[ 466.881999] device bridge_slave_1 left promiscuous mode [ 466.887822] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.943542] device bridge_slave_0 left promiscuous mode [ 466.949064] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.064224] device hsr_slave_1 left promiscuous mode [ 467.104703] device hsr_slave_0 left promiscuous mode [ 467.144475] team0 (unregistering): Port device team_slave_1 removed [ 467.153841] team0 (unregistering): Port device team_slave_0 removed [ 467.164454] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 467.193560] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 467.248848] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.43' (ECDSA) to the list of known hosts. [ 472.040322] device bridge_slave_1 left promiscuous mode [ 472.045778] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.100620] device bridge_slave_0 left promiscuous mode [ 472.106082] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.161315] device bridge_slave_1 left promiscuous mode [ 472.166755] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.230797] device bridge_slave_0 left promiscuous mode [ 472.236230] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.291138] device bridge_slave_1 left promiscuous mode [ 472.296612] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.350603] device bridge_slave_0 left promiscuous mode [ 472.356033] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.391502] device bridge_slave_1 left promiscuous mode [ 472.396944] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.460701] device bridge_slave_0 left promiscuous mode [ 472.466151] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.561045] device bridge_slave_1 left promiscuous mode [ 472.566507] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.610931] device bridge_slave_0 left promiscuous mode [ 472.616379] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.795509] device hsr_slave_1 left promiscuous mode [ 472.822134] device hsr_slave_0 left promiscuous mode [ 472.863300] team0 (unregistering): Port device team_slave_1 removed [ 472.872932] team0 (unregistering): Port device team_slave_0 removed [ 472.881779] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 472.933908] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 473.007247] bond0 (unregistering): Released all slaves [ 473.092109] device hsr_slave_1 left promiscuous mode [ 473.132732] device hsr_slave_0 left promiscuous mode [ 473.172955] team0 (unregistering): Port device team_slave_1 removed [ 473.182372] team0 (unregistering): Port device team_slave_0 removed [ 473.191844] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 473.223318] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 473.298096] bond0 (unregistering): Released all slaves [ 473.391529] device hsr_slave_1 left promiscuous mode [ 473.443275] device hsr_slave_0 left promiscuous mode [ 473.483459] team0 (unregistering): Port device team_slave_1 removed [ 473.492582] team0 (unregistering): Port device team_slave_0 removed [ 473.501446] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 473.532810] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 473.588696] bond0 (unregistering): Released all slaves [ 473.683353] device hsr_slave_1 left promiscuous mode [ 473.723291] device hsr_slave_0 left promiscuous mode [ 473.762330] team0 (unregistering): Port device team_slave_1 removed [ 473.771337] team0 (unregistering): Port device team_slave_0 removed [ 473.779720] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 473.823556] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 473.897135] bond0 (unregistering): Released all slaves [ 473.982513] device hsr_slave_1 left promiscuous mode [ 474.033615] device hsr_slave_0 left promiscuous mode [ 474.073808] team0 (unregistering): Port device team_slave_1 removed [ 474.082612] team0 (unregistering): Port device team_slave_0 removed [ 474.091355] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 474.124128] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 474.196977] bond0 (unregistering): Released all slaves [ 478.700823] IPVS: ftp: loaded support on port[0] = 21 [ 479.556212] BUG: sleeping function called from invalid context at kernel/workqueue.c:2822 [ 479.564650] in_atomic(): 1, irqs_disabled(): 0, pid: 1361, name: syz-executor181 [ 479.572198] 2 locks held by syz-executor181/1361: [ 479.577027] #0: (rtnl_mutex){+.