[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.417015][ T26] audit: type=1800 audit(1556277340.545:33): pid=7816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 47.181169][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 47.181183][ T26] audit: type=1400 audit(1556277344.305:35): avc: denied { map } for pid=7989 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.124' (ECDSA) to the list of known hosts. [ 53.629431][ T26] audit: type=1400 audit(1556277350.755:36): avc: denied { map } for pid=8001 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/04/26 11:15:51 parsed 1 programs [ 54.630725][ T26] audit: type=1400 audit(1556277351.755:37): avc: denied { map } for pid=8001 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=73 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/04/26 11:15:54 executed programs: 0 [ 57.338465][ T8020] IPVS: ftp: loaded support on port[0] = 21 [ 57.351391][ T8023] IPVS: ftp: loaded support on port[0] = 21 [ 57.366306][ T8021] IPVS: ftp: loaded support on port[0] = 21 [ 57.432557][ T8026] IPVS: ftp: loaded support on port[0] = 21 [ 57.451865][ T8029] IPVS: ftp: loaded support on port[0] = 21 [ 57.465138][ T8028] IPVS: ftp: loaded support on port[0] = 21 [ 57.597067][ T8021] chnl_net:caif_netlink_parms(): no params data found [ 57.675996][ T8026] chnl_net:caif_netlink_parms(): no params data found [ 57.724461][ T8021] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.731664][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.741062][ T8021] device bridge_slave_0 entered promiscuous mode [ 57.766062][ T8029] chnl_net:caif_netlink_parms(): no params data found [ 57.778994][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.786183][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.795211][ T8021] device bridge_slave_1 entered promiscuous mode [ 57.866576][ T8020] chnl_net:caif_netlink_parms(): no params data found [ 57.899883][ T8021] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 57.911862][ T8021] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 57.945275][ T8023] chnl_net:caif_netlink_parms(): no params data found [ 57.973837][ T8026] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.981607][ T8026] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.989424][ T8026] device bridge_slave_0 entered promiscuous mode [ 58.000837][ T8026] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.008165][ T8026] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.015957][ T8026] device bridge_slave_1 entered promiscuous mode [ 58.023356][ T8028] chnl_net:caif_netlink_parms(): no params data found [ 58.061858][ T8029] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.072271][ T8029] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.080381][ T8029] device bridge_slave_0 entered promiscuous mode [ 58.090819][ T8029] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.098329][ T8029] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.106509][ T8029] device bridge_slave_1 entered promiscuous mode [ 58.115799][ T8021] team0: Port device team_slave_0 added [ 58.130948][ T8020] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.138643][ T8020] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.148977][ T8020] device bridge_slave_0 entered promiscuous mode [ 58.160140][ T8020] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.167814][ T8020] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.178547][ T8020] device bridge_slave_1 entered promiscuous mode [ 58.190708][ T8021] team0: Port device team_slave_1 added [ 58.207454][ T8026] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.225944][ T8023] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.233107][ T8023] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.241338][ T8023] device bridge_slave_0 entered promiscuous mode [ 58.253410][ T8029] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.264720][ T8026] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.274553][ T8029] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.297262][ T8023] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.305135][ T8023] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.312901][ T8023] device bridge_slave_1 entered promiscuous mode [ 58.334857][ T8029] team0: Port device team_slave_0 added [ 58.352030][ T8020] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.373892][ T8028] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.381335][ T8028] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.389503][ T8028] device bridge_slave_0 entered promiscuous mode [ 58.398136][ T8029] team0: Port device team_slave_1 added [ 58.405110][ T8026] team0: Port device team_slave_0 added [ 58.417912][ T8020] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.432597][ T8023] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.441229][ T8028] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.448459][ T8028] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.457079][ T8028] device bridge_slave_1 entered promiscuous mode [ 58.465713][ T8026] team0: Port device team_slave_1 added [ 58.525572][ T8021] device hsr_slave_0 entered promiscuous mode [ 58.574642][ T8021] device hsr_slave_1 entered promiscuous mode [ 58.619598][ T8023] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.647797][ T8020] team0: Port device team_slave_0 added [ 58.706550][ T8026] device hsr_slave_0 entered promiscuous mode [ 58.744455][ T8026] device hsr_slave_1 entered promiscuous mode [ 58.819475][ T8028] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.828735][ T8020] team0: Port device team_slave_1 added [ 58.886414][ T8029] device hsr_slave_0 entered promiscuous mode [ 58.954111][ T8029] device hsr_slave_1 entered promiscuous mode [ 59.012934][ T8023] team0: Port device team_slave_0 added [ 59.020295][ T8028] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.042877][ T8023] team0: Port device team_slave_1 added [ 59.063400][ T8028] team0: Port device team_slave_0 added [ 59.071899][ T8028] team0: Port device team_slave_1 added [ 59.148545][ T8028] device hsr_slave_0 entered promiscuous mode [ 59.214093][ T8028] device hsr_slave_1 entered promiscuous mode [ 59.346465][ T8020] device hsr_slave_0 entered promiscuous mode [ 59.384142][ T8020] device hsr_slave_1 entered promiscuous mode [ 59.465993][ T8023] device hsr_slave_0 entered promiscuous mode [ 59.514287][ T8023] device hsr_slave_1 entered promiscuous mode [ 59.651937][ T8029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.672606][ T8021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.718394][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.729342][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.746198][ T8026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.759752][ T8020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.771095][ T8029] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.778722][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.787058][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.800986][ T8026] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.809829][ T8021] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.823214][ T8028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.838693][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 59.846759][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.855334][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.882497][ T8028] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.892850][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.902355][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.911399][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.918743][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.927555][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.936533][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.946098][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.953504][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.961232][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.969952][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.978721][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.985792][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.993377][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.002058][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.011087][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.018224][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.025981][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.034983][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.043443][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.052057][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.059704][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.067744][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.075455][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.083068][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.092439][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.100977][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.108067][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.116287][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.124206][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.131962][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.142791][ T8020] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.165291][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.174525][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.183089][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.193066][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.200184][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.208143][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.216990][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.225615][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.232658][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.240462][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.249330][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.270890][ T8023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.282611][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.293034][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.301746][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.311735][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.320268][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.328561][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.337030][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.345484][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.353622][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.362253][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.370888][ T8031] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.378095][ T8031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.386278][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.395063][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.403407][ T8031] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.410516][ T8031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.418493][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.427105][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.437646][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.447739][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.486036][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.497954][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.506733][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.516296][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.525175][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.532215][ T8037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.540192][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.549029][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.558397][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.567279][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.575692][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.584959][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.593355][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.602180][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.610575][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.619424][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.628064][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.636689][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.645212][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.653933][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.662324][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.670828][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.679112][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.687548][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.696363][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.704404][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.712129][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.724876][ T8028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.745228][ T8023] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.758004][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.766798][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.776100][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.784759][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.793059][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.802155][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.810009][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.821837][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.834472][ T8020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.846398][ T8020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.867436][ T8028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.876297][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.892434][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.893460][ T26] audit: type=1400 audit(1556277358.015:38): avc: denied { associate } for pid=8028 comm="syz-executor.3" name="syz3" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 60.901047][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.935218][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.951294][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.960552][ T2872] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.967702][ T2872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.979048][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.994020][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.003330][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.012050][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.019186][ T8037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.028201][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.038066][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.047131][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.056105][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.069476][ T8026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.089803][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.101495][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.125039][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.142213][ T8042] input: syz1 as /devices/virtual/input/input5 [ 61.143159][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.159859][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.200746][ T8038] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.211233][ T8038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.222312][ T8038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.232715][ T8038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.241423][ T8038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.259585][ T8029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.271786][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.289133][ T8021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.296240][ T8044] input: syz1 as /devices/virtual/input/input6 [ 61.305195][ T8020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.314286][ T8038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.323354][ T8038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.332884][ T8038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.349891][ T8038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.370668][ T8023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.383157][ T8023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.424025][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.443389][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.485186][ T8054] input: syz1 as /devices/virtual/input/input8 [ 61.492011][ T8057] input: syz1 as /devices/virtual/input/input9 [ 61.519769][ T8049] input: syz1 as /devices/virtual/input/input7 [ 61.537745][ T8061] input: syz1 as /devices/virtual/input/input10 [ 61.555343][ T8023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.615482][ T8029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.741123][ T8078] input: syz1 as /devices/virtual/input/input14 [ 61.775336][ T8072] input: syz1 as /devices/virtual/input/input15 [ 61.787528][ T8084] input: syz1 as /devices/virtual/input/input16 [ 61.806087][ T8086] input: syz1 as /devices/virtual/input/input17 [ 61.821544][ T8088] input: syz1 as /devices/virtual/input/input18 [ 61.856218][ T8093] input: syz1 as /devices/virtual/input/input19 [ 61.886601][ T8085] input: syz1 as /devices/virtual/input/input20 [ 61.940970][ T8091] input: syz1 as /devices/virtual/input/input21 [ 62.016828][ T8094] input: syz1 as /devices/virtual/input/input23 [ 62.032899][ T8118] input: syz1 as /devices/virtual/input/input24 2019/04/26 11:15:59 executed programs: 14 [ 62.127016][ T8103] input: syz1 as /devices/virtual/input/input28 [ 62.152676][ T8134] input: syz1 as /devices/virtual/input/input29 [ 62.164291][ T8135] input: syz1 as /devices/virtual/input/input31 [ 62.239685][ T8131] input: syz1 as /devices/virtual/input/input30 [ 62.328636][ T8153] input: syz1 as /devices/virtual/input/input33 [ 62.336993][ T8144] input: syz1 as /devices/virtual/input/input35 [ 62.370026][ T8158] input: syz1 as /devices/virtual/input/input38 [ 62.408484][ T8148] input: syz1 as /devices/virtual/input/input39 [ 62.513351][ T8173] input: syz1 as /devices/virtual/input/input41 [ 62.520613][ T8172] input: syz1 as /devices/virtual/input/input40 [ 62.547841][ T8180] input: syz1 as /devices/virtual/input/input43 [ 62.584767][ T8163] input: syz1 as /devices/virtual/input/input44 [ 62.593756][ T8159] input: syz1 as /devices/virtual/input/input45 [ 62.621021][ T8186] input: syz1 as /devices/virtual/input/input46 [ 62.630418][ T8158] ------------[ cut here ]------------ [ 62.636354][ T8158] refcount_t: increment on 0; use-after-free. [ 62.636683][ T8158] WARNING: CPU: 1 PID: 8158 at lib/refcount.c:156 refcount_inc_checked+0x61/0x70 [ 62.651643][ T8158] Kernel panic - not syncing: panic_on_warn set ... [ 62.658226][ T8158] CPU: 1 PID: 8158 Comm: syz-executor.5 Not tainted 5.1.0-rc6+ #85 [ 62.666096][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.677434][ T8158] Call Trace: [ 62.680730][ T8158] dump_stack+0x172/0x1f0 [ 62.685048][ T8158] ? refcount_inc_not_zero_checked+0x1b0/0x200 [ 62.691216][ T8158] panic+0x2cb/0x65c [ 62.695097][ T8158] ? __warn_printk+0xf3/0xf3 [ 62.699686][ T8158] ? refcount_inc_checked+0x61/0x70 [ 62.704947][ T8158] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 62.711179][ T8158] ? __warn.cold+0x5/0x45 [ 62.715497][ T8158] ? __warn+0xe8/0x1d0 [ 62.719559][ T8158] ? refcount_inc_checked+0x61/0x70 [ 62.724746][ T8158] __warn.cold+0x20/0x45 [ 62.728991][ T8158] ? refcount_inc_checked+0x61/0x70 [ 62.734181][ T8158] report_bug+0x263/0x2b0 [ 62.738503][ T8158] do_error_trap+0x11b/0x200 [ 62.743098][ T8158] do_invalid_op+0x37/0x50 [ 62.747502][ T8158] ? refcount_inc_checked+0x61/0x70 [ 62.752716][ T8158] invalid_op+0x14/0x20 [ 62.756894][ T8158] RIP: 0010:refcount_inc_checked+0x61/0x70 [ 62.763034][ T8158] Code: 1d 18 2e 2a 06 31 ff 89 de e8 9b 30 40 fe 84 db 75 dd e8 52 2f 40 fe 48 c7 c7 e0 79 a1 87 c6 05 f8 2d 2a 06 01 e8 fd dc 12 fe <0f> 0b eb c1 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 [ 62.782624][ T8158] RSP: 0018:ffff888089ef78b8 EFLAGS: 00010282 [ 62.788674][ T8158] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 62.796645][ T8158] RDX: 0000000000000000 RSI: ffffffff815afcf6 RDI: ffffed10113def09 [ 62.804606][ T8158] RBP: ffff888089ef78c8 R08: ffff888093da61c0 R09: ffffed1015d23ef1 [ 62.812567][ T8158] R10: ffffed1015d23ef0 R11: ffff8880ae91f787 R12: ffff88808e985c78 [ 62.820533][ T8158] R13: 0000000000000000 R14: ffff888095e2c0c0 R15: ffff8880927f84c0 [ 62.828518][ T8158] ? vprintk_func+0x86/0x189 [ 62.833102][ T8158] ? refcount_inc_checked+0x61/0x70 [ 62.838304][ T8158] kobject_get+0x66/0xc0 [ 62.842536][ T8158] cdev_get+0x60/0xb0 [ 62.846508][ T8158] chrdev_open+0xb0/0x6b0 [ 62.850842][ T8158] ? cdev_put.part.0+0x50/0x50 [ 62.855600][ T8158] ? security_file_open+0x8d/0x300 [ 62.860706][ T8158] do_dentry_open+0x4e2/0x1250 [ 62.865564][ T8158] ? kasan_check_read+0x11/0x20 [ 62.870400][ T8158] ? cdev_put.part.0+0x50/0x50 [ 62.875167][ T8158] ? chown_common+0x5c0/0x5c0 [ 62.879832][ T8158] ? inode_permission+0xb4/0x570 [ 62.884759][ T8158] vfs_open+0xa0/0xd0 [ 62.888732][ T8158] path_openat+0x10e9/0x46e0 [ 62.893313][ T8158] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 62.899639][ T8158] ? kasan_slab_alloc+0xf/0x20 [ 62.904391][ T8158] ? kmem_cache_alloc+0x11a/0x6f0 [ 62.909398][ T8158] ? getname_flags+0xd6/0x5b0 [ 62.914072][ T8158] ? getname+0x1a/0x20 [ 62.918140][ T8158] ? do_sys_open+0x2c9/0x5d0 [ 62.922727][ T8158] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 62.928098][ T8158] ? __alloc_fd+0x44d/0x560 [ 62.932590][ T8158] do_filp_open+0x1a1/0x280 [ 62.937081][ T8158] ? may_open_dev+0x100/0x100 [ 62.941769][ T8158] ? kasan_check_read+0x11/0x20 [ 62.946611][ T8158] ? do_raw_spin_unlock+0x57/0x270 [ 62.951718][ T8158] ? _raw_spin_unlock+0x2d/0x50 [ 62.956648][ T8158] ? __alloc_fd+0x44d/0x560 [ 62.961147][ T8158] do_sys_open+0x3fe/0x5d0 [ 62.965559][ T8158] ? filp_open+0x80/0x80 [ 62.969818][ T8158] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 62.975275][ T8158] ? do_syscall_64+0x26/0x610 [ 62.979946][ T8158] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 62.986001][ T8158] ? do_syscall_64+0x26/0x610 [ 62.990670][ T8158] __x64_sys_open+0x7e/0xc0 [ 62.995171][ T8158] do_syscall_64+0x103/0x610 [ 63.000838][ T8158] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 63.006724][ T8158] RIP: 0033:0x412d41 [ 63.010611][ T8158] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 63.030204][ T8158] RSP: 002b:00007f3c1871c7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 63.040180][ T8158] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000412d41 [ 63.048142][ T8158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f3c1871c850 [ 63.056469][ T8158] RBP: 000000000073bf00 R08: 000000000000000f R09: 0000000000000000 [ 63.064432][ T8158] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f3c1871d6d4 [ 63.072581][ T8158] R13: 00000000004c7b08 R14: 00000000004ddb80 R15: 00000000ffffffff [ 63.082172][ T8158] Kernel Offset: disabled [ 63.086845][ T8158] Rebooting in 86400 seconds..