[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.293496] random: sshd: uninitialized urandom read (32 bytes read) [ 34.569396] kauditd_printk_skb: 9 callbacks suppressed [ 34.569404] audit: type=1400 audit(1556470638.860:35): avc: denied { map } for pid=6840 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 34.626023] random: sshd: uninitialized urandom read (32 bytes read) [ 35.172815] random: sshd: uninitialized urandom read (32 bytes read) [ 35.356507] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.59' (ECDSA) to the list of known hosts. [ 40.866176] random: sshd: uninitialized urandom read (32 bytes read) [ 41.043117] audit: type=1400 audit(1556470645.340:36): avc: denied { map } for pid=6853 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/04/28 16:57:26 parsed 1 programs [ 41.795562] audit: type=1400 audit(1556470646.090:37): avc: denied { map } for pid=6853 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=24 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 42.650879] random: cc1: uninitialized urandom read (8 bytes read) 2019/04/28 16:57:28 executed programs: 0 [ 43.770083] audit: type=1400 audit(1556470648.060:38): avc: denied { map } for pid=6853 comm="syz-execprog" path="/root/syzkaller-shm768955718" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 43.818226] IPVS: ftp: loaded support on port[0] = 21 [ 44.090447] chnl_net:caif_netlink_parms(): no params data found [ 44.120640] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.127567] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.134981] device bridge_slave_0 entered promiscuous mode [ 44.142018] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.148374] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.155476] device bridge_slave_1 entered promiscuous mode [ 44.161842] IPVS: ftp: loaded support on port[0] = 21 [ 44.179687] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.190725] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.215368] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.222570] team0: Port device team_slave_0 added [ 44.229535] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.236616] team0: Port device team_slave_1 added [ 44.243631] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.252620] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.311548] IPVS: ftp: loaded support on port[0] = 21 [ 44.318617] device hsr_slave_0 entered promiscuous mode [ 44.380287] device hsr_slave_1 entered promiscuous mode [ 44.440766] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.447942] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.509457] chnl_net:caif_netlink_parms(): no params data found [ 44.518582] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.525029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.532095] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.538437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.601575] IPVS: ftp: loaded support on port[0] = 21 [ 44.633254] chnl_net:caif_netlink_parms(): no params data found [ 44.645117] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.651608] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.658824] device bridge_slave_0 entered promiscuous mode [ 44.667070] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.673485] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.680557] device bridge_slave_1 entered promiscuous mode [ 44.712752] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.733721] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.772410] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.779455] team0: Port device team_slave_0 added [ 44.787538] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.794116] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.801569] device bridge_slave_0 entered promiscuous mode [ 44.808564] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.815036] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.822300] device bridge_slave_1 entered promiscuous mode [ 44.830649] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.837722] team0: Port device team_slave_1 added [ 44.843792] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.856581] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 44.862994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.875279] IPVS: ftp: loaded support on port[0] = 21 [ 44.875443] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.890245] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.903682] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.914192] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.983394] device hsr_slave_0 entered promiscuous mode [ 45.020391] device hsr_slave_1 entered promiscuous mode [ 45.060693] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.072750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.081175] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.088123] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.096365] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 45.109676] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.116538] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.122820] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.130005] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.137132] team0: Port device team_slave_0 added [ 45.144856] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.152137] team0: Port device team_slave_1 added [ 45.157388] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.166973] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.182158] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.189107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.198152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.206105] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.212572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.230801] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.260839] IPVS: ftp: loaded support on port[0] = 21 [ 45.266245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.274785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.282385] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.288702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.297430] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.363116] device hsr_slave_0 entered promiscuous mode [ 45.430313] device hsr_slave_1 entered promiscuous mode [ 45.472470] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.505446] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.512647] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.552892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.565211] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.578818] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.600531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.608121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.615845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.623436] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.631831] chnl_net:caif_netlink_parms(): no params data found [ 45.647112] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.668500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.677383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.684954] chnl_net:caif_netlink_parms(): no params data found [ 