[ 37.775548][ T26] audit: type=1800 audit(1556277998.481:27): pid=7484 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 37.805042][ T26] audit: type=1800 audit(1556277998.481:28): pid=7484 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 38.374116][ T26] audit: type=1800 audit(1556277999.141:29): pid=7484 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 38.400003][ T26] audit: type=1800 audit(1556277999.141:30): pid=7484 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.62' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 49.364798][ T7649] input: syz1 as /devices/virtual/input/input5 [ 49.371995][ T7653] input: syz1 as /devices/virtual/input/input7 [ 49.382572][ T7656] input: syz1 as /devices/virtual/input/input10 [ 49.390213][ T7652] input: syz1 as /devices/virtual/input/input6 [ 49.403394][ T7654] input: syz1 as /devices/virtual/input/input9 [ 49.416029][ T7655] input: syz1 as /devices/virtual/input/input8 [ 49.482847][ T7656] input: syz1 as /devices/virtual/input/input11 [ 49.512397][ T7664] input: syz1 as /devices/virtual/input/input12 [ 49.561772][ T7649] input: syz1 as /devices/virtual/input/input14 [ 49.601071][ T7654] input: syz1 as /devices/virtual/input/input15 [ 49.611193][ T7652] input: syz1 as /devices/virtual/input/input16 executing program executing program executing program [ 49.698804][ T7685] input: syz1 as /devices/virtual/input/input20 [ 49.706811][ T7688] input: syz1 as /devices/virtual/input/input21 [ 49.716158][ T7689] input: syz1 as /devices/virtual/input/input22 executing program executing program executing program [ 49.788546][ T7700] input: syz1 as /devices/virtual/input/input23 [ 49.813394][ T7703] input: syz1 as /devices/virtual/input/input24 [ 49.834794][ T7708] input: syz1 as /devices/virtual/input/input25 [ 49.853428][ T7693] input: syz1 as /devices/virtual/input/input26 executing program [ 49.914953][ T7689] input: syz1 as /devices/virtual/input/input30 [ 49.931111][ T7715] input: syz1 as /devices/virtual/input/input31 [ 49.970983][ T7703] input: syz1 as /devices/virtual/input/input32 [ 50.002433][ T7700] input: syz1 as /devices/virtual/input/input33 executing program [ 50.071400][ T7715] input: syz1 as /devices/virtual/input/input34 [ 50.088066][ T7723] input: syz1 as /devices/virtual/input/input35 [ 50.096761][ T7708] input: syz1 as /devices/virtual/input/input36 executing program executing program [ 50.176940][ T7734] input: syz1 as /devices/virtual/input/input37 executing program executing program [ 50.221839][ T7737] input: syz1 as /devices/virtual/input/input38 [ 50.256782][ T7743] input: syz1 as /devices/virtual/input/input39 [ 50.291799][ T7749] input: syz1 as /devices/virtual/input/input40 executing program executing program [ 50.387631][ T7757] input: syz1 as /devices/virtual/input/input43 [ 50.408134][ T7760] input: syz1 as /devices/virtual/input/input44 [ 50.432604][ T7737] input: syz1 as /devices/virtual/input/input45 executing program [ 50.509299][ T7769] input: syz1 as /devices/virtual/input/input48 [ 50.523104][ T7743] input: syz1 as /devices/virtual/input/input49 [ 50.535424][ T7757] input: syz1 as /devices/virtual/input/input50 executing program [ 50.626209][ T7777] input: syz1 as /devices/virtual/input/input52 executing program executing program executing program [ 50.697404][ T7783] input: syz1 as /devices/virtual/input/input58 [ 50.714738][ T7785] input: syz1 as /devices/virtual/input/input59 executing program [ 50.748827][ T7790] input: syz1 as /devices/virtual/input/input60 [ 50.771050][ T7769] input: syz1 as /devices/virtual/input/input62 [ 50.777547][ T7795] input: syz1 as /devices/virtual/input/input61 [ 50.811055][ T7783] input: syz1 as /devices/virtual/input/input63 [ 50.831650][ T7785] input: syz1 as /devices/virtual/input/input64 [ 50.853215][ T7777] input: syz1 as /devices/virtual/input/input65 executing program [ 50.931874][ T7790] input: syz1 as /devices/virtual/input/input66 [ 50.943346][ T7806] input: syz1 as /devices/virtual/input/input67 executing program [ 50.974941][ T7795] input: syz1 as /devices/virtual/input/input68 executing program [ 51.015656][ T7813] input: syz1 as /devices/virtual/input/input69 executing program [ 51.058719][ T7816] input: syz1 as /devices/virtual/input/input70 executing program [ 51.113111][ T7822] input: syz1 as /devices/virtual/input/input71 [ 51.130491][ T7824] input: syz1 as /devices/virtual/input/input72 [ 51.142940][ T7813] input: syz1 as /devices/virtual/input/input73 [ 51.181534][ T7806] input: syz1 as /devices/virtual/input/input74 executing program [ 51.292871][ T7816] input: syz1 as /devices/virtual/input/input75 [ 51.316636][ T7832] input: syz1 as /devices/virtual/input/input76 [ 51.333531][ T7822] input: syz1 as /devices/virtual/input/input77 executing program [ 51.383592][ T7824] input: syz1 as /devices/virtual/input/input78 [ 51.407411][ T7840] input: syz1 as /devices/virtual/input/input79 executing program executing program [ 51.462789][ T7832] input: syz1 as /devices/virtual/input/input80 [ 51.483130][ T7845] input: syz1 as /devices/virtual/input/input81 [ 51.503171][ T7847] input: syz1 as /devices/virtual/input/input82 executing program executing program [ 51.533260][ T7842] input: syz1 as /devices/virtual/input/input83 [ 51.566076][ T7855] input: syz1 as /devices/virtual/input/input85 executing program [ 51.636448][ T7859] input: syz1 as /devices/virtual/input/input86 [ 51.667699][ T7863] input: syz1 as /devices/virtual/input/input87 [ 51.703409][ T7845] input: syz1 as /devices/virtual/input/input88 [ 51.741860][ T7847] input: syz1 as /devices/virtual/input/input89 executing program [ 51.791090][ T7878] input: syz1 as /devices/virtual/input/input90 [ 51.831453][ T7855] input: syz1 as /devices/virtual/input/input91 executing program executing program executing program [ 51.898559][ T7890] input: syz1 as /devices/virtual/input/input96 executing program [ 51.945470][ T7893] input: syz1 as /devices/virtual/input/input97 [ 51.953900][ T7895] input: syz1 as /devices/virtual/input/input98 [ 51.992371][ T7901] input: syz1 as /devices/virtual/input/input99 [ 52.013924][ T7878] input: syz1 as /devices/virtual/input/input100 executing program executing program [ 52.056142][ T7890] input: syz1 as /devices/virtual/input/input101 [ 52.090763][ T7917] input: syz1 as /devices/virtual/input/input102 [ 52.128283][ T7920] input: syz1 as /devices/virtual/input/input103 [ 52.163175][ T7893] input: syz1 as /devices/virtual/input/input104 [ 52.202062][ T7904] input: syz1 as /devices/virtual/input/input105 [ 52.232270][ T7910] input: syz1 as /devices/virtual/input/input106 executing program [ 52.302579][ T7936] input: syz1 as /devices/virtual/input/input109 executing program [ 52.347908][ T7917] input: syz1 as /devices/virtual/input/input110 [ 52.373332][ T7920] input: syz1 as /devices/virtual/input/input111 executing program executing program [ 52.416260][ T7943] input: syz1 as /devices/virtual/input/input112 [ 52.443226][ T7946] input: syz1 as /devices/virtual/input/input113 [ 52.485364][ T7950] input: syz1 as /devices/virtual/input/input114 [ 52.493531][ T7951] ------------[ cut here ]------------ [ 52.501835][ T7951] refcount_t: increment on 0; use-after-free. [ 52.502161][ T7951] WARNING: CPU: 0 PID: 7951 at lib/refcount.c:156 refcount_inc_checked+0x61/0x70 [ 52.517922][ T7951] Kernel panic - not syncing: panic_on_warn set ... [ 52.525211][ T7951] CPU: 0 PID: 7951 Comm: syz-executor935 Not tainted 5.1.0-rc6+ #86 [ 52.535723][ T7951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.546729][ T7951] Call Trace: [ 52.550039][ T7951] dump_stack+0x172/0x1f0 [ 52.554415][ T7951] ? refcount_inc_not_zero_checked+0x1b0/0x200 [ 52.560647][ T7951] panic+0x2cb/0x65c [ 52.564896][ T7951] ? __warn_printk+0xf3/0xf3 [ 52.569478][ T7951] ? refcount_inc_checked+0x61/0x70 [ 52.574774][ T7951] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 52.581139][ T7951] ? __warn.cold+0x5/0x45 [ 52.585675][ T7951] ? __warn+0xe8/0x1d0 [ 52.589751][ T7951] ? refcount_inc_checked+0x61/0x70 [ 52.595362][ T7951] __warn.cold+0x20/0x45 [ 52.599690][ T7951] ? refcount_inc_checked+0x61/0x70 [ 52.605138][ T7951] report_bug+0x263/0x2b0 [ 52.609655][ T7951] do_error_trap+0x11b/0x200 [ 52.614236][ T7951] do_invalid_op+0x37/0x50 [ 52.618634][ T7951] ? refcount_inc_checked+0x61/0x70 [ 52.624007][ T7951] invalid_op+0x14/0x20 [ 52.628320][ T7951] RIP: 0010:refcount_inc_checked+0x61/0x70 [ 52.634295][ T7951] Code: 1d 18 2e 2a 06 31 ff 89 de e8 9b 30 40 fe 84 db 75 dd e8 52 2f 40 fe 48 c7 c7 e0 79 a1 87 c6 05 f8 2d 2a 06 01 e8 fd dc 12 fe <0f> 0b eb c1 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 [ 52.653883][ T7951] RSP: 0018:ffff88808834f8b8 EFLAGS: 00010282 [ 52.660126][ T7951] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 52.668688][ T7951] RDX: 0000000000000000 RSI: ffffffff815afcf6 RDI: ffffed1011069f09 [ 52.676919][ T7951] RBP: ffff88808834f8c8 R08: ffff888087f3e4c0 R09: ffffed1015d03ef1 [ 52.684870][ T7951] R10: ffffed1015d03ef0 R11: ffff8880ae81f787 R12: ffff8880aa2ed0f8 [ 52.692832][ T7951] R13: 0000000000000000 R14: ffff888095543040 R15: ffff888099c5e4c0 [ 52.700802][ T7951] ? vprintk_func+0x86/0x189 [ 52.705570][ T7951] ? refcount_inc_checked+0x61/0x70 [ 52.710836][ T7951] kobject_get+0x66/0xc0 [ 52.715097][ T7951] cdev_get+0x60/0xb0 [ 52.719071][ T7951] chrdev_open+0xb0/0x6b0 [ 52.723403][ T7951] ? cdev_put.part.0+0x50/0x50 [ 52.728326][ T7951] ? security_file_open+0x8d/0x300 [ 52.733419][ T7951] do_dentry_open+0x4e2/0x1250 [ 52.738164][ T7951] ? kasan_check_read+0x11/0x20 [ 52.743019][ T7951] ? cdev_put.part.0+0x50/0x50 [ 52.747769][ T7951] ? chown_common+0x5c0/0x5c0 [ 52.752427][ T7951] ? inode_permission+0xb4/0x570 [ 52.757370][ T7951] vfs_open+0xa0/0xd0 [ 52.761338][ T7951] path_openat+0x10e9/0x46e0 [ 52.765911][ T7951] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 52.771708][ T7951] ? kasan_slab_alloc+0xf/0x20 [ 52.776464][ T7951] ? kmem_cache_alloc+0x11a/0x6f0 [ 52.781467][ T7951] ? getname_flags+0xd6/0x5b0 [ 52.786131][ T7951] ? getname+0x1a/0x20 [ 52.790353][ T7951] ? do_sys_open+0x2c9/0x5d0 [ 52.794933][ T7951] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 52.800381][ T7951] ? __alloc_fd+0x44d/0x560 [ 52.804892][ T7951] do_filp_open+0x1a1/0x280 [ 52.809399][ T7951] ? may_open_dev+0x100/0x100 [ 52.814064][ T7951] ? kasan_check_read+0x11/0x20 [ 52.818898][ T7951] ? do_raw_spin_unlock+0x57/0x270 [ 52.823998][ T7951] ? _raw_spin_unlock+0x2d/0x50 [ 52.828917][ T7951] ? __alloc_fd+0x44d/0x560 [ 52.833413][ T7951] do_sys_open+0x3fe/0x5d0 [ 52.837815][ T7951] ? filp_open+0x80/0x80 [ 52.842493][ T7951] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 52.848026][ T7951] ? do_syscall_64+0x26/0x610 [ 52.852782][ T7951] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.858826][ T7951] ? do_syscall_64+0x26/0x610 [ 52.864098][ T7951] __x64_sys_open+0x7e/0xc0 [ 52.868597][ T7951] do_syscall_64+0x103/0x610 [ 52.873186][ T7951] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.879929][ T7951] RIP: 0033:0x405f01 [ 52.883911][ T7951] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a4 18 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 52.903670][ T7951] RSP: 002b:00007f08620068b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 52.912060][ T7951] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000405f01 [ 52.920207][ T7951] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f08620068d0 [ 52.928160][ T7951] RBP: 00000000006dcc30 R08: 000000000000000f R09: 00007f0862007700 [ 52.936652][ T7951] R10: 00007f08620079d0 R11: 0000000000000293 R12: 00000000006dcc3c [ 52.945040][ T7951] R13: 00007ffea500918f R14: 00007f08620079c0 R15: 0000000000000003 [ 52.954762][ T7951] Kernel Offset: disabled [ 52.959343][ T7951] Rebooting in 86400 seconds..