[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 61.205034][ T25] audit: type=1800 audit(1575503593.620:25): pid=8783 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 61.225519][ T25] audit: type=1800 audit(1575503593.620:26): pid=8783 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 61.280953][ T25] audit: type=1800 audit(1575503593.620:27): pid=8783 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.134' (ECDSA) to the list of known hosts. 2019/12/04 23:53:52 parsed 1 programs 2019/12/04 23:53:54 executed programs: 0 syzkaller login: [ 102.110079][ T8962] IPVS: ftp: loaded support on port[0] = 21 [ 102.118976][ T8963] IPVS: ftp: loaded support on port[0] = 21 [ 102.119917][ T8961] IPVS: ftp: loaded support on port[0] = 21 [ 102.127990][ T8966] IPVS: ftp: loaded support on port[0] = 21 [ 102.131703][ T8964] IPVS: ftp: loaded support on port[0] = 21 [ 102.139223][ T8965] IPVS: ftp: loaded support on port[0] = 21 [ 102.368987][ T8961] chnl_net:caif_netlink_parms(): no params data found [ 102.517921][ T8961] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.525662][ T8961] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.533382][ T8961] device bridge_slave_0 entered promiscuous mode [ 102.543713][ T8965] chnl_net:caif_netlink_parms(): no params data found [ 102.552088][ T8966] chnl_net:caif_netlink_parms(): no params data found [ 102.560921][ T8964] chnl_net:caif_netlink_parms(): no params data found [ 102.574930][ T8961] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.581979][ T8961] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.590118][ T8961] device bridge_slave_1 entered promiscuous mode [ 102.632121][ T8963] chnl_net:caif_netlink_parms(): no params data found [ 102.683041][ T8961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.727784][ T8961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.753086][ T8966] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.760826][ T8966] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.768655][ T8966] device bridge_slave_0 entered promiscuous mode [ 102.787881][ T8962] chnl_net:caif_netlink_parms(): no params data found [ 102.796314][ T8964] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.803377][ T8964] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.814527][ T8964] device bridge_slave_0 entered promiscuous mode [ 102.822104][ T8966] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.829835][ T8966] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.837607][ T8966] device bridge_slave_1 entered promiscuous mode [ 102.854721][ T8965] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.861786][ T8965] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.870260][ T8965] device bridge_slave_0 entered promiscuous mode [ 102.881495][ T8965] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.890013][ T8965] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.897881][ T8965] device bridge_slave_1 entered promiscuous mode [ 102.907601][ T8964] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.914774][ T8964] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.922433][ T8964] device bridge_slave_1 entered promiscuous mode [ 102.950462][ T8961] team0: Port device team_slave_0 added [ 102.961811][ T8961] team0: Port device team_slave_1 added [ 102.982492][ T8966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.077580][ T8961] device hsr_slave_0 entered promiscuous mode [ 103.114370][ T8961] device hsr_slave_1 entered promiscuous mode [ 103.157588][ T8966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.171942][ T8963] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.180481][ T8963] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.188582][ T8963] device bridge_slave_0 entered promiscuous mode [ 103.198302][ T8965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.216016][ T8965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.226638][ T8964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.248023][ T8963] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.256168][ T8963] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.264278][ T8963] device bridge_slave_1 entered promiscuous mode [ 103.271851][ T8962] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.279612][ T8962] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.288960][ T8962] device bridge_slave_0 entered promiscuous mode [ 103.301613][ T8962] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.309054][ T8962] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.317282][ T8962] device bridge_slave_1 entered promiscuous mode [ 103.335993][ T8964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.347425][ T8966] team0: Port device team_slave_0 added [ 103.359717][ T8966] team0: Port device team_slave_1 added [ 103.392595][ T8962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.403760][ T8962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.421140][ T8965] team0: Port device team_slave_0 added [ 103.432100][ T8965] team0: Port device team_slave_1 added [ 103.460652][ T8963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.482291][ T8964] team0: Port device team_slave_0 added [ 103.515118][ T8963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.533255][ T8964] team0: Port device team_slave_1 added [ 103.541209][ T8962] team0: Port device team_slave_0 added [ 103.547927][ T8961] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.637172][ T8966] device hsr_slave_0 entered promiscuous mode [ 103.685261][ T8966] device hsr_slave_1 entered promiscuous mode [ 103.734189][ T8966] debugfs: Directory 'hsr0' with parent '/' already present! [ 103.795916][ T8965] device hsr_slave_0 entered promiscuous mode [ 103.844404][ T8965] device hsr_slave_1 