[ 467.307470] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.383124] device bridge_slave_0 left promiscuous mode [ 467.389025] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.494930] device hsr_slave_1 left promiscuous mode [ 467.554952] device hsr_slave_0 left promiscuous mode [ 467.613571] team0 (unregistering): Port device team_slave_1 removed [ 467.623809] team0 (unregistering): Port device team_slave_0 removed [ 467.635581] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 467.674365] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 467.742802] bond0 (unregistering): Released all slaves [ 472.580608] device bridge_slave_1 left promiscuous mode [ 472.586114] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.630793] device bridge_slave_0 left promiscuous mode [ 472.636318] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.691169] device bridge_slave_1 left promiscuous mode [ 472.696815] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.730728] device bridge_slave_0 left promiscuous mode [ 472.736283] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.771619] device bridge_slave_1 left promiscuous mode [ 472.777134] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.820786] device bridge_slave_0 left promiscuous mode [ 472.826269] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.871671] device bridge_slave_1 left promiscuous mode [ 472.877268] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.930616] device bridge_slave_0 left promiscuous mode [ 472.936086] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.991081] device bridge_slave_1 left promiscuous mode [ 472.996658] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.050955] device bridge_slave_0 left promiscuous mode [ 473.056443] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.292711] device hsr_slave_1 left promiscuous mode [ 473.344282] device hsr_slave_0 left promiscuous mode [ 473.382895] team0 (unregistering): Port device team_slave_1 removed [ 473.392950] team0 (unregistering): Port device team_slave_0 removed [ 473.402923] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 473.453016] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 473.509855] bond0 (unregistering): Released all slaves [ 473.622616] device hsr_slave_1 left promiscuous mode [ 473.665093] device hsr_slave_0 left promiscuous mode [ 473.704176] team0 (unregistering): Port device team_slave_1 removed [ 473.714055] team0 (unregistering): Port device team_slave_0 removed [ 473.723864] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 473.764057] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 473.839060] bond0 (unregistering): Released all slaves [ 473.952829] device hsr_slave_1 left promiscuous mode [ 473.993982] device hsr_slave_0 left promiscuous mode [ 474.033530] team0 (unregistering): Port device team_slave_1 removed [ 474.043662] team0 (unregistering): Port device team_slave_0 removed [ 474.054249] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 474.122855] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 474.199790] bond0 (unregistering): Released all slaves [ 474.292537] device hsr_slave_1 left promiscuous mode [ 474.333624] device hsr_slave_0 left promiscuous mode [ 474.373853] team0 (unregistering): Port device team_slave_1 removed [ 474.383251] team0 (unregistering): Port device team_slave_0 removed [ 474.393079] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 474.433954] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 474.489950] bond0 (unregistering): Released all slaves [ 474.581848] device hsr_slave_1 left promiscuous mode [ 474.642757] device hsr_slave_0 left promiscuous mode [ 474.694893] team0 (unregistering): Port device team_slave_1 removed [ 474.704315] team0 (unregistering): Port device team_slave_0 removed [ 474.714479] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 474.754795] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 474.828314] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.15.205' (ECDSA) to the list of known hosts. [ 479.361043] IPVS: ftp: loaded support on port[0] = 21 [ 480.236653] BUG: sleeping function called from invalid context at kernel/workqueue.c:2816 [ 480.245867] in_atomic(): 1, irqs_disabled(): 0, pid: 333, name: syz-executor490 [ 480.253845] 2 locks held by syz-executor490/333: [ 480.258741] #0: (rtnl_mutex){+.