[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 72.968328][ T27] audit: type=1800 audit(1577032447.003:25): pid=9241 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 73.000559][ T27] audit: type=1800 audit(1577032447.003:26): pid=9241 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 73.043695][ T27] audit: type=1800 audit(1577032447.003:27): pid=9241 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.61' (ECDSA) to the list of known hosts. 2019/12/22 16:34:18 parsed 1 programs 2019/12/22 16:34:20 executed programs: 0 syzkaller login: [ 86.992821][ T9419] IPVS: ftp: loaded support on port[0] = 21 [ 87.017301][ T9422] IPVS: ftp: loaded support on port[0] = 21 [ 87.033789][ T9417] IPVS: ftp: loaded support on port[0] = 21 [ 87.035822][ T9426] IPVS: ftp: loaded support on port[0] = 21 [ 87.061220][ T9424] IPVS: ftp: loaded support on port[0] = 21 [ 87.061236][ T9421] IPVS: ftp: loaded support on port[0] = 21 [ 87.253930][ T9419] chnl_net:caif_netlink_parms(): no params data found [ 87.350843][ T9419] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.358063][ T9419] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.366402][ T9419] device bridge_slave_0 entered promiscuous mode [ 87.406044][ T9419] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.413813][ T9419] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.422963][ T9419] device bridge_slave_1 entered promiscuous mode [ 87.454646][ T9424] chnl_net:caif_netlink_parms(): no params data found [ 87.529560][ T9426] chnl_net:caif_netlink_parms(): no params data found [ 87.585482][ T9419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.613099][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.620170][ T9424] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.628594][ T9424] device bridge_slave_0 entered promiscuous mode [ 87.648581][ T9419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.657858][ T9417] chnl_net:caif_netlink_parms(): no params data found [ 87.684330][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.692270][ T9424] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.700231][ T9424] device bridge_slave_1 entered promiscuous mode [ 87.722808][ T9421] chnl_net:caif_netlink_parms(): no params data found [ 87.765609][ T9424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.782875][ T9422] chnl_net:caif_netlink_parms(): no params data found [ 87.795579][ T9426] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.802775][ T9426] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.811761][ T9426] device bridge_slave_0 entered promiscuous mode [ 87.824593][ T9426] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.831897][ T9426] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.839813][ T9426] device bridge_slave_1 entered promiscuous mode [ 87.849711][ T9419] team0: Port device team_slave_0 added [ 87.857976][ T9424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.894041][ T9419] team0: Port device team_slave_1 added [ 87.902291][ T9426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.926020][ T9417] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.934504][ T9417] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.942914][ T9417] device bridge_slave_0 entered promiscuous mode [ 87.951291][ T9417] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.958343][ T9417] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.966519][ T9417] device bridge_slave_1 entered promiscuous mode [ 87.980803][ T9426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.016956][ T9421] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.026449][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.036635][ T9421] device bridge_slave_0 entered promiscuous mode [ 88.047274][ T9424] team0: Port device team_slave_0 added [ 88.086071][ T9421] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.094017][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.102368][ T9421] device bridge_slave_1 entered promiscuous mode [ 88.110913][ T9424] team0: Port device team_slave_1 added [ 88.124931][ T9426] team0: Port device team_slave_0 added [ 88.139322][ T9426] team0: Port device team_slave_1 added [ 88.153580][ T9417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.174004][ T9422] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.182597][ T9422] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.190367][ T9422] device bridge_slave_0 entered promiscuous mode [ 88.199180][ T9422] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.206533][ T9422] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.215088][ T9422] device bridge_slave_1 entered promiscuous mode [ 88.275127][ T9419] device hsr_slave_0 entered promiscuous mode [ 88.331314][ T9419] device hsr_slave_1 entered promiscuous mode [ 88.375982][ T9417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.387515][ T9421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.404766][ T9421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.504029][ T9424] device hsr_slave_0 entered promiscuous mode [ 88.570948][ T9424] device hsr_slave_1 entered promiscuous mode [ 88.620710][ T9424] debugfs: Directory 'hsr0' with parent '/' already present! [ 88.668541][ T9422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.723237][ T9426] device hsr_slave_0 entered promiscuous mode [ 88.771024][ T9426] device hsr_slave_1 entered promiscuous mode [ 88.810597][ T9426] debugfs: Directory 'hsr0' with parent '/' already present! [ 88.820260][ T9417] team0: Port device team_slave_0 added [ 88.828772][ T9421] team0: Port device team_slave_0 added [ 88.841764][ T9422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.869759][ T9417] team0: Port device team_slave_1 added [ 88.877192][ T9421] team0: Port device team_slave_1 added [ 88.906810][ T9422] team0: Port device team_slave_0 added [ 88.936697][ T9422] team0: Port device team_slave_1 added [ 89.032582][ T9417] device hsr_slave_0 entered promiscuous mode [ 89.070813][ T9417] device hsr_slave_1 entered promiscuous mode [ 89.130983][ T9417] debugfs: Directory 'hsr0' with parent '/' already present! [ 89.144400][ T9419] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.233833][ T9421] device hsr_slave_0 entered promiscuous mode [ 89.271010][ T9421] device hsr_slave_1 entered promiscuous mode [ 89.310617][ T9421] debugfs: Directory 'hsr0' with parent '/' already present! [ 89.321442][ T9424] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.380028][ T9424] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.436191][ T9419] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.489918][ T9426] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.544509][ T9426] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.609470][ T9424] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.663762][ T9424] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.730175][ T9419] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.776492][ T9419] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.843931][ T9426] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.933930][ T9422] device hsr_slave_0 entered promiscuous mode [ 89.971102][ T9422] device hsr_slave_1 entered promiscuous mode [ 90.050667][ T9422] debugfs: Directory 'hsr0' with parent '/' already present! [ 90.080349][ T9417] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.115687][ T9426] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.196416][ T9417] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.235372][ T9417] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.324277][ T9421] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.403923][ T9417] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.469332][ T9422] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.503374][ T9422] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.542113][ T9421] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.583555][ T9421] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.647324][ T9421] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.708583][ T9422] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.743084][ T9422] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.905820][ T9419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.938023][ T9424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.956963][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.965694][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.985430][ T9417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.997280][ T9419] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.044561][ T9417] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.054748][ T9424] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.063697][ T3296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.072912][ T3296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.084095][ T3296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.092060][ T3296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.112119][ T9421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.145779][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.158839][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.168263][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.175571][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.184961][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.193899][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.202701][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.209923][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.217761][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.227305][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.235857][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.243155][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.251819][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.259814][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.294690][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.304606][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.314319][ T2737] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.321538][ T2737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.329180][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.338897][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.347336][ T2737] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.354711][ T2737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.362705][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.372054][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.380375][ T2737] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.387571][ T2737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.395315][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.404473][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.413371][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.427323][ T9426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.442588][ T9422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.453595][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.466739][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.475011][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.489249][ T9421] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.510335][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.519735][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.530711][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.539071][ T2737] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.546182][ T2737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.554242][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.562233][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.570044][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.578975][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.587660][ T2737] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.594761][ T2737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.602792][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.622522][ T9426] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.660095][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.668464][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.677006][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.686974][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.696669][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.705868][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.715212][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.724086][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.732910][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.741773][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.750190][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.759303][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.767906][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.777372][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.786804][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.795385][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.803669][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.812508][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.821055][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.829578][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.838434][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.845524][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.853803][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.862687][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.871222][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.878472][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.887075][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.895067][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.903615][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.912303][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.925474][ T9419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.941865][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.951922][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.961154][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.969732][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.982565][ T9422] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.023345][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.033428][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.043892][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.053257][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.062376][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.071292][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.079513][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.088102][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.096678][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.105558][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.114425][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.123578][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.132572][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.141289][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.152013][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.174371][ T9424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.192254][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.201658][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.209965][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.217084][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.225733][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.233437][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.240978][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.250230][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.258838][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.268266][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.286706][ T9421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.299281][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.324172][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.335936][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.344203][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.352916][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.361882][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.370471][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.378788][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.385878][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.393667][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.402271][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.410623][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.419336][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.428163][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.436651][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.445849][ T9417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.457892][ T9419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.511838][ T9435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.519581][ T9435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.531213][ T9435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.540079][ T9435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.548908][ T9435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.576174][ T9417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.593897][ T9426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.606628][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.615073][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.645382][ T9424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.658385][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.668572][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.677676][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.686449][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.696004][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.714498][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.722628][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.731379][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 2019/12/22 16:34:26 executed programs: 6 [ 92.809071][ T9422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.848872][ T9422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.869985][ T9421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.871064][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.871717][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.874737][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.874873][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.911186][ T9426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.968108][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.968233][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.009983][ T9422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.201567][ T9468] ================================================================== [ 93.201632][ T9468] BUG: KASAN: global-out-of-bounds in fbcon_get_font+0x2b2/0x5e0 [ 93.201642][ T9468] Read of size 32 at addr ffffffff8872ae80 by task syz-executor.0/9468 [ 93.201645][ T9468] [ 93.201661][ T9468] CPU: 0 PID: 9468 Comm: syz-executor.0 Not tainted 5.5.0-rc2-next-20191220-syzkaller #0 [ 93.201669][ T9468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.201674][ T9468] Call Trace: [ 93.201691][ T9468] dump_stack+0x197/0x210 [ 93.201707][ T9468] ? fbcon_get_font+0x2b2/0x5e0 [ 93.201730][ T9468] print_address_description.constprop.0.cold+0x5/0x30b [ 93.201745][ T9468] ? fbcon_get_font+0x2b2/0x5e0 [ 93.201759][ T9468] ? fbcon_get_font+0x2b2/0x5e0 [ 93.201775][ T9468] __kasan_report.cold+0x1b/0x41 [ 93.201793][ T9468] ? fbcon_get_font+0x2b2/0x5e0 [ 93.201810][ T9468] kasan_report+0x12/0x20 [ 93.201826][ T9468] check_memory_region+0x134/0x1a0 [ 93.201842][ T9468] memcpy+0x24/0x50 [ 93.201860][ T9468] fbcon_get_font+0x2b2/0x5e0 [ 93.201880][ T9468] ? display_to_var+0x7e0/0x7e0 [ 93.201896][ T9468] con_font_op+0x20b/0x1270 [ 93.201915][ T9468] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 93.201931][ T9468] ? con_write+0xd0/0xd0 [ 93.201947][ T9468] ? cap_capable+0x205/0x270 [ 93.201969][ T9468] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.201984][ T9468] ? security_capable+0x95/0xc0 [ 93.202004][ T9468] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.202021][ T9468] ? ns_capable_common+0x93/0x100 [ 93.202042][ T9468] vt_ioctl+0xd2e/0x26d0 [ 93.202061][ T9468] ? complete_change_console+0x3a0/0x3a0 [ 93.202084][ T9468] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 93.202109][ T9468] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 93.202128][ T9468] ? tty_jobctrl_ioctl+0x50/0xd40 [ 93.202143][ T9468] ? complete_change_console+0x3a0/0x3a0 [ 93.202166][ T9468] tty_ioctl+0xa37/0x14f0 [ 93.202184][ T9468] ? tty_vhangup+0x30/0x30 [ 93.202200][ T9468] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 93.202217][ T9468] ? do_vfs_ioctl+0x11b/0x1340 [ 93.202238][ T9468] ? ioctl_file_clone+0x180/0x180 [ 93.202253][ T9468] ? __fget+0x37f/0x550 [ 93.202275][ T9468] ? do_dup2+0x4f0/0x4f0 [ 93.202294][ T9468] ? ns_to_kernel_old_timeval+0x100/0x100 [ 93.202314][ T9468] ? tomoyo_file_ioctl+0x23/0x30 [ 93.202329][ T9468] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.202344][ T9468] ? security_file_ioctl+0x8d/0xc0 [ 93.202356][ T9468] ? tty_vhangup+0x30/0x30 [ 93.202371][ T9468] ksys_ioctl+0x123/0x180 [ 93.202389][ T9468] __x64_sys_ioctl+0x73/0xb0 [ 93.202408][ T9468] do_syscall_64+0xfa/0x790 [ 93.202428][ T9468] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.202439][ T9468] RIP: 0033:0x45a919 [ 93.202455][ T9468] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 93.202462][ T9468] RSP: 002b:00007f2b4bef2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.202475][ T9468] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 93.202483][ T9468] RDX: 0000000000713000 RSI: 0000000000004b60 RDI: 0000000000000004 [ 93.202490][ T9468] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 93.202499][ T9468] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b4bef36d4 [ 93.202507][ T9468] R13: 00000000004c6f80 R14: 00000000004dd700 R15: 00000000ffffffff [ 93.202527][ T9468] [ 93.202531][ T9468] The buggy address belongs to the variable: [ 93.202547][ T9468] fontdata_8x16+0x1000/0x1120 [ 93.202550][ T9468] [ 93.202555][ T9468] Memory state around the buggy address: [ 93.202568][ T9468] ffffffff8872ad80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.202580][ T9468] ffffffff8872ae00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.202590][ T9468] >ffffffff8872ae80: fa fa fa fa 06 fa fa fa fa fa fa fa 05 fa fa fa [ 93.202596][ T9468] ^ [ 93.202607][ T9468] ffffffff8872af00: fa fa fa fa 06 fa fa fa fa fa fa fa 00 00 03 fa [ 93.202618][ T9468] ffffffff8872af80: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.202624][ T9468] ================================================================== [ 93.202629][ T9468] Disabling lock debugging due to kernel taint [ 93.202637][ T9468] Kernel panic - not syncing: panic_on_warn set ... [ 93.202653][ T9468] CPU: 0 PID: 9468 Comm: syz-executor.0 Tainted: G B 5.5.0-rc2-next-20191220-syzkaller #0 [ 93.202660][ T9468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.202664][ T9468] Call Trace: [ 93.202677][ T9468] dump_stack+0x197/0x210 [ 93.202694][ T9468] panic+0x2e3/0x75c [ 93.202708][ T9468] ? add_taint.cold+0x16/0x16 [ 93.202729][ T9468] ? trace_hardirqs_on+0x67/0x240 [ 93.202744][ T9468] ? trace_hardirqs_on+0x5e/0x240 [ 93.202758][ T9468] ? fbcon_get_font+0x2b2/0x5e0 [ 93.202772][ T9468] end_report+0x47/0x4f [ 93.202786][ T9468] ? fbcon_get_font+0x2b2/0x5e0 [ 93.202800][ T9468] __kasan_report.cold+0xe/0x41 [ 93.202816][ T9468] ? fbcon_get_font+0x2b2/0x5e0 [ 93.202831][ T9468] kasan_report+0x12/0x20 [ 93.202846][ T9468] check_memory_region+0x134/0x1a0 [ 93.202859][ T9468] memcpy+0x24/0x50 [ 93.202874][ T9468] fbcon_get_font+0x2b2/0x5e0 [ 93.202890][ T9468] ? display_to_var+0x7e0/0x7e0 [ 93.202902][ T9468] con_font_op+0x20b/0x1270 [ 93.202917][ T9468] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 93.202931][ T9468] ? con_write+0xd0/0xd0 [ 93.202945][ T9468] ? cap_capable+0x205/0x270 [ 93.202961][ T9468] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.202974][ T9468] ? security_capable+0x95/0xc0 [ 93.202991][ T9468] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.203006][ T9468] ? ns_capable_common+0x93/0x100 [ 93.203022][ T9468] vt_ioctl+0xd2e/0x26d0 [ 93.203039][ T9468] ? complete_change_console+0x3a0/0x3a0 [ 93.203057][ T9468] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 93.203076][ T9468] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 93.203093][ T9468] ? tty_jobctrl_ioctl+0x50/0xd40 [ 93.203107][ T9468] ? complete_change_console+0x3a0/0x3a0 [ 93.203120][ T9468] tty_ioctl+0xa37/0x14f0 [ 93.203133][ T9468] ? tty_vhangup+0x30/0x30 [ 93.203149][ T9468] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 93.203168][ T9468] ? do_vfs_ioctl+0x11b/0x1340 [ 93.203185][ T9468] ? ioctl_file_clone+0x180/0x180 [ 93.203198][ T9468] ? __fget+0x37f/0x550 [ 93.203215][ T9468] ? do_dup2+0x4f0/0x4f0 [ 93.203230][ T9468] ? ns_to_kernel_old_timeval+0x100/0x100 [ 93.203246][ T9468] ? tomoyo_file_ioctl+0x23/0x30 [ 93.203260][ T9468] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.203273][ T9468] ? security_file_ioctl+0x8d/0xc0 [ 93.203284][ T9468] ? tty_vhangup+0x30/0x30 [ 93.203297][ T9468] ksys_ioctl+0x123/0x180 [ 93.203311][ T9468] __x64_sys_ioctl+0x73/0xb0 [ 93.203325][ T9468] do_syscall_64+0xfa/0x790 [ 93.203339][ T9468] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.203348][ T9468] RIP: 0033:0x45a919 [ 93.203361][ T9468] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 93.203367][ T9468] RSP: 002b:00007f2b4bef2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.203379][ T9468] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 93.203387][ T9468] RDX: 0000000000713000 RSI: 0000000000004b60 RDI: 0000000000000004 [ 93.203394][ T9468] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 93.203402][ T9468] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b4bef36d4 [ 93.203409][ T9468] R13: 00000000004c6f80 R14: 00000000004dd700 R15: 00000000ffffffff [ 93.204703][ T9468] Kernel Offset: disabled [ 93.948168][ T9468] Rebooting in 86400 seconds..