Warning: Permanently added '10.128.1.33' (ECDSA) to the list of known hosts. 2020/07/28 04:44:17 parsed 1 programs 2020/07/28 04:44:17 executed programs: 0 syzkaller login: [ 59.090055][ T6839] IPVS: ftp: loaded support on port[0] = 21 [ 59.189192][ T6839] chnl_net:caif_netlink_parms(): no params data found [ 59.239858][ T6839] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.247288][ T6839] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.254962][ T6839] device bridge_slave_0 entered promiscuous mode [ 59.265001][ T6839] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.272588][ T6839] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.280768][ T6839] device bridge_slave_1 entered promiscuous mode [ 59.300992][ T6839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.311940][ T6839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.333941][ T6839] team0: Port device team_slave_0 added [ 59.341340][ T6839] team0: Port device team_slave_1 added [ 59.359797][ T6839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.366930][ T6839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.393689][ T6839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.407763][ T6839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.414700][ T6839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.441328][ T6839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.519389][ T6839] device hsr_slave_0 entered promiscuous mode [ 59.556483][ T6839] device hsr_slave_1 entered promiscuous mode [ 59.678070][ T6839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.719603][ T6839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.779324][ T6839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.858628][ T6839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.912930][ T6839] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.920142][ T6839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.927918][ T6839] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.934999][ T6839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.977629][ T6839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.990507][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.001069][ T3846] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.009607][ T3846] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.018546][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 60.031321][ T6839] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.042222][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.051336][ T2534] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.058474][ T2534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.070613][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.079509][ T3846] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.086629][ T3846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.107500][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.117310][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.129533][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.143781][ T6839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.155876][ T6839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.169242][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.179368][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.188083][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.206116][ T2529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.213475][ T2529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.233586][ T6839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.252658][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.261701][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.281158][ T2529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.290517][ T2529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.302008][ T6839] device veth0_vlan entered promiscuous mode [ 60.308880][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.317972][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.331055][ T6839] device veth1_vlan entered promiscuous mode [ 60.351523][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.359848][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.368600][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.378231][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.390176][ T6839] device veth0_macvtap entered promiscuous mode [ 60.400575][ T6839] device veth1_macvtap entered promiscuous mode [ 60.417554][ T6839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.425322][ T2524] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.434469][ T2524] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.442706][ T2524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.452263][ T2524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.465253][ T6839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.473022][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.483019][ T2534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.622990][ T7089] ================================================================== [ 62.623043][ T7089] BUG: KASAN: slab-out-of-bounds in vc_do_resize+0x9d6/0x13f0 [ 62.623051][ T7089] Read of size 4 at addr ffff8880a90d63a0 by task syz-executor.0/7089 [ 62.623053][ T7089] [ 62.623074][ T7089] CPU: 1 PID: 7089 Comm: syz-executor.0 Not tainted 5.8.0-rc7-syzkaller #0 [ 62.623080][ T7089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.623083][ T7089] Call Trace: [ 62.623111][ T7089] dump_stack+0x18f/0x20d [ 62.623127][ T7089] ? vc_do_resize+0x9d6/0x13f0 [ 62.623135][ T7089] ? vc_do_resize+0x9d6/0x13f0 [ 62.623152][ T7089] print_address_description.constprop.0.cold+0xae/0x436 [ 62.623166][ T7089] ? lockdep_hardirqs_off+0x66/0xa0 [ 62.623176][ T7089] ? vprintk_func+0x97/0x1a6 [ 62.623189][ T7089] ? vc_do_resize+0x9d6/0x13f0 [ 62.623196][ T7089] kasan_report.cold+0x1f/0x37 [ 62.623206][ T7089] ? vc_do_resize+0x9d6/0x13f0 [ 62.623216][ T7089] check_memory_region+0x13d/0x180 [ 62.623224][ T7089] memcpy+0x20/0x60 [ 62.623234][ T7089] vc_do_resize+0x9d6/0x13f0 [ 62.623252][ T7089] ? store_bind+0x6a0/0x6a0 [ 62.623259][ T7089] ? memcpy+0x39/0x60 [ 62.623274][ T7089] fbcon_modechanged+0x36c/0x710 [ 62.623285][ T7089] fbcon_update_vcs+0x3a/0x50 [ 62.623294][ T7089] fb_set_var+0xae8/0xd60 [ 62.623304][ T7089] ? fb_blank+0x190/0x190 [ 62.623313][ T7089] ? lock_release+0x8d0/0x8d0 [ 62.623324][ T7089] ? lock_is_held_type+0xb0/0xe0 [ 62.623339][ T7089] ? do_fb_ioctl+0x2f2/0x6c0 [ 62.623357][ T7089] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 62.623366][ T7089] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 62.623376][ T7089] ? trace_hardirqs_on+0x5f/0x220 [ 62.623387][ T7089] do_fb_ioctl+0x33f/0x6c0 [ 62.623397][ T7089] ? fb_set_suspend+0x1a0/0x1a0 [ 62.623407][ T7089] ? tomoyo_execute_permission+0x470/0x470 [ 62.623421][ T7089] ? __might_fault+0x11f/0x1d0 [ 62.623435][ T7089] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 62.623444][ T7089] ? do_vfs_ioctl+0x27d/0x1090 [ 62.623467][ T7089] ? __fget_files+0x294/0x400 [ 62.623480][ T7089] fb_ioctl+0xdd/0x130 [ 62.623489][ T7089] ? do_fb_ioctl+0x6c0/0x6c0 [ 62.623496][ T7089] ksys_ioctl+0x11a/0x180 [ 62.623506][ T7089] __x64_sys_ioctl+0x6f/0xb0 [ 62.623513][ T7089] ? lockdep_hardirqs_on+0x6a/0xe0 [ 62.623522][ T7089] do_syscall_64+0x60/0xe0 [ 62.623532][ T7089] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 62.623539][ T7089] RIP: 0033:0x45c369 [ 62.623550][ T7089] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 62.623554][ T7089] RSP: 002b:00007f8abfa97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.623563][ T7089] RAX: ffffffffffffffda RBX: 000000000000d540 RCX: 000000000045c369 [ 62.623568][ T7089] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000006 [ 62.623573][ T7089] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 62.623577][ T7089] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 62.623582][ T7089] R13: 00007ffcca79d4cf R14: 00007f8abfa989c0 R15: 000000000078bf0c [ 62.623595][ T7089] [ 62.623599][ T7089] Allocated by task 1: [ 62.623610][ T7089] save_stack+0x1b/0x40 [ 62.623617][ T7089] __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 62.623624][ T7089] __kmalloc+0x17a/0x340 [ 62.623640][ T7089] tomoyo_encode2.part.0+0xe9/0x3a0 [ 62.623647][ T7089] tomoyo_encode+0x28/0x50 [ 62.623656][ T7089] tomoyo_realpath_from_path+0x186/0x620 [ 62.623663][ T7089] tomoyo_path_perm+0x212/0x3f0 [ 62.623674][ T7089] security_inode_getattr+0xcf/0x140 [ 62.623681][ T7089] vfs_statx+0x170/0x390 [ 62.623687][ T7089] __do_sys_newlstat+0x91/0x110 [ 62.623695][ T7089] do_syscall_64+0x60/0xe0 [ 62.623703][ T7089] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 62.623705][ T7089] [ 62.623708][ T7089] Freed by task 1: [ 62.623716][ T7089] save_stack+0x1b/0x40 [ 62.623722][ T7089] __kasan_slab_free+0xf5/0x140 [ 62.623729][ T7089] kfree+0x103/0x2c0 [ 62.623737][ T7089] tomoyo_path_perm+0x234/0x3f0 [ 62.623744][ T7089] security_inode_getattr+0xcf/0x140 [ 62.623750][ T7089] vfs_statx+0x170/0x390 [ 62.623756][ T7089] __do_sys_newlstat+0x91/0x110 [ 62.623764][ T7089] do_syscall_64+0x60/0xe0 [ 62.623772][ T7089] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 62.623774][ T7089] [ 62.623780][ T7089] The buggy address belongs to the object at ffff8880a90d6380 [ 62.623780][ T7089] which belongs to the cache kmalloc-32 of size 32 [ 62.623787][ T7089] The buggy address is located 0 bytes to the right of [ 62.623787][ T7089] 32-byte region [ffff8880a90d6380, ffff8880a90d63a0) [ 62.623790][ T7089] The buggy address belongs to the page: [ 62.623800][ T7089] page:ffffea0002a43580 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880a90d6fc1 [ 62.623806][ T7089] flags: 0xfffe0000000200(slab) [ 62.623818][ T7089] raw: 00fffe0000000200 ffffea0002996948 ffffea00026adfc8 ffff8880aa0001c0 [ 62.623827][ T7089] raw: ffff8880a90d6fc1 ffff8880a90d6000 0000000100000038 0000000000000000 [ 62.623831][ T7089] page dumped because: kasan: bad access detected [ 62.623833][ T7089] [ 62.623836][ T7089] Memory state around the buggy address: [ 62.623842][ T7089] ffff8880a90d6280: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 62.623849][ T7089] ffff8880a90d6300: 00 04 fc fc fc fc fc fc fb fb fb fb fc fc fc fc [ 62.623858][ T7089] >ffff8880a90d6380: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 62.623864][ T7089] ^ [ 62.623875][ T7089] ffff8880a90d6400: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 62.623886][ T7089] ffff8880a90d6480: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 62.623891][ T7089] ================================================================== [ 62.623896][ T7089] Disabling lock debugging due to kernel taint [ 62.623902][ T7089] Kernel panic - not syncing: panic_on_warn set ... [ 62.623917][ T7089] CPU: 1 PID: 7089 Comm: syz-executor.0 Tainted: G B 5.8.0-rc7-syzkaller #0 [ 62.623923][ T7089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.623927][ T7089] Call Trace: [ 62.623942][ T7089] dump_stack+0x18f/0x20d [ 62.623956][ T7089] ? vc_do_resize+0x970/0x13f0 [ 62.623965][ T7089] panic+0x2e3/0x75c [ 62.623973][ T7089] ? __warn_printk+0xf3/0xf3 [ 62.623982][ T7089] ? trace_hardirqs_on+0x55/0x220 [ 62.623990][ T7089] ? vc_do_resize+0x9d6/0x13f0 [ 62.623998][ T7089] ? vc_do_resize+0x9d6/0x13f0 [ 62.624004][ T7089] end_report+0x4d/0x53 [ 62.624011][ T7089] kasan_report.cold+0xd/0x37 [ 62.624019][ T7089] ? vc_do_resize+0x9d6/0x13f0 [ 62.624027][ T7089] check_memory_region+0x13d/0x180 [ 62.624033][ T7089] memcpy+0x20/0x60 [ 62.624041][ T7089] vc_do_resize+0x9d6/0x13f0 [ 62.624053][ T7089] ? store_bind+0x6a0/0x6a0 [ 62.624059][ T7089] ? memcpy+0x39/0x60 [ 62.624068][ T7089] fbcon_modechanged+0x36c/0x710 [ 62.624076][ T7089] fbcon_update_vcs+0x3a/0x50 [ 62.624084][ T7089] fb_set_var+0xae8/0xd60 [ 62.624092][ T7089] ? fb_blank+0x190/0x190 [ 62.624099][ T7089] ? lock_release+0x8d0/0x8d0 [ 62.624107][ T7089] ? lock_is_held_type+0xb0/0xe0 [ 62.624117][ T7089] ? do_fb_ioctl+0x2f2/0x6c0 [ 62.624128][ T7089] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 62.624136][ T7089] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 62.624147][ T7089] ? trace_hardirqs_on+0x5f/0x220 [ 62.624158][ T7089] do_fb_ioctl+0x33f/0x6c0 [ 62.624166][ T7089] ? fb_set_suspend+0x1a0/0x1a0 [ 62.624177][ T7089] ? tomoyo_execute_permission+0x470/0x470 [ 62.624186][ T7089] ? __might_fault+0x11f/0x1d0 [ 62.624200][ T7089] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 62.624209][ T7089] ? do_vfs_ioctl+0x27d/0x1090 [ 62.624222][ T7089] ? __fget_files+0x294/0x400 [ 62.624231][ T7089] fb_ioctl+0xdd/0x130 [ 62.624241][ T7089] ? do_fb_ioctl+0x6c0/0x6c0 [ 62.624247][ T7089] ksys_ioctl+0x11a/0x180 [ 62.624255][ T7089] __x64_sys_ioctl+0x6f/0xb0 [ 62.624261][ T7089] ? lockdep_hardirqs_on+0x6a/0xe0 [ 62.624269][ T7089] do_syscall_64+0x60/0xe0 [ 62.624277][ T7089] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 62.624283][ T7089] RIP: 0033:0x45c369 [ 62.624290][ T7089] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 62.624294][ T7089] RSP: 002b:00007f8abfa97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.624304][ T7089] RAX: ffffffffffffffda RBX: 000000000000d540 RCX: 000000000045c369 [ 62.624308][ T7089] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000006 [ 62.624314][ T7089] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 62.624318][ T7089] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 62.624325][ T7089] R13: 00007ffcca79d4cf R14: 00007f8abfa989c0 R15: 000000000078bf0c [ 62.625444][ T7089] Kernel Offset: disabled [ 63.471611][ T7089] Rebooting in 86400 seconds..