[ 40.426292][ T25] audit: type=1800 audit(1569254684.977:26): pid=7741 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 40.461716][ T25] audit: type=1800 audit(1569254684.977:27): pid=7741 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 40.481386][ T25] audit: type=1800 audit(1569254684.977:28): pid=7741 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 41.265732][ T25] audit: type=1800 audit(1569254685.847:29): pid=7741 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.221' (ECDSA) to the list of known hosts. syzkaller login: [ 53.959256][ T7897] IPVS: ftp: loaded support on port[0] = 21 [ 53.959924][ T7903] IPVS: ftp: loaded support on port[0] = 21 [ 53.976040][ T7902] IPVS: ftp: loaded support on port[0] = 21 [ 53.976053][ T7901] IPVS: ftp: loaded support on port[0] = 21 [ 53.989955][ T7905] IPVS: ftp: loaded support on port[0] = 21 [ 53.991597][ T7904] IPVS: ftp: loaded support on port[0] = 21 [ 54.152281][ T7903] chnl_net:caif_netlink_parms(): no params data found [ 54.218387][ T7903] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.225908][ T7903] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.234022][ T7903] device bridge_slave_0 entered promiscuous mode [ 54.242070][ T7903] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.249705][ T7903] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.257478][ T7903] device bridge_slave_1 entered promiscuous mode [ 54.313272][ T7897] chnl_net:caif_netlink_parms(): no params data found [ 54.338344][ T7904] chnl_net:caif_netlink_parms(): no params data found [ 54.352661][ T7903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.382476][ T7902] chnl_net:caif_netlink_parms(): no params data found [ 54.396966][ T7903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.455314][ T7901] chnl_net:caif_netlink_parms(): no params data found [ 54.480056][ T7904] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.487300][ T7904] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.494945][ T7904] device bridge_slave_0 entered promiscuous mode [ 54.502189][ T7897] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.511302][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.518960][ T7897] device bridge_slave_0 entered promiscuous mode [ 54.527298][ T7903] team0: Port device team_slave_0 added [ 54.533085][ T7897] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.540215][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.547820][ T7897] device bridge_slave_1 entered promiscuous mode [ 54.572524][ T7902] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.579797][ T7902] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.587421][ T7902] device bridge_slave_0 entered promiscuous mode [ 54.594878][ T7904] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.604579][ T7904] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.612293][ T7904] device bridge_slave_1 entered promiscuous mode [ 54.620456][ T7903] team0: Port device team_slave_1 added [ 54.637202][ T7897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.649090][ T7902] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.656850][ T7902] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.665523][ T7902] device bridge_slave_1 entered promiscuous mode [ 54.681782][ T7904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.694410][ T7897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.727006][ T7904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.742753][ T7897] team0: Port device team_slave_0 added [ 54.750096][ T7897] team0: Port device team_slave_1 added [ 54.755880][ T7905] chnl_net:caif_netlink_parms(): no params data found [ 54.773584][ T7902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.796549][ T7904] team0: Port device team_slave_0 added [ 54.804266][ T7904] team0: Port device team_slave_1 added [ 54.848987][ T7903] device hsr_slave_0 entered promiscuous mode [ 54.896723][ T7903] device hsr_slave_1 entered promiscuous mode [ 54.940458][ T7902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.950055][ T7901] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.957643][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.965158][ T7901] device bridge_slave_0 entered promiscuous mode [ 54.973163][ T7901] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.980649][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.988521][ T7901] device bridge_slave_1 entered promiscuous mode [ 55.034268][ T7902] team0: Port device team_slave_0 added [ 55.077736][ T7897] device hsr_slave_0 entered promiscuous mode [ 55.126611][ T7897] device hsr_slave_1 entered promiscuous mode [ 55.166352][ T7897] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.179174][ T7902] team0: Port device team_slave_1 added [ 55.187162][ T7905] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.194403][ T7905] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.202595][ T7905] device bridge_slave_0 entered promiscuous mode [ 55.210832][ T7901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.268768][ T7904] device hsr_slave_0 entered promiscuous mode [ 55.316520][ T7904] device hsr_slave_1 entered promiscuous mode [ 55.356346][ T7904] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.365999][ T7905] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.373314][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.381171][ T7905] device bridge_slave_1 entered promiscuous mode [ 55.402542][ T7901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.447726][ T7902] device hsr_slave_0 entered promiscuous mode [ 55.497742][ T7902] device hsr_slave_1 entered promiscuous mode [ 55.556396][ T7902] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.584563][ T7905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.598557][ T7905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.617784][ T7901] team0: Port device team_slave_0 added [ 55.627691][ T7901] team0: Port device team_slave_1 added [ 55.642280][ T7905] team0: Port device team_slave_0 added [ 55.657263][ T7905] team0: Port device team_slave_1 added [ 55.738900][ T7901] device hsr_slave_0 entered promiscuous mode [ 55.776842][ T7901] device hsr_slave_1 entered promiscuous mode [ 55.816256][ T7901] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.888648][ T7905] device hsr_slave_0 entered promiscuous mode [ 55.926579][ T7905] device hsr_slave_1 entered promiscuous mode [ 