[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 67.382277][ T26] audit: type=1800 audit(1576224542.777:25): pid=9036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 67.402392][ T26] audit: type=1800 audit(1576224542.787:26): pid=9036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 67.444683][ T26] audit: type=1800 audit(1576224542.787:27): pid=9036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.75' (ECDSA) to the list of known hosts. syzkaller login: [ 76.438959][ T9202] IPVS: ftp: loaded support on port[0] = 21 [ 76.450728][ T9199] IPVS: ftp: loaded support on port[0] = 21 [ 76.453558][ T9203] IPVS: ftp: loaded support on port[0] = 21 [ 76.481329][ T9201] IPVS: ftp: loaded support on port[0] = 21 [ 76.481751][ T9196] IPVS: ftp: loaded support on port[0] = 21 [ 76.488099][ T9204] IPVS: ftp: loaded support on port[0] = 21 [ 76.721388][ T9202] chnl_net:caif_netlink_parms(): no params data found [ 76.746400][ T9199] chnl_net:caif_netlink_parms(): no params data found [ 76.793991][ T9203] chnl_net:caif_netlink_parms(): no params data found [ 76.810053][ T9196] chnl_net:caif_netlink_parms(): no params data found [ 76.910016][ T9199] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.917675][ T9199] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.927760][ T9199] device bridge_slave_0 entered promiscuous mode [ 76.941442][ T9199] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.951073][ T9199] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.958851][ T9199] device bridge_slave_1 entered promiscuous mode [ 76.968573][ T9202] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.975865][ T9202] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.983495][ T9202] device bridge_slave_0 entered promiscuous mode [ 77.009390][ T9201] chnl_net:caif_netlink_parms(): no params data found [ 77.036977][ T9202] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.045171][ T9202] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.052891][ T9202] device bridge_slave_1 entered promiscuous mode [ 77.120387][ T9204] chnl_net:caif_netlink_parms(): no params data found [ 77.128896][ T9203] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.136800][ T9203] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.144929][ T9203] device bridge_slave_0 entered promiscuous mode [ 77.160183][ T9199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.169624][ T9196] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.177908][ T9196] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.185852][ T9196] device bridge_slave_0 entered promiscuous mode [ 77.194525][ T9202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.208227][ T9203] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.215442][ T9203] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.223138][ T9203] device bridge_slave_1 entered promiscuous mode [ 77.238383][ T9199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.256044][ T9196] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.263132][ T9196] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.271384][ T9196] device bridge_slave_1 entered promiscuous mode [ 77.279639][ T9202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.300509][ T9201] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.308719][ T9201] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.316747][ T9201] device bridge_slave_0 entered promiscuous mode [ 77.329001][ T9201] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.336981][ T9201] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.345153][ T9201] device bridge_slave_1 entered promiscuous mode [ 77.388370][ T9199] team0: Port device team_slave_0 added [ 77.399571][ T9203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.414705][ T9196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.425908][ T9202] team0: Port device team_slave_0 added [ 77.433323][ T9196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.460670][ T9199] team0: Port device team_slave_1 added [ 77.477079][ T9203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.494096][ T9202] team0: Port device team_slave_1 added [ 77.508001][ T9196] team0: Port device team_slave_0 added [ 77.521573][ T9201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.540020][ T9204] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.547619][ T9204] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.555918][ T9204] device bridge_slave_0 entered promiscuous mode [ 77.564461][ T9204] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.571533][ T9204] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.579586][ T9204] device bridge_slave_1 entered promiscuous mode [ 77.587879][ T9196] team0: Port device team_slave_1 added [ 77.595187][ T9201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.666575][ T9199] device hsr_slave_0 entered promiscuous mode [ 77.724723][ T9199] device hsr_slave_1 entered promiscuous mode [ 77.828236][ T9203] team0: Port device team_slave_0 added [ 77.846810][ T9203] team0: Port device team_slave_1 added [ 77.916464][ T9202] device hsr_slave_0 entered promiscuous mode [ 77.964853][ T9202] device hsr_slave_1 entered promiscuous mode [ 78.024874][ T9202] debugfs: Directory 'hsr0' with parent '/' already present! [ 78.036484][ T9201] team0: Port device team_slave_0 added [ 78.062523][ T9204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.091850][ T9201] team0: Port device team_slave_1 added [ 78.166871][ T9196] device hsr_slave_0 entered promiscuous mode [ 78.204978][ T9196] device hsr_slave_1 entered promiscuous mode [ 78.244586][ T9196] debugfs: Directory 'hsr0' with parent '/' already present! [ 78.253597][ T9204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.319244][ T9203] device hsr_slave_0 entered promiscuous mode [ 78.374889][ T9203] device hsr_slave_1 entered promiscuous mode [ 