[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[ 63.853507][ T26] audit: type=1800 audit(1563362585.539:25): pid=9061 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[ 63.897172][ T26] audit: type=1800 audit(1563362585.539:26): pid=9061 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[ 63.934488][ T26] audit: type=1800 audit(1563362585.539:27): pid=9061 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Debian GNU/Linux 7 syzkaller ttyS0
Warning: Permanently added '10.128.15.213' (ECDSA) to the list of known hosts.
syzkaller login: [ 1541.135112][ T9215] IPVS: ftp: loaded support on port[0] = 21
[ 1541.211232][ T9215] chnl_net:caif_netlink_parms(): no params data found
[ 1541.239889][ T9215] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1541.247819][ T9215] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1541.255707][ T9215] device bridge_slave_0 entered promiscuous mode
[ 1541.264086][ T9215] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1541.271442][ T9215] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1541.279341][ T9215] device bridge_slave_1 entered promiscuous mode
[ 1541.296544][ T9215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1541.307931][ T9215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1541.326671][ T9215] team0: Port device team_slave_0 added
[ 1541.335002][ T9215] team0: Port device team_slave_1 added
[ 1541.389150][ T9215] device hsr_slave_0 entered promiscuous mode
[ 1541.457383][ T9215] device hsr_slave_1 entered promiscuous mode
[ 1541.535671][ T9215] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1541.542987][ T9215] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1541.551176][ T9215] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1541.558565][ T9215] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1541.590706][ T9215] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1541.603235][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1541.623616][ T22] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1541.633680][ T22] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1541.642587][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1541.654450][ T9215] 8021q: adding VLAN 0 to HW filter on device team0
[ 1541.664963][ T9219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1541.674821][ T9219] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1541.682210][ T9219] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1541.693740][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1541.704005][ T22] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1541.711353][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1541.728823][ T9219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1541.738827][ T9219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1541.750343][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1541.764551][ T9215] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1541.775972][ T9215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1541.789503][ T9219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1541.800136][ T9219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1541.808728][ T9219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1541.824018][ T9215] 8021q: adding VLAN 0 to HW filter on device batadv0
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
[ 1622.557460][ C0] ------------[ cut here ]------------
[ 1622.563220][ C0] refcount_t: increment on 0; use-after-free.
[ 1622.569724][ C0] WARNING: CPU: 0 PID: 0 at lib/refcount.c:156 refcount_inc_checked+0x61/0x70
[ 1622.578936][ C0] Kernel panic - not syncing: panic_on_warn set ...
[ 1622.585553][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.2.0+ #66
[ 1622.592428][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1622.602511][ C0] Call Trace:
[ 1622.605812][ C0]
[ 1622.608755][ C0] dump_stack+0x172/0x1f0
[ 1622.613122][ C0] ? refcount_inc_not_zero_checked+0x1b0/0x200
[ 1622.619836][ C0] panic+0x2dc/0x755
[ 1622.623763][ C0] ? add_taint.cold+0x16/0x16
[ 1622.628476][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1622.634746][ C0] ? __warn.cold+0x5/0x4c
[ 1622.639125][ C0] ? __warn+0xe7/0x1e0
[ 1622.643226][ C0] ? refcount_inc_checked+0x61/0x70
