Warning: Permanently added '10.128.10.1' (ECDSA) to the list of known hosts. 2020/08/18 00:08:42 parsed 1 programs 2020/08/18 00:08:43 executed programs: 0 syzkaller login: [ 551.252924] audit: type=1400 audit(1597709323.291:8): avc: denied { execmem } for pid=6470 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 552.412234] IPVS: ftp: loaded support on port[0] = 21 [ 552.535666] chnl_net:caif_netlink_parms(): no params data found [ 552.599167] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.606048] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.613874] device bridge_slave_0 entered promiscuous mode [ 552.623339] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.629874] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.636849] device bridge_slave_1 entered promiscuous mode [ 552.655178] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 552.664303] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 552.682768] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 552.690308] team0: Port device team_slave_0 added [ 552.695813] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 552.703607] team0: Port device team_slave_1 added [ 552.719151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.725400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.750910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.762536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.768871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.794170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.805178] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 552.812905] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 552.832356] device hsr_slave_0 entered promiscuous mode [ 552.838552] device hsr_slave_1 entered promiscuous mode [ 552.844661] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 552.854220] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 552.924015] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.930482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.937293] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.943765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.976945] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 552.983844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.993648] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 553.003040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 553.011640] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.030048] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.037352] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 553.049870] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 553.056941] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.066996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 553.075267] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.081688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.091712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 553.100121] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.106453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.127417] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 553.137307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 553.149609] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 553.156710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 553.165434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 553.173708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 553.181713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 553.189645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 553.196471] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 553.211150] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 553.219360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 553.226016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 553.237776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.252111] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 553.262445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 553.297315] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 553.304868] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 553.312678] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 553.322269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 553.330530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 553.337368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 553.346591] device veth0_vlan entered promiscuous mode [ 553.356779] device veth1_vlan entered promiscuous mode [ 553.362959] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 553.372406] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 