[ 43.601837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.611374] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 43.620184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.628190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.637283] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 43.643296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.660322] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 43.671755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.104966] random: crng init done [ 409.108553] random: 7 urandom warning(s) missed due to ratelimiting [ 459.955714] device bridge_slave_1 left promiscuous mode [ 459.961520] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.036211] device bridge_slave_0 left promiscuous mode [ 460.041727] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.148843] device hsr_slave_1 left promiscuous mode [ 460.197002] device hsr_slave_0 left promiscuous mode [ 460.236718] team0 (unregistering): Port device team_slave_1 removed [ 460.248259] team0 (unregistering): Port device team_slave_0 removed [ 460.257506] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 460.308062] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 460.370598] bond0 (unregistering): Released all slaves [ 464.663777] device bridge_slave_1 left promiscuous mode [ 464.669359] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.724035] device bridge_slave_0 left promiscuous mode [ 464.729756] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.784548] device bridge_slave_1 left promiscuous mode [ 464.790043] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.824025] device bridge_slave_0 left promiscuous mode [ 464.829533] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.874217] device bridge_slave_1 left promiscuous mode [ 464.879672] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.923955] device bridge_slave_0 left promiscuous mode [ 464.929545] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.994199] device bridge_slave_1 left promiscuous mode [ 464.999652] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.053996] device bridge_slave_0 left promiscuous mode [ 465.059564] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.104115] device bridge_slave_1 left promiscuous mode [ 465.109618] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.203822] device bridge_slave_0 left promiscuous mode [ 465.209371] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.405041] device hsr_slave_1 left promiscuous mode [ 465.456437] device hsr_slave_0 left promiscuous mode [ 465.495577] team0 (unregistering): Port device team_slave_1 removed [ 465.505738] team0 (unregistering): Port device team_slave_0 removed [ 465.514485] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 465.555776] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 465.608658] bond0 (unregistering): Released all slaves [ 465.695044] device hsr_slave_1 left promiscuous mode [ 465.736266] device hsr_slave_0 left promiscuous mode [ 465.785452] team0 (unregistering): Port device team_slave_1 removed [ 465.796703] team0 (unregistering): Port device team_slave_0 removed [ 465.805657] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 465.845784] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 465.897635] bond0 (unregistering): Released all slaves [ 465.995303] device hsr_slave_1 left promiscuous mode [ 466.046308] device hsr_slave_0 left promiscuous mode [ 466.086124] team0 (unregistering): Port device team_slave_1 removed [ 466.095084] team0 (unregistering): Port device team_slave_0 removed [ 466.104697] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 466.146404] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 466.199073] bond0 (unregistering): Released all slaves [ 466.284464] device hsr_slave_1 left promiscuous mode [ 466.335115] device hsr_slave_0 left promiscuous mode [ 466.375241] team0 (unregistering): Port device team_slave_1 removed [ 466.384975] team0 (unregistering): Port device team_slave_0 removed [ 466.393710] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 466.435645] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 466.488244] bond0 (unregistering): Released all slaves [ 466.575188] device hsr_slave_1 left promiscuous mode [ 466.617433] device hsr_slave_0 left promiscuous mode [ 466.655336] team0 (unregistering): Port device team_slave_1 removed [ 466.664461] team0 (unregistering): Port device team_slave_0 removed [ 466.672712] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 466.717151] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 466.767291] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.31' (ECDSA) to the list of known hosts. [ 471.223228] IPVS: ftp: loaded support on port[0] = 21 [ 472.000089] BUG: sleeping function called from invalid context at kernel/workqueue.c:2824 [ 472.008687] in_atomic(): 1, irqs_disabled(): 0, pid: 24143, name: syz-executor534 [ 472.016438] 2 locks held by syz-executor534/24143: [ 472.021455] #0: (rtnl_mutex){+.