[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 60.709998][ T27] audit: type=1800 audit(1575933989.004:25): pid=8899 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 60.730465][ T27] audit: type=1800 audit(1575933989.004:26): pid=8899 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 60.757549][ T27] audit: type=1800 audit(1575933989.014:27): pid=8899 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.58' (ECDSA) to the list of known hosts. 2019/12/09 23:26:44 parsed 1 programs 2019/12/09 23:26:46 executed programs: 0 syzkaller login: [ 78.495940][ T9073] IPVS: ftp: loaded support on port[0] = 21 [ 78.507655][ T9071] IPVS: ftp: loaded support on port[0] = 21 [ 78.516500][ T9075] IPVS: ftp: loaded support on port[0] = 21 [ 78.600169][ T9080] IPVS: ftp: loaded support on port[0] = 21 [ 78.600933][ T9078] IPVS: ftp: loaded support on port[0] = 21 [ 78.650323][ T9081] IPVS: ftp: loaded support on port[0] = 21 [ 78.841292][ T9071] chnl_net:caif_netlink_parms(): no params data found [ 78.878038][ T9081] chnl_net:caif_netlink_parms(): no params data found [ 78.959849][ T9081] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.967893][ T9081] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.975738][ T9081] device bridge_slave_0 entered promiscuous mode [ 78.986769][ T9081] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.994006][ T9081] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.002081][ T9081] device bridge_slave_1 entered promiscuous mode [ 79.014189][ T9075] chnl_net:caif_netlink_parms(): no params data found [ 79.029451][ T9073] chnl_net:caif_netlink_parms(): no params data found [ 79.053021][ T9071] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.060607][ T9071] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.068947][ T9071] device bridge_slave_0 entered promiscuous mode [ 79.103124][ T9075] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.110390][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.118239][ T9075] device bridge_slave_0 entered promiscuous mode [ 79.133673][ T9071] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.141168][ T9071] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.151245][ T9071] device bridge_slave_1 entered promiscuous mode [ 79.189734][ T9075] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.196877][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.205078][ T9075] device bridge_slave_1 entered promiscuous mode [ 79.213877][ T9081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.226832][ T9081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.263201][ T9078] chnl_net:caif_netlink_parms(): no params data found [ 79.321392][ T9075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.333130][ T9071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.346720][ T9071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.363582][ T9080] chnl_net:caif_netlink_parms(): no params data found [ 79.373862][ T9081] team0: Port device team_slave_0 added [ 79.386418][ T9081] team0: Port device team_slave_1 added [ 79.396489][ T9075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.410295][ T9073] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.417356][ T9073] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.426326][ T9073] device bridge_slave_0 entered promiscuous mode [ 79.456986][ T9078] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.464314][ T9078] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.472422][ T9078] device bridge_slave_0 entered promiscuous mode [ 79.485050][ T9073] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.492545][ T9073] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.500546][ T9073] device bridge_slave_1 entered promiscuous mode [ 79.523973][ T9078] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.531372][ T9078] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.539322][ T9078] device bridge_slave_1 entered promiscuous mode [ 79.549221][ T9071] team0: Port device team_slave_0 added [ 79.590718][ T9075] team0: Port device team_slave_0 added [ 79.603707][ T9075] team0: Port device team_slave_1 added [ 79.611631][ T9071] team0: Port device team_slave_1 added [ 79.671657][ T9081] device hsr_slave_0 entered promiscuous mode [ 79.737887][ T9081] device hsr_slave_1 entered promiscuous mode [ 79.810881][ T9073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.826770][ T9078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.862467][ T9073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.880412][ T9078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.951014][ T9075] device hsr_slave_0 entered promiscuous mode [ 79.997805][ T9075] device hsr_slave_1 entered promiscuous mode [ 80.047783][ T9075] debugfs: Directory 'hsr0' with parent '/' already present! [ 80.060880][ T9080] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.068297][ T9080] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.075986][ T9080] device bridge_slave_0 entered promiscuous mode [ 80.150964][ T9071] device hsr_slave_0 entered promiscuous mode [ 80.188013][ T9071] device hsr_slave_1 entered promiscuous mode [ 80.227627][ T9071] debugfs: Directory 'hsr0' with parent '/' already present! [ 80.244193][ T9080] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.256355][ T9080] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.264430][ T9080] device bridge_slave_1 entered promiscuous mode [ 80.292958][ T9073] team0: Port device team_slave_0 added [ 80.310662][ T9078] team0: Port device team_slave_0 added [ 80.325054][ T9080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.339998][ T9078] team0: Port device team_slave_1 added [ 80.349965][ T9073] team0: Port device team_slave_1 added [ 80.364983][ T9080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.424927][ T9071] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.481891][ T9080] team0: Port device team_slave_0 added [ 80.495189][ T9080] team0: Port device team_slave_1 added [ 80.502559][ T9081] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 80.550106][ T9075] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.595913][ T9071] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.645832][ T9071] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.680819][ T9071] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.740724][ T9081] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 80.800121][ T9075] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.881273][ T9078] device hsr_slave_0 entered promiscuous mode [ 80.927845][ T9078] device hsr_slave_1 entered promiscuous mode [ 80.967562][ T9078] debugfs: Directory 'hsr0' with parent '/' already present! [ 81.009525][ T9073] device hsr_slave_0 entered promiscuous mode [ 81.067813][ T9073] device hsr_slave_1 entered promiscuous mode [ 81.107527][ T9073] debugfs: Directory 'hsr0' with parent '/' already present! [ 81.116292][ T9081] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 81.169058][ T9075] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.239119][ T9081] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 81.279273][ T9075] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.400779][ T9080] device hsr_slave_0 entered promiscuous mode [ 81.438460][ T9080] device hsr_slave_1 entered promiscuous mode [ 81.477538][ T9080] debugfs: Directory 'hsr0' with parent '/' already present! [ 81.557776][ T9073] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.624001][ T9078] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.672145][ T9078] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.731968][ T9078] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.791099][ T9078] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.850437][ T9073] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.902276][ T9073] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.991247][ T9073] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.065103][ T9080] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.111486][ T9080] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.163511][ T9080] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.266256][ T9080] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.352879][ T9071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.372684][ T9075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.408569][ T9089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.417038][ T9089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.426414][ T9089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.434450][ T9089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.452142][ T9071] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.484417][ T9075] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.542889][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.551934][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.561264][ T3699] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.568537][ T3699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.576828][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.586807][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.595317][ T3699] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.602382][ T3699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.610376][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.619445][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.627898][ T3699] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.634962][ T3699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.642634][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.651246][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.659754][ T3699] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.666793][ T3699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.674782][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.682846][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.709244][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.720036][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.729007][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.739841][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.749356][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.766685][ T9078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.785821][ T9073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.796855][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.807962][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.816479][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.826036][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.837082][ T9081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.860871][ T9080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.879770][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.889189][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.897826][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.906124][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.916388][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.925162][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.933594][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.942207][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.950874][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.972484][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.993578][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.002112][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.011346][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.019565][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.027206][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.035806][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.044887][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.053556][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.066184][ T9081] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.083746][ T9080] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.096686][ T9071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.111098][ T9078] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.123592][ T9086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.134895][ T9086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.142861][ T9086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.150901][ T9086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.159019][ T9086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.168045][ T9086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.176591][ T9086] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.183727][ T9086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.191509][ T9086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.201048][ T9086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.209779][ T9086] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.216854][ T9086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.224910][ T9086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.232833][ T9086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.248068][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.255494][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.268380][ T3144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.276952][ T3144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.290163][ T3144] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.297202][ T3144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.307168][ T3144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.330560][ T9075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.369914][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.385731][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.395859][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.403009][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.411438][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.420216][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.429422][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.438297][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.445340][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.453513][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.462671][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.471852][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.480638][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.489290][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.496323][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.504157][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.512719][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.521464][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.530283][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.547605][ T9073] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.564357][ T9081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.576806][ T9081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.600014][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.611424][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 2019/12/09 23:26:51 executed programs: 6 [ 83.642339][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.643087][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.673085][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.683377][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.693574][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.694153][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.694910][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.695890][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.696582][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.697191][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.699397][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.699969][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.700517][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.701085][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.701501][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.701551][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.715827][ T9080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.716882][ T9080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.740581][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.741245][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.741651][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.742068][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.742518][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.742915][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.743524][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.743995][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.744081][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.744162][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.744702][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.745175][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.745594][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.745912][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.745940][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.780062][ T9071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.006767][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.015625][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.031276][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.063337][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.071902][ T9100] ================================================================== [ 84.071963][ T9100] BUG: KASAN: global-out-of-bounds in fbcon_get_font+0x2b2/0x5e0 [ 84.071975][ T9100] Read of size 32 at addr ffffffff88729d80 by task syz-executor.3/9100 [ 84.071979][ T9100] [ 84.071996][ T9100] CPU: 1 PID: 9100 Comm: syz-executor.3 Not tainted 5.5.0-rc1-next-20191209-syzkaller #0 [ 84.072007][ T9100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.072013][ T9100] Call Trace: [ 84.072033][ T9100] dump_stack+0x197/0x210 [ 84.072046][ T9100] ? fbcon_get_font+0x2b2/0x5e0 [ 84.072067][ T9100] print_address_description.constprop.0.cold+0x5/0x30b [ 84.072078][ T9100] ? fbcon_get_font+0x2b2/0x5e0 [ 84.072090][ T9100] ? fbcon_get_font+0x2b2/0x5e0 [ 84.072105][ T9100] __kasan_report.cold+0x1b/0x41 [ 84.072120][ T9100] ? fbcon_get_font+0x2b2/0x5e0 [ 84.072137][ T9100] kasan_report+0x12/0x20 [ 84.072152][ T9100] check_memory_region+0x134/0x1a0 [ 84.072166][ T9100] memcpy+0x24/0x50 [ 84.072180][ T9100] fbcon_get_font+0x2b2/0x5e0 [ 84.072197][ T9100] ? display_to_var+0x7e0/0x7e0 [ 84.072215][ T9100] con_font_op+0x20b/0x1270 [ 84.072229][ T9100] ? mark_lock+0xc2/0x1220 [ 84.072249][ T9100] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 84.072265][ T9100] ? con_write+0xd0/0xd0 [ 84.072280][ T9100] ? cap_capable+0x205/0x270 [ 84.072300][ T9100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 84.072317][ T9100] ? security_capable+0x95/0xc0 [ 84.072335][ T9100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 84.072351][ T9100] ? ns_capable_common+0x93/0x100 [ 84.072368][ T9100] vt_ioctl+0xd2e/0x26d0 [ 84.072383][ T9100] ? complete_change_console+0x3a0/0x3a0 [ 84.072402][ T9100] ? lock_downgrade+0x920/0x920 [ 84.072419][ T9100] ? rwlock_bug.part.0+0x90/0x90 [ 84.072436][ T9100] ? tomoyo_path_number_perm+0x214/0x520 [ 84.072450][ T9100] ? find_held_lock+0x35/0x130 [ 84.072467][ T9100] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 84.072484][ T9100] ? tty_jobctrl_ioctl+0x50/0xd40 [ 84.072496][ T9100] ? complete_change_console+0x3a0/0x3a0 [ 84.072513][ T9100] tty_ioctl+0xa37/0x14f0 [ 84.072530][ T9100] ? tty_vhangup+0x30/0x30 [ 84.072543][ T9100] ? tomoyo_path_number_perm+0x454/0x520 [ 84.072561][ T9100] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 84.072574][ T9100] ? tomoyo_path_number_perm+0x25e/0x520 [ 84.072591][ T9100] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 84.072624][ T9100] ? tty_vhangup+0x30/0x30 [ 84.072642][ T9100] do_vfs_ioctl+0x977/0x14e0 [ 84.072661][ T9100] ? compat_ioctl_preallocate+0x220/0x220 [ 84.072678][ T9100] ? __fget+0x37f/0x550 [ 84.072698][ T9100] ? ksys_dup3+0x3e0/0x3e0 [ 84.072713][ T9100] ? ns_to_kernel_old_timeval+0x100/0x100 [ 84.072733][ T9100] ? tomoyo_file_ioctl+0x23/0x30 [ 84.072747][ T9100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 84.072759][ T9100] ? security_file_ioctl+0x8d/0xc0 [ 84.072776][ T9100] ksys_ioctl+0xab/0xd0 [ 84.072793][ T9100] __x64_sys_ioctl+0x73/0xb0 [ 84.072813][ T9100] do_syscall_64+0xfa/0x790 [ 84.072833][ T9100] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 84.072845][ T9100] RIP: 0033:0x45a6f9 [ 84.072860][ T9100] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 84.072868][ T9100] RSP: 002b:00007f30314dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.072882][ T9100] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a6f9 [ 84.072890][ T9100] RDX: 0000000000713000 RSI: 0000000000004b60 RDI: 0000000000000004 [ 84.072898][ T9100] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 84.072906][ T9100] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f30314dd6d4 [ 84.072915][ T9100] R13: 00000000004c6d87 R14: 00000000004dd3e0 R15: 00000000ffffffff [ 84.072933][ T9100] [ 84.072938][ T9100] The buggy address belongs to the variable: [ 84.072953][ T9100] fontdata_8x16+0x1000/0x1120 [ 84.072957][ T9100] [ 84.072961][ T9100] Memory state around the buggy address: [ 84.072973][ T9100] ffffffff88729c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.072984][ T9100] ffffffff88729d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.072994][ T9100] >ffffffff88729d80: fa fa fa fa 06 fa fa fa fa fa fa fa 05 fa fa fa [ 84.073000][ T9100] ^ [ 84.073010][ T9100] ffffffff88729e00: fa fa fa fa 06 fa fa fa fa fa fa fa 00 00 03 fa [ 84.073020][ T9100] ffffffff88729e80: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.073026][ T9100] ================================================================== [ 84.073031][ T9100] Disabling lock debugging due to kernel taint [ 84.073061][ T9100] Kernel panic - not syncing: panic_on_warn set ... [ 84.073075][ T9100] CPU: 1 PID: 9100 Comm: syz-executor.3 Tainted: G B 5.5.0-rc1-next-20191209-syzkaller #0 [ 84.073081][ T9100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.073084][ T9100] Call Trace: [ 84.073098][ T9100] dump_stack+0x197/0x210 [ 84.073114][ T9100] panic+0x2e3/0x75c [ 84.073126][ T9100] ? add_taint.cold+0x16/0x16 [ 84.073146][ T9100] ? trace_hardirqs_on+0x5e/0x240 [ 84.073158][ T9100] ? trace_hardirqs_on+0x5e/0x240 [ 84.073170][ T9100] ? fbcon_get_font+0x2b2/0x5e0 [ 84.073182][ T9100] end_report+0x47/0x4f [ 84.073192][ T9100] ? fbcon_get_font+0x2b2/0x5e0 [ 84.073204][ T9100] __kasan_report.cold+0xe/0x41 [ 84.073216][ T9100] ? fbcon_get_font+0x2b2/0x5e0 [ 84.073228][ T9100] kasan_report+0x12/0x20 [ 84.073242][ T9100] check_memory_region+0x134/0x1a0 [ 84.073253][ T9100] memcpy+0x24/0x50 [ 84.073265][ T9100] fbcon_get_font+0x2b2/0x5e0 [ 84.073278][ T9100] ? display_to_var+0x7e0/0x7e0 [ 84.073291][ T9100] con_font_op+0x20b/0x1270 [ 84.073302][ T9100] ? mark_lock+0xc2/0x1220 [ 84.073316][ T9100] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 84.073329][ T9100] ? con_write+0xd0/0xd0 [ 84.073341][ T9100] ? cap_capable+0x205/0x270 [ 84.073356][ T9100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 84.073369][ T9100] ? security_capable+0x95/0xc0 [ 84.073384][ T9100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 84.073401][ T9100] ? ns_capable_common+0x93/0x100 [ 84.073414][ T9100] vt_ioctl+0xd2e/0x26d0 [ 84.073427][ T9100] ? complete_change_console+0x3a0/0x3a0 [ 84.073438][ T9100] ? lock_downgrade+0x920/0x920 [ 84.073451][ T9100] ? rwlock_bug.part.0+0x90/0x90 [ 84.073464][ T9100] ? tomoyo_path_number_perm+0x214/0x520 [ 84.073476][ T9100] ? find_held_lock+0x35/0x130 [ 84.073490][ T9100] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 84.073503][ T9100] ? tty_jobctrl_ioctl+0x50/0xd40 [ 84.073515][ T9100] ? complete_change_console+0x3a0/0x3a0 [ 84.073528][ T9100] tty_ioctl+0xa37/0x14f0 [ 84.073541][ T9100] ? tty_vhangup+0x30/0x30 [ 84.073553][ T9100] ? tomoyo_path_number_perm+0x454/0x520 [ 84.073568][ T9100] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 84.073581][ T9100] ? tomoyo_path_number_perm+0x25e/0x520 [ 84.073595][ T9100] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 84.073615][ T9100] ? tty_vhangup+0x30/0x30 [ 84.073628][ T9100] do_vfs_ioctl+0x977/0x14e0 [ 84.073642][ T9100] ? compat_ioctl_preallocate+0x220/0x220 [ 84.073653][ T9100] ? __fget+0x37f/0x550 [ 84.073668][ T9100] ? ksys_dup3+0x3e0/0x3e0 [ 84.073681][ T9100] ? ns_to_kernel_old_timeval+0x100/0x100 [ 84.073696][ T9100] ? tomoyo_file_ioctl+0x23/0x30 [ 84.073708][ T9100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 84.073717][ T9100] ? security_file_ioctl+0x8d/0xc0 [ 84.073728][ T9100] ksys_ioctl+0xab/0xd0 [ 84.073738][ T9100] __x64_sys_ioctl+0x73/0xb0 [ 84.073750][ T9100] do_syscall_64+0xfa/0x790 [ 84.073765][ T9100] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 84.073772][ T9100] RIP: 0033:0x45a6f9 [ 84.073782][ T9100] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 84.073789][ T9100] RSP: 002b:00007f30314dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.073799][ T9100] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a6f9 [ 84.073804][ T9100] RDX: 0000000000713000 RSI: 0000000000004b60 RDI: 0000000000000004 [ 84.073810][ T9100] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 84.073817][ T9100] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f30314dd6d4 [ 84.073824][ T9100] R13: 00000000004c6d87 R14: 00000000004dd3e0 R15: 00000000ffffffff [ 84.075187][ T9100] Kernel Offset: disabled [ 84.885424][ T9100] Rebooting in 86400 seconds..