[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.15' (ECDSA) to the list of known hosts. 2020/04/27 01:11:19 parsed 1 programs 2020/04/27 01:11:22 executed programs: 0 syzkaller login: [ 38.927743] audit: type=1400 audit(1587949882.454:8): avc: denied { execmem } for pid=6354 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 39.164775] IPVS: ftp: loaded support on port[0] = 21 [ 39.965835] chnl_net:caif_netlink_parms(): no params data found [ 40.065981] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.073834] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.081128] device bridge_slave_0 entered promiscuous mode [ 40.089362] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.096174] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.104186] device bridge_slave_1 entered promiscuous mode [ 40.122709] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.132059] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.152094] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 40.159580] team0: Port device team_slave_0 added [ 40.165697] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 40.172842] team0: Port device team_slave_1 added [ 40.189400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.195858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.221133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.233015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.239283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.265085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.275902] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.283703] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.335615] device hsr_slave_0 entered promiscuous mode [ 40.383276] device hsr_slave_1 entered promiscuous mode [ 40.423889] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.431092] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 40.502453] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.509217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.516405] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.522846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.558422] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 40.565726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.575000] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.585386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.594732] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.602083] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.613075] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 40.619183] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.628383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.636511] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.642937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.652187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.660727] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.667154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.684149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.692178] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.703350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.717380] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.727552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.738995] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 40.746345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.754808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.763858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.776634] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 40.784122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.790853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.802503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.860257] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 40.872310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.906335] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 40.913731] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 40.920358] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 40.930769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.939453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.947232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.956292] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 40.965401] device veth0_vlan entered promiscuous mode [ 40.975578] device veth1_vlan entered promiscuous mode [ 40.989545] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 40.998643] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 41.006579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.015532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.026196] device veth0_macvtap entered promiscuous mode [ 41.032321] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 41.042230] device veth1_macvtap entered promiscuous mode [ 41.049006] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 41.058252] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 41.068670] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 41.078913] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 41.087614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.095239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.103182] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.110336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.118915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.130654] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 41.137698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.144815] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.153079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2020/04/27 01:11:27 executed programs: 19 [ 46.230639] BUG: spinlock recursion on CPU#0, syz-executor.0/7082 [ 46.236917] lock: 0xffff88809767cb68, .magic: dead4ead, .owner: syz-executor.0/7082, .owner_cpu: 0 [ 46.246271] CPU: 0 PID: 7082 Comm: syz-executor.0 Not tainted 4.14.177-syzkaller #0 [ 46.254062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.263532] Call Trace: [ 46.266263] dump_stack+0x13e/0x194 [ 46.269875] do_raw_spin_lock+0x1cd/0x230 [ 46.274009] dev_mc_sync+0x10b/0x1c0 [ 46.277702] ? vlan_dev_set_mac_address+0x5c0/0x5c0 [ 46.282723] vlan_dev_set_rx_mode+0x38/0x80 [ 46.287057] __dev_set_rx_mode+0x191/0x2a0 [ 46.291279] dev_uc_unsync+0x16c/0x1c0 [ 46.295147] bond_hw_addr_flush+0x5c/0xe0 [ 46.299273] ? bond_set_dev_addr.isra.0+0xb0/0xb0 [ 46.304117] bond_enslave+0x1e53/0x49e0 [ 46.308086] ? bond_update_slave_arr+0x6c0/0x6c0 [ 46.312862] ? rtmsg_ifinfo_event.part.0+0x9a/0xc0 [ 46.317795] ? rtmsg_ifinfo+0x64/0x80 [ 46.321601] ? __dev_notify_flags+0x110/0x210 [ 46.326075] ? dev_change_name+0x990/0x990 [ 46.330313] ? bond_update_slave_arr+0x6c0/0x6c0 [ 46.335070] do_set_master+0x19e/0x200 [ 46.338959] rtnl_newlink+0x1319/0x1720 [ 46.342944] ? trace_hardirqs_on+0x10/0x10 [ 46.347177] ? rtnl_link_unregister+0x1f0/0x1f0 [ 46.351866] ? lock_acquire+0x170/0x3f0 [ 46.355870] ? lock_acquire+0x170/0x3f0 [ 46.359831] ? rtnetlink_rcv_msg+0x31d/0xb10 [ 46.364243] ? __lock_is_held+0xad/0x140 [ 46.368302] ? lock_downgrade+0x6e0/0x6e0 [ 46.372517] ? rtnl_link_unregister+0x1f0/0x1f0 [ 46.377189] rtnetlink_rcv_msg+0x3be/0xb10 [ 46.381429] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 46.385992] ? netdev_pick_tx+0x2e0/0x2e0 [ 46.390116] ? skb_clone+0x11c/0x310 [ 46.393823] ? save_trace+0x290/0x290 [ 46.397618] netlink_rcv_skb+0x127/0x370 [ 46.401684] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 46.406273] ? netlink_ack+0x980/0x980 [ 46.410144] netlink_unicast+0x437/0x620 [ 46.414183] ? netlink_attachskb+0x600/0x600 [ 46.418572] netlink_sendmsg+0x733/0xbe0 [ 46.422629] ? netlink_unicast+0x620/0x620 [ 46.426858] ? SYSC_sendto+0x2b0/0x2b0 [ 46.430732] ? security_socket_sendmsg+0x83/0xb0 [ 46.435494] ? netlink_unicast+0x620/0x620 [ 46.439739] sock_sendmsg+0xc5/0x100 [ 46.443462] ___sys_sendmsg+0x70a/0x840 [ 46.447440] ? trace_hardirqs_on+0x10/0x10 [ 46.451678] ? copy_msghdr_from_user+0x380/0x380 [ 46.456577] ? find_held_lock+0x2d/0x110 [ 46.460652] ? lock_downgrade+0x6e0/0x6e0 [ 46.464902] ? __fget+0x228/0x360 [ 46.468356] ? __fget_light+0x199/0x1f0 [ 46.472342] ? sockfd_lookup_light+0xb2/0x160 [ 46.477019] __sys_sendmsg+0xa3/0x120 [ 46.480840] ? SyS_shutdown+0x160/0x160 [ 46.484803] ? SyS_clock_gettime+0xf5/0x180 [ 46.489123] ? SyS_clock_settime+0x1a0/0x1a0 [ 46.493756] SyS_sendmsg+0x27/0x40 [ 46.497281] ? __sys_sendmsg+0x120/0x120 [ 46.501328] do_syscall_64+0x1d5/0x640 [ 46.505205] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 46.510457] RIP: 0033:0x45c829 [ 46.513649] RSP: 002b:00007f20cd258c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.521736] RAX: ffffffffffffffda RBX: 0000000000500a40 RCX: 000000000045c829 [ 46.529133] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000010 [ 46.536389] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 46.543657] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 46.551209] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f20cd2596d4