[ 73.218026][ T25] audit: type=1400 audit(1575356554.992:37): avc: denied { watch } for pid=9891 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [ 73.249605][ T25] audit: type=1400 audit(1575356554.992:38): avc: denied { watch } for pid=9891 comm="restorecond" path="/etc/selinux/restorecond.conf" dev="sda1" ino=2232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 73.516117][ T25] audit: type=1800 audit(1575356555.292:39): pid=9800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 73.538264][ T25] audit: type=1800 audit(1575356555.292:40): pid=9800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 78.748735][ T25] audit: type=1400 audit(1575356560.522:41): avc: denied { map } for pid=9978 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.1.10' (ECDSA) to the list of known hosts. [ 85.384170][ T25] audit: type=1400 audit(1575356567.162:42): avc: denied { map } for pid=9990 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/12/03 07:02:47 parsed 1 programs [ 87.056743][ T25] audit: type=1400 audit(1575356568.832:43): avc: denied { map } for pid=9990 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=90 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/12/03 07:02:49 executed programs: 0 [ 87.806243][T10010] IPVS: ftp: loaded support on port[0] = 21 [ 87.819810][T10012] IPVS: ftp: loaded support on port[0] = 21 [ 87.840958][T10014] IPVS: ftp: loaded support on port[0] = 21 [ 87.976254][T10019] IPVS: ftp: loaded support on port[0] = 21 [ 87.980781][T10016] IPVS: ftp: loaded support on port[0] = 21 [ 88.028504][T10020] IPVS: ftp: loaded support on port[0] = 21 [ 88.217182][T10014] chnl_net:caif_netlink_parms(): no params data found [ 88.293670][T10010] chnl_net:caif_netlink_parms(): no params data found [ 88.319856][T10014] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.329578][T10014] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.337702][T10014] device bridge_slave_0 entered promiscuous mode [ 88.349960][T10014] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.357227][T10014] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.365160][T10014] device bridge_slave_1 entered promiscuous mode [ 88.405471][T10012] chnl_net:caif_netlink_parms(): no params data found [ 88.516653][T10014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.529735][T10014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.539324][T10010] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.547855][T10010] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.555878][T10010] device bridge_slave_0 entered promiscuous mode [ 88.569068][T10010] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.577139][T10010] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.585207][T10010] device bridge_slave_1 entered promiscuous mode [ 88.608976][T10019] chnl_net:caif_netlink_parms(): no params data found [ 88.644241][T10016] chnl_net:caif_netlink_parms(): no params data found [ 88.669440][T10012] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.677210][T10012] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.685654][T10012] device bridge_slave_0 entered promiscuous mode [ 88.693893][T10020] chnl_net:caif_netlink_parms(): no params data found [ 88.706145][T10010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.718260][T10014] team0: Port device team_slave_0 added [ 88.726525][T10014] team0: Port device team_slave_1 added [ 88.740081][T10012] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.751246][T10012] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.759333][T10012] device bridge_slave_1 entered promiscuous mode [ 88.784532][T10010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.838022][T10012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.849962][T10010] team0: Port device team_slave_0 added [ 88.865872][T10019] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.876984][T10019] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.884970][T10019] device bridge_slave_0 entered promiscuous mode [ 88.894572][T10019] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.901762][T10019] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.909695][T10019] device bridge_slave_1 entered promiscuous mode [ 88.918200][T10012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.935520][T10010] team0: Port device team_slave_1 added [ 89.005271][T10014] device hsr_slave_0 entered promiscuous mode [ 89.052106][T10014] device hsr_slave_1 entered promiscuous mode [ 89.103382][T10016] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.110457][T10016] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.119002][T10016] device bridge_slave_0 entered promiscuous mode [ 89.139513][T10016] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.147787][T10016] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.155766][T10016] device bridge_slave_1 entered promiscuous mode [ 89.177733][T10012] team0: Port device team_slave_0 added [ 89.191076][T10012] team0: Port device team_slave_1 added [ 89.208151][T10019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.240894][T10016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.258946][T10020] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.266502][T10020] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.278030][T10020] device bridge_slave_0 entered promiscuous mode [ 89.286941][T10019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.304161][T10016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.385218][T10010] device hsr_slave_0 entered promiscuous mode [ 89.432182][T10010] device hsr_slave_1 entered promiscuous mode [ 89.491879][T10010] debugfs: Directory 'hsr0' with parent '/' already present! [ 89.500029][T10020] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.507289][T10020] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.518556][T10020] device bridge_slave_1 entered promiscuous mode [ 89.553564][T10016] team0: Port device team_slave_0 added [ 89.571885][ T25] audit: type=1400 audit(1575356571.342:44): avc: denied { create } for pid=10014 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 89.617201][ T25] audit: type=1400 audit(1575356571.342:45): avc: denied { write } for pid=10014 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 89.617921][T10016] team0: Port device team_slave_1 added [ 89.648686][ T25] audit: type=1400 audit(1575356571.342:46): avc: denied { read } for pid=10014 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 