+.}, at: [] rtnetlink_rcv_msg+0x2c1/0x9d0 [ 479.585759] #1: (&qdisc_rx_lock){+...}, at: [] red_change+0x373/0x1740 [ 479.594261] Preemption disabled at: [ 479.594279] [] red_change+0x373/0x1740 [ 479.603339] CPU: 0 PID: 1361 Comm: syz-executor181 Not tainted 4.14.163-syzkaller #0 [ 479.611208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.620578] Call Trace: [ 479.623192] dump_stack+0xf7/0x13b [ 479.626719] ? red_change+0x373/0x1740 [ 479.630586] ___might_sleep.cold.86+0x1bb/0x1f4 [ 479.635273] __might_sleep+0x93/0xb0 [ 479.638974] flush_work+0xc4/0x720 [ 479.642492] ? kfree+0xcc/0x270 [ 479.645765] ? fifo_set_limit+0x187/0x1f0 [ 479.649887] ? fifo_create_dflt+0x72/0xe0 [ 479.654012] ? insert_work+0x300/0x300 [ 479.657878] ? __lock_acquire+0x6a4/0x4500 [ 479.662144] ? sock_sendmsg+0xb5/0xf0 [ 479.665923] ? ___sys_sendmsg+0x625/0x920 [ 479.670053] ? __sys_sendmsg+0xc1/0x140 [ 479.674016] ? SyS_sendmsg+0xd/0x20 [ 479.677631] ? do_syscall_64+0x1c7/0x5b0 [ 479.681716] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 479.687086] ? mark_held_locks+0xc7/0x130 [ 479.691243] ? __cancel_work_timer+0x127/0x420 [ 479.695844] __cancel_work_timer+0x286/0x420 [ 479.700234] ? cancel_delayed_work+0x10/0x10 [ 479.704622] ? hrtimer_try_to_cancel+0x64/0x590 [ 479.709266] ? __hrtimer_run_queues+0xaf0/0xaf0 [ 479.713915] ? mark_held_locks+0xc7/0x130 [ 479.718087] ? kfree+0x104/0x270 [ 479.721431] cancel_work_sync+0xb/0x10 [ 479.725293] htb_destroy+0x20/0x480 [ 479.728973] qdisc_destroy+0x123/0x2d0 [ 479.732840] red_change+0x6fb/0x1740 [ 479.736529] ? red_graft+0x220/0x220 [ 479.740220] ? nla_strcmp+0x9b/0xe0 [ 479.743824] tc_modify_qdisc+0xb55/0x13eb [ 479.747951] ? qdisc_create+0xcf0/0xcf0 [ 479.751907] rtnetlink_rcv_msg+0x34f/0x9d0 [ 479.756116] ? rtnl_bridge_getlink+0x760/0x760 [ 479.760674] ? find_held_lock+0x36/0x1d0 [ 479.764759] netlink_rcv_skb+0x133/0x370 [ 479.768794] ? rtnl_bridge_getlink+0x760/0x760 [ 479.773353] ? netlink_ack+0xa00/0xa00 [ 479.777214] ? netlink_deliver_tap+0x8e/0x920 [ 479.781698] rtnetlink_rcv+0x10/0x20 [ 479.785385] netlink_unicast+0x40d/0x5f0 [ 479.789423] ? netlink_attachskb+0x6e0/0x6e0 [ 479.793809] netlink_sendmsg+0x730/0xbd0 [ 479.797873] ? netlink_unicast+0x5f0/0x5f0 [ 479.802083] ? selinux_socket_sendmsg+0x31/0x40 [ 479.806736] ? security_socket_sendmsg+0x6a/0xa0 [ 479.811478] ? netlink_unicast+0x5f0/0x5f0 [ 479.815702] sock_sendmsg+0xb5/0xf0 [ 479.819318] ___sys_sendmsg+0x625/0x920 [ 479.823271] ? trace_hardirqs_off+0x10/0x10 [ 479.827616] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 479.832360] ? find_held_lock+0x36/0x1d0 [ 479.836403] ? lock_downgrade+0x7f0/0x7f0 [ 479.840576] ? __fget+0x1ca/0x2f0 [ 479.844005] ? __fget_light+0x166/0x200 [ 479.847954] ? __fdget+0xe/0x10 [ 479.851301] ? sockfd_lookup_light+0x1c/0x150 [ 479.855779] ? get_unused_fd_flags+0xd0/0xd0 [ 479.860176] __sys_sendmsg+0xc1/0x140 [ 479.864003] ? SyS_shutdown+0x180/0x180 [ 479.867971] ? do_futex+0x1760/0x1760 [ 479.871761] ? SyS_futex+0xf1/0x250 [ 479.875374] ? do_syscall_64+0x4c/0x5b0 [ 479.879334] ? __sys_sendmsg+0x140/0x140 [ 479.883382] SyS_sendmsg+0xd/0x20 [ 479.886810] do_syscall_64+0x1c7/0x5b0 [ 479.890676] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 479.895498] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 479.900664] RIP: 0033:0x4464c9 [ 479.903829] RSP: 002b:00007f74f1003d98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.911513] RAX: ffffffffffffffda RBX: 00000000006dbc58 RCX: 00000000004464c9 [ 479.918811] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 479.926059] RBP: 00000000006dbc50 R08: 0000000000000000 R09: 0000000000000000 [ 479.933307] R10: 00000000ffffffff R11: 0000000000000246 R12: 00000000006dbc5c [ 479.940553] R13: 00000000004aea84 R14: b35d2484a6425def R15: 10eb52a57aaf8377