553.384460] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 553.393995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 553.402814] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 553.410355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 553.420720] device veth0_macvtap entered promiscuous mode [ 553.426941] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 553.435735] device veth1_macvtap entered promiscuous mode [ 553.445057] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 553.454546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 553.465464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.473145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 553.481732] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 553.491680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.499733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 553.609408] gre0: Master is either lo or non-ether device [ 553.664277] ip_vti0: Master is either lo or non-ether device [ 553.682110] ip6_vti0: Master is either lo or non-ether device [ 553.706637] sit0: Master is either lo or non-ether device [ 553.727390] ip6tnl0: Master is either lo or non-ether device [ 553.746510] ip6gre0: Master is either lo or non-ether device [ 553.981031] syz-executor.0 (6726) used greatest stack depth: 23640 bytes left [ 554.232591] vcan0: Master is either lo or non-ether device [ 554.428813] Bluetooth: hci0: command 0x0409 tx timeout [ 554.513518] nlmon0: Master is either lo or non-ether device [ 554.711349] caif0: Master is either lo or non-ether device [ 554.841039] vxcan0: Master is either lo or non-ether device [ 555.036338] vxcan1: Master is either lo or non-ether device [ 555.452260] syz-executor.0 (6813) used greatest stack depth: 23016 bytes left [ 555.960638] xfrm0: Master is either lo or non-ether device 2020/08/18 00:08:48 executed programs: 25 [ 556.300022] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.330973] bridge_slave_0: Device is already in use. [ 556.484361] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.493417] device bridge_slave_0 left promiscuous mode [ 556.499366] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.507967] Bluetooth: hci0: command 0x041b tx timeout [ 556.782470] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.804416] bridge_slave_1: Device is already in use. [ 556.963014] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.971269] device bridge_slave_1 left promiscuous mode [ 556.976802] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.262579] bond_slave_0: Device is already in use. [ 557.386689] bond0: Releasing backup interface bond_slave_0 [ 557.730824] bond_slave_1: Device is already in use. [ 557.855917] bond0: Releasing backup interface bond_slave_1 [ 558.190934] team_slave_0: Device is already in use. [ 558.359130] team0: Port device team_slave_0 removed [ 558.587572] Bluetooth: hci0: command 0x040f tx timeout [ 558.685789] team_slave_1: Device is already in use. [ 558.812439] team0: Port device team_slave_1 removed [ 559.201460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 559.217061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.233668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.410716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.703397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 559.721359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.732748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.912455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.253905] hsr_slave_0: Device is already in use. [ 560.438446] device hsr_slave_0 left promiscuous mode [ 560.667252] Bluetooth: hci0: command 0x0419 tx timeout [ 560.740433] hsr_slave_1: Device is already in use. [ 560.931927] device hsr_slave_1 left promiscuous mode 2020/08/18 00:08:53 executed programs: 47 [ 561.561259] veth1_vlan: Device is already in use. [ 561.786665] ------------[ cut here ]------------ [ 561.793651] WARNING: CPU: 1 PID: 7118 at drivers/net/ipvlan/ipvlan_main.c:65 ipvlan_unregister_nf_hook.cold+0x11/0x25 [ 561.804512] Kernel panic - not syncing: panic_on_warn set ... [ 561.804512] [ 561.812029] CPU: 1 PID: 7118 Comm: syz-executor.0 Not tainted 4.19.139-syzkaller #0 [ 561.819830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.829196] Call Trace: [ 561.831892] dump_stack+0x1fc/0x2fe [ 561.835539] panic+0x26a/0x50e [ 561.838882] ? __warn_printk+0xf3/0xf3 [ 561.844611] ? ipvlan_unregister_nf_hook.cold+0x11/0x25 [ 561.849994] ? __probe_kernel_read+0x16c/0x1b0 [ 561.854584] ? __warn.cold+0x5/0x61 [ 561.858221] ? __warn+0xe4/0x200 [ 561.861597] ? ipvlan_unregister_nf_hook.cold+0x11/0x25 [ 561.866969] __warn.cold+0x20/0x61 [ 