entered promiscuous mode [ 103.894181][ T8965] debugfs: Directory 'hsr0' with parent '/' already present! [ 103.910002][ T8962] team0: Port device team_slave_1 added [ 103.916836][ T8961] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.983529][ T8963] team0: Port device team_slave_0 added [ 104.047229][ T8964] device hsr_slave_0 entered promiscuous mode [ 104.104406][ T8964] device hsr_slave_1 entered promiscuous mode [ 104.144087][ T8964] debugfs: Directory 'hsr0' with parent '/' already present! [ 104.153029][ T8961] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.185986][ T8961] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.247321][ T8963] team0: Port device team_slave_1 added [ 104.335998][ T8963] device hsr_slave_0 entered promiscuous mode [ 104.374306][ T8963] device hsr_slave_1 entered promiscuous mode [ 104.414018][ T8963] debugfs: Directory 'hsr0' with parent '/' already present! [ 104.443368][ T8966] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.515961][ T8962] device hsr_slave_0 entered promiscuous mode [ 104.574499][ T8962] device hsr_slave_1 entered promiscuous mode [ 104.614113][ T8962] debugfs: Directory 'hsr0' with parent '/' already present! [ 104.651321][ T8966] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.706411][ T8966] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.777184][ T8966] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.826508][ T8964] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.871733][ T8964] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.915508][ T8965] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.967522][ T8965] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.025803][ T8965] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.085769][ T8963] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.128420][ T8964] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.189797][ T8964] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.268056][ T8965] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.328824][ T8963] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.376455][ T8963] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.430486][ T8963] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.526286][ T8962] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.600199][ T8962] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.626382][ T8962] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.675844][ T8962] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.725174][ T8961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.781964][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.795228][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.810637][ T8961] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.852748][ T8966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.868016][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.877057][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.886157][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.894255][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.902854][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.926542][ T8964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.945341][ T8966] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.953542][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.966984][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.976050][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.983120][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.990968][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.000487][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.008439][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.031213][ T8963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.045861][ T8964] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.053173][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.067274][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.075448][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.088569][ T8965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.109419][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.120312][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.129886][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.139012][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.148070][ T3214] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.155210][ T3214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.162740][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.171540][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.179951][ T3214] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.187137][ T3214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.194887][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.203755][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.211784][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.229738][ T8963] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.253138][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.261927][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.270440][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.278397][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.288199][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.296952][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.306557][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.313589][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.321921][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.329622][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.337485][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.346064][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.355120][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.362174][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.370309][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.378786][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.387174][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.395973][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.407053][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.428426][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.444126][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.452856][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.462462][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.471521][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.478761][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.487477][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.496306][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.507007][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.515692][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.524442][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.531514][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.539264][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.548020][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.556671][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.565717][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.573647][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.600060][ T8965] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.610947][ T8973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.621326][ T8973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.630612][ T8973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.639347][ T8973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.647911][ T8973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.658044][ T8973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.666938][ T8973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.676146][ T8973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.685651][ T8973] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.692711][ T8973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.703533][ T8973] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.711859][ T8973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.721452][ T8973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.742996][ T8963] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.754392][ T8963] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.771763][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.780936][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.789955][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.804047][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.812518][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.821606][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.830939][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.843653][ T8966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.875164][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.887553][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.898221][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.907528][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.916059][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.926788][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.955397][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.963243][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.972248][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.980956][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.988105][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.996195][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.005137][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.013459][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.028977][ T8966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.057853][ T8961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.070773][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.080605][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.094579][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.102551][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.113352][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.121927][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.132481][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.141606][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.172664][ T8964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.190105][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.216593][ T8962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.234005][ T8963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.294482][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.315055][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.323668][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.343642][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.354584][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.377305][ T8962] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.385863][ C1] hrtimer: interrupt took 26760 ns [ 107.414953][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.435494][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.451567][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.461697][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.475545][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.489012][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.498614][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.505746][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.515200][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.523986][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.533511][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.558252][ T8964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.579034][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.593363][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.602625][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.609755][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.620541][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.630440][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.639491][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.650682][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.661163][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.670418][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.679797][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.698047][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.719778][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.750483][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.822965][ T8962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.837217][ T8962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.864879][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.882415][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.912240][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.940986][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.981078][ T8965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.994834][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.005317][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.013042][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.032144][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.041174][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.056405][ T8962] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/12/04 23:54:00 executed programs: 6 2019/12/04 23:54:05 executed programs: 40 [ 118.127878][ T9258] ================================================================== [ 118.136186][ T9258] BUG: KASAN: slab-out-of-bounds in linear_transfer+0x6de/0x970 [ 118.143817][ T9258] Read of size 1 at addr ffff8880973671c0 by task syz-executor.0/9258 [ 118.152163][ T9258] [ 118.154499][ T9258] CPU: 0 PID: 9258 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 118.162732][ T9258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 118.172804][ T9258] Call Trace: [ 118.176452][ T9258] dump_stack+0x197/0x210 [ 118.180797][ T9258] ? linear_transfer+0x6de/0x970 [ 118.185732][ T9258] print_address_description.constprop.0.cold+0xd4/0x30b [ 118.192752][ T9258] ? linear_transfer+0x6de/0x970 [ 118.197685][ T9258] ? linear_transfer+0x6de/0x970 [ 118.202666][ T9258] __kasan_report.cold+0x1b/0x41 [ 118.207600][ T9258] ? snd_pcm_oss_capture_position_fixup+0x1a0/0x230 [ 118.214193][ T9258] ? linear_transfer+0x6de/0x970 [ 118.219192][ T9258] kasan_report+0x12/0x20 [ 118.223531][ T9258] check_memory_region+0x134/0x1a0 [ 118.228631][ T9258] memcpy+0x24/0x50 [ 118.232431][ T9258] linear_transfer+0x6de/0x970 [ 118.237178][ T9258] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 118.243418][ T9258] ? snd_pcm_plugin_build_copy+0x410/0x410 [ 118.249223][ T9258] ? io_capture_transfer+0x1fd/0x330 [ 118.254498][ T9258] ? rate_dst_frames+0x2e0/0x2e0 [ 118.259422][ T9258] snd_pcm_plug_read_transfer+0x197/0x2e0 [ 118.265138][ T9258] ? snd_pcm_plug_write_transfer+0x3e0/0x3e0 [ 118.271102][ T9258] ? snd_pcm_format_physical_width+0x75/0x90 [ 118.278024][ T9258] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 118.283726][ T9258] ? snd_pcm_plug_client_channels_buf+0x212/0x450 [ 118.290123][ T9258] snd_pcm_oss_read2+0x1f0/0x3f0 [ 118.295040][ T9258] ? snd_pcm_oss_read3+0x420/0x420 [ 118.300136][ T9258] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 118.306356][ T9258] snd_pcm_oss_read+0x548/0x6a0 [ 118.311216][ T9258] __vfs_read+0x8a/0x110 [ 118.315438][ T9258] ? snd_pcm_oss_read2+0x3f0/0x3f0 [ 118.320530][ T9258] vfs_read+0x1f0/0x440 [ 118.324673][ T9258] ksys_read+0x14f/0x290 [ 118.328898][ T9258] ? kernel_write+0x130/0x130 [ 118.333559][ T9258] ? do_fast_syscall_32+0xd1/0xe16 [ 118.338649][ T9258] ? entry_SYSENTER_compat+0x70/0x7f [ 118.344009][ T9258] ? do_fast_syscall_32+0xd1/0xe16 [ 118.349107][ T9258] __ia32_sys_read+0x71/0xb0 [ 118.353693][ T9258] do_fast_syscall_32+0x27b/0xe16 [ 118.358704][ T9258] entry_SYSENTER_compat+0x70/0x7f [ 118.363795][ T9258] RIP: 0023:0xf7f46a39 [ 118.367865][ T9258] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 118.387458][ T9258] RSP: 002b:00000000f7f420cc EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 118.395849][ T9258] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000380 [ 118.403805][ T9258] RDX: 0000000000000313 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.411784][ T9258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.419746][ T9258] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 118.427875][ T9258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.435846][ T9258] [ 118.438154][ T9258] Allocated by task 9258: [ 118.442466][ T9258] save_stack+0x23/0x90 [ 118.446601][ T9258] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 118.452212][ T9258] kasan_kmalloc+0x9/0x10 [ 118.456524][ T9258] __kmalloc_node+0x4e/0x70 [ 118.461033][ T9258] kvmalloc_node+0x68/0x100 [ 118.465519][ T9258] snd_pcm_plugin_alloc+0x585/0x770 [ 118.470700][ T9258] snd_pcm_plug_alloc+0x146/0x330 [ 118.475704][ T9258] snd_pcm_oss_change_params_locked+0x210f/0x3750 [ 118.482102][ T9258] snd_pcm_oss_change_params+0x7b/0xd0 [ 118.487540][ T9258] snd_pcm_oss_get_active_substream+0x136/0x190 [ 118.493775][ T9258] snd_pcm_oss_ioctl+0x1794/0x33a0 [ 118.498869][ T9258] snd_pcm_oss_ioctl_compat+0x24/0x30 [ 118.504240][ T9258] __ia32_compat_sys_ioctl+0x233/0x610 [ 118.509683][ T9258] do_fast_syscall_32+0x27b/0xe16 [ 118.514694][ T9258] entry_SYSENTER_compat+0x70/0x7f [ 118.520387][ T9258] [ 118.522701][ T9258] Freed by task 8961: [ 118.526664][ T9258] save_stack+0x23/0x90 [ 118.530797][ T9258] __kasan_slab_free+0x102/0x150 [ 118.535718][ T9258] kasan_slab_free+0xe/0x10 [ 118.540200][ T9258] kfree+0x10a/0x2c0 [ 118.544078][ T9258] tomoyo_path_number_perm+0x454/0x520 [ 118.549526][ T9258] tomoyo_file_ioctl+0x23/0x30 [ 118.554378][ T9258] security_file_ioctl+0x77/0xc0 [ 118.559424][ T9258] __ia32_compat_sys_ioctl+0xcc/0x610 [ 118.564807][ T9258] do_fast_syscall_32+0x27b/0xe16 [ 118.569813][ T9258] entry_SYSENTER_compat+0x70/0x7f [ 118.584009][ T9258] [ 118.586321][ T9258] The buggy address belongs to the object at ffff888097367180 [ 118.586321][ T9258] which belongs to the cache kmalloc-64 of size 64 [ 118.600181][ T9258] The buggy address is located 0 bytes to the right of [ 118.600181][ T9258] 64-byte region [ffff888097367180, ffff8880973671c0) [ 118.613688][ T9258] The buggy address belongs to the page: [ 118.619308][ T9258] page:ffffea00025cd9c0 refcount:1 mapcount:0 mapping:ffff8880aa400380 index:0x0 [ 118.628412][ T9258] raw: 00fffe0000000200 ffffea000283cc48 ffffea00025815c8 ffff8880aa400380 [ 118.637974][ T9258] raw: 0000000000000000 ffff888097367000 0000000100000020 0000000000000000 [ 118.646556][ T9258] page dumped because: kasan: bad access detected [ 118.652946][ T9258] [ 118.655261][ T9258] Memory state around the buggy address: [ 118.660879][ T9258] ffff888097367080: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 118.668952][ T9258] ffff888097367100: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 118.677009][ T9258] >ffff888097367180: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 118.685059][ T9258] ^ [ 118.691190][ T9258] ffff888097367200: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 118.699231][ T9258] ffff888097367280: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 118.707818][ T9258] ================================================================== [ 118.715870][ T9258] Disabling lock debugging due to kernel taint [ 118.726904][ T9258] Kernel panic - not syncing: panic_on_warn set ... [ 118.734568][ T9258] CPU: 1 PID: 9258 Comm: syz-executor.0 Tainted: G B 5.4.0-syzkaller #0 [ 118.744192][ T9258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 118.754243][ T9258] Call Trace: [ 118.757535][ T9258] dump_stack+0x197/0x210 [ 118.761867][ T9258] panic+0x2e3/0x75c [ 118.765766][ T9258] ? add_taint.cold+0x16/0x16 [ 118.770444][ T9258] ? linear_transfer+0x6de/0x970 [ 118.775380][ T9258] ? preempt_schedule+0x4b/0x60 [ 118.780230][ T9258] ? ___preempt_schedule+0x16/0x18 [ 118.785339][ T9258] ? trace_hardirqs_on+0x5e/0x240 [ 118.790360][ T9258] ? linear_transfer+0x6de/0x970 [ 118.795293][ T9258] end_report+0x47/0x4f [ 118.799441][ T9258] ? linear_transfer+0x6de/0x970 [ 118.804374][ T9258] __kasan_report.cold+0xe/0x41 [ 118.809218][ T9258] ? snd_pcm_oss_capture_position_fixup+0x1a0/0x230 [ 118.815818][ T9258] ? linear_transfer+0x6de/0x970 [ 118.820750][ T9258] kasan_report+0x12/0x20 [ 118.825077][ T9258] check_memory_region+0x134/0x1a0 [ 118.830177][ T9258] memcpy+0x24/0x50 [ 118.833982][ T9258] linear_transfer+0x6de/0x970 [ 118.838747][ T9258] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 118.845018][ T9258] ? snd_pcm_plugin_build_copy+0x410/0x410 [ 118.850826][ T9258] ? io_capture_transfer+0x1fd/0x330 [ 118.856113][ T9258] ? rate_dst_frames+0x2e0/0x2e0 [ 118.861053][ T9258] snd_pcm_plug_read_transfer+0x197/0x2e0 [ 118.866777][ T9258] ? snd_pcm_plug_write_transfer+0x3e0/0x3e0 [ 118.872753][ T9258] ? snd_pcm_format_physical_width+0x75/0x90 [ 118.878734][ T9258] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 118.884462][ T9258] ? snd_pcm_plug_client_channels_buf+0x212/0x450 [ 118.890892][ T9258] snd_pcm_oss_read2+0x1f0/0x3f0 [ 118.895865][ T9258] ? snd_pcm_oss_read3+0x420/0x420 [ 118.900998][ T9258] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 118.907270][ T9258] snd_pcm_oss_read+0x548/0x6a0 [ 118.912138][ T9258] __vfs_read+0x8a/0x110 [ 118.916387][ T9258] ? snd_pcm_oss_read2+0x3f0/0x3f0 [ 118.921503][ T9258] vfs_read+0x1f0/0x440 [ 118.925667][ T9258] ksys_read+0x14f/0x290 [ 118.929914][ T9258] ? kernel_write+0x130/0x130 2019/12/04 23:54:11 executed programs: 76 [ 118.934604][ T9258] ? do_fast_syscall_32+0xd1/0xe16 [ 118.939718][ T9258] ? entry_SYSENTER_compat+0x70/0x7f [ 118.945004][ T9258] ? do_fast_syscall_32+0xd1/0xe16 [ 118.950126][ T9258] __ia32_sys_read+0x71/0xb0 [ 118.953485][ T4085] kobject: 'loop4' (00000000ac44146a): kobject_uevent_env [ 118.954741][ T9258] do_fast_syscall_32+0x27b/0xe16 [ 118.954756][ T9258] entry_SYSENTER_compat+0x70/0x7f [ 118.954766][ T9258] RIP: 0023:0xf7f46a39 [ 118.954779][ T9258] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 118.954784][ T9258] RSP: 002b:00000000f7f420cc EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 118.954796][ T9258] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000380 [ 118.954802][ T9258] RDX: 0000000000000313 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.954808][ T9258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.954820][ T9258] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 118.964915][ T4085] kobject: 'loop4' (00000000ac44146a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 118.966919][ T9258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.968246][ T9258] Kernel Offset: disabled [ 119.061678][ T9258] Rebooting in 86400 seconds..