+.}, at: [] rtnetlink_rcv_msg+0x2c1/0x9d0 [ 472.030196] #1: (&qdisc_rx_lock){+...}, at: [] red_change+0x373/0x1740 [ 472.038882] Preemption disabled at: [ 472.038895] [] red_change+0x373/0x1740 [ 472.048000] CPU: 0 PID: 24143 Comm: syz-executor534 Not tainted 4.14.180-syzkaller #0 [ 472.055943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.065406] Call Trace: [ 472.068038] dump_stack+0xf7/0x13b [ 472.071593] ? red_change+0x373/0x1740 [ 472.075491] ___might_sleep.cold.86+0x1bb/0x1f4 [ 472.080139] __might_sleep+0x93/0xb0 [ 472.083848] flush_work+0xc4/0x720 [ 472.087366] ? kfree+0xcc/0x270 [ 472.090632] ? fifo_set_limit+0x187/0x1f0 [ 472.094754] ? fifo_create_dflt+0x72/0xe0 [ 472.098894] ? insert_work+0x300/0x300 [ 472.102755] ? __lock_acquire+0x6a4/0x4500 [ 472.107104] ? sock_sendmsg+0xb5/0xf0 [ 472.110930] ? ___sys_sendmsg+0x625/0x920 [ 472.115091] ? __sys_sendmsg+0xc1/0x140 [ 472.119228] ? SyS_sendmsg+0xd/0x20 [ 472.122836] ? do_syscall_64+0x1c7/0x5b0 [ 472.126976] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 472.132318] ? mark_held_locks+0xc7/0x130 [ 472.136452] ? __cancel_work_timer+0x127/0x420 [ 472.141025] __cancel_work_timer+0x286/0x420 [ 472.145448] ? cancel_delayed_work+0x10/0x10 [ 472.149843] ? hrtimer_try_to_cancel+0x64/0x590 [ 472.154503] ? __hrtimer_run_queues+0xaf0/0xaf0 [ 472.159160] ? mark_held_locks+0xc7/0x130 [ 472.163300] ? kfree+0x104/0x270 [ 472.166646] cancel_work_sync+0xb/0x10 [ 472.170518] htb_destroy+0x20/0x480 [ 472.174213] qdisc_destroy+0x123/0x2d0 [ 472.178096] red_change+0x6fb/0x1740 [ 472.181792] ? red_graft+0x220/0x220 [ 472.185480] ? nla_strcmp+0x9b/0xe0 [ 472.189095] tc_modify_qdisc+0xb55/0x13eb [ 472.193219] ? qdisc_create+0xcf0/0xcf0 [ 472.197188] rtnetlink_rcv_msg+0x34f/0x9d0 [ 472.201394] ? rtnl_bridge_getlink+0x760/0x760 [ 472.205973] ? find_held_lock+0x36/0x1d0 [ 472.210071] netlink_rcv_skb+0x133/0x370 [ 472.214119] ? rtnl_bridge_getlink+0x760/0x760 [ 472.218680] ? netlink_ack+0xa00/0xa00 [ 472.222558] ? netlink_deliver_tap+0x8e/0x920 [ 472.227128] rtnetlink_rcv+0x10/0x20 [ 472.230830] netlink_unicast+0x40d/0x5f0 [ 472.234866] ? netlink_attachskb+0x6e0/0x6e0 [ 472.239251] netlink_sendmsg+0x730/0xbd0 [ 472.243300] ? netlink_unicast+0x5f0/0x5f0 [ 472.250990] ? selinux_socket_sendmsg+0x31/0x40 [ 472.255631] ? security_socket_sendmsg+0x6a/0xa0 [ 472.260368] ? netlink_unicast+0x5f0/0x5f0 [ 472.264591] sock_sendmsg+0xb5/0xf0 [ 472.268276] ___sys_sendmsg+0x625/0x920 [ 472.272245] ? trace_hardirqs_off+0x10/0x10 [ 472.276540] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 472.281293] ? find_held_lock+0x36/0x1d0 [ 472.285362] ? lock_downgrade+0x7f0/0x7f0 [ 472.289499] ? __fget+0x1ca/0x2f0 [ 472.292929] ? __fget_light+0x166/0x200 [ 472.296878] ? __fdget+0xe/0x10 [ 472.300133] ? sockfd_lookup_light+0x1c/0x150 [ 472.305146] ? get_unused_fd_flags+0xd0/0xd0 [ 472.309538] __sys_sendmsg+0xc1/0x140 [ 472.313314] ? SyS_shutdown+0x180/0x180 [ 472.317285] ? do_futex+0x17f0/0x17f0 [ 472.321067] ? SyS_futex+0xf1/0x250 [ 472.324696] ? do_syscall_64+0x4c/0x5b0 [ 472.328737] ? __sys_sendmsg+0x140/0x140 [ 472.332771] SyS_sendmsg+0xd/0x20 [ 472.336197] do_syscall_64+0x1c7/0x5b0 [ 472.340070] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 472.344898] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 472.350111] RIP: 0033:0x4464c9 [ 472.353275] RSP: 002b:00007fc11c5b7d98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.360956] RAX: ffffffffffffffda RBX: 00000000006dbc58 RCX: 00000000004464c9 [ 472.368217] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 472.375458] RBP: 00000000006dbc50 R08: 0000000000000000 R09: 0000000000000000 [ 472.382714] R10: 00000000ffffffff R11: 0000000000000246 R12: 00000000006dbc5c [ 472.389955] R13: 00000000004aea84 R14: b35d2484a6425def R15: 10eb52a57aaf8377