[ 68.123607][ T27] audit: type=1800 audit(1576184814.537:26): pid=9219 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 69.477183][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 69.477195][ T27] audit: type=1800 audit(1576184815.907:29): pid=9219 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 69.503834][ T27] audit: type=1800 audit(1576184815.917:30): pid=9219 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.2' (ECDSA) to the list of known hosts. 2019/12/12 21:07:03 parsed 1 programs 2019/12/12 21:07:06 executed programs: 0 syzkaller login: [ 80.168386][ T9397] IPVS: ftp: loaded support on port[0] = 21 [ 80.185347][ T9394] IPVS: ftp: loaded support on port[0] = 21 [ 80.247114][ T9398] IPVS: ftp: loaded support on port[0] = 21 [ 80.278648][ T9404] IPVS: ftp: loaded support on port[0] = 21 [ 80.280917][ T9401] IPVS: ftp: loaded support on port[0] = 21 [ 80.303531][ T9403] IPVS: ftp: loaded support on port[0] = 21 [ 80.552619][ T9397] chnl_net:caif_netlink_parms(): no params data found [ 80.617603][ T9394] chnl_net:caif_netlink_parms(): no params data found [ 80.710713][ T9404] chnl_net:caif_netlink_parms(): no params data found [ 80.726083][ T9401] chnl_net:caif_netlink_parms(): no params data found [ 80.739596][ T9398] chnl_net:caif_netlink_parms(): no params data found [ 80.765681][ T9397] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.773776][ T9397] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.781866][ T9397] device bridge_slave_0 entered promiscuous mode [ 80.793858][ T9397] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.800916][ T9397] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.808951][ T9397] device bridge_slave_1 entered promiscuous mode [ 80.861099][ T9394] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.868491][ T9394] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.876503][ T9394] device bridge_slave_0 entered promiscuous mode [ 80.891264][ T9394] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.898694][ T9394] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.906908][ T9394] device bridge_slave_1 entered promiscuous mode [ 80.925224][ T9403] chnl_net:caif_netlink_parms(): no params data found [ 80.965520][ T9397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.988223][ T9397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.014022][ T9398] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.021208][ T9398] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.030164][ T9398] device bridge_slave_0 entered promiscuous mode [ 81.042971][ T9401] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.050049][ T9401] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.058184][ T9401] device bridge_slave_0 entered promiscuous mode [ 81.071149][ T9401] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.079221][ T9401] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.087985][ T9401] device bridge_slave_1 entered promiscuous mode [ 81.095369][ T9404] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.106170][ T9404] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.114334][ T9404] device bridge_slave_0 entered promiscuous mode [ 81.125752][ T9394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.135056][ T9398] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.143064][ T9398] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.150810][ T9398] device bridge_slave_1 entered promiscuous mode [ 81.180981][ T9404] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.188650][ T9404] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.200099][ T9404] device bridge_slave_1 entered promiscuous mode [ 81.208683][ T9394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.226351][ T9397] team0: Port device team_slave_0 added [ 81.240315][ T9398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.280423][ T9397] team0: Port device team_slave_1 added [ 81.288765][ T9401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.305868][ T9398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.322768][ T9394] team0: Port device team_slave_0 added [ 81.330489][ T9394] team0: Port device team_slave_1 added [ 81.341909][ T9401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.353505][ T9404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.369887][ T9403] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.377161][ T9403] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.388672][ T9403] device bridge_slave_0 entered promiscuous mode [ 81.414295][ T9404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.428199][ T9403] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.435552][ T9403] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.443489][ T9403] device bridge_slave_1 entered promiscuous mode [ 81.487963][ T9398] team0: Port device team_slave_0 added [ 81.545996][ T9397] device hsr_slave_0 entered promiscuous mode [ 81.582588][ T9397] device hsr_slave_1 entered promiscuous mode [ 81.630044][ T9401] team0: Port device team_slave_0 added [ 81.675429][ T9394] device hsr_slave_0 entered promiscuous mode [ 81.712828][ T9394] device hsr_slave_1 entered promiscuous mode [ 81.781862][ T9394] debugfs: Directory 'hsr0' with parent '/' already present! [ 81.798027][ T9398] team0: Port device team_slave_1 added [ 81.816354][ T9403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.827265][ T9401] team0: Port device team_slave_1 added [ 81.835901][ T9404] team0: Port device team_slave_0 added [ 81.847222][ T9404] team0: Port device team_slave_1 added [ 81.871295][ T9403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.975516][ T9401] device hsr_slave_0 entered promiscuous mode [ 82.032412][ T9401] device hsr_slave_1 entered promiscuous mode [ 82.101885][ T9401] debugfs: Directory 'hsr0' with parent '/' already present! [ 82.174083][ T9404] device hsr_slave_0 entered promiscuous mode [ 82.212262][ T9404] device hsr_slave_1 entered promiscuous mode [ 82.261903][ T9404] debugfs: Directory 'hsr0' with parent '/' already present! [ 82.324163][ T9398] device hsr_slave_0 entered promiscuous mode [ 82.362100][ T9398] device hsr_slave_1 entered promiscuous mode [ 82.432204][ T9398] debugfs: Directory 'hsr0' with parent '/' already present! [ 82.440032][ T9394] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.489870][ T9394] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.567507][ T9403] team0: Port device team_slave_0 added [ 82.579318][ T9403] team0: Port device team_slave_1 added [ 82.595780][ T9394] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.639915][ T9394] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.742431][ T9397] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.764555][ T9404] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 82.805518][ T9404] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 82.868084][ T9397] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.932000][ T9404] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 82.984945][ T9404] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.106089][ T9403] device hsr_slave_0 entered promiscuous mode [ 83.162769][ T9403] device hsr_slave_1 entered promiscuous mode [ 83.211869][ T9403] debugfs: Directory 'hsr0' with parent '/' already present! [ 83.220012][ T9397] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.294745][ T9397] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.337202][ T9401] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.398177][ T9401] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.453544][ T9398] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.496505][ T9398] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.568840][ T9401] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.624181][ T9398] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.671168][ T9398] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.727710][ T9401] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.891231][ T9403] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.915314][ T9403] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.966353][ T9403] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.051778][ T9403] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.100692][ T9394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.134390][ T9397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.176916][ T9394] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.196376][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.205587][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.214988][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.223271][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.230969][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.239948][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.248677][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.255945][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.265991][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.278318][ T9397] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.313857][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.323067][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.331389][ T3060] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.338622][ T3060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.346515][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.370633][ T9401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.394303][ T9404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.402498][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.411148][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.419707][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.426800][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.466631][ T9401] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.478821][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.488785][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.498189][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.508202][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.515372][ T3081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.524136][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.532937][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.542186][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.550808][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.559427][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.567686][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.575733][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.583874][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.608343][ T9398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.632275][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.640391][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.650146][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.658996][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.668266][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.677986][ T3081] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.685134][ T3081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.692777][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.701458][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.710357][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.719432][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.727651][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.739591][ T9404] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.772688][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.781305][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.791404][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.801388][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.810059][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.818819][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.827401][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.834517][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.842791][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.851272][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.859797][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.867723][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.876117][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.884674][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.907635][ T9398] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.927196][ T9394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.939483][ T9394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.947865][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.957682][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.966327][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.974947][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.983685][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.992299][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.999361][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.007091][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.016695][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.025475][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.034200][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.041241][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.049446][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.067080][ T9397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.099549][ T9403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.112261][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.120916][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.130311][ T3076] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.137440][ T3076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.146655][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.156794][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.166120][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.174891][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.184121][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.193029][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.202175][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.210876][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.221555][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.230013][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.239977][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.275117][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.283983][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.293045][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.302076][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.310476][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.319917][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.328414][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.335504][ T3081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.343250][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.350997][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.358968][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.368172][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.381966][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.410723][ T9403] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.422747][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.432824][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.441283][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.454196][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.465299][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.474150][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.482067][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.502068][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.510711][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.520067][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.528763][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.538003][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.547641][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.556241][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.564889][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.573844][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.583916][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.608789][ T9394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.620529][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.633775][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.644369][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.653213][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.660282][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.669416][ T9404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.710247][ T9397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.728254][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.739991][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.748939][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.757097][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.767056][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.776012][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.783151][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.795267][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.803259][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.810901][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.836581][ T9401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.849316][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.874347][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.900731][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.946852][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.964726][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.977193][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.990470][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.007172][ T9398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.029716][ T9404] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/12/12 21:07:12 executed programs: 6 [ 86.058378][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.076152][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.135606][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.189785][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.206718][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.218785][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.250767][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.374812][ T9449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.403265][ T9449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.438631][ T9403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.561027][ T9728] ================================================================== [ 88.569424][ T9728] BUG: KASAN: global-out-of-bounds in precalculate_color+0x2154/0x2480 [ 88.577666][ T9728] Read of size 1 at addr ffffffff88b4389f by task vivid-000-vid-c/9728 [ 88.577687][ T9728] [ 88.577702][ T9728] CPU: 1 PID: 9728 Comm: vivid-000-vid-c Not tainted 5.5.0-rc1-next-20191212-syzkaller #0 [ 88.577716][ T9728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.577721][ T9728] Call Trace: [ 88.577744][ T9728] dump_stack+0x197/0x210 [ 88.615988][ T9728] ? precalculate_color+0x2154/0x2480 [ 88.621376][ T9728] print_address_description.constprop.0.cold+0x5/0x30b [ 88.621400][ T9728] ? precalculate_color+0x2154/0x2480 [ 88.633685][ T9728] ? precalculate_color+0x2154/0x2480 [ 88.639074][ T9728] __kasan_report.cold+0x1b/0x41 [ 88.644038][ T9728] ? color_to_ycbcr.isra.0+0x330/0x660 [ 88.649513][ T9728] ? precalculate_color+0x2154/0x2480 [ 88.654905][ T9728] kasan_report+0x12/0x20 [ 88.659248][ T9728] __asan_report_load1_noabort+0x14/0x20 [ 88.664894][ T9728] precalculate_color+0x2154/0x2480 [ 88.670115][ T9728] ? color_to_ycbcr.isra.0+0x660/0x660 [ 88.675608][ T9728] tpg_recalc+0x561/0x2850 [ 88.680057][ T9728] ? tpg_get_color.isra.0+0x300/0x300 [ 88.685441][ T9728] ? __kasan_check_read+0x11/0x20 [ 88.690479][ T9728] ? mark_lock+0xc2/0x1220 [ 88.694907][ T9728] ? __kasan_check_read+0x11/0x20 [ 88.699941][ T9728] ? vb2_vmalloc_vaddr+0x37/0x50 [ 88.704897][ T9728] tpg_calc_text_basep+0xa1/0x290 [ 88.709940][ T9728] vivid_fillbuff+0x1a5f/0x3af0 [ 88.714806][ T9728] ? __kasan_check_read+0x11/0x20 [ 88.719872][ T9728] ? vivid_grab_controls+0x380/0x380 [ 88.725163][ T9728] ? find_held_lock+0x35/0x130 [ 88.729940][ T9728] ? vivid_thread_vid_cap_tick+0x112f/0x2210 [ 88.735935][ T9728] ? lock_downgrade+0x920/0x920 [ 88.740802][ T9728] ? rwlock_bug.part.0+0x90/0x90 [ 88.745754][ T9728] ? v4l2_ctrl_request_setup+0x46c/0xb30 [ 88.751413][ T9728] vivid_thread_vid_cap_tick+0x8cf/0x2210 [ 88.757150][ T9728] ? vivid_thread_vid_cap_tick+0x8cf/0x2210 [ 88.763074][ T9728] ? lock_downgrade+0x920/0x920 [ 88.768132][ T9728] ? lock_acquire+0x190/0x410 [ 88.772833][ T9728] vivid_thread_vid_cap+0x5d8/0xa60 [ 88.778036][ T9728] kthread+0x361/0x430 [ 88.782108][ T9728] ? vivid_thread_vid_cap_tick+0x2210/0x2210 [ 88.788163][ T9728] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 88.793901][ T9728] ret_from_fork+0x24/0x30 [ 88.798330][ T9728] [ 88.800649][ T9728] The buggy address belongs to the variable: [ 88.806651][ T9728] sin+0x17f/0x280 [ 88.810629][ T9728] [ 88.812942][ T9728] Memory state around the buggy address: [ 88.818656][ T9728] ffffffff88b43780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 88.826708][ T9728] ffffffff88b43800: 00 00 00 00 01 fa fa fa fa fa fa fa 00 00 06 fa [ 88.834768][ T9728] >ffffffff88b43880: fa fa fa fa 04 fa fa fa fa fa fa fa 05 fa fa fa [ 88.842833][ T9728] ^ [ 88.847703][ T9728] ffffffff88b43900: fa fa fa fa 05 fa fa fa fa fa fa fa 00 00 fa fa [ 88.855748][ T9728] ffffffff88b43980: fa fa fa fa 00 00 00 00 00 00 fa fa fa fa fa fa [ 88.863793][ T9728] ================================================================== [ 88.871854][ T9728] Disabling lock debugging due to kernel taint [ 88.881058][ T9728] Kernel panic - not syncing: panic_on_warn set ... [ 88.887705][ T9728] CPU: 1 PID: 9728 Comm: vivid-000-vid-c Tainted: G B 5.5.0-rc1-next-20191212-syzkaller #0 [ 88.899027][ T9728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.909135][ T9728] Call Trace: [ 88.912443][ T9728] dump_stack+0x197/0x210 [ 88.916767][ T9728] panic+0x2e3/0x75c [ 88.920703][ T9728] ? add_taint.cold+0x16/0x16 [ 88.925374][ T9728] ? precalculate_color+0x2154/0x2480 [ 88.930916][ T9728] ? preempt_schedule+0x4b/0x60 [ 88.935785][ T9728] ? ___preempt_schedule+0x16/0x18 [ 88.940898][ T9728] ? trace_hardirqs_on+0x5e/0x240 [ 88.945941][ T9728] ? precalculate_color+0x2154/0x2480 [ 88.951342][ T9728] end_report+0x47/0x4f [ 88.955512][ T9728] ? precalculate_color+0x2154/0x2480 [ 88.960898][ T9728] __kasan_report.cold+0xe/0x41 [ 88.965759][ T9728] ? color_to_ycbcr.isra.0+0x330/0x660 [ 88.971232][ T9728] ? precalculate_color+0x2154/0x2480 [ 88.976635][ T9728] kasan_report+0x12/0x20 [ 88.980967][ T9728] __asan_report_load1_noabort+0x14/0x20 [ 88.986598][ T9728] precalculate_color+0x2154/0x2480 [ 88.991804][ T9728] ? color_to_ycbcr.isra.0+0x660/0x660 [ 88.997264][ T9728] tpg_recalc+0x561/0x2850 [ 89.001694][ T9728] ? tpg_get_color.isra.0+0x300/0x300 [ 89.007171][ T9728] ? __kasan_check_read+0x11/0x20 [ 89.012191][ T9728] ? mark_lock+0xc2/0x1220 [ 89.016607][ T9728] ? __kasan_check_read+0x11/0x20 [ 89.021619][ T9728] ? vb2_vmalloc_vaddr+0x37/0x50 [ 89.026553][ T9728] tpg_calc_text_basep+0xa1/0x290 [ 89.031566][ T9728] vivid_fillbuff+0x1a5f/0x3af0 [ 89.036406][ T9728] ? __kasan_check_read+0x11/0x20 [ 89.041423][ T9728] ? vivid_grab_controls+0x380/0x380 [ 89.046708][ T9728] ? find_held_lock+0x35/0x130 [ 89.051467][ T9728] ? vivid_thread_vid_cap_tick+0x112f/0x2210 [ 89.057476][ T9728] ? lock_downgrade+0x920/0x920 [ 89.062354][ T9728] ? rwlock_bug.part.0+0x90/0x90 [ 89.067312][ T9728] ? v4l2_ctrl_request_setup+0x46c/0xb30 [ 89.072972][ T9728] vivid_thread_vid_cap_tick+0x8cf/0x2210 [ 89.078714][ T9728] ? vivid_thread_vid_cap_tick+0x8cf/0x2210 [ 89.084758][ T9728] ? lock_downgrade+0x920/0x920 [ 89.089719][ T9728] ? lock_acquire+0x190/0x410 [ 89.094394][ T9728] vivid_thread_vid_cap+0x5d8/0xa60 [ 89.099591][ T9728] kthread+0x361/0x430 [ 89.103659][ T9728] ? vivid_thread_vid_cap_tick+0x2210/0x2210 [ 89.109636][ T9728] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 89.115371][ T9728] ret_from_fork+0x24/0x30 [ 89.121072][ T9728] Kernel Offset: disabled [ 89.125414][ T9728] Rebooting in 86400 seconds..