ 471.305550] IPVS: ftp: loaded support on port[0] = 21 [ 472.052047] BUG: sleeping function called from invalid context at kernel/workqueue.c:2824 [ 472.060715] in_atomic(): 1, irqs_disabled(): 0, pid: 16257, name: syz-executor120 [ 472.068541] 2 locks held by syz-executor120/16257: [ 472.073474] #0: (rtnl_mutex){+.+.}, at: [] rtnetlink_rcv_msg+0x2c1/0x9d0 [ 472.082237] #1: (&qdisc_rx_lock){+...}, at: [] red_change+0x373/0x1740 [ 472.090771] Preemption disabled at: [ 472.090786] [] red_change+0x373/0x1740 [ 472.099932] CPU: 1 PID: 16257 Comm: syz-executor120 Not tainted 4.14.183-syzkaller #0 [ 472.107899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.117292] Call Trace: [ 472.119910] dump_stack+0xf7/0x13b [ 472.123437] ? red_change+0x373/0x1740 [ 472.127312] ___might_sleep.cold.86+0x1bb/0x1f4 [ 472.131970] __might_sleep+0x93/0xb0 [ 472.135789] flush_work+0xc4/0x720 [ 472.139392] ? kfree+0xcc/0x270 [ 472.142675] ? fifo_set_limit+0x187/0x1f0 [ 472.146819] ? fifo_create_dflt+0x72/0xe0 [ 472.150967] ? insert_work+0x300/0x300 [ 472.154919] ? __lock_acquire+0x6a4/0x4500 [ 472.159185] ? sock_sendmsg+0xb5/0xf0 [ 472.163068] ? ___sys_sendmsg+0x625/0x920 [ 472.167216] ? __sys_sendmsg+0xc1/0x140 [ 472.171188] ? SyS_sendmsg+0xd/0x20 [ 472.174851] ? do_syscall_64+0x1c7/0x5b0 [ 472.178953] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 472.184305] ? mark_held_locks+0xc7/0x130 [ 472.188434] ? __cancel_work_timer+0x127/0x420 [ 472.193028] __cancel_work_timer+0x286/0x420 [ 472.197433] ? cancel_delayed_work+0x10/0x10 [ 472.201845] ? hrtimer_try_to_cancel+0x64/0x590 [ 472.206496] ? __hrtimer_run_queues+0xaf0/0xaf0 [ 472.211164] ? mark_held_locks+0xc7/0x130 [ 472.215291] ? kfree+0x104/0x270 [ 472.218636] cancel_work_sync+0xb/0x10 [ 472.222498] htb_destroy+0x20/0x480 [ 472.226161] qdisc_destroy+0x123/0x2d0 [ 472.230039] red_change+0x6fb/0x1740 [ 472.233750] ? red_graft+0x220/0x220 [ 472.237466] ? nla_strcmp+0x9b/0xe0 [ 472.241079] tc_modify_qdisc+0xb55/0x13eb [ 472.245229] ? qdisc_create+0xcf0/0xcf0 [ 472.249208] rtnetlink_rcv_msg+0x34f/0x9d0 [ 472.253439] ? rtnl_bridge_getlink+0x760/0x760 [ 472.258134] ? find_held_lock+0x36/0x1d0 [ 472.262248] netlink_rcv_skb+0x133/0x370 [ 472.266422] ? rtnl_bridge_getlink+0x760/0x760 [ 472.271004] ? netlink_ack+0xa00/0xa00 [ 472.274887] ? netlink_deliver_tap+0x8e/0x920 [ 472.279364] rtnetlink_rcv+0x10/0x20 [ 472.283059] netlink_unicast+0x40d/0x5f0 [ 472.287099] ? netlink_attachskb+0x6e0/0x6e0 [ 472.292450] netlink_sendmsg+0x730/0xbd0 [ 472.296495] ? netlink_unicast+0x5f0/0x5f0 [ 472.300718] ? selinux_socket_sendmsg+0x31/0x40 [ 472.305362] ? security_socket_sendmsg+0x6a/0xa0 [ 472.310105] ? netlink_unicast+0x5f0/0x5f0 [ 472.314315] sock_sendmsg+0xb5/0xf0 [ 472.317917] ___sys_sendmsg+0x625/0x920 [ 472.321865] ? trace_hardirqs_off+0x10/0x10 [ 472.326163] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 472.330910] ? find_held_lock+0x36/0x1d0 [ 472.334964] ? lock_downgrade+0x7f0/0x7f0 [ 472.339096] ? __fget+0x1ca/0x2f0 [ 472.342544] ? __fget_light+0x166/0x200 [ 472.346583] ? __fdget+0xe/0x10 [ 472.349852] ? sockfd_lookup_light+0x1c/0x150 [ 472.354332] ? get_unused_fd_flags+0xd0/0xd0 [ 472.358743] __sys_sendmsg+0xc1/0x140 [ 472.362518] ? SyS_shutdown+0x180/0x180 [ 472.366484] ? do_futex+0x17f0/0x17f0 [ 472.370282] ? SyS_futex+0xf1/0x250 [ 472.373909] ? do_syscall_64+0x4c/0x5b0 [ 472.377873] ? __sys_sendmsg+0x140/0x140 [ 472.381917] SyS_sendmsg+0xd/0x20 [ 472.385371] do_syscall_64+0x1c7/0x5b0 [ 472.389247] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 472.394067] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 472.399238] RIP: 0033:0x4464c9 [ 472.402402] RSP: 002b:00007f9985ffed98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.410106] RAX: ffffffffffffffda RBX: 00000000006dbc58 RCX: 00000000004464c9 [ 472.417351] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 472.424612] RBP: 00000000006dbc50 R08: 0000000000000000 R09: 0000000000000000 [ 472.431975] R10: 00000000ffffffff R11: 0000000000000246 R12: 00000000006dbc5c [ 472.439235] R13: 00000000004aea84 R14: b35d2484a6425def R15: 10eb52a57aaf8377