[ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 32.022728] audit: type=1400 audit(1588222699.592:8): avc: denied { execmem } for pid=5977 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 32.265107] IPVS: ftp: loaded support on port[0] = 21 [ 33.543438] can: request_module (can-proto-0) failed. [ 33.552116] can: request_module (can-proto-0) failed. [ 33.579032] audit: type=1400 audit(1588222701.153:9): avc: denied { create } for pid=5955 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.0.237' (ECDSA) to the list of known hosts. 2020/04/30 04:58:29 parsed 1 programs 2020/04/30 04:58:29 executed programs: 0 [ 42.152312] audit: type=1400 audit(1588222709.728:10): avc: denied { execmem } for pid=6102 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 42.439313] IPVS: ftp: loaded support on port[0] = 21 [ 43.209525] IPVS: ftp: loaded support on port[0] = 21 [ 43.255935] chnl_net:caif_netlink_parms(): no params data found [ 43.291838] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.298768] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.305751] device bridge_slave_0 entered promiscuous mode [ 43.314158] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.321102] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.328857] device bridge_slave_1 entered promiscuous mode [ 43.345352] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.354653] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.371315] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.379179] team0: Port device team_slave_0 added [ 43.384908] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.392212] team0: Port device team_slave_1 added [ 43.397559] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.405058] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.450413] device hsr_slave_0 entered promiscuous mode [ 43.488100] device hsr_slave_1 entered promiscuous mode [ 43.528319] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.539784] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.564070] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.570650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.577889] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.584598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.593646] IPVS: ftp: loaded support on port[0] = 21 [ 43.689736] IPVS: ftp: loaded support on port[0] = 21 [ 43.699099] chnl_net:caif_netlink_parms(): no params data found [ 43.715037] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 43.722950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.746500] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.829425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.838919] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.845951] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.860611] chnl_net:caif_netlink_parms(): no params data found [ 43.883530] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.890707] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.904699] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.911966] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.919979] device bridge_slave_0 entered promiscuous mode [ 43.928642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.936363] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.942768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.950653] IPVS: ftp: loaded support on port[0] = 21 [ 43.970568] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.977377] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.986356] device bridge_slave_0 entered promiscuous mode [ 43.993233] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.000723] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.007737] device bridge_slave_1 entered promiscuous mode [ 44.028349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.036425] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.043761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.051708] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.060031] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.068722] device bridge_slave_1 entered promiscuous mode [ 44.089291] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.110433] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.119083] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.134347] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.170775] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.178653] team0: Port device team_slave_0 added [ 44.197804] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.199353] IPVS: ftp: loaded support on port[0] = 21 [ 44.205556] team0: Port device team_slave_0 added [ 44.218653] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.225733] team0: Port device team_slave_1 added [ 44.236594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.244906] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 44.253954] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.263234] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.271700] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.281315] team0: Port device team_slave_1 added [ 44.286548] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.327588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.335369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.350204] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.362506] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.390778] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.398426] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.464072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.472637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.493186] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.531066] device