78.424535][ T9203] debugfs: Directory 'hsr0' with parent '/' already present! [ 78.446638][ T9202] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.539981][ T9204] team0: Port device team_slave_0 added [ 78.546954][ T9202] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.590981][ T9202] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.656641][ T9199] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.748198][ T9201] device hsr_slave_0 entered promiscuous mode [ 78.805258][ T9201] device hsr_slave_1 entered promiscuous mode [ 78.844791][ T9201] debugfs: Directory 'hsr0' with parent '/' already present! [ 78.856419][ T9204] team0: Port device team_slave_1 added [ 78.877439][ T9202] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.936849][ T9199] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.980781][ T9196] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.061809][ T9199] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.121687][ T9199] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.176140][ T9196] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.252579][ T9196] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.337766][ T9204] device hsr_slave_0 entered promiscuous mode [ 79.404964][ T9204] device hsr_slave_1 entered promiscuous mode [ 79.454684][ T9204] debugfs: Directory 'hsr0' with parent '/' already present! [ 79.476756][ T9203] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.535991][ T9196] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.614193][ T9203] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.649801][ T9203] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.744323][ T9203] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.800740][ T9201] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.856189][ T9204] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.911009][ T9204] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.960114][ T9201] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.988358][ T9204] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.039231][ T9204] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.106961][ T9201] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.187960][ T9201] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 80.278727][ T9202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.336173][ T9199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.350679][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.362860][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.375631][ T9202] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.411340][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.422605][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.431368][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.440536][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.449824][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.457885][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.466420][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.495318][ T9196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.517649][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.527195][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.536629][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.543663][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.551581][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.574991][ T9202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.585573][ T9202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.601026][ T9199] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.628544][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.637606][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.647133][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.656094][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.664634][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.672931][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.681822][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.690650][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.699067][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.707384][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.716113][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.724951][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.732004][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.740096][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.748163][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.756223][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.770050][ T9203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.794149][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.802406][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.810506][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.819407][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.828112][ T3214] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.835219][ T3214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.847316][ T9196] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.871434][ T9201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.890649][ T9203] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.919130][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.927654][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.936624][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.945314][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.953589][ T3214] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.960686][ T3214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.969095][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.977871][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.986363][ T3214] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.993480][ T3214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.001121][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.008872][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.018177][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.026104][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.033482][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.050990][ T9201] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.070787][ T9204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.079050][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.092229][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.101208][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.109920][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.118534][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.125637][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.136206][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.144095][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.152730][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.161285][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state executing program [ 81.168530][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.183239][ T9202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.212211][ T9204] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.223003][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.237379][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.238261][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.238806][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.239494][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.239534][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.239918][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.241701][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.242221][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready executing program [ 81.248625][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.248988][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.325105][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state executing program [ 81.372004][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.380838][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.381552][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.399818][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.408894][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.418473][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.428237][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.428989][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.429759][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.430392][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.463536][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.463952][ T9211] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.463984][ T9211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.464338][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.470780][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.507163][ T9211] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.507196][ T9211] bridge0: port 2(bridge_slave_1) entered forwarding state executing program [ 81.507617][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.508344][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.559018][ T9199] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network executing program executing program [ 81.570626][ T9199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.608462][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready executing program [ 81.618171][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.633419][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.641713][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.652213][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.652883][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.671165][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.680932][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.681727][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.682344][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.682915][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.683440][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.684151][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.685513][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.686487][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.687113][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready executing program [ 81.738325][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.782584][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.791153][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.800623][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.809999][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.810610][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.811166][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.812007][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.813183][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.813849][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.825970][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready executing program [ 81.891201][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.905871][ T9203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.914525][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.915222][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.916375][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.916979][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.917747][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.918339][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.918866][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.919376][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready executing program [ 81.919479][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.940121][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.009405][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.018918][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.028224][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.037278][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.037835][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.038384][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.046449][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.092877][ T9204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.093673][ T9204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.121437][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.121996][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.122480][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.122567][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready executing program [ 82.141479][ T9199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.172728][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.172827][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.174756][ T9212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.174888][ T9212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.209049][ T9203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.211949][ T9201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.216240][ T9196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.216611][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.216777][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.231142][ T9204] 8021q: adding VLAN 0 to HW filter on device batadv0 executing program executing program executing program executing program [ 82.479407][ T9259] ================================================================== [ 82.479469][ T9259] BUG: KASAN: slab-out-of-bounds in fbcon_get_font+0x2b2/0x5e0 [ 82.479480][ T9259] Read of size 5 at addr ffff8880a06f640c by task syz-executor114/9259 [ 82.479484][ T9259] [ 82.479499][ T9259] CPU: 1 PID: 9259 Comm: syz-executor114 Not tainted 5.5.0-rc1-next-20191212-syzkaller #0 [ 82.479507][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.479511][ T9259] Call Trace: [ 82.479529][ T9259] dump_stack+0x197/0x210 [ 82.479542][ T9259] ? fbcon_get_font+0x2b2/0x5e0 [ 82.479562][ T9259] print_address_description.constprop.0.cold+0xd4/0x30b [ 82.479573][ T9259] ? fbcon_get_font+0x2b2/0x5e0 [ 82.479584][ T9259] ? fbcon_get_font+0x2b2/0x5e0 [ 82.479597][ T9259] __kasan_report.cold+0x1b/0x41 [ 82.479611][ T9259] ? fbcon_get_font+0x2b2/0x5e0 [ 82.479625][ T9259] kasan_report+0x12/0x20 [ 82.479639][ T9259] check_memory_region+0x134/0x1a0 [ 82.479653][ T9259] memcpy+0x24/0x50 [ 82.479666][ T9259] fbcon_get_font+0x2b2/0x5e0 [ 82.479682][ T9259] ? display_to_var+0x7e0/0x7e0 [ 82.479696][ T9259] con_font_op+0x20b/0x1270 [ 82.479708][ T9259] ? mark_lock+0xc2/0x1220 [ 82.479722][ T9259] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 82.479735][ T9259] ? con_write+0xd0/0xd0 [ 82.479749][ T9259] ? cap_capable+0x205/0x270 [ 82.479768][ T9259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.479780][ T9259] ? security_capable+0x95/0xc0 [ 82.479796][ T9259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.479811][ T9259] ? ns_capable_common+0x93/0x100 [ 82.479829][ T9259] vt_ioctl+0xd2e/0x26d0 [ 82.479843][ T9259] ? complete_change_console+0x3a0/0x3a0 [ 82.479855][ T9259] ? lock_downgrade+0x920/0x920 [ 82.479877][ T9259] ? rwlock_bug.part.0+0x90/0x90 [ 82.479894][ T9259] ? tomoyo_path_number_perm+0x214/0x520 [ 82.479906][ T9259] ? find_held_lock+0x35/0x130 [ 82.479922][ T9259] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 82.479937][ T9259] ? tty_jobctrl_ioctl+0x50/0xd40 [ 82.479949][ T9259] ? complete_change_console+0x3a0/0x3a0 [ 82.479973][ T9259] tty_ioctl+0xa37/0x14f0 [ 82.479996][ T9259] ? tty_vhangup+0x30/0x30 [ 82.480015][ T9259] ? tomoyo_path_number_perm+0x454/0x520 [ 82.480035][ T9259] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 82.480048][ T9259] ? tomoyo_path_number_perm+0x25e/0x520 [ 82.480064][ T9259] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 82.480095][ T9259] ? tty_vhangup+0x30/0x30 [ 82.480113][ T9259] do_vfs_ioctl+0x977/0x14e0 [ 82.480132][ T9259] ? compat_ioctl_preallocate+0x220/0x220 [ 82.480146][ T9259] ? __fget+0x37f/0x550 [ 82.480170][ T9259] ? do_dup2+0x4f0/0x4f0 [ 82.480186][ T9259] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 82.480205][ T9259] ? tomoyo_file_ioctl+0x23/0x30 [ 82.480220][ T9259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.480233][ T9259] ? security_file_ioctl+0x8d/0xc0 [ 82.480248][ T9259] ksys_ioctl+0xab/0xd0 [ 82.480265][ T9259] __x64_sys_ioctl+0x73/0xb0 [ 82.480284][ T9259] do_syscall_64+0xfa/0x790 [ 82.480301][ T9259] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 82.480313][ T9259] RIP: 0033:0x448009 [ 82.480327][ T9259] Code: e8 6c e7 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 82.480334][ T9259] RSP: 002b:00007f7a3edb4db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.480347][ T9259] RAX: ffffffffffffffda RBX: 00000000006ddc48 RCX: 0000000000448009 [ 82.480355][ T9259] RDX: 0000000020000140 RSI: 0000000000004b60 RDI: 0000000000000003 [ 82.480363][ T9259] RBP: 00000000006ddc40 R08: 0000000000000000 R09: 0000000000000000 [ 82.480372][ T9259] R10: 000000000000000e R11: 0000000000000246 R12: 00000000006ddc4c [ 82.480386][ T9259] R13: 00007fff8f6acaef R14: 00007f7a3edb59c0 R15: 00000000006ddc4c [ 82.480406][ T9259] [ 82.480412][ T9259] Allocated by task 9238: [ 82.480423][ T9259] save_stack+0x23/0x90 [ 82.480434][ T9259] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 82.480443][ T9259] kasan_kmalloc+0x9/0x10 [ 82.480452][ T9259] __kmalloc+0x163/0x770 [ 82.480462][ T9259] fbcon_set_font+0x32d/0x860 [ 82.480473][ T9259] con_font_op+0xe30/0x1270 [ 82.480482][ T9259] vt_ioctl+0xd2e/0x26d0 [ 82.480493][ T9259] tty_ioctl+0xa37/0x14f0 [ 82.480504][ T9259] do_vfs_ioctl+0x977/0x14e0 [ 82.480514][ T9259] ksys_ioctl+0xab/0xd0 [ 82.480525][ T9259] __x64_sys_ioctl+0x73/0xb0 [ 82.480536][ T9259] do_syscall_64+0xfa/0x790 [ 82.480548][ T9259] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 82.480552][ T9259] [ 82.480557][ T9259] Freed by task 0: [ 82.480561][ T9259] (stack is not available) [ 82.480565][ T9259] [ 82.480575][ T9259] The buggy address belongs to the object at ffff8880a06f6000 [ 82.480575][ T9259] which belongs to the cache kmalloc-2k of size 2048 [ 82.480586][ T9259] The buggy address is located 1036 bytes inside of [ 82.480586][ T9259] 2048-byte region [ffff8880a06f6000, ffff8880a06f6800) [ 82.480591][ T9259] The buggy address belongs to the page: [ 82.480601][ T9259] page:ffffea000281bd80 refcount:1 mapcount:0 mapping:ffff8880aa400e00 index:0x0 [ 82.480618][ T9259] raw: 00fffe0000000200 ffffea0002899948 ffffea000246f948 ffff8880aa400e00 [ 82.480631][ T9259] raw: 0000000000000000 ffff8880a06f6000 0000000100000001 0000000000000000 [ 82.480636][ T9259] page dumped because: kasan: bad access detected [ 82.480638][ T9259] [ 82.480642][ T9259] Memory state around the buggy address: [ 82.480653][ T9259] ffff8880a06f6300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 82.480668][ T9259] ffff8880a06f6380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 82.480679][ T9259] >ffff8880a06f6400: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.480684][ T9259] ^ [ 82.480694][ T9259] ffff8880a06f6480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.480705][ T9259] ffff8880a06f6500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.480710][ T9259] ================================================================== [ 82.480715][ T9259] Disabling lock debugging due to kernel taint [ 82.483468][ T9259] Kernel panic - not syncing: panic_on_warn set ... [ 82.483486][ T9259] CPU: 1 PID: 9259 Comm: syz-executor114 Tainted: G B 5.5.0-rc1-next-20191212-syzkaller #0 [ 82.483493][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.483497][ T9259] Call Trace: [ 82.483516][ T9259] dump_stack+0x197/0x210 [ 82.483533][ T9259] panic+0x2e3/0x75c [ 82.483545][ T9259] ? add_taint.cold+0x16/0x16 [ 82.483559][ T9259] ? fbcon_get_font+0x2b2/0x5e0 [ 82.483574][ T9259] ? preempt_schedule+0x4b/0x60 [ 82.483589][ T9259] ? ___preempt_schedule+0x16/0x18 [ 82.483606][ T9259] ? trace_hardirqs_on+0x5e/0x240 [ 82.483620][ T9259] ? fbcon_get_font+0x2b2/0x5e0 [ 82.483632][ T9259] end_report+0x47/0x4f [ 82.483643][ T9259] ? fbcon_get_font+0x2b2/0x5e0 [ 82.483656][ T9259] __kasan_report.cold+0xe/0x41 [ 82.483668][ T9259] ? fbcon_get_font+0x2b2/0x5e0 [ 82.483682][ T9259] kasan_report+0x12/0x20 [ 82.483695][ T9259] check_memory_region+0x134/0x1a0 [ 82.483707][ T9259] memcpy+0x24/0x50 [ 82.483718][ T9259] fbcon_get_font+0x2b2/0x5e0 [ 82.483731][ T9259] ? display_to_var+0x7e0/0x7e0 [ 82.483744][ T9259] con_font_op+0x20b/0x1270 [ 82.483756][ T9259] ? mark_lock+0xc2/0x1220 [ 82.483771][ T9259] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 82.483783][ T9259] ? con_write+0xd0/0xd0 [ 82.483796][ T9259] ? cap_capable+0x205/0x270 [ 82.483812][ T9259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.483824][ T9259] ? security_capable+0x95/0xc0 [ 82.483838][ T9259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.483852][ T9259] ? ns_capable_common+0x93/0x100 [ 82.483867][ T9259] vt_ioctl+0xd2e/0x26d0 [ 82.483881][ T9259] ? complete_change_console+0x3a0/0x3a0 [ 82.483892][ T9259] ? lock_downgrade+0x920/0x920 [ 82.483907][ T9259] ? rwlock_bug.part.0+0x90/0x90 [ 82.483922][ T9259] ? tomoyo_path_number_perm+0x214/0x520 [ 82.483933][ T9259] ? find_held_lock+0x35/0x130 [ 82.483947][ T9259] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 82.483961][ T9259] ? tty_jobctrl_ioctl+0x50/0xd40 [ 82.483973][ T9259] ? complete_change_console+0x3a0/0x3a0 [ 82.483986][ T9259] tty_ioctl+0xa37/0x14f0 [ 82.484000][ T9259] ? tty_vhangup+0x30/0x30 [ 82.484012][ T9259] ? tomoyo_path_number_perm+0x454/0x520 [ 82.484025][ T9259] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 82.484038][ T9259] ? tomoyo_path_number_perm+0x25e/0x520 [ 82.484052][ T9259] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 82.484073][ T9259] ? tty_vhangup+0x30/0x30 [ 82.484087][ T9259] do_vfs_ioctl+0x977/0x14e0 [ 82.484102][ T9259] ? compat_ioctl_preallocate+0x220/0x220 [ 82.484114][ T9259] ? __fget+0x37f/0x550 [ 82.484128][ T9259] ? do_dup2+0x4f0/0x4f0 [ 82.484141][ T9259] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 82.484157][ T9259] ? tomoyo_file_ioctl+0x23/0x30 [ 82.484178][ T9259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.484189][ T9259] ? security_file_ioctl+0x8d/0xc0 [ 82.484201][ T9259] ksys_ioctl+0xab/0xd0 [ 82.484214][ T9259] __x64_sys_ioctl+0x73/0xb0 [ 82.484229][ T9259] do_syscall_64+0xfa/0x790 [ 82.484243][ T9259] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 82.484252][ T9259] RIP: 0033:0x448009 [ 82.484266][ T9259] Code: e8 6c e7 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 82.484273][ T9259] RSP: 002b:00007f7a3edb4db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.484291][ T9259] RAX: ffffffffffffffda RBX: 00000000006ddc48 RCX: 0000000000448009 [ 82.484298][ T9259] RDX: 0000000020000140 RSI: 0000000000004b60 RDI: 0000000000000003 [ 82.484306][ T9259] RBP: 00000000006ddc40 R08: 0000000000000000 R09: 0000000000000000 [ 82.484313][ T9259] R10: 000000000000000e R11: 0000000000000246 R12: 00000000006ddc4c [ 82.484322][ T9259] R13: 00007fff8f6acaef R14: 00007f7a3edb59c0 R15: 00000000006ddc4c [ 82.485824][ T9259] Kernel Offset: disabled