89.678577][T10014] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.737063][T10019] team0: Port device team_slave_0 added [ 89.744784][T10020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.795035][T10012] device hsr_slave_0 entered promiscuous mode [ 89.841920][T10012] device hsr_slave_1 entered promiscuous mode [ 89.881678][T10012] debugfs: Directory 'hsr0' with parent '/' already present! [ 89.905566][T10014] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.965822][T10019] team0: Port device team_slave_1 added [ 89.974389][T10020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.025088][T10016] device hsr_slave_0 entered promiscuous mode [ 90.071993][T10016] device hsr_slave_1 entered promiscuous mode [ 90.121577][T10016] debugfs: Directory 'hsr0' with parent '/' already present! [ 90.129581][T10014] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.193979][T10014] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.268979][T10020] team0: Port device team_slave_0 added [ 90.288093][T10010] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.340161][T10020] team0: Port device team_slave_1 added [ 90.363314][T10010] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.409060][T10010] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.458149][T10010] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.563559][T10019] device hsr_slave_0 entered promiscuous mode [ 90.601806][T10019] device hsr_slave_1 entered promiscuous mode [ 90.661592][T10019] debugfs: Directory 'hsr0' with parent '/' already present! [ 90.734721][T10020] device hsr_slave_0 entered promiscuous mode [ 90.781870][T10020] device hsr_slave_1 entered promiscuous mode [ 90.841772][T10020] debugfs: Directory 'hsr0' with parent '/' already present! [ 90.853961][T10016] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.938933][T10012] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.003559][T10012] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.043536][T10016] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.098801][T10016] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.148769][T10016] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.199970][T10012] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.254584][T10012] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.337691][T10019] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.389025][T10019] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 91.448753][T10020] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.476055][T10020] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.547186][T10019] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 91.619997][T10020] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.660082][T10019] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 91.717839][T10020] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.784854][T10014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.802733][T10010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.842144][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.850726][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.863036][T10014] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.890621][T10010] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.898714][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.906903][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.938337][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.948246][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.956884][T10027] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.964098][T10027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.972426][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.980949][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.989643][T10027] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.996735][T10027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.004769][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.046474][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.056230][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.065038][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.078867][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.088182][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.111030][T10014] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.122789][T10014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.145774][T10016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.153891][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.164236][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.172987][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.181706][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.190119][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.197346][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.205922][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.215532][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.224570][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.233370][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.242286][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.249331][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.257061][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.266286][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.274675][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.285078][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.293562][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.301184][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.320140][T10019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.338128][T10012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.373014][T10012] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.389904][T10029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.399019][T10029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.407694][T10029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.416781][T10029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.425406][T10029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.434399][T10029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.449417][T10016] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.475918][T10014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.488268][ T25] audit: type=1400 audit(1575356574.262:47): avc: denied { associate } for pid=10014 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 92.497470][T10019] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.533494][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.547698][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.556389][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.565521][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.574688][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.583718][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.592394][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.601059][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.612591][T10020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.649690][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.650946][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.671357][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.680714][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.687829][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.696107][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.705199][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.722246][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.729568][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.738961][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.748530][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.756819][T10032] input: syz1 as /devices/virtual/input/input5 [ 92.757616][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.770348][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.779164][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.788677][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.798125][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.808379][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.817776][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.817813][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.840901][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.850006][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.862541][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.869652][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.883898][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 2019/12/03 07:02:54 executed programs: 6 [ 92.896158][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.904356][T10032] input: syz1 as /devices/virtual/input/input6 [ 92.907712][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.925857][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.948520][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.969262][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.976525][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.994219][T10010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.050460][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.059032][T10039] input: syz1 as /devices/virtual/input/input7 [ 93.065019][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.093916][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.116392][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.137369][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.147515][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.156966][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.166400][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.175871][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.183938][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.194721][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.203693][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.213242][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.222587][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.231215][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.240093][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.251088][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.259947][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.268702][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.288714][T10012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.301629][T10012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.313752][T10020] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.332406][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.340657][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.349848][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.358398][T10039] input: syz1 as /devices/virtual/input/input8 [ 93.359628][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.374569][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.384714][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.393754][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.415389][T10019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.433555][T10019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.459789][T10010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.493450][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.506538][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.541909][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.550707][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.559285][T10049] input: syz1 as /devices/virtual/input/input9 [ 93.568736][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.575910][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.584415][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.608747][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.623646][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.631392][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.645135][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.654353][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.664319][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.664944][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.680335][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.687974][T10049] input: syz1 as /devices/virtual/input/input10 [ 93.737625][T10012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.786556][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.802003][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.810353][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.826056][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.835395][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.844414][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.854850][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.863860][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.879147][T10057] input: syz1 as /devices/virtual/input/input11 [ 93.887104][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.911060][T10019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.975162][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.988067][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.017489][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.025491][T10057] input: syz1 as /devices/virtual/input/input12 [ 94.032615][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.045954][T10065] input: syz1 as /devices/virtual/input/input13 [ 94.057582][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.076777][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.096309][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.108106][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.117271][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.129228][T10071] input: syz1 as /devices/virtual/input/input14 [ 94.170558][T10016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.195651][T10016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.208713][T10020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.229010][T10075] input: syz1 as /devices/virtual/input/input15 [ 94.242321][T10040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.267950][T10040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.391004][T10085] input: syz1 as /devices/virtual/input/input16 [ 94.403577][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.410898][T10086] input: syz1 as /devices/virtual/input/input17 [ 94.417969][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.418092][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.419383][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.467293][T10089] ------------[ cut here ]------------ [ 94.473344][T10089] refcount_t: addition on 0; use-after-free. [ 94.479562][T10089] WARNING: CPU: 0 PID: 10089 at lib/refcount.c:25 refcount_warn_saturate+0x174/0x1f0 [ 94.490260][T10089] Kernel panic - not syncing: panic_on_warn set ... [ 94.496942][T10089] CPU: 0 PID: 10089 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 94.505263][T10089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.515313][T10089] Call Trace: [ 94.518775][T10089] dump_stack+0x197/0x210 [ 94.523093][T10089] ? refcount_warn_saturate+0x80/0x1f0 [ 94.528619][T10089] panic+0x2e3/0x75c [ 94.532496][T10089] ? add_taint.cold+0x16/0x16 [ 94.537167][T10089] ? __kasan_check_write+0x14/0x20 [ 94.542258][T10089] ? __warn.cold+0x14/0x3e [ 94.546655][T10089] ? __warn+0xd9/0x1cf [ 94.550758][T10089] ? refcount_warn_saturate+0x174/0x1f0 [ 94.556312][T10089] __warn.cold+0x2f/0x3e [ 94.560554][T10089] ? refcount_warn_saturate+0x174/0x1f0 [ 94.566086][T10089] report_bug+0x289/0x300 [ 94.570399][T10089] do_error_trap+0x11b/0x200 [ 94.574974][T10089] do_invalid_op+0x37/0x50 [ 94.579404][T10089] ? refcount_warn_saturate+0x174/0x1f0 [ 94.584954][T10089] invalid_op+0x23/0x30 [ 94.589201][T10089] RIP: 0010:refcount_warn_saturate+0x174/0x1f0 [ 94.595448][T10089] Code: 06 31 ff 89 de e8 ec f9 e6 fd 84 db 0f 85 33 ff ff ff e8 9f f8 e6 fd 48 c7 c7 80 76 4f 88 c6 05 db 9a a4 06 01 e8 0b a3 b7 fd <0f> 0b e9 14 ff ff ff e8 80 f8 e6 fd 0f b6 1d c0 9a a4 06 31 ff 89 [ 94.615600][T10089] RSP: 0018:ffffc900022278a8 EFLAGS: 00010286 [ 94.621727][T10089] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 94.629712][T10089] RDX: 0000000000000000 RSI: ffffffff815e5a26 RDI: fffff52000444f07 [ 94.637675][T10089] RBP: ffffc900022278b8 R08: ffff88807f664080 R09: fffffbfff15d37a9 [ 94.645646][T10089] R10: fffffbfff15d37a8 R11: ffffffff8ae9bd47 R12: 0000000000000002 [ 94.655089][T10089] R13: ffff8880a3201660 R14: ffff8880a3fb1d40 R15: ffff8880954ce9e0 [ 94.663083][T10089] ? vprintk_func+0x86/0x189 [ 94.667671][T10089] ? refcount_warn_saturate+0x174/0x1f0 [ 94.673646][T10089] kobject_get+0x134/0x150 [ 94.678065][T10089] cdev_get+0x60/0xb0 [ 94.682030][T10089] chrdev_open+0xb0/0x6b0 [ 94.686356][T10089] ? cdev_put.part.0+0x50/0x50 [ 94.693582][T10089] ? security_file_open+0x87/0x300 [ 94.698737][T10089] do_dentry_open+0x4e6/0x1380 [ 94.704720][T10089] ? __kasan_check_read+0x11/0x20 [ 94.709831][T10089] ? cdev_put.part.0+0x50/0x50 [ 94.715580][T10089] ? chown_common+0x5c0/0x5c0 [ 94.720775][T10089] ? inode_permission+0xb4/0x520 [ 94.725718][T10089] vfs_open+0xa0/0xd0 [ 94.729828][T10089] path_openat+0x10e4/0x4710 [ 94.734516][T10089] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 94.740437][T10089] ? kasan_slab_alloc+0xf/0x20 [ 94.745510][T10089] ? kmem_cache_alloc+0x121/0x710 [ 94.750526][T10089] ? getname_flags+0xd6/0x5b0 [ 94.755506][T10089] ? getname+0x1a/0x20 [ 94.759679][T10089] ? do_sys_open+0x2c9/0x5d0 [ 94.764259][T10089] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 94.769670][T10089] ? __alloc_fd+0x487/0x620 [ 94.774267][T10089] do_filp_open+0x1a1/0x280 [ 94.778863][T10089] ? may_open_dev+0x100/0x100 [ 94.783546][T10089] ? do_raw_spin_unlock+0x178/0x270 [ 94.788906][T10089] ? _raw_spin_unlock+0x28/0x40 [ 94.793894][T10089] ? __alloc_fd+0x487/0x620 [ 94.798427][T10089] do_sys_open+0x3fe/0x5d0 [ 94.802853][T10089] ? filp_open+0x80/0x80 [ 94.807106][T10089] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 94.812725][T10089] ? do_syscall_64+0x26/0x790 [ 94.817389][T10089] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 94.823455][T10089] ? do_syscall_64+0x26/0x790 [ 94.828294][T10089] __x64_sys_open+0x7e/0xc0 [ 94.832782][T10089] do_syscall_64+0xfa/0x790 [ 94.837381][T10089] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 94.843256][T10089] RIP: 0033:0x414411 [ 94.847133][T10089] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 94.867082][T10089] RSP: 002b:00007f2d903d57a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 94.875576][T10089] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000414411 [ 94.883660][T10089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f2d903d5850 [ 94.891637][T10089] RBP: 000000000075bfc8 R08: 000000000000000f R09: 0000000000000000 [ 94.900053][T10089] R10: 00007f2d903d69d0 R11: 0000000000000293 R12: 00007f2d903d66d4 [ 94.908023][T10089] R13: 00000000004cac35 R14: 00000000004e40a8 R15: 00000000ffffffff [ 94.917555][T10089] Kernel Offset: disabled [ 94.922020][T10089] Rebooting in 86400 seconds..