[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.118' (ECDSA) to the list of known hosts. syzkaller login: [ 34.626805] audit: type=1400 audit(1594442353.816:8): avc: denied { execmem } for pid=6335 comm="syz-executor322" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 34.895566] IPVS: ftp: loaded support on port[0] = 21 [ 35.750969] chnl_net:caif_netlink_parms(): no params data found [ 35.829488] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.836096] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.843060] device bridge_slave_0 entered promiscuous mode [ 35.850645] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.857589] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.865481] device bridge_slave_1 entered promiscuous mode [ 35.882416] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 35.891160] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 35.909682] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 35.917221] team0: Port device team_slave_0 added [ 35.923238] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 35.931991] team0: Port device team_slave_1 added [ 35.947426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.953660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.979719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.991707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.998342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.024246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.034903] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 36.042231] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 36.106555] device hsr_slave_0 entered promiscuous mode [ 36.144257] device hsr_slave_1 entered promiscuous mode [ 36.184620] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 36.191651] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 36.255869] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.262272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.269202] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.275657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.306650] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 36.312715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.321931] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 36.330812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.340031] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.357422] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.368022] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 36.374153] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.382375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.390378] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.396772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.405872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.413474] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.419880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.436448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.444408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.453439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.469109] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.479329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.491153] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 36.497824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.506192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.513673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.526928] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 36.534900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.541552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.552357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.604950] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 36.615003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.645957] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 36.652844] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 36.660038] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 36.670048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.678048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.685262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.694954] device veth0_vlan entered promiscuous mode [ 36.703475] device veth1_vlan entered promiscuous mode [ 36.709959] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 36.718430] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 36.729614] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 36.737129] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 36.744465] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.751517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.762123] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 36.769526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.779275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.788618] device veth0_macvtap entered promiscuous mode [ 36.795088] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 36.803051] device veth1_macvtap entered promiscuous mode [ 36.809646] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 36.818559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 36.827934] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 36.837107] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 36.844518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.851224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.858843] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.866367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.874620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.885224] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 36.892066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.899037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.907538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 37.014884] BUG: spinlock recursion on CPU#0, syz-executor322/6336 [ 37.021219] lock: 0xffff888098384de8, .magic: dead4ead, .owner: syz-executor322/6336, .owner_cpu: 0 [ 37.030504] CPU: 0 PID: 6336 Comm: syz-executor322 Not tainted 4.14.184-syzkaller #0 [ 37.038369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.047697] Call Trace: [ 37.050288] dump_stack+0x1b2/0x283 [ 37.053934] do_raw_spin_lock+0x1cd/0x230 [ 37.058096] dev_mc_sync+0x10b/0x1c0 [ 37.061784] ? vlan_dev_set_mac_address+0x5c0/0x5c0 [ 37.066786] vlan_dev_set_rx_mode+0x38/0x80 [ 37.071081] __dev_set_rx_mode+0x191/0x2a0 [ 37.075293] dev_uc_unsync+0x16c/0x1c0 [ 37.079153] bond_hw_addr_flush+0x5c/0xe0 [ 37.083293] ? bond_do_fail_over_mac+0xd00/0xd00 [ 37.088023] bond_enslave+0x2811/0x49b0 [ 37.091986] ? bond_update_slave_arr+0x6c0/0x6c0 [ 37.096732] ? rtmsg_ifinfo_event.part.0+0x9a/0xc0 [ 37.101647] ? rtmsg_ifinfo+0x64/0x80 [ 37.106392] ? __dev_notify_flags+0x110/0x210 [ 37.110870] ? dev_change_name+0x970/0x970 [ 37.115084] ? bond_update_slave_arr+0x6c0/0x6c0 [ 37.119839] do_set_master+0x19e/0x200 [ 37.123738] rtnl_newlink+0x1319/0x1720 [ 37.127697] ? quarantine_put+0xc9/0x190 [ 37.131747] ? rtnl_link_unregister+0x1f0/0x1f0 [ 37.136405] ? avc_has_perm_noaudit+0x157/0x2a0 [ 37.141047] ? lock_acquire+0x170/0x3f0 [ 37.145020] ? lock_acquire+0x170/0x3f0 [ 37.148987] ? lock_acquire+0x170/0x3f0 [ 37.152949] ? lock_downgrade+0x6e0/0x6e0 [ 37.157075] ? rtnl_link_unregister+0x1f0/0x1f0 [ 37.161727] rtnetlink_rcv_msg+0x3be/0xb10 [ 37.165940] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 37.170410] ? netdev_pick_tx+0x2e0/0x2e0 [ 37.174575] netlink_rcv_skb+0x127/0x370 [ 37.178609] ? memcpy+0x35/0x50 [ 37.182138] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 37.186607] ? netlink_ack+0x970/0x970 [ 37.190483] netlink_unicast+0x437/0x610 [ 37.194534] ? netlink_sendskb+0x50/0x50 [ 37.198569] netlink_sendmsg+0x64a/0xbb0 [ 37.202614] ? nlmsg_notify+0x160/0x160 [ 37.206562] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 37.211554] ? security_socket_sendmsg+0x83/0xb0 [ 37.216283] ? nlmsg_notify+0x160/0x160 [ 37.220231] sock_sendmsg+0xb5/0x100 [ 37.223923] ___sys_sendmsg+0x70a/0x840 [ 37.227881] ? copy_msghdr_from_user+0x380/0x380 [ 37.232611] ? trace_hardirqs_on+0x10/0x10 [ 37.236832] ? trace_hardirqs_on+0x10/0x10 [ 37.241038] ? fs_reclaim_acquire+0x10/0x10 [ 37.245335] ? __might_fault+0x104/0x1b0 [ 37.249369] ? lock_acquire+0x170/0x3f0 [ 37.253328] ? lock_downgrade+0x6e0/0x6e0 [ 37.257463] ? __might_fault+0x177/0x1b0 [ 37.261499] ? _copy_to_user+0x82/0xd0 [ 37.265390] ? __fget_light+0x16a/0x1f0 [ 37.269337] ? sockfd_lookup_light+0xb2/0x160 [ 37.273818] __sys_sendmsg+0xa3/0x120 [ 37.277607] ? SyS_shutdown+0x160/0x160 [ 37.281556] ? move_addr_to_kernel+0x60/0x60 [ 37.285943] SyS_sendmsg+0x27/0x40 [ 37.289469] ? __sys_sendmsg+0x120/0x120 [ 37.293519] do_syscall_64+0x1d5/0x640 [ 37.297383] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 37.302545] RIP: 0033:0x443c49 [ 37.305720] RSP: 002b:00007ffe64ea8308 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.313400] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443c49 [ 37.320648] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000010 [ 37.327888] RBP: 00007ffe64ea8320 R08: 00000000bb1414ac R09: 00000000bb1414ac [ 37.335143] R10: 00000000bb1414ac R11: 0000000000000246 R12: 00007ffe64ea8350 [ 37.343694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 45.891005] NOHZ: local_softirq_pending 08