[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 54.151767][ T26] audit: type=1800 audit(1569692870.928:25): pid=8424 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 54.190990][ T26] audit: type=1800 audit(1569692870.928:26): pid=8424 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 54.223788][ T26] audit: type=1800 audit(1569692870.928:27): pid=8424 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.246' (ECDSA) to the list of known hosts. 2019/09/28 17:47:59 parsed 1 programs 2019/09/28 17:48:01 executed programs: 0 syzkaller login: [ 64.857324][ T8599] IPVS: ftp: loaded support on port[0] = 21 [ 64.875290][ T8603] IPVS: ftp: loaded support on port[0] = 21 [ 64.895668][ T8607] IPVS: ftp: loaded support on port[0] = 21 [ 64.904906][ T8606] IPVS: ftp: loaded support on port[0] = 21 [ 64.921434][ T8602] IPVS: ftp: loaded support on port[0] = 21 [ 64.954949][ T8609] IPVS: ftp: loaded support on port[0] = 21 [ 65.147599][ T8599] chnl_net:caif_netlink_parms(): no params data found [ 65.207695][ T8606] chnl_net:caif_netlink_parms(): no params data found [ 65.275262][ T8602] chnl_net:caif_netlink_parms(): no params data found [ 65.328326][ T8607] chnl_net:caif_netlink_parms(): no params data found [ 65.395157][ T8599] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.402913][ T8599] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.411048][ T8599] device bridge_slave_0 entered promiscuous mode [ 65.421468][ T8599] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.428620][ T8599] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.436262][ T8599] device bridge_slave_1 entered promiscuous mode [ 65.455967][ T8606] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.463150][ T8606] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.471187][ T8606] device bridge_slave_0 entered promiscuous mode [ 65.497022][ T8603] chnl_net:caif_netlink_parms(): no params data found [ 65.505959][ T8602] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.513675][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.521570][ T8602] device bridge_slave_0 entered promiscuous mode [ 65.533675][ T8602] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.540817][ T8602] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.548627][ T8602] device bridge_slave_1 entered promiscuous mode [ 65.555691][ T8606] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.563279][ T8606] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.571538][ T8606] device bridge_slave_1 entered promiscuous mode [ 65.597137][ T8599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.623721][ T8609] chnl_net:caif_netlink_parms(): no params data found [ 65.634666][ T8607] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.641975][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.649625][ T8607] device bridge_slave_0 entered promiscuous mode [ 65.660606][ T8607] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.667732][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.676695][ T8607] device bridge_slave_1 entered promiscuous mode [ 65.684730][ T8599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.706073][ T8602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.722289][ T8602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.754791][ T8606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.780182][ T8602] team0: Port device team_slave_0 added [ 65.796232][ T8599] team0: Port device team_slave_0 added [ 65.803902][ T8599] team0: Port device team_slave_1 added [ 65.813277][ T8606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.835316][ T8602] team0: Port device team_slave_1 added [ 65.844262][ T8607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.855223][ T8607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.875324][ T8603] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.883821][ T8603] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.892248][ T8603] device bridge_slave_0 entered promiscuous mode [ 65.899838][ T8603] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.907217][ T8603] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.915090][ T8603] device bridge_slave_1 entered promiscuous mode [ 65.968479][ T8609] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.976074][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.984435][ T8609] device bridge_slave_0 entered promiscuous mode [ 65.993475][ T8606] team0: Port device team_slave_0 added [ 65.999263][ T8609] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.006513][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.014581][ T8609] device bridge_slave_1 entered promiscuous mode [ 66.022675][ T8607] team0: Port device team_slave_0 added [ 66.052737][ T8609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.104194][ T8599] device hsr_slave_0 entered promiscuous mode [ 66.141282][ T8599] device hsr_slave_1 entered promiscuous mode [ 66.182412][ T8606] team0: Port device team_slave_1 added [ 66.189888][ T8607] team0: Port device team_slave_1 added [ 66.243857][ T8602] device hsr_slave_0 entered promiscuous mode [ 66.291360][ T8602] device hsr_slave_1 entered promiscuous mode [ 66.331112][ T8602] debugfs: Directory 'hsr0' with parent '/' already present! [ 66.340259][ T8603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.352018][ T8609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.393213][ T8609] team0: Port device team_slave_0 added [ 66.400243][ T8603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.435405][ T8609] team0: Port device team_slave_1 added [ 66.493861][ T8606] device hsr_slave_0 entered promiscuous mode [ 66.541223][ T8606] device hsr_slave_1 entered promiscuous mode [ 66.630962][ T8606] debugfs: Directory 'hsr0' with parent '/' already present! [ 66.694014][ T8607] device hsr_slave_0 entered promiscuous mode [ 66.761095][ T8607] device hsr_slave_1 