+.}, at: [] rtnetlink_rcv_msg+0x2c1/0x9d0 [ 480.269949] #1: (&qdisc_rx_lock){+...}, at: [] red_change+0x373/0x1740 [ 480.278754] Preemption disabled at: [ 480.278767] [] red_change+0x373/0x1740 [ 480.287952] CPU: 1 PID: 333 Comm: syz-executor490 Not tainted 4.14.158-syzkaller #0 [ 480.295809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.305371] Call Trace: [ 480.307977] dump_stack+0xf7/0x13b [ 480.311505] ? red_change+0x373/0x1740 [ 480.315389] ___might_sleep.cold.86+0x1bb/0x1f4 [ 480.320051] __might_sleep+0x93/0xb0 [ 480.323754] flush_work+0xc4/0x720 [ 480.327279] ? kfree+0xcc/0x270 [ 480.330541] ? fifo_set_limit+0x187/0x1f0 [ 480.334897] ? fifo_create_dflt+0x72/0xe0 [ 480.339030] ? insert_work+0x300/0x300 [ 480.342905] ? __lock_acquire+0x6a4/0x4500 [ 480.347179] ? sock_sendmsg+0xb5/0xf0 [ 480.350962] ? ___sys_sendmsg+0x625/0x920 [ 480.355958] ? __sys_sendmsg+0xc1/0x140 [ 480.359908] ? SyS_sendmsg+0xd/0x20 [ 480.363518] ? do_syscall_64+0x1c7/0x5b0 [ 480.367608] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 480.372956] ? mark_held_locks+0xc7/0x130 [ 480.377082] ? __cancel_work_timer+0x127/0x420 [ 480.381775] __cancel_work_timer+0x286/0x420 [ 480.386302] ? cancel_delayed_work+0x10/0x10 [ 480.390705] ? hrtimer_try_to_cancel+0x64/0x590 [ 480.395362] ? __hrtimer_run_queues+0xaf0/0xaf0 [ 480.400020] ? mark_held_locks+0xc7/0x130 [ 480.404603] ? kfree+0x104/0x270 [ 480.407950] cancel_work_sync+0xb/0x10 [ 480.411830] htb_destroy+0x20/0x480 [ 480.415531] qdisc_destroy+0x123/0x2d0 [ 480.419397] red_change+0x6fb/0x1740 [ 480.423093] ? red_graft+0x220/0x220 [ 480.426796] ? nla_strcmp+0x9b/0xe0 [ 480.430401] tc_modify_qdisc+0xb55/0x13eb [ 480.434536] ? qdisc_create+0xcf0/0xcf0 [ 480.438596] rtnetlink_rcv_msg+0x34f/0x9d0 [ 480.442808] ? rtnl_bridge_getlink+0x760/0x760 [ 480.447368] ? find_held_lock+0x36/0x1d0 [ 480.451454] netlink_rcv_skb+0x133/0x370 [ 480.455492] ? rtnl_bridge_getlink+0x760/0x760 [ 480.460051] ? netlink_ack+0xa00/0xa00 [ 480.463923] ? netlink_deliver_tap+0x8e/0x920 [ 480.468416] rtnetlink_rcv+0x10/0x20 [ 480.472332] netlink_unicast+0x40d/0x5f0 [ 480.476399] ? netlink_attachskb+0x6e0/0x6e0 [ 480.480789] netlink_sendmsg+0x730/0xbd0 [ 480.486048] ? netlink_unicast+0x5f0/0x5f0 [ 480.490262] ? selinux_socket_sendmsg+0x31/0x40 [ 480.495035] ? security_socket_sendmsg+0x6a/0xa0 [ 480.499766] ? netlink_unicast+0x5f0/0x5f0 [ 480.504039] sock_sendmsg+0xb5/0xf0 [ 480.507717] ___sys_sendmsg+0x625/0x920 [ 480.511681] ? trace_hardirqs_off+0x10/0x10 [ 480.515986] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 480.520735] ? find_held_lock+0x36/0x1d0 [ 480.524777] ? lock_downgrade+0x7f0/0x7f0 [ 480.528949] ? __fget+0x1ca/0x2f0 [ 480.532385] ? __fget_light+0x166/0x200 [ 480.536333] ? __fdget+0xe/0x10 [ 480.539773] ? sockfd_lookup_light+0x1c/0x150 [ 480.544247] __sys_sendmsg+0xc1/0x140 [ 480.548198] ? SyS_shutdown+0x180/0x180 [ 480.552149] ? find_held_lock+0x36/0x1d0 [ 480.556188] ? speculation_ctrl_update_current+0x50/0x50 [ 480.561615] ? finish_task_switch+0x178/0x650 [ 480.566113] ? do_syscall_64+0x4c/0x5b0 [ 480.570078] ? __sys_sendmsg+0x140/0x140 [ 480.574119] SyS_sendmsg+0xd/0x20 [ 480.577547] do_syscall_64+0x1c7/0x5b0 [ 480.581409] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 480.586244] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 480.591423] RIP: 0033:0x4464c9 [ 480.594588] RSP: 002b:00007f32048b0d98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.602272] RAX: ffffffffffffffda RBX: 00000000006dbc68 RCX: 00000000004464c9 [ 480.609516] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 480.616764] RBP: 00000000006dbc60 R08: 0000000000000000 R09: 0000000000000000 [ 480.624012] R10: 00000000ffffffff R11: 0000000000000246 R12: 00000000006dbc6c [ 480.631259] R13: 00000000004aea84 R14: b35d2484a6425def R15: 10eb52a57aaf8377