55.966241][ T7905] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.012846][ T7903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.033781][ T7905] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.040949][ T7905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.048605][ T7905] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.055746][ T7905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.075543][ T7897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.109900][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.128971][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.139282][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.148255][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.161833][ T7901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.174238][ T7903] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.188144][ T7902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.198255][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.205928][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.215061][ T7897] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.229307][ T7904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.241552][ T7902] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.252377][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.263448][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.272272][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.279363][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.288232][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.296802][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.305027][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.312099][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.319788][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.328319][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.336713][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.344815][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.363508][ T7905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.383405][ T7901] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.408250][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 56.417058][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.425473][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.434318][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.441386][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.449343][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.457983][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.466310][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.473337][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.481090][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.490117][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.497832][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.505429][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.513955][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.522202][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.529299][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.537310][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.545743][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.554103][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.561172][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.569292][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.577748][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.586057][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.594798][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.603348][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.611721][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.620074][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.628478][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.637049][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.645257][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.653824][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.662283][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.670730][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.679063][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.687538][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.695855][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.703740][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.711585][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.721072][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.735784][ T7897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.748518][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.767009][ T7901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.777937][ T7901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.793026][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.802279][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.810860][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.817984][ T7907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.830358][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.839112][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.847578][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.855644][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.864645][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.873242][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.880390][ T7907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.888491][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.897360][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.905737][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.914251][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.922479][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.931329][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.940055][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.948448][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.958817][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.967528][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.977068][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.984731][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.011373][ T7903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.023037][ T7903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.032177][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.040704][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.049835][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.058619][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.067324][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.075609][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.084000][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.092698][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.100978][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.109381][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.122289][ T7897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.134890][ T7905] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.164735][ T7903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.182214][ T7902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.195968][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.204288][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.215221][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.224569][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.232660][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.240669][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.248815][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.258979][ T7904] 8021q: adding VLAN 0 to HW filter on device team0 executing program [ 57.288735][ T7901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.296798][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.305879][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.314922][ T7922] input: syz1 as /devices/virtual/input/input5 [ 57.318313][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.328287][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.339478][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.348644][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.365781][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.372917][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.381781][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready executing program [ 57.410804][ T7902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.424167][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.435560][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.450190][ T7930] input: syz1 as /devices/virtual/input/input6 executing program [ 57.465007][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.485964][ T7932] input: syz1 as /devices/virtual/input/input7 [ 57.490987][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.509449][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.524092][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.533225][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.542709][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.551519][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready executing program [ 57.560345][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.572504][ T7937] input: syz1 as /devices/virtual/input/input8 [ 57.579745][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.588931][ T7937] ------------[ cut here ]------------ [ 57.594512][ T7937] refcount_t: increment on 0; use-after-free. [ 57.600810][ T7937] WARNING: CPU: 0 PID: 7937 at lib/refcount.c:156 refcount_inc_checked+0x4b/0x50 [ 57.609896][ T7937] Kernel panic - not syncing: panic_on_warn set ... [ 57.616464][ T7937] CPU: 0 PID: 7937 Comm: syz-executor129 Not tainted 5.3.0+ #0 [ 57.623985][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.634023][ T7937] Call Trace: [ 57.637306][ T7937] dump_stack+0x1d8/0x2f8 [ 57.641617][ T7937] panic+0x25c/0x799 [ 57.645496][ T7937] ? __warn+0x126/0x230 [ 57.649633][ T7937] __warn+0x22f/0x230 [ 57.653784][ T7937] ? refcount_inc_checked+0x4b/0x50 [ 57.658986][ T7937] report_bug+0x190/0x290 [ 57.663319][ T7937] ? refcount_inc_checked+0x4b/0x50 [ 57.668505][ T7937] do_error_trap+0xd7/0x440 [ 57.672994][ T7937] do_invalid_op+0x36/0x40 [ 57.677390][ T7937] ? refcount_inc_checked+0x4b/0x50 [ 57.682577][ T7937] invalid_op+0x23/0x30 [ 57.686831][ T7937] RIP: 0010:refcount_inc_checked+0x4b/0x50 [ 57.692619][ T7937] Code: 3d 5e 80 78 05 01 75 08 e8 a2 e4 30 fe 5b 5d c3 e8 9a e4 30 fe c6 05 48 80 78 05 01 48 c7 c7 04 28 40 88 31 c0 e8 95 9b 03 fe <0f> 0b eb df 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 10 [ 57.712206][ T7937] RSP: 0018:ffff8880847f79b0 EFLAGS: 00010246 [ 57.718250][ T7937] RAX: ce2d6c4bbf865b00 RBX: ffff88808fa65d40 RCX: ffff888098e3a140 [ 57.726210][ T7937] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 57.734161][ T7937] RBP: ffff8880847f79b8 R08: ffffffff815c9744 R09: fffffbfff12baea8 [ 57.742107][ T7937] R10: fffffbfff12baea8 R11: 0000000000000000 R12: dffffc0000000000 [ 57.750057][ T7937] R13: ffff88808fa65d08 R14: ffff88808fa65d44 R15: ffff88808fa65d08 [ 57.758016][ T7937] ? vprintk_emit+0x2d4/0x3a0 [ 57.762676][ T7937] kobject_get+0x91/0xc0 [ 57.766896][ T7937] chrdev_open+0x17e/0x590 [ 57.771388][ T7937] ? security_file_open+0x236/0x2f0 [ 57.776561][ T7937] ? cd_forget+0x160/0x160 [ 57.780960][ T7937] do_dentry_open+0x73b/0xf90 [ 57.785618][ T7937] vfs_open+0x73/0x80 [ 57.789574][ T7937] path_openat+0x1397/0x4460 [ 57.794178][ T7937] do_filp_open+0x192/0x3d0 [ 57.798674][ T7937] do_sys_open+0x29f/0x560 [ 57.803072][ T7937] __x64_sys_open+0x87/0x90 [ 57.807554][ T7937] do_syscall_64+0xf7/0x1c0 [ 57.812039][ T7937] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.817907][ T7937] RIP: 0033:0x403350 [ 57.821778][ T7937] Code: 48 83 c4 08 48 3d 01 f0 ff ff 0f 83 3a 0e 00 00 c3 66 0f 1f 84 00 00 00 00 00 83 3d 9d f5 2d 00 00 75 14 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 14 0e 00 00 c3 48 83 ec 08 e8 7a 03 00 00 [ 57.841372][ T7937] RSP: 002b:00007ffdb5564f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 57.849951][ T7937] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000403350 [ 57.858006][ T7937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffdb5564f50 [ 57.865986][ T7937] RBP: 000000000000e039 R08: 000000000000000f R09: 00000000000003e8 [ 57.874030][ T7937] R10: 00000000000003e8 R11: 0000000000000246 R12: 0000000000000003 [ 57.881984][ T7937] R13: 00000000006d5dc8 R14: 00000000006d6440 R15: 0000000000000000 [ 57.891430][ T7937] Kernel Offset: disabled [ 57.895961][ T7937] Rebooting in 86400 seconds..