entered promiscuous mode [ 66.840811][ T8607] debugfs: Directory 'hsr0' with parent '/' already present! [ 66.861182][ T8603] team0: Port device team_slave_0 added [ 66.892873][ T8609] device hsr_slave_0 entered promiscuous mode [ 66.931066][ T8609] device hsr_slave_1 entered promiscuous mode [ 66.980971][ T8609] debugfs: Directory 'hsr0' with parent '/' already present! [ 67.001586][ T8603] team0: Port device team_slave_1 added [ 67.062654][ T8603] device hsr_slave_0 entered promiscuous mode [ 67.111448][ T8603] device hsr_slave_1 entered promiscuous mode [ 67.160886][ T8603] debugfs: Directory 'hsr0' with parent '/' already present! [ 67.217877][ T8599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.255885][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.264726][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.277773][ T8599] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.293790][ T8602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.340887][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.350542][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.360042][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.367429][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.375882][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.384959][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.393832][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.402045][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.409805][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.418524][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.427881][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.437077][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.445397][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.454363][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.463112][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.471578][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.492416][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.500657][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.511826][ T8617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.519547][ T8617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.531399][ T8609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.550462][ T8599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.570356][ T8602] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.584926][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.593038][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.601687][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.609953][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.618952][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.628601][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.637215][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.644334][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.653469][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.675412][ T8609] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.698740][ T8617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.707888][ T8617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.716769][ T8617] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.723884][ T8617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.732435][ T8617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.741551][ T8617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.750126][ T8617] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.757336][ T8617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.765105][ T8617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.792523][ T8603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.800165][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.808580][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.818232][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.826933][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.835735][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.843039][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.851409][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.860613][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.870450][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.879185][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.888265][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.905802][ T8599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.930114][ T8606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.938150][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.947437][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.958179][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.968540][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.977054][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.986151][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.994644][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.002894][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.011112][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.026662][ T8609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.037820][ T8609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.055598][ T8603] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.072710][ T8602] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.084907][ T8602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.096908][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.106571][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.115736][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.124763][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.133363][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.141854][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.150035][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.159292][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.168020][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.176656][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.185045][ T8618] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.192146][ T8618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.199662][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.208426][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.217425][ T8618] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.224675][ T8618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.235078][ T8607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.262238][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.269890][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.285473][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.294791][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.304005][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.313010][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.322702][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.338986][ T8606] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.353213][ T8609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.361057][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.369281][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.377657][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.386271][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.395611][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.406852][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.414894][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.437628][ T8603] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.449117][ T8603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.464462][ T8607] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.491486][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.500095][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.518481][ T8628] input: syz1 as /devices/virtual/input/input5 [ 68.545176][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.552324][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.567528][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.577557][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.586531][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.593619][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.602491][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.610812][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.619117][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.627912][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.636781][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.645235][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.672487][ T8628] input: syz1 as /devices/virtual/input/input6 [ 68.673614][ T8603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.727061][ T8602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.741761][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.755399][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.774814][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.786946][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.800551][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.816128][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.833853][ T8641] input: syz1 as /devices/virtual/input/input7 [ 68.841232][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.849983][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.860097][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.867210][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.877855][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.893640][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.906620][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.913752][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.927742][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.936585][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.963573][ T8641] input: syz1 as /devices/virtual/input/input8 [ 68.976855][ T8606] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.018884][ T8606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.057309][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.097087][ T8658] input: syz1 as /devices/virtual/input/input10 [ 69.103351][ T8655] input: syz1 as /devices/virtual/input/input9 [ 69.110625][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.148642][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.158614][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.174760][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.183616][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.194910][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.208927][ T8658] input: syz1 as /devices/virtual/input/input11 [ 69.221968][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.239718][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.256030][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.303199][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.324386][ T8676] input: syz1 as /devices/virtual/input/input12 [ 69.349819][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.381405][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.390019][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.401045][ T8680] input: syz1 as /devices/virtual/input/input13 [ 69.412695][ T8607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.454694][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.469813][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.506100][ T8606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.527726][ T8607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.579339][ T8692] input: syz1 as /devices/virtual/input/input14 [ 69.638622][ T8694] input: syz1 as /devices/virtual/input/input15 [ 69.740991][ T8707] input: syz1 as /devices/virtual/input/input16 [ 69.771924][ T8712] input: syz1 as /devices/virtual/input/input19 2019/09/28 17:48:06 executed programs: 12 [ 69.872709][ T8712] input: syz1 as /devices/virtual/input/input20 [ 69.945550][ T8694] input: syz1 as /devices/virtual/input/input22 [ 69.972697][ T8731] input: syz1 as /devices/virtual/input/input21 [ 70.042683][ T8739] input: syz1 as /devices/virtual/input/input23 [ 70.103650][ T8745] input: syz1 as /devices/virtual/input/input24 [ 70.253580][ T8759] input: syz1 as /devices/virtual/input/input26 [ 70.298532][ T8763] input: syz1 as /devices/virtual/input/input27 [ 70.325622][ T8759] input: syz1 as /devices/virtual/input/input28 [ 70.412995][ T8763] input: syz1 as /devices/virtual/input/input30 [ 70.486544][ T8776] input: syz1 as /devices/virtual/input/input31 [ 70.544877][ T8786] input: syz1 as /devices/virtual/input/input32 [ 70.572040][ T8784] input: syz1 as /devices/virtual/input/input34 [ 70.578932][ T8787] input: syz1 as /devices/virtual/input/input35 [ 70.599000][ T8785] input: syz1 as /devices/virtual/input/input33 [ 70.608406][ T8791] ------------[ cut here ]------------ [ 70.614568][ T8791] refcount_t: increment on 0; use-after-free. [ 70.620948][ T8791] WARNING: CPU: 1 PID: 8791 at lib/refcount.c:156 refcount_inc_checked+0x61/0x70 [ 70.622780][ T8786] kobject: 'event4' (0000000032351134): kobject_add_internal: parent: 'input32', set: 'devices' [ 70.630118][ T8791] Kernel panic - not syncing: panic_on_warn set ... [ 70.630146][ T8791] CPU: 1 PID: 8791 Comm: syz-executor.5 Not tainted 5.3.0-next-20190926 #0 [ 70.630153][ T8791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.630160][ T8791] Call Trace: [ 70.630183][ T8791] dump_stack+0x172/0x1f0 [ 70.630210][ T8791] ? refcount_inc_checked+0x60/0x70 [ 70.680945][ T8791] panic+0x2dc/0x755 [ 70.684829][ T8791] ? add_taint.cold+0x16/0x16 [ 70.689494][ T8791] ? __kasan_check_write+0x14/0x20 [ 70.694592][ T8791] ? __warn.cold+0x14/0x3c [ 70.698993][ T8791] ? __warn+0xd9/0x1d0 [ 70.703062][ T8791] ? refcount_inc_checked+0x61/0x70 [ 70.708254][ T8791] __warn.cold+0x2f/0x3c [ 70.712576][ T8791] ? refcount_inc_checked+0x61/0x70 [ 70.717771][ T8791] report_bug+0x289/0x300 [ 70.722184][ T8791] do_error_trap+0x11b/0x200 [ 70.726774][ T8791] do_invalid_op+0x37/0x50 [ 70.731184][ T8791] ? refcount_inc_checked+0x61/0x70 [ 70.736371][ T8791] invalid_op+0x23/0x30 [ 70.740610][ T8791] RIP: 0010:refcount_inc_checked+0x61/0x70 [ 70.746403][ T8791] Code: 1d d7 f3 7f 06 31 ff 89 de e8 6b 07 31 fe 84 db 75 dd e8 22 06 31 fe 48 c7 c7 20 66 e6 87 c6 05 b7 f3 7f 06 01 e8 37 4a 02 fe <0f> 0b eb c1 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 [ 70.766190][ T8791] RSP: 0018:ffff8880818878b8 EFLAGS: 00010282 [ 70.773972][ T8791] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 70.782184][ T8791] RDX: 0000000000000000 RSI: ffffffff815ca876 RDI: ffffed1010310f09 [ 70.790159][ T8791] RBP: ffff8880818878c8 R08: ffff888092ecc2c0 R09: ffffed1015d24101 [ 70.798169][ T8791] R10: ffffed1015d24100 R11: ffff8880ae920807 R12: ffff8880a83e2640 [ 70.806306][ T8791] R13: 0000000000000000 R14: ffff888081651300 R15: ffff888095c0b490 [ 70.814278][ T8791] ? vprintk_func+0x86/0x189 [ 70.818940][ T8791] ? refcount_inc_checked+0x61/0x70 [ 70.824123][ T8791] kobject_get+0x66/0xc0 [ 70.828350][ T8791] cdev_get+0x60/0xb0 [ 70.832404][ T8791] chrdev_open+0xb0/0x6b0 [ 70.836728][ T8791] ? cdev_put.part.0+0x50/0x50 [ 70.841484][ T8791] ? security_file_open+0x87/0x300 [ 70.849912][ T8791] do_dentry_open+0x4df/0x1250 [ 70.854667][ T8791] ? __kasan_check_read+0x11/0x20 [ 70.859680][ T8791] ? cdev_put.part.0+0x50/0x50 [ 70.864607][ T8791] ? chown_common+0x5c0/0x5c0 [ 70.870409][ T8791] ? inode_permission+0xb4/0x560 [ 70.875352][ T8791] vfs_open+0xa0/0xd0 [ 70.879320][ T8791] path_openat+0x10e9/0x46d0 [ 70.883912][ T8791] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 70.889698][ T8791] ? kasan_slab_alloc+0xf/0x20 [ 70.894442][ T8791] ? kmem_cache_alloc+0x121/0x710 [ 70.899443][ T8791] ? getname_flags+0xd6/0x5b0 [ 70.904102][ T8791] ? getname+0x1a/0x20 [ 70.908160][ T8791] ? do_sys_open+0x2c9/0x5d0 [ 70.912743][ T8791] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 70.918100][ T8791] ? __alloc_fd+0x487/0x620 [ 70.922609][ T8791] do_filp_open+0x1a1/0x280 [ 70.927103][ T8791] ? may_open_dev+0x100/0x100 [ 70.931775][ T8791] ? __kasan_check_read+0x11/0x20 [ 70.936865][ T8791] ? do_raw_spin_unlock+0x57/0x270 [ 70.941974][ T8791] ? _raw_spin_unlock+0x2d/0x50 [ 70.946803][ T8791] ? __alloc_fd+0x487/0x620 [ 70.951297][ T8791] do_sys_open+0x3fe/0x5d0 [ 70.955712][ T8791] ? filp_open+0x80/0x80 [ 70.959941][ T8791] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 70.965412][ T8791] ? do_syscall_64+0x26/0x760 [ 70.970080][ T8791] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 70.976224][ T8791] ? do_syscall_64+0x26/0x760 [ 70.980889][ T8791] __x64_sys_open+0x7e/0xc0 [ 70.985377][ T8791] do_syscall_64+0xfa/0x760 [ 70.989954][ T8791] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 70.995868][ T8791] RIP: 0033:0x413911 [ 70.999750][ T8791] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 71.019333][ T8791] RSP: 002b:00007f04093f37a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 71.027834][ T8791] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413911 [ 71.035786][ T8791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f04093f3850 [ 71.043736][ T8791] RBP: 000000000075bfc8 R08: 000000000000000f R09: 0000000000000000 [ 71.051687][ T8791] R10: 00007f04093f49d0 R11: 0000000000000293 R12: 00007f04093f46d4 [ 71.059906][ T8791] R13: 00000000004c8e02 R14: 00000000004dff48 R15: 00000000ffffffff [ 71.069581][ T8791] Kernel Offset: disabled [ 71.073995][ T8791] Rebooting in 86400 seconds..