45.703678] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.726780] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.763755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.771879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.783992] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.792065] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.798875] device bridge_slave_0 entered promiscuous mode [ 45.810335] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.816772] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.823751] device bridge_slave_0 entered promiscuous mode [ 45.837893] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.844791] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.851236] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.858040] device bridge_slave_1 entered promiscuous mode [ 45.864296] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.871618] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.878419] device bridge_slave_1 entered promiscuous mode [ 45.894755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.902893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.923990] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.938163] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.947693] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.954134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.963414] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.975016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.982244] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.028949] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.036365] team0: Port device team_slave_0 added [ 46.042488] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.048842] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.056106] team0: Port device team_slave_1 added [ 46.062897] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.071038] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.078058] team0: Port device team_slave_0 added [ 46.084622] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.116320] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.123679] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.132078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.139013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.146647] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.154078] team0: Port device team_slave_1 added [ 46.159536] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.167342] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.206368] chnl_net:caif_netlink_parms(): no params data found [ 46.272244] device hsr_slave_0 entered promiscuous mode [ 46.310377] device hsr_slave_1 entered promiscuous mode [ 46.351309] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.357406] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.365221] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.412448] device hsr_slave_0 entered promiscuous mode [ 46.460448] device hsr_slave_1 entered promiscuous mode [ 46.510783] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.517735] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.530440] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.544407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.552603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.560574] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.566916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.575354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.584627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.600567] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.625178] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.637642] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.645150] device bridge_slave_0 entered promiscuous mode [ 46.651973] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.658350] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.665413] device bridge_slave_1 entered promiscuous mode [ 46.685896] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.694711] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.718460] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.735964] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.743181] team0: Port device team_slave_0 added [ 46.748839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.756584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.764831] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.771228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.781376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.792400] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.801166] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.808203] team0: Port device team_slave_1 added [ 46.814520] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.823322] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.833787] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.848968] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.858506] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.866335] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.901419] input: syz1 as /devices/virtual/input/input5 [ 46.932379] device hsr_slave_0 entered promiscuous mode [ 46.952199] device hsr_slave_1 entered promiscuous mode [ 46.991669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.999446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.006681] input: syz1 as /devices/virtual/input/input6 [ 47.013488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.025282] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.039330] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 47.050932] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 47.057982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.066035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.073641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.081127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.088032] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.098195] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.106701] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.113576] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.131209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.138820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.148669] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.158493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.178827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.186815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.196503] input: syz1 as /devices/virtual/input/input7 [ 47.204759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.214034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.224050] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.232953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.240865] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.249171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.259226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.267179] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.273553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.284124] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.293863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.306019] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.316084] input: syz1 as /devices/virtual/input/input8 [ 