[ 86.937642][ T27] audit: type=1800 audit(1577261536.173:26): pid=9256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 87.799964][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 87.799977][ T27] audit: type=1800 audit(1577261537.053:29): pid=9256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 87.826596][ T27] audit: type=1800 audit(1577261537.053:30): pid=9256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.4' (ECDSA) to the list of known hosts. 2019/12/25 08:12:26 parsed 1 programs 2019/12/25 08:12:29 executed programs: 0 syzkaller login: [ 99.891127][ T9435] IPVS: ftp: loaded support on port[0] = 21 [ 99.908042][ T9431] IPVS: ftp: loaded support on port[0] = 21 [ 99.908080][ T9440] IPVS: ftp: loaded support on port[0] = 21 [ 99.927152][ T9439] IPVS: ftp: loaded support on port[0] = 21 [ 99.928716][ T9437] IPVS: ftp: loaded support on port[0] = 21 [ 99.941519][ T9433] IPVS: ftp: loaded support on port[0] = 21 [ 100.302608][ T9439] chnl_net:caif_netlink_parms(): no params data found [ 100.319655][ T9435] chnl_net:caif_netlink_parms(): no params data found [ 100.367805][ T9440] chnl_net:caif_netlink_parms(): no params data found [ 100.396933][ T9437] chnl_net:caif_netlink_parms(): no params data found [ 100.431233][ T9431] chnl_net:caif_netlink_parms(): no params data found [ 100.553435][ T9439] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.561273][ T9439] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.569858][ T9439] device bridge_slave_0 entered promiscuous mode [ 100.586061][ T9435] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.593373][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.601199][ T9435] device bridge_slave_0 entered promiscuous mode [ 100.609358][ T9431] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.616792][ T9431] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.627809][ T9431] device bridge_slave_0 entered promiscuous mode [ 100.641084][ T9431] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.648287][ T9431] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.656450][ T9431] device bridge_slave_1 entered promiscuous mode [ 100.682413][ T9439] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.689517][ T9439] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.697719][ T9439] device bridge_slave_1 entered promiscuous mode [ 100.705172][ T9437] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.712550][ T9437] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.720548][ T9437] device bridge_slave_0 entered promiscuous mode [ 100.728173][ T9435] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.735889][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.744098][ T9435] device bridge_slave_1 entered promiscuous mode [ 100.751283][ T9440] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.761509][ T9440] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.769679][ T9440] device bridge_slave_0 entered promiscuous mode [ 100.787413][ T9440] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.794765][ T9440] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.804724][ T9440] device bridge_slave_1 entered promiscuous mode [ 100.816923][ T9437] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.825598][ T9437] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.834021][ T9437] device bridge_slave_1 entered promiscuous mode [ 100.847850][ T9433] chnl_net:caif_netlink_parms(): no params data found [ 100.870506][ T9431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.916077][ T9431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.935835][ T9439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.947372][ T9435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.959152][ T9437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.981630][ T9440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.993556][ T9439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.005066][ T9435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.028533][ T9437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.056755][ T9440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.103532][ T9431] team0: Port device team_slave_0 added [ 101.125605][ T9440] team0: Port device team_slave_0 added [ 101.137586][ T9439] team0: Port device team_slave_0 added [ 101.152307][ T9439] team0: Port device team_slave_1 added [ 101.160559][ T9435] team0: Port device team_slave_0 added [ 101.168958][ T9431] team0: Port device team_slave_1 added [ 101.178167][ T9437] team0: Port device team_slave_0 added [ 101.186104][ T9440] team0: Port device team_slave_1 added [ 101.192443][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.199516][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.208440][ T9433] device bridge_slave_0 entered promiscuous mode [ 101.216980][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.224803][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.232833][ T9433] device bridge_slave_1 entered promiscuous mode [ 101.240854][ T9435] team0: Port device team_slave_1 added [ 101.264204][ T9437] team0: Port device team_slave_1 added [ 101.325903][ T9435] device hsr_slave_0 entered promiscuous mode [ 101.385606][ T9435] device hsr_slave_1 entered promiscuous mode [ 101.514407][ T9439] device hsr_slave_0 entered promiscuous mode [ 101.552423][ T9439] device hsr_slave_1 entered promiscuous mode [ 101.601953][ T9439] debugfs: Directory 'hsr0' with parent '/' already present! [ 101.675479][ T9437] device hsr_slave_0 entered promiscuous mode [ 101.712231][ T9437] device hsr_slave_1 entered promiscuous mode [ 101.781904][ T9437] debugfs: Directory 'hsr0' with parent '/' already present! [ 101.864530][ T9431] device hsr_slave_0 entered promiscuous mode [ 101.913083][ T9431] device hsr_slave_1 entered promiscuous mode [ 101.952087][ T9431] debugfs: Directory 'hsr0' with parent '/' already present! [ 101.962441][ T9433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.035527][ T9440] device