[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 57.564412][ T28] audit: type=1800 audit(1575644436.876:25): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 57.600021][ T28] audit: type=1800 audit(1575644436.876:26): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 57.622323][ T28] audit: type=1800 audit(1575644436.876:27): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.238' (ECDSA) to the list of known hosts. 2019/12/06 15:01:08 parsed 1 programs 2019/12/06 15:01:11 executed programs: 0 syzkaller login: [ 92.044026][ T9078] IPVS: ftp: loaded support on port[0] = 21 [ 92.046079][ T9075] IPVS: ftp: loaded support on port[0] = 21 [ 92.070853][ T9080] IPVS: ftp: loaded support on port[0] = 21 [ 92.079305][ T9081] IPVS: ftp: loaded support on port[0] = 21 [ 92.167127][ T9084] IPVS: ftp: loaded support on port[0] = 21 [ 92.192211][ T9085] IPVS: ftp: loaded support on port[0] = 21 [ 92.374099][ T9081] chnl_net:caif_netlink_parms(): no params data found [ 92.396612][ T9080] chnl_net:caif_netlink_parms(): no params data found [ 92.505260][ T9078] chnl_net:caif_netlink_parms(): no params data found [ 92.519759][ T9081] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.527352][ T9081] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.535325][ T9081] device bridge_slave_0 entered promiscuous mode [ 92.569774][ T9075] chnl_net:caif_netlink_parms(): no params data found [ 92.599319][ T9081] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.606735][ T9081] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.614726][ T9081] device bridge_slave_1 entered promiscuous mode [ 92.634663][ T9080] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.641799][ T9080] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.649533][ T9080] device bridge_slave_0 entered promiscuous mode [ 92.685805][ T9084] chnl_net:caif_netlink_parms(): no params data found [ 92.697819][ T9080] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.705786][ T9080] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.715733][ T9080] device bridge_slave_1 entered promiscuous mode [ 92.744889][ T9081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.756295][ T9081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.779389][ T9080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.789393][ T9075] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.796803][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.805531][ T9075] device bridge_slave_0 entered promiscuous mode [ 92.813342][ T9078] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.820402][ T9078] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.828291][ T9078] device bridge_slave_0 entered promiscuous mode [ 92.869368][ T9080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.878744][ T9075] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.885940][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.894438][ T9075] device bridge_slave_1 entered promiscuous mode [ 92.902076][ T9078] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.909142][ T9078] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.919830][ T9078] device bridge_slave_1 entered promiscuous mode [ 92.934110][ T9081] team0: Port device team_slave_0 added [ 92.977156][ T9081] team0: Port device team_slave_1 added [ 92.985973][ T9078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.006493][ T9075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.034820][ T9078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.054176][ T9080] team0: Port device team_slave_0 added [ 93.061203][ T9075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.125170][ T9081] device hsr_slave_0 entered promiscuous mode [ 93.161951][ T9081] device hsr_slave_1 entered promiscuous mode [ 93.209250][ T9085] chnl_net:caif_netlink_parms(): no params data found [ 93.218933][ T9080] team0: Port device team_slave_1 added [ 93.224844][ T9084] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.232408][ T9084] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.240208][ T9084] device bridge_slave_0 entered promiscuous mode [ 93.255419][ T9078] team0: Port device team_slave_0 added [ 93.264102][ T9075] team0: Port device team_slave_0 added [ 93.279162][ T9084] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.287579][ T9084] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.295450][ T9084] device bridge_slave_1 entered promiscuous mode [ 93.304743][ T9078] team0: Port device team_slave_1 added [ 93.318256][ T9075] team0: Port device team_slave_1 added [ 93.357153][ T9084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.434764][ T9080] device hsr_slave_0 entered promiscuous mode [ 93.481844][ T9080] device hsr_slave_1 entered promiscuous mode [ 93.521629][ T9080] debugfs: Directory 'hsr0' with parent '/' already present! [ 93.558789][ T9084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.624854][ T9078] device hsr_slave_0 entered promiscuous mode [ 93.669740][ T9078] device hsr_slave_1 entered promiscuous mode [ 93.721652][ T9078] debugfs: Directory 'hsr0' with parent '/' already present! [ 93.729318][ T9085] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.736492][ T9085] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.747756][ T9085] device bridge_slave_0 entered promiscuous mode [ 93.814769][ T9075] device hsr_slave_0 entered promiscuous mode [ 93.871881][ T9075] device hsr_slave_1 entered promiscuous mode [ 93.921526][ T9075] debugfs: Directory 'hsr0' with parent '/' already present! [ 93.932223][ T9084] team0: Port device team_slave_0 added [ 93.938559][ T9081] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.983902][ T9081] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.025050][ T9085] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.032903][ T9085] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.040566][ T9085] device bridge_slave_1 entered promiscuous mode [ 94.061117][ T9085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.072762][ T9084] team0: Port device team_slave_1 added [ 94.089784][ T9081] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.138159][ T9081] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.174758][ T9085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.208162][ T9075] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.264462][ T9075] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.371684][ T9075] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.439164][ T9085] team0: Port device team_slave_0 added [ 94.449504][ T9085] team0: Port device team_slave_1 added [ 94.455731][ T9078] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.486991][ T9080] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.533794][ T9075] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.613989][ T9084] device hsr_slave_0 entered promiscuous mode [ 94.671783][ T9084] device hsr_slave_1 entered promiscuous mode [ 94.751534][ T9084] debugfs: Directory 'hsr0' with parent '/' already present! [ 94.770000][ T9078] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.823931][ T9080] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.884111][ T9080] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.965969][ T9078] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.006116][ T9078] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.055820][ T9080] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.155037][ T9085] device hsr_slave_0 entered promiscuous mode [ 95.181964][ T9085] device hsr_slave_1 entered promiscuous mode [ 95.232089][ T9085] debugfs: Directory 'hsr0' with parent '/' already present! [ 95.296608][ T9084] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.334308][ T9085] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.385821][ T9084] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.443453][ T9085] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.486341][ T9085] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.545107][ T9085] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.616375][ T9084] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.677749][ T9084] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.773991][ T9081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.816866][ T9078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.830689][ T9081] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.852617][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.863059][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.898335][ T9075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.907904][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.917187][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.926328][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.937272][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.945890][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.953291][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.963893][ T9078] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.989431][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.025360][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.039627][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.056021][ T9092] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.064791][ T9092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.077596][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.086736][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.096000][ T9092] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.103425][ T9092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.111032][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.119908][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.128946][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.138151][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.147042][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.155911][ T9092] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.163009][ T9092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.171364][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.180623][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.207860][ T9081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.218751][ T9081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.248139][ T9085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.258984][ T9075] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.273093][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.282123][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.290597][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.299928][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.308920][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.318358][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.327019][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.335494][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.344813][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.353476][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.364279][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.373052][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.381349][ T3050] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.388437][ T3050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.396553][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.405242][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.413831][ T3050] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.420954][ T3050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.428888][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.436811][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.444912][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.464672][ T9080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.477404][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.490364][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.499137][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.509140][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.518266][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.538529][ T9080] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.557768][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.566314][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.575032][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.583275][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.590685][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.599387][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.608233][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.620784][ T9078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.634163][ T9078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.647956][ T9081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.684906][ T9084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.691954][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.700311][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.709827][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.717745][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.725838][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.734574][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.743464][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.750513][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.758734][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.767323][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.776129][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.783248][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.791138][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.799982][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.810870][ T9085] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.844055][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.857978][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.871100][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.880534][ T3755] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.887728][ T3755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.896940][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.906236][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.915067][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.923848][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.933006][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.942274][ T3755] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.949334][ T3755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.957025][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.965998][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.974792][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.984033][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.993068][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.002780][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.011163][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.019915][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.029148][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.037363][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.045443][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.072691][ T9084] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.116031][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.132571][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.140456][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.149880][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.158902][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.168290][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.177662][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.189361][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.198335][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.206969][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.215449][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.224195][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.233244][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.241601][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.257990][ T9085] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.270794][ T9085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.291938][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.300037][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.311253][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.320359][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.329780][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.338530][ T2617] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.345654][ T2617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.359110][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.372498][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.380800][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.390986][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.399818][ T2617] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.406982][ T2617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.407535][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.407754][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.433195][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.442519][ T9080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 2019/12/06 15:01:16 executed programs: 6 [ 97.473327][ T9078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.492602][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.500226][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.535197][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.551241][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.560300][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.569871][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.570449][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.571139][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.572103][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.572601][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.577535][ T9084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.578323][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.596232][ T9075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.635466][ T9080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.674769][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.675525][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.676023][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.676509][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.676623][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.676724][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.676828][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.697228][ T9085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.703318][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.703451][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.719369][ T9084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.795730][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.817738][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.766160][ T9415] ================================================================== [ 101.766224][ T9415] BUG: KASAN: global-out-of-bounds in bit_putcs+0xd5d/0xf10 [ 101.766236][ T9415] Read of size 1 at addr ffffffff88726a41 by task syz-executor.5/9415 [ 101.766239][ T9415] [ 101.766253][ T9415] CPU: 1 PID: 9415 Comm: syz-executor.5 Not tainted 5.4.0-syzkaller #0 [ 101.766260][ T9415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 101.766265][ T9415] Call Trace: [ 101.766281][ T9415] dump_stack+0x197/0x210 [ 101.766294][ T9415] ? bit_putcs+0xd5d/0xf10 [ 101.766314][ T9415] print_address_description.constprop.0.cold+0x5/0x30b [ 101.766327][ T9415] ? bit_putcs+0xd5d/0xf10 [ 101.766340][ T9415] ? bit_putcs+0xd5d/0xf10 [ 101.766353][ T9415] __kasan_report.cold+0x1b/0x41 [ 101.766368][ T9415] ? fb_get_color_depth.part.0+0x10/0x200 [ 101.766381][ T9415] ? bit_putcs+0xd5d/0xf10 [ 101.766396][ T9415] kasan_report+0x12/0x20 [ 101.766411][ T9415] __asan_report_load1_noabort+0x14/0x20 [ 101.766423][ T9415] bit_putcs+0xd5d/0xf10 [ 101.766455][ T9415] ? bit_cursor+0x1a60/0x1a60 [ 101.766470][ T9415] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 101.766488][ T9415] ? write_comp_data+0x41/0x70 [ 101.766501][ T9415] ? fb_get_color_depth.part.0+0xcf/0x200 [ 101.766520][ T9415] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 101.766540][ T9415] fbcon_putcs+0x33c/0x3e0 [ 101.766556][ T9415] ? bit_cursor+0x1a60/0x1a60 [ 101.766576][ T9415] do_update_region+0x42b/0x6f0 [ 101.766597][ T9415] ? con_get_trans_old+0x2a0/0x2a0 [ 101.766614][ T9415] ? fbcon_set_palette+0x3c4/0x4a0 [ 101.766627][ T9415] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.766646][ T9415] ? var_to_display+0x810/0x810 [ 101.766664][ T9415] redraw_screen+0x676/0x7d0 [ 101.766682][ T9415] ? respond_string+0x2c0/0x2c0 [ 101.766705][ T9415] fbcon_do_set_font+0x829/0x960 [ 101.766726][ T9415] fbcon_copy_font+0x12c/0x190 [ 101.766741][ T9415] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.766754][ T9415] ? fbcon_do_set_font+0x960/0x960 [ 101.766771][ T9415] con_font_op+0x6b2/0x1270 [ 101.766787][ T9415] ? lock_downgrade+0x920/0x920 [ 101.766802][ T9415] ? con_write+0xd0/0xd0 [ 101.766828][ T9415] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 101.766842][ T9415] ? _copy_from_user+0x12c/0x1a0 [ 101.766861][ T9415] vt_ioctl+0x181a/0x26d0 [ 101.766878][ T9415] ? complete_change_console+0x3a0/0x3a0 [ 101.766891][ T9415] ? lock_downgrade+0x920/0x920 [ 101.766905][ T9415] ? rwlock_bug.part.0+0x90/0x90 [ 101.766922][ T9415] ? tomoyo_path_number_perm+0x214/0x520 [ 101.766937][ T9415] ? find_held_lock+0x35/0x130 [ 101.766954][ T9415] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 101.766972][ T9415] ? tty_jobctrl_ioctl+0x50/0xd40 [ 101.766988][ T9415] ? complete_change_console+0x3a0/0x3a0 [ 101.767002][ T9415] tty_ioctl+0xa37/0x14f0 [ 101.767018][ T9415] ? tty_vhangup+0x30/0x30 [ 101.767029][ T9415] ? tomoyo_path_number_perm+0x454/0x520 [ 101.767047][ T9415] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 101.767060][ T9415] ? tomoyo_path_number_perm+0x25e/0x520 [ 101.767077][ T9415] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 101.767108][ T9415] ? tty_vhangup+0x30/0x30 [ 101.767124][ T9415] do_vfs_ioctl+0x977/0x14e0 [ 101.767142][ T9415] ? compat_ioctl_preallocate+0x220/0x220 [ 101.767156][ T9415] ? __fget+0x37f/0x550 [ 101.767175][ T9415] ? ksys_dup3+0x3e0/0x3e0 [ 101.767191][ T9415] ? ns_to_kernel_old_timeval+0x100/0x100 [ 101.767210][ T9415] ? tomoyo_file_ioctl+0x23/0x30 [ 101.767224][ T9415] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.767240][ T9415] ? security_file_ioctl+0x8d/0xc0 [ 101.767256][ T9415] ksys_ioctl+0xab/0xd0 [ 101.767273][ T9415] __x64_sys_ioctl+0x73/0xb0 [ 101.767289][ T9415] do_syscall_64+0xfa/0x790 [ 101.767310][ T9415] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 101.767321][ T9415] RIP: 0033:0x45a679 [ 101.767335][ T9415] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 101.767343][ T9415] RSP: 002b:00007f5b74dffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.767356][ T9415] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 101.767365][ T9415] RDX: 0000000020000000 RSI: 0000000000004b72 RDI: 0000000000000005 [ 101.767373][ T9415] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 101.767381][ T9415] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5b74e006d4 [ 101.767390][ T9415] R13: 00000000004c37ab R14: 00000000004d8c38 R15: 00000000ffffffff [ 101.767409][ T9415] [ 101.767413][ T9415] The buggy address belongs to the variable: [ 101.767427][ T9415] oid_index+0xb01/0xb80 [ 101.767431][ T9415] [ 101.767435][ T9415] Memory state around the buggy address: [ 101.767447][ T9415] ffffffff88726900: 00 00 02 fa fa fa fa fa 00 00 00 05 fa fa fa fa [ 101.767457][ T9415] ffffffff88726980: 00 00 00 fa fa fa fa fa 00 00 00 00 00 01 fa fa [ 101.767467][ T9415] >ffffffff88726a00: fa fa fa fa 00 00 00 00 01 fa fa fa fa fa fa fa [ 101.767473][ T9415] ^ [ 101.767483][ T9415] ffffffff88726a80: 00 00 00 00 fa fa fa fa 00 03 fa fa fa fa fa fa [ 101.767493][ T9415] ffffffff88726b00: 04 fa fa fa fa fa fa fa 00 00 01 fa fa fa fa fa [ 101.767498][ T9415] ================================================================== [ 101.767503][ T9415] Disabling lock debugging due to kernel taint [ 101.770067][ T9415] Kernel panic - not syncing: panic_on_warn set ... [ 101.770084][ T9415] CPU: 1 PID: 9415 Comm: syz-executor.5 Tainted: G B 5.4.0-syzkaller #0 [ 101.770090][ T9415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 101.770095][ T9415] Call Trace: [ 101.770110][ T9415] dump_stack+0x197/0x210 [ 101.770126][ T9415] panic+0x2e3/0x75c [ 101.770138][ T9415] ? add_taint.cold+0x16/0x16 [ 101.770152][ T9415] ? bit_putcs+0xd5d/0xf10 [ 101.770166][ T9415] ? preempt_schedule+0x4b/0x60 [ 101.770180][ T9415] ? ___preempt_schedule+0x16/0x18 [ 101.770194][ T9415] ? trace_hardirqs_on+0x5e/0x240 [ 101.770209][ T9415] ? bit_putcs+0xd5d/0xf10 [ 101.770221][ T9415] end_report+0x47/0x4f [ 101.770234][ T9415] ? bit_putcs+0xd5d/0xf10 [ 101.770246][ T9415] __kasan_report.cold+0xe/0x41 [ 101.770259][ T9415] ? fb_get_color_depth.part.0+0x10/0x200 [ 101.770271][ T9415] ? bit_putcs+0xd5d/0xf10 [ 101.770284][ T9415] kasan_report+0x12/0x20 [ 101.770297][ T9415] __asan_report_load1_noabort+0x14/0x20 [ 101.770310][ T9415] bit_putcs+0xd5d/0xf10 [ 101.770332][ T9415] ? bit_cursor+0x1a60/0x1a60 [ 101.770345][ T9415] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 101.770359][ T9415] ? write_comp_data+0x41/0x70 [ 101.770370][ T9415] ? fb_get_color_depth.part.0+0xcf/0x200 [ 101.770386][ T9415] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 101.770401][ T9415] fbcon_putcs+0x33c/0x3e0 [ 101.770415][ T9415] ? bit_cursor+0x1a60/0x1a60 [ 101.770431][ T9415] do_update_region+0x42b/0x6f0 [ 101.770446][ T9415] ? con_get_trans_old+0x2a0/0x2a0 [ 101.770461][ T9415] ? fbcon_set_palette+0x3c4/0x4a0 [ 101.770473][ T9415] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.770491][ T9415] ? var_to_display+0x810/0x810 [ 101.770505][ T9415] redraw_screen+0x676/0x7d0 [ 101.770519][ T9415] ? respond_string+0x2c0/0x2c0 [ 101.770538][ T9415] fbcon_do_set_font+0x829/0x960 [ 101.770554][ T9415] fbcon_copy_font+0x12c/0x190 [ 101.770567][ T9415] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.770580][ T9415] ? fbcon_do_set_font+0x960/0x960 [ 101.770593][ T9415] con_font_op+0x6b2/0x1270 [ 101.770606][ T9415] ? lock_downgrade+0x920/0x920 [ 101.770619][ T9415] ? con_write+0xd0/0xd0 [ 101.770643][ T9415] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 101.770655][ T9415] ? _copy_from_user+0x12c/0x1a0 [ 101.770671][ T9415] vt_ioctl+0x181a/0x26d0 [ 101.770685][ T9415] ? complete_change_console+0x3a0/0x3a0 [ 101.770696][ T9415] ? lock_downgrade+0x920/0x920 [ 101.770709][ T9415] ? rwlock_bug.part.0+0x90/0x90 [ 101.770722][ T9415] ? tomoyo_path_number_perm+0x214/0x520 [ 101.770737][ T9415] ? find_held_lock+0x35/0x130 [ 101.770750][ T9415] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 101.770764][ T9415] ? tty_jobctrl_ioctl+0x50/0xd40 [ 101.770776][ T9415] ? complete_change_console+0x3a0/0x3a0 [ 101.770788][ T9415] tty_ioctl+0xa37/0x14f0 [ 101.770799][ T9415] ? tty_vhangup+0x30/0x30 [ 101.770809][ T9415] ? tomoyo_path_number_perm+0x454/0x520 [ 101.770823][ T9415] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 101.770832][ T9415] ? tomoyo_path_number_perm+0x25e/0x520 [ 101.770845][ T9415] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 101.770864][ T9415] ? tty_vhangup+0x30/0x30 [ 101.770877][ T9415] do_vfs_ioctl+0x977/0x14e0 [ 101.770891][ T9415] ? compat_ioctl_preallocate+0x220/0x220 [ 101.770902][ T9415] ? __fget+0x37f/0x550 [ 101.770916][ T9415] ? ksys_dup3+0x3e0/0x3e0 [ 101.770931][ T9415] ? ns_to_kernel_old_timeval+0x100/0x100 [ 101.770945][ T9415] ? tomoyo_file_ioctl+0x23/0x30 [ 101.770959][ T9415] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.770973][ T9415] ? security_file_ioctl+0x8d/0xc0 [ 101.770986][ T9415] ksys_ioctl+0xab/0xd0 [ 101.770998][ T9415] __x64_sys_ioctl+0x73/0xb0 [ 101.771011][ T9415] do_syscall_64+0xfa/0x790 [ 101.771028][ T9415] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 101.771037][ T9415] RIP: 0033:0x45a679 [ 101.771051][ T9415] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 101.771058][ T9415] RSP: 002b:00007f5b74dffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.771070][ T9415] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 101.771078][ T9415] RDX: 0000000020000000 RSI: 0000000000004b72 RDI: 0000000000000005 [ 101.771086][ T9415] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 101.771093][ T9415] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5b74e006d4 [ 101.771101][ T9415] R13: 00000000004c37ab R14: 00000000004d8c38 R15: 00000000ffffffff [ 101.772380][ T9415] Kernel Offset: disabled [ 102.726120][ T9415] Rebooting in 86400 seconds..