47.320211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.328682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.344065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.352661] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.359010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.372940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.380977] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.390803] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.399739] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.407387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.415115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.423269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.431380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.441070] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.449364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.463356] input: syz1 as /devices/virtual/input/input9 [ 47.465250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.489078] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.505908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.517262] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.523921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.536522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.544618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.551577] input: syz1 as /devices/virtual/input/input10 [ 47.557436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.567069] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.582384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.602436] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.611264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.621907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.629346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.637260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.650816] input: syz1 as /devices/virtual/input/input11 [ 47.661809] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.669875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.685869] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.692481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.711019] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.717090] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.727661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.737384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.751739] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.757815] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.763701] input: syz1 as /devices/virtual/input/input12 [ 47.776515] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.794265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.815349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.828268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.839796] input: syz1 as /devices/virtual/input/input13 [ 47.849845] input: syz1 as /devices/virtual/input/input14 [ 47.856034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.873243] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.879617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.889063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.896959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.904673] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.911051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.918254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.925252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.938814] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.947804] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.957671] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.964531] input: syz1 as /devices/virtual/input/input15 [ 47.965540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.985507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.993487] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.999818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.006807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.014953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.022664] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.029022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.037940] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.047452] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.054935] input: syz1 as /devices/virtual/input/input16 [ 48.060830] refcount_t: increment on 0; use-after-free. [ 48.066470] ------------[ cut here ]------------ [ 48.071221] WARNING: CPU: 0 PID: 6940 at lib/refcount.c:153 refcount_inc.cold+0x18/0x1f [ 48.079350] Kernel panic - not syncing: panic_on_warn set ... [ 48.079350] [ 48.086703] CPU: 0 PID: 6940 Comm: syz-executor.2 Not tainted 4.14.114 #4 [ 48.093606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.102941] Call Trace: [ 48.105517] dump_stack+0x138/0x19c [ 48.109127] panic+0x1f2/0x438 [ 48.112300] ? add_taint.cold+0x16/0x16 [ 48.116256] ? refcount_inc.cold+0x18/0x1f [ 48.120473] ? refcount_inc.cold+0x18/0x1f [ 48.124686] __warn.cold+0x2f/0x34 [ 48.128212] ? ist_end_non_atomic+0x10/0x10 [ 48.132525] ? refcount_inc.cold+0x18/0x1f [ 48.136835] report_bug+0x216/0x254 [ 48.140446] do_error_trap+0x1bb/0x310 [ 48.144317] ? math_error+0x360/0x360 [ 48.148110] ? vprintk_emit+0x171/0x600 [ 48.152071] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 48.156895] do_invalid_op+0x1b/0x20 [ 48.160587] invalid_op+0x1b/0x40 [ 48.164020] RIP: 0010:refcount_inc.cold+0x18/0x1f [ 48.168926] RSP: 0018:ffff8880961cf980 EFLAGS: 00010286 [ 48.174274] RAX: 000000000000002b RBX: 1ffff11012c39f3d RCX: 0000000000000000 [ 48.181523] RDX: 0000000000000000 RSI: ffffffff866d0a00 RDI: ffffed1012c39f26 [ 48.188776] RBP: ffff8880961cf988 R08: 000000000000002b R09: ffff8880a1996a20 [ 48.196030] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a19ae8e0 [ 48.203281] R13: 0000000000000000 R14: ffff8880a6032080 R15: ffff88808660f9b8 [ 48.210546] kobject_get+0x5b/0x70 [ 48.214078] cdev_get+0x54/0xa0 [ 48.217336] chrdev_open+0x9b/0x590 [ 48.220942] ? cdev_put.part.0+0x50/0x50 [ 48.224987] ? security_file_open+0x8f/0x1a0 [ 48.229374] do_dentry_open+0x73e/0xeb0 [ 48.233334] ? cdev_put.part.0+0x50/0x50 [ 48.237374] vfs_open+0x105/0x230 [ 48.240811] path_openat+0x8bd/0x3f70 [ 48.244595] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 48.249245] ? __alloc_fd+0x1d4/0x4a0 [ 48.253025] do_filp_open+0x18e/0x250 [ 48.256807] ? may_open_dev+0xe0/0xe0 [ 48.260591] ? _raw_spin_unlock+0x2d/0x50 [ 48.264717] ? __alloc_fd+0x1d4/0x4a0 [ 48.268606] do_sys_open+0x2c5/0x430 [ 48.272298] ? filp_open+0x70/0x70 [ 48.275817] ? SyS_clock_gettime+0xfd/0x190 [ 48.280120] SyS_open+0x2d/0x40 [ 48.283377] ? do_sys_open+0x430/0x430 [ 48.287245] do_syscall_64+0x1eb/0x630 [ 48.291112] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 48.295951] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 48.301126] RIP: 0033:0x412d41 [ 48.304294] RSP: 002b:00007fbbd72f37a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 48.311981] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000412d41 [ 48.319232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fbbd72f3850 [ 48.326481] RBP: 000000000073bfa0 R08: 000000000000000f R09: 0000000000000000 [ 48.333740] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fbbd72f46d4 [ 48.341075] R13: 00000000004c7b08 R14: 00000000004ddb80 R15: 00000000ffffffff [ 48.350085] Kernel Offset: disabled [ 48.353774] Rebooting in 86400 seconds..