hsr_slave_0 entered promiscuous mode [ 102.072358][ T9440] device hsr_slave_1 entered promiscuous mode [ 102.112011][ T9440] debugfs: Directory 'hsr0' with parent '/' already present! [ 102.136591][ T9433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.200953][ T9433] team0: Port device team_slave_0 added [ 102.213491][ T9433] team0: Port device team_slave_1 added [ 102.244413][ T9435] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 102.305067][ T9439] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.367142][ T9439] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.438762][ T9439] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.535554][ T9433] device hsr_slave_0 entered promiscuous mode [ 102.593409][ T9433] device hsr_slave_1 entered promiscuous mode [ 102.652911][ T9433] debugfs: Directory 'hsr0' with parent '/' already present! [ 102.665483][ T9435] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 102.745558][ T9435] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 102.796952][ T9435] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 102.874514][ T9439] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.931392][ T9437] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.017996][ T9431] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.094689][ T9431] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.154107][ T9437] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.193977][ T9440] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.250259][ T9431] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.284273][ T9437] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.323877][ T9440] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.388487][ T9431] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.424268][ T9437] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.464378][ T9440] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.505783][ T9440] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.624920][ T9433] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.664879][ T9433] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.748445][ T9433] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.808599][ T9433] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.953549][ T9435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.011088][ T9431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.020467][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.032958][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.053407][ T9435] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.093718][ T9431] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.100660][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.110812][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.121783][ T2713] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.129093][ T2713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.138449][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.146615][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.159216][ T9439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.170865][ T9437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.188932][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.215643][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.224577][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.235213][ T2709] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.242345][ T2709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.255066][ T9433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.270066][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.280497][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.289179][ T3175] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.296294][ T3175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.304979][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.314078][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.323523][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.338213][ T9439] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.360248][ T9433] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.368796][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.377650][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.386614][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.394832][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.403646][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.412899][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.421233][ T3175] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.428355][ T3175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.436685][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.444763][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.452821][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.467053][ T9440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.479301][ T9437] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.495771][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.505076][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.513974][ T2713] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.521040][ T2713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.529284][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.538738][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.548135][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.557727][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.566033][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.589163][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.599792][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.609099][ T2708] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.616547][ T2708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.625105][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.634755][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.646117][ T2708] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.653496][ T2708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.662485][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.672866][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.684411][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.694176][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.703095][ T2708] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.710186][ T2708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.718297][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.727406][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.736132][ T2708] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.743275][ T2708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.752744][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.760787][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.769724][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.804821][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.814734][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.824021][ T3175] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.831078][ T3175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.839333][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.848656][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.857485][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.866880][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.875388][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.884421][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.893488][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.902157][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.910459][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.919339][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.928616][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.937910][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.946483][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.958404][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.967399][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.975562][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.998411][ T9431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.029635][ T9440] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.046581][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.055691][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.066077][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.075371][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.084530][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.093949][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.103290][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.111762][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.120087][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.129065][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.170238][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.179733][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.188576][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.198617][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.207449][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.216368][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.225515][ T2709] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.234458][ T2709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.242354][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.250950][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.259502][ T2709] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.266623][ T2709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.274589][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.283778][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.292848][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.301390][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.309983][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.318659][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.327486][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.336200][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.349381][ T9433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.361523][ T9433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.381641][ T9435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.394702][ T9435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.411265][ T9437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.424529][ T9437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.437854][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.447680][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.456206][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.465077][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.474871][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.484344][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.492922][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.501382][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.510780][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.525504][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.534219][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.543425][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.552237][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.559781][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.577442][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.593548][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.604255][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.627718][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.635936][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.645965][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.654849][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.663568][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.672126][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.679652][ T3175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.692643][ T9431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.725657][ T9439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.747413][ T9439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.766713][ T9433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.775519][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.784897][ T2713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.813184][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.820802][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.836253][ T9435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.858685][ T9439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.868931][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.892834][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.900724][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.922367][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.940360][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.940535][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.945813][ T9437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.949688][ T9440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.077602][ T9459] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 2, id = 0 [ 106.147125][ T9468] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 2, id = 0 [ 106.248470][ T9480] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 2, id = 0 [ 106.285872][ T9483] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 2, id = 0 [ 106.456900][ T9493] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 2, id = 0 [ 106.477515][ T9495] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 2, id = 0 2019/12/25 08:12:36 executed programs: 6 [ 109.565090][ T9638] ================================================================== [ 109.565157][ T9638] BUG: KASAN: use-after-free in fb_mode_is_equal+0x297/0x300 [ 109.565169][ T9638] Read of size 4 at addr ffff8880946fcf9c by task syz-executor.3/9638 [ 109.565173][ T9638] [ 109.565188][ T9638] CPU: 0 PID: 9638 Comm: syz-executor.3 Not tainted 5.5.0-rc3-syzkaller #0 [ 109.565196][ T9638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 109.565201][ T9638] Call Trace: [ 109.565217][ T9638] dump_stack+0x197/0x210 [ 109.565231][ T9638] ? fb_mode_is_equal+0x297/0x300 [ 109.565250][ T9638] print_address_description.constprop.0.cold+0xd4/0x30b [ 109.565262][ T9638] ? fb_mode_is_equal+0x297/0x300 [ 109.565274][ T9638] ? fb_mode_is_equal+0x297/0x300 [ 109.565287][ T9638] __kasan_report.cold+0x1b/0x41 [ 109.565300][ T9638] ? cache_grow_begin.cold+0x2d/0x2f [ 109.565312][ T9638] ? fb_mode_is_equal+0x297/0x300 [ 109.565325][ T9638] kasan_report+0x12/0x20 [ 109.565339][ T9638] __asan_report_load4_noabort+0x14/0x20 [ 109.565352][ T9638] fb_mode_is_equal+0x297/0x300 [ 109.565370][ T9638] fbcon_mode_deleted+0x12c/0x190 [ 109.565388][ T9638] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 109.565405][ T9638] fb_set_var+0xab9/0xdd0 [ 109.565421][ T9638] ? fb_blank+0x1a0/0x1a0 [ 109.565438][ T9638] ? lock_acquire+0x190/0x410 [ 109.565453][ T9638] ? do_fb_ioctl+0x348/0x7d0 [ 109.565473][ T9638] ? __mutex_lock+0x458/0x13c0 [ 109.565485][ T9638] ? down+0x70/0x90 [ 109.565502][ T9638] ? mutex_trylock+0x2d0/0x2d0 [ 109.565514][ T9638] ? mark_held_locks+0xf0/0xf0 [ 109.565526][ T9638] ? lock_downgrade+0x920/0x920 [ 109.565540][ T9638] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 109.565550][ T9638] ? down+0x70/0x90 [ 109.565564][ T9638] ? lock_acquire+0x190/0x410 [ 109.565575][ T9638] ? do_fb_ioctl+0x335/0x7d0 [ 109.565595][ T9638] do_fb_ioctl+0x390/0x7d0 [ 109.565608][ T9638] ? fb_mmap+0x520/0x520 [ 109.565622][ T9638] ? tomoyo_path_number_perm+0x214/0x520 [ 109.565634][ T9638] ? find_held_lock+0x35/0x130 [ 109.565647][ T9638] ? tomoyo_path_number_perm+0x214/0x520 [ 109.565664][ T9638] ? lock_downgrade+0x920/0x920 [ 109.565675][ T9638] ? lockdep_hardirqs_on+0x421/0x5e0 [ 109.565691][ T9638] ? tomoyo_path_number_perm+0x454/0x520 [ 109.565726][ T9638] fb_ioctl+0xe6/0x130 [ 109.565737][ T9638] ? do_fb_ioctl+0x7d0/0x7d0 [ 109.565752][ T9638] do_vfs_ioctl+0x977/0x14e0 [ 109.565768][ T9638] ? compat_ioctl_preallocate+0x220/0x220 [ 109.565781][ T9638] ? __fget+0x37f/0x550 [ 109.565797][ T9638] ? ksys_dup3+0x3e0/0x3e0 [ 109.565811][ T9638] ? ns_to_kernel_old_timeval+0x100/0x100 [ 109.565828][ T9638] ? tomoyo_file_ioctl+0x23/0x30 [ 109.565842][ T9638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 109.565855][ T9638] ? security_file_ioctl+0x8d/0xc0 [ 109.565869][ T9638] ksys_ioctl+0xab/0xd0 [ 109.565883][ T9638] __x64_sys_ioctl+0x73/0xb0 [ 109.565900][ T9638] do_syscall_64+0xfa/0x790 [ 109.565915][ T9638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 109.565925][ T9638] RIP: 0033:0x45a919 [ 109.565940][ T9638] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 109.565946][ T9638] RSP: 002b:00007ff6d156bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.565959][ T9638] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 109.565966][ T9638] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000013 [ 109.565973][ T9638] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 109.565980][ T9638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6d156c6d4 [ 109.565988][ T9638] R13: 00000000004c310d R14: 00000000004d8498 R15: 00000000ffffffff [ 109.566003][ T9638] [ 109.566015][ T9638] Allocated by task 9451: [ 109.566025][ T9638] save_stack+0x23/0x90 [ 109.566036][ T9638] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 109.566046][ T9638] kasan_kmalloc+0x9/0x10 [ 109.566056][ T9638] kmem_cache_alloc_trace+0x158/0x790 [ 109.566067][ T9638] fb_add_videomode+0x2fb/0x610 [ 109.566077][ T9638] fb_set_var+0x5ef/0xdd0 [ 109.566087][ T9638] do_fb_ioctl+0x390/0x7d0 [ 109.566096][ T9638] fb_ioctl+0xe6/0x130 [ 109.566106][ T9638] do_vfs_ioctl+0x977/0x14e0 [ 109.566115][ T9638] ksys_ioctl+0xab/0xd0 [ 109.566125][ T9638] __x64_sys_ioctl+0x73/0xb0 [ 109.566136][ T9638] do_syscall_64+0xfa/0x790 [ 109.566147][ T9638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 109.566150][ T9638] [ 109.566156][ T9638] Freed by task 9620: [ 109.566165][ T9638] save_stack+0x23/0x90 [ 109.566175][ T9638] __kasan_slab_free+0x102/0x150 [ 109.566184][ T9638] kasan_slab_free+0xe/0x10 [ 109.566193][ T9638] kfree+0x10a/0x2c0 [ 109.566204][ T9638] fb_delete_videomode+0x3fa/0x540 [ 109.566214][ T9638] fb_set_var+0xac8/0xdd0 [ 109.566224][ T9638] do_fb_ioctl+0x390/0x7d0 [ 109.566234][ T9638] fb_ioctl+0xe6/0x130 [ 109.566243][ T9638] do_vfs_ioctl+0x977/0x14e0 [ 109.566253][ T9638] ksys_ioctl+0xab/0xd0 [ 109.566262][ T9638] __x64_sys_ioctl+0x73/0xb0 [ 109.566274][ T9638] do_syscall_64+0xfa/0x790 [ 109.566285][ T9638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 109.566288][ T9638] [ 109.566297][ T9638] The buggy address belongs to the object at ffff8880946fcf80 [ 109.566297][ T9638] which belongs to the cache kmalloc-96 of size 96 [ 109.566307][ T9638] The buggy address is located 28 bytes inside of [ 109.566307][ T9638] 96-byte region [ffff8880946fcf80, ffff8880946fcfe0) [ 109.566311][ T9638] The buggy address belongs to the page: [ 109.566323][ T9638] page:ffffea000251bf00 refcount:1 mapcount:0 mapping:ffff8880aa400540 index:0x0 [ 109.566340][ T9638] raw: 00fffe0000000200 ffffea00023b2ac8 ffffea000203fc08 ffff8880aa400540 [ 109.566354][ T9638] raw: 0000000000000000 ffff8880946fc000 0000000100000020 0000000000000000 [ 109.566360][ T9638] page dumped because: kasan: bad access detected [ 109.566363][ T9638] [ 109.566367][ T9638] Memory state around the buggy address: [ 109.566376][ T9638] ffff8880946fce80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 109.566386][ T9638] ffff8880946fcf00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 109.566394][ T9638] >ffff8880946fcf80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 109.566399][ T9638] ^ [ 109.566408][ T9638] ffff8880946fd000: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 109.566417][ T9638] ffff8880946fd080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.566421][ T9638] ================================================================== [ 109.566426][ T9638] Disabling lock debugging due to kernel taint [ 109.566433][ T9638] Kernel panic - not syncing: panic_on_warn set ... [ 109.566446][ T9638] CPU: 0 PID: 9638 Comm: syz-executor.3 Tainted: G B 5.5.0-rc3-syzkaller #0 [ 109.566452][ T9638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 109.566454][ T9638] Call Trace: [ 109.566466][ T9638] dump_stack+0x197/0x210 [ 109.566479][ T9638] panic+0x2e3/0x75c [ 109.566490][ T9638] ? add_taint.cold+0x16/0x16 [ 109.566506][ T9638] ? trace_hardirqs_on+0x67/0x240 [ 109.566518][ T9638] ? trace_hardirqs_on+0x5e/0x240 [ 109.566531][ T9638] ? fb_mode_is_equal+0x297/0x300 [ 109.566541][ T9638] end_report+0x47/0x4f [ 109.566553][ T9638] ? fb_mode_is_equal+0x297/0x300 [ 109.566563][ T9638] __kasan_report.cold+0xe/0x41 [ 109.566574][ T9638] ? cache_grow_begin.cold+0x2d/0x2f [ 109.566585][ T9638] ? fb_mode_is_equal+0x297/0x300 [ 109.566597][ T9638] kasan_report+0x12/0x20 [ 109.566608][ T9638] __asan_report_load4_noabort+0x14/0x20 [ 109.566620][ T9638] fb_mode_is_equal+0x297/0x300 [ 109.566631][ T9638] fbcon_mode_deleted+0x12c/0x190 [ 109.566642][ T9638] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 109.566654][ T9638] fb_set_var+0xab9/0xdd0 [ 109.566665][ T9638] ? fb_blank+0x1a0/0x1a0 [ 109.566675][ T9638] ? lock_acquire+0x190/0x410 [ 109.566685][ T9638] ? do_fb_ioctl+0x348/0x7d0 [ 109.566698][ T9638] ? __mutex_lock+0x458/0x13c0 [ 109.566708][ T9638] ? down+0x70/0x90 [ 109.566721][ T9638] ? mutex_trylock+0x2d0/0x2d0 [ 109.566731][ T9638] ? mark_held_locks+0xf0/0xf0 [ 109.566741][ T9638] ? lock_downgrade+0x920/0x920 [ 109.566753][ T9638] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 109.566763][ T9638] ? down+0x70/0x90 [ 109.566774][ T9638] ? lock_acquire+0x190/0x410 [ 109.566784][ T9638] ? do_fb_ioctl+0x335/0x7d0 [ 109.566799][ T9638] do_fb_ioctl+0x390/0x7d0 [ 109.566809][ T9638] ? fb_mmap+0x520/0x520 [ 109.566820][ T9638] ? tomoyo_path_number_perm+0x214/0x520 [ 109.566830][ T9638] ? find_held_lock+0x35/0x130 [ 109.566842][ T9638] ? tomoyo_path_number_perm+0x214/0x520 [ 109.566854][ T9638] ? lock_downgrade+0x920/0x920 [ 109.566865][ T9638] ? lockdep_hardirqs_on+0x421/0x5e0 [ 109.566878][ T9638] ? tomoyo_path_number_perm+0x454/0x520 [ 109.566900][ T9638] fb_ioctl+0xe6/0x130 [ 109.566910][ T9638] ? do_fb_ioctl+0x7d0/0x7d0 [ 109.566921][ T9638] do_vfs_ioctl+0x977/0x14e0 [ 109.566934][ T9638] ? compat_ioctl_preallocate+0x220/0x220 [ 109.566943][ T9638] ? __fget+0x37f/0x550 [ 109.566956][ T9638] ? ksys_dup3+0x3e0/0x3e0 [ 109.566967][ T9638] ? ns_to_kernel_old_timeval+0x100/0x100 [ 109.566980][ T9638] ? tomoyo_file_ioctl+0x23/0x30 [ 109.566993][ T9638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 109.567003][ T9638] ? security_file_ioctl+0x8d/0xc0 [ 109.567019][ T9638] ksys_ioctl+0xab/0xd0 [ 109.567030][ T9638] __x64_sys_ioctl+0x73/0xb0 [ 109.567043][ T9638] do_syscall_64+0xfa/0x790 [ 109.567055][ T9638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 109.567063][ T9638] RIP: 0033:0x45a919 [ 109.567073][ T9638] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 109.567079][ T9638] RSP: 002b:00007ff6d156bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.567089][ T9638] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 109.567095][ T9638] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000013 [ 109.567102][ T9638] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 109.567108][ T9638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6d156c6d4 [ 109.567114][ T9638] R13: 00000000004c310d R14: 00000000004d8498 R15: 00000000ffffffff [ 109.568529][ T9638] Kernel Offset: disabled [ 110.551801][ T9638] Rebooting in 86400 seconds..