hsr_slave_0 entered promiscuous mode [ 44.567712] device hsr_slave_1 entered promiscuous mode [ 44.619938] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.660069] device hsr_slave_0 entered promiscuous mode [ 44.697641] device hsr_slave_1 entered promiscuous mode [ 44.737729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.745685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.755516] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.761944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.774147] chnl_net:caif_netlink_parms(): no params data found [ 44.787974] chnl_net:caif_netlink_parms(): no params data found [ 44.797150] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.806467] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.813866] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.851811] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.893369] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.920088] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.926609] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.936722] device bridge_slave_0 entered promiscuous mode [ 44.946360] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.953763] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.961767] device bridge_slave_1 entered promiscuous mode [ 44.982861] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.990100] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.997055] device bridge_slave_0 entered promiscuous mode [ 45.005854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.028985] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.043547] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.055721] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.066173] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.074056] device bridge_slave_1 entered promiscuous mode [ 45.110085] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.145183] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.182144] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.191169] team0: Port device team_slave_0 added [ 45.201563] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.225947] chnl_net:caif_netlink_parms(): no params data found [ 45.236850] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.245109] team0: Port device team_slave_1 added [ 45.252615] audit: type=1804 audit(1588222712.829:11): pid=6909 uid=0 auid=0 ses=8 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir017682188/syzkaller.cvzLMW/0/file0/file0" dev="sda1" ino=15752 res=1 [ 45.276076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.288731] ------------[ cut here ]------------ [ 45.290914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.294013] WARNING: CPU: 1 PID: 6909 at fs/overlayfs/dir.c:523 ovl_create_or_link+0x545/0x13b0 [ 45.309078] Kernel panic - not syncing: panic_on_warn set ... [ 45.309078] [ 45.316436] CPU: 1 PID: 6909 Comm: syz-executor.3 Not tainted 4.14.177-syzkaller #0 [ 45.324244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.333597] Call Trace: [ 45.336180] dump_stack+0xf7/0x13b [ 45.339730] ? ovl_create_or_link+0x545/0x13b0 [ 45.344294] panic+0x1b0/0x358 [ 45.347485] ? add_taint.cold.5+0x11/0x11 [ 45.352075] ? ovl_create_or_link+0x545/0x13b0 [ 45.356669] __warn.cold.8+0x25/0x2c [ 45.360384] ? mark_held_locks+0xc7/0x130 [ 45.364536] ? ovl_create_or_link+0x545/0x13b0 [ 45.369102] report_bug+0x1a4/0x1f3 [ 45.372708] do_error_trap+0x1bd/0x310 [ 45.376585] ? math_error+0x300/0x300 [ 45.380383] ? debug_object_activate+0x251/0x4b0 [ 45.385123] ? mark_held_locks+0xc7/0x130 [ 45.389265] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 45.394084] do_invalid_op+0x1b/0x20 [ 45.397783] invalid_op+0x1b/0x40 [ 45.401331] RIP: 0010:ovl_create_or_link+0x545/0x13b0 [ 45.407648] RSP: 0018:ffff888095dafb00 EFLAGS: 00010202 [ 45.413648] RAX: 0000000000000000 RBX: ffff88807d22d5f0 RCX: ffff88807d20d54c [ 45.421004] RDX: 1ffff1100fa45abf RSI: ffff88809ee6afe8 RDI: ffff88807d22d5f8 [ 45.428387] RBP: ffff888095dafcb8 R08: ffff88809ee6b008 R09: 0000000000000000 [ 45.435737] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 45.443261] R13: 0000000000000000 R14: 1ffff11012bb5f6e R15: ffff88807d205550 [ 45.450813] ? mutex_lock_io_nested+0x1380/0x1380 [ 45.456092] ? ovl_unlink+0x10/0x10 [ 45.459698] ? lock_downgrade+0x7f0/0x7f0 [ 45.463847] ? dput.part.27+0x25/0x610 [ 45.467730] ? dput.part.27+0x25/0x610 [ 45.471610] ? creds_are_invalid+0x43/0xd0 [ 45.475836] ? mutex_lock_interruptible_nested+0x16/0x20 [ 45.481284] ? mutex_lock_interruptible_nested+0x16/0x20 [ 45.486714] ? ovl_nlink_start+0x211/0x420 [ 45.490944] ovl_link+0x151/0x19d [ 45.494591] ? ovl_create+0x20/0x20 [ 45.498242] vfs_link+0x646/0xa10 [ 45.501678] SyS_link+0x2f8/0x4b0 [ 45.505124] ? SyS_linkat+0x550/0x550 [ 45.508937] ? SyS_clock_gettime+0x115/0x160 [ 45.513350] ? SyS_clock_settime+0x1a0/0x1a0 [ 45.517760] ? do_syscall_64+0x4c/0x5b0 [ 45.521731] ? SyS_linkat+0x550/0x550 [ 45.525527] do_syscall_64+0x1c7/0x5b0 [ 45.529434] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 45.534271] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 45.539522] RIP: 0033:0x4597c9 [ 45.542819] RSP: 002b:00007efc06664c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 45.550526] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004597c9 [ 45.558054] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020000140 [ 45.565372] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 45.572634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc066656d4 [ 45.579912] R13: 00000000004f53e2 R14: 00000000004d9f08 R15: 00000000ffffffff [ 45.588746] Kernel Offset: disabled [ 45.592416] Rebooting in 86400 seconds..