[ 1622.648442][ C0] __warn.cold+0x20/0x4c
[ 1622.652705][ C0] ? vprintk_emit+0x1ea/0x700
[ 1622.657428][ C0] ? refcount_inc_checked+0x61/0x70
[ 1622.662938][ C0] report_bug+0x263/0x2b0
[ 1622.667318][ C0] do_error_trap+0x11b/0x200
[ 1622.671963][ C0] do_invalid_op+0x37/0x50
[ 1622.676609][ C0] ? refcount_inc_checked+0x61/0x70
[ 1622.681924][ C0] invalid_op+0x14/0x20
[ 1622.686408][ C0] RIP: 0010:refcount_inc_checked+0x61/0x70
[ 1622.692915][ C0] Code: 1d 9e 36 64 06 31 ff 89 de e8 9b 41 37 fe 84 db 75 dd e8 52 40 37 fe 48 c7 c7 c0 20 c5 87 c6 05 7e 36 64 06 01 e8 77 e9 08 fe <0f> 0b eb c1 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41
[ 1622.713960][ C0] RSP: 0018:ffff8880ae809bf0 EFLAGS: 00010282
[ 1622.720055][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 1622.728073][ C0] RDX: 0000000000000100 RSI: ffffffff815c1196 RDI: ffffed1015d01370
[ 1622.736344][ C0] RBP: ffff8880ae809c00 R08: ffffffff88c7a200 R09: fffffbfff14a376f
[ 1622.744459][ C0] R10: fffffbfff14a376e R11: ffffffff8a51bb77 R12: ffff888093c65600
[ 1622.752643][ C0] R13: ffff888093c655e8 R14: ffff88808a53d3c8 R15: ffff88808a53d3a0
[ 1622.760671][ C0] ? vprintk_func+0x86/0x189
[ 1622.765386][ C0] nr_insert_socket+0x2d/0xe0
[ 1622.770375][ C0] nr_rx_frame+0x1605/0x1e80
[ 1622.775007][ C0] nr_loopback_timer+0x7b/0x170
[ 1622.779975][ C0] call_timer_fn+0x1ac/0x780
[ 1622.784606][ C0] ? nr_process_rx_frame+0x1540/0x1540
[ 1622.790113][ C0] ? msleep_interruptible+0x150/0x150
[ 1622.795514][ C0] ? run_timer_softirq+0x685/0x17a0
[ 1622.801092][ C0] ? trace_hardirqs_on+0x67/0x240
[ 1622.806152][ C0] ? __kasan_check_read+0x11/0x20
[ 1622.811298][ C0] ? nr_process_rx_frame+0x1540/0x1540
[ 1622.817040][ C0] ? nr_process_rx_frame+0x1540/0x1540
[ 1622.822547][ C0] run_timer_softirq+0x697/0x17a0
[ 1622.827718][ C0] ? add_timer+0x930/0x930
[ 1622.832182][ C0] ? kvm_clock_read+0x18/0x30
[ 1622.837056][ C0] ? kvm_sched_clock_read+0x9/0x20
[ 1622.842195][ C0] ? sched_clock+0x2e/0x50
[ 1622.846663][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1622.853303][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1622.859593][ C0] __do_softirq+0x262/0x98c
[ 1622.864126][ C0] ? sched_clock_cpu+0x1b/0x1b0
[ 1622.869011][ C0] irq_exit+0x19b/0x1e0
[ 1622.873379][ C0] smp_apic_timer_interrupt+0x1a3/0x610
[ 1622.879080][ C0] apic_timer_interrupt+0xf/0x20
[ 1622.884036][ C0]
[ 1622.887084][ C0] RIP: 0010:native_safe_halt+0xe/0x10
[ 1622.892581][ C0] Code: f8 91 77 fa eb 8a 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d 74 70 53 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 64 70 53 00 fb f4 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 9e 8a 2b fa e8 29
[ 1622.912208][ C0] RSP: 0018:ffffffff88c07ce8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
[ 1622.920648][ C0] RAX: 1ffffffff11a5ca5 RBX: ffffffff88c7a200 RCX: 0000000000000000
[ 1622.928751][ C0] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffffffff88c7aa8c
[ 1622.936744][ C0] RBP: ffffffff88c07d18 R08: ffffffff88c7a200 R09: 0000000000000000
[ 1622.945647][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[ 1622.954510][ C0] R13: ffffffff89a31438 R14: 0000000000000000 R15: 0000000000000000
[ 1622.963186][ C0] ? default_idle+0x4e/0x360
[ 1622.967826][ C0] arch_cpu_idle+0xa/0x10
[ 1622.972181][ C0] default_idle_call+0x84/0xb0
[ 1622.976987][ C0] do_idle+0x413/0x760
[ 1622.981105][ C0] ? arch_cpu_idle_exit+0x80/0x80
[ 1622.986178][ C0] ? trace_hardirqs_on+0x67/0x240
[ 1622.991260][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1622.997556][ C0] ? debug_smp_processor_id+0x3c/0x214
[ 1623.003079][ C0] cpu_startup_entry+0x1b/0x20
[ 1623.008491][ C0] rest_init+0x245/0x37b
[ 1623.012811][ C0] arch_call_rest_init+0xe/0x1b
[ 1623.017878][ C0] start_kernel+0x912/0x951
[ 1623.022410][ C0] ? mem_encrypt_init+0xb/0xb
[ 1623.027118][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1623.033476][ C0] ? x86_family+0x41/0x50
[ 1623.037834][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1623.044112][ C0] x86_64_start_reservations+0x29/0x2b
[ 1623.049598][ C0] x86_64_start_kernel+0x77/0x7b
[ 1623.054842][ C0] secondary_startup_64+0xa4/0xb0
[ 1623.061172][ C0] Kernel Offset: disabled
[ 1623.066049][ C0] Rebooting in 86400 seconds..