561.870581] ? io_schedule_timeout+0x140/0x140 [ 561.875166] ? ipvlan_unregister_nf_hook.cold+0x11/0x25 [ 561.880520] report_bug+0x262/0x2b0 [ 561.884145] do_error_trap+0x1d7/0x310 [ 561.888014] ? math_error+0x310/0x310 [ 561.891792] ? __irq_work_queue_local+0x101/0x160 [ 561.899334] ? irq_work_queue+0x29/0x80 [ 561.903321] ? wake_up_klogd.part.0+0x8c/0xc0 [ 561.907934] ? trace_hardirqs_off_caller+0x69/0x210 [ 561.912940] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 561.917798] invalid_op+0x14/0x20 [ 561.921682] RIP: 0010:ipvlan_unregister_nf_hook.cold+0x11/0x25 [ 561.927643] Code: ed 45 fd e9 1b ff ff ff 48 89 df e8 1e f0 45 fd eb b9 e8 47 ed 45 fd eb 83 e8 90 ce 0f fd 48 c7 c7 a0 b6 f4 87 e8 f3 db fa fc <0f> 0b e9 80 a2 ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 53 48 [ 561.948703] RSP: 0018:ffff888090c86ff8 EFLAGS: 00010286 [ 561.954271] RAX: 0000000000000024 RBX: 0000000000000000 RCX: 0000000000000000 [ 561.961530] RDX: 0000000000000000 RSI: ffffffff8154cf41 RDI: ffffed1012190df1 [ 561.968833] RBP: ffff8880a56f8040 R08: 0000000000000024 R09: 0000000000000000 [ 561.976169] R10: 0000000000000005 R11: 0000000000000000 R12: ffff8880a7964e00 [ 561.983939] R13: ffff888089219200 R14: 0000000000000000 R15: 0000000000000001 [ 561.991206] ? vprintk_func+0x81/0x17e [ 561.995081] ? ipvlan_unregister_nf_hook.cold+0x11/0x25 [ 562.000429] ipvlan_set_port_mode+0x53a/0x650 [ 562.004907] ipvlan_link_new+0x68d/0xc40 [ 562.008952] ? ipvlan_add_addr+0x320/0x320 [ 562.013240] rtnl_newlink+0x1027/0x15b0 [ 562.017217] ? rtnl_getlink+0x620/0x620 [ 562.021285] ? deref_stack_reg+0x134/0x1d0 [ 562.025504] ? unwind_next_frame+0x10a9/0x1c60 [ 562.030203] ? __save_stack_trace+0x72/0x190 [ 562.034592] ? deref_stack_reg+0x134/0x1d0 [ 562.038832] ? __lock_acquire+0x6de/0x3ff0 [ 562.043049] ? __lock_acquire+0x6de/0x3ff0 [ 562.047264] ? __lock_acquire+0x6de/0x3ff0 [ 562.051505] ? __lock_acquire+0x6de/0x3ff0 [ 562.055751] ? mark_held_locks+0xf0/0xf0 [ 562.059809] ? mark_held_locks+0xf0/0xf0 [ 562.063879] ? __lock_acquire+0x6de/0x3ff0 [ 562.068100] ? __lock_acquire+0x6de/0x3ff0 [ 562.072413] ? avc_has_perm_noaudit+0x1c5/0x390 [ 562.077080] ? mark_held_locks+0xf0/0xf0 [ 562.081390] ? lock_acquire+0x170/0x3c0 [ 562.085362] ? avc_has_perm_noaudit+0x9c/0x390 [ 562.089970] ? check_preemption_disabled+0x41/0x280 [ 562.094992] ? __mutex_add_waiter+0x160/0x160 [ 562.099487] ? rtnetlink_rcv_msg+0x320/0xb80 [ 562.103880] ? rtnl_getlink+0x620/0x620 [ 562.108444] rtnetlink_rcv_msg+0x453/0xb80 [ 562.112676] ? rtnl_calcit.isra.0+0x430/0x430 [ 562.117204] ? __netlink_lookup+0x3fc/0x730 [ 562.121517] ? lock_downgrade+0x720/0x720 [ 562.125655] ? check_preemption_disabled+0x41/0x280 [ 562.130655] netlink_rcv_skb+0x160/0x440 [ 562.134711] ? rtnl_calcit.isra.0+0x430/0x430 [ 562.139206] ? netlink_ack+0xae0/0xae0 [ 562.143078] netlink_unicast+0x4d5/0x690 [ 562.147135] ? netlink_sendskb+0x110/0x110 [ 562.151364] netlink_sendmsg+0x6bb/0xc40 [ 562.155419] ? nlmsg_notify+0x1a0/0x1a0 [ 562.159449] ? kernel_recvmsg+0x220/0x220 [ 562.163614] ? nlmsg_notify+0x1a0/0x1a0 [ 562.167579] sock_sendmsg+0xc3/0x120 [ 562.171380] ___sys_sendmsg+0x7bb/0x8e0 [ 562.175336] ? __lock_acquire+0x6de/0x3ff0 [ 562.179569] ? copy_msghdr_from_user+0x440/0x440 [ 562.184317] ? mark_held_locks+0xf0/0xf0 [ 562.188357] ? do_futex+0x163/0x1c40 [ 562.192064] ? __might_fault+0x11f/0x1d0 [ 562.196104] ? mark_held_locks+0xf0/0xf0 [ 562.200582] ? lock_downgrade+0x720/0x720 [ 562.204719] ? lock_acquire+0x170/0x3c0 [ 562.208767] ? __might_fault+0x11f/0x1d0 [ 562.212810] ? lock_downgrade+0x720/0x720 [ 562.216935] ? lock_acquire+0x170/0x3c0 [ 562.220887] ? __might_fault+0xef/0x1d0 [ 562.224844] ? __fdget+0x1a0/0x230 [ 562.228380] __x64_sys_sendmsg+0x132/0x220 [ 562.232618] ? __sys_sendmsg+0x1b0/0x1b0 [ 562.236667] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 562.241400] ? trace_hardirqs_off_caller+0x69/0x210 [ 562.246411] ? do_syscall_64+0x21/0x620 [ 562.250367] do_syscall_64+0xf9/0x620 [ 562.254150] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 562.259316] RIP: 0033:0x45d239 [ 562.262487] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 562.281390] RSP: 002b:00007ffe6aa54f78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.289080] RAX: ffffffffffffffda RBX: 000000000002c0c0 RCX: 000000000045d239 [ 562.296344] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 562.304291] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 562.311540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000001190a50 [ 562.318806] R13: 0000000000000000 R14: 0000000000000b03 R15: 000000000118cf4c [ 562.327783] Kernel Offset: disabled [ 562.331428] Rebooting in 86400 seconds..