[ 42.356784][ T26] audit: type=1800 audit(1556343465.925:27): pid=7559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 42.393017][ T26] audit: type=1800 audit(1556343465.935:28): pid=7559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.193319][ T26] audit: type=1800 audit(1556343466.815:29): pid=7559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 43.218088][ T26] audit: type=1800 audit(1556343466.815:30): pid=7559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.49' (ECDSA) to the list of known hosts. syzkaller login: [ 50.491707][ T7724] IPVS: ftp: loaded support on port[0] = 21 [ 50.491716][ T7721] IPVS: ftp: loaded support on port[0] = 21 [ 50.502306][ T7722] IPVS: ftp: loaded support on port[0] = 21 [ 50.510513][ T7719] IPVS: ftp: loaded support on port[0] = 21 [ 50.511981][ T7720] IPVS: ftp: loaded support on port[0] = 21 [ 50.518438][ T7723] IPVS: ftp: loaded support on port[0] = 21 [ 50.780297][ T7720] chnl_net:caif_netlink_parms(): no params data found [ 50.806829][ T7719] chnl_net:caif_netlink_parms(): no params data found [ 50.894773][ T7720] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.902941][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.922052][ T7720] device bridge_slave_0 entered promiscuous mode [ 50.932000][ T7720] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.939175][ T7720] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.946764][ T7720] device bridge_slave_1 entered promiscuous mode [ 50.976185][ T7722] chnl_net:caif_netlink_parms(): no params data found [ 51.032023][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.039150][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.046743][ T7719] device bridge_slave_0 entered promiscuous mode [ 51.057143][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.064540][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.072983][ T7719] device bridge_slave_1 entered promiscuous mode [ 51.132374][ T7720] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.145158][ T7720] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.167888][ T7719] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.176334][ T7724] chnl_net:caif_netlink_parms(): no params data found [ 51.184796][ T7721] chnl_net:caif_netlink_parms(): no params data found [ 51.213167][ T7719] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.259998][ T7720] team0: Port device team_slave_0 added [ 51.272823][ T7719] team0: Port device team_slave_0 added [ 51.279918][ T7723] chnl_net:caif_netlink_parms(): no params data found [ 51.314808][ T7720] team0: Port device team_slave_1 added [ 51.325147][ T7719] team0: Port device team_slave_1 added [ 51.337320][ T7722] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.344404][ T7722] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.352289][ T7722] device bridge_slave_0 entered promiscuous mode [ 51.389223][ T7724] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.396305][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.406043][ T7724] device bridge_slave_0 entered promiscuous mode [ 51.414373][ T7722] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.425153][ T7722] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.433491][ T7722] device bridge_slave_1 entered promiscuous mode [ 51.463707][ T7723] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.471672][ T7723] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.479996][ T7723] device bridge_slave_0 entered promiscuous mode [ 51.491914][ T7724] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.499865][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.508139][ T7724] device bridge_slave_1 entered promiscuous mode [ 51.539113][ T7723] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.546199][ T7723] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.554585][ T7723] device bridge_slave_1 entered promiscuous mode [ 51.579924][ T7722] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.590917][ T7722] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.599638][ T7721] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.606694][ T7721] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.614740][ T7721] device bridge_slave_0 entered promiscuous mode [ 51.668853][ T7720] device hsr_slave_0 entered promiscuous mode [ 51.727551][ T7720] device hsr_slave_1 entered promiscuous mode [ 51.828851][ T7719] device hsr_slave_0 entered promiscuous mode [ 51.867451][ T7719] device hsr_slave_1 entered promiscuous mode [ 51.924966][ T7724] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.943384][ T7721] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.951785][ T7721] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.959603][ T7721] device bridge_slave_1 entered promiscuous mode [ 51.989373][ T7723] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.000552][ T7724] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.010409][ T7722] team0: Port device team_slave_0 added [ 52.033655][ T7724] team0: Port device team_slave_0 added [ 52.046666][ T7723] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.061701][ T7724] team0: Port device team_slave_1 added [ 52.070726][ T7722] team0: Port device team_slave_1 added [ 52.092344][ T7721] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.102517][ T7721] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.116043][ T7723] team0: Port device team_slave_0 added [ 52.129514][ T7723] team0: Port device team_slave_1 added [ 52.179961][ T7724] device hsr_slave_0 entered promiscuous mode [ 52.217523][ T7724] device hsr_slave_1 entered promiscuous mode [ 52.338787][ T7722] device hsr_slave_0 entered promiscuous mode [ 52.397360][ T7722] device hsr_slave_1 entered promiscuous mode [ 52.550384][ T7723] device hsr_slave_0 entered promiscuous mode [ 52.588504][ T7723] device hsr_slave_1 entered promiscuous mode [ 52.638751][ T7721] team0: Port device team_slave_0 added [ 52.648170][ T7721] team0: Port device team_slave_1 added [ 52.690921][ T7719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.739581][ T7721] device hsr_slave_0 entered promiscuous mode [ 52.787584][ T7721] device hsr_slave_1 entered promiscuous mode [ 52.863034][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.871734][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.890405][ T7719] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.911287][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.920637][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.929589][ T7726] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.936806][ T7726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.945324][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.970580][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.979463][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.990209][ T7726] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.997324][ T7726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.005020][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.014242][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.048629][ T7723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.074457][ T7723] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.093484][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.102268][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.110030][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.119555][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.128294][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.136676][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.145901][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.160858][ T7719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.171922][ T7719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.204026][ T7724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.211432][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.220658][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.231834][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.240512][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.249031][ T7726] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.256083][ T7726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.263783][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.272658][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.281149][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.289883][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.298269][ T7726] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.305303][ T7726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.312979][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.321411][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.336373][ T7720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.356875][ T7724] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.371871][ T7721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.386282][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.394480][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.403108][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.434370][ T7721] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.448157][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.456929][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.466279][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.475802][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.484737][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.493507][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.501460][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.509383][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.519015][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.526610][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.535506][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.544560][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.551689][ T2905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.559695][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.568688][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.576962][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.584068][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.591688][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.599658][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.611068][ T7719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.630203][ T7722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.637798][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.646194][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.662632][ T7723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.674415][ T7723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.687692][ T7720] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.705046][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.715569][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.724462][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.733557][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.743223][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.753029][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.761548][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.768662][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.777679][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.786388][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.795245][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.802351][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.809999][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.817935][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.827859][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.835794][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.843799][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.852892][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready executing program [ 53.879983][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.895341][ T7735] input: syz1 as /devices/virtual/input/input5 [ 53.896252][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.916419][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.925607][ T7726] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.932749][ T7726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.941223][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.950055][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.958583][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.967768][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.975952][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.984658][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.995308][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.007181][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.015477][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.022580][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.038386][ T7722] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.071881][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.081088][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.091399][ T7735] input: syz1 as /devices/virtual/input/input6 [ 54.100703][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.107815][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.108409][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.124786][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.135644][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.147480][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.156404][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.171646][ T7724] 8021q: adding VLAN 0 to HW filter on device batadv0 executing program [ 54.192565][ T7723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.204050][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.214238][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.226114][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.236608][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.245634][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.253921][ T7740] input: syz1 as /devices/virtual/input/input7 [ 54.255856][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.278622][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready executing program [ 54.286960][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.295495][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.303503][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.342455][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.354943][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.363685][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.374678][ T7740] input: syz1 as /devices/virtual/input/input9 [ 54.387781][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.394669][ T7743] input: syz1 as /devices/virtual/input/input8 [ 54.409054][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.426065][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready executing program [ 54.438674][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.455364][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.468402][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.475483][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.485080][ T7721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.492888][ T7751] input: syz1 as /devices/virtual/input/input10 [ 54.515640][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.528952][ T7743] input: syz1 as /devices/virtual/input/input11 [ 54.539025][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.548307][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.558003][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.575741][ T7721] 8021q: adding VLAN 0 to HW filter on device batadv0 executing program executing program [ 54.598481][ T7720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.628921][ T7751] input: syz1 as /devices/virtual/input/input12 [ 54.629918][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.658745][ T7756] input: syz1 as /devices/virtual/input/input13 [ 54.665044][ T7760] input: syz1 as /devices/virtual/input/input14 [ 54.679323][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.694200][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.709356][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.721634][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready executing program [ 54.750880][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.759664][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.769293][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.780076][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.788415][ T7756] input: syz1 as /devices/virtual/input/input15 executing program [ 54.795816][ T7720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.804483][ T7722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.813824][ T7767] input: syz1 as /devices/virtual/input/input16 [ 54.874536][ T7775] input: syz1 as /devices/virtual/input/input18 [ 54.909312][ T7722] 8021q: adding VLAN 0 to HW filter on device batadv0 executing program executing program executing program [ 54.960433][ T7767] input: syz1 as /devices/virtual/input/input19 [ 54.972352][ T7787] input: syz1 as /devices/virtual/input/input20 [ 54.994115][ T7785] input: syz1 as /devices/virtual/input/input21 executing program [ 55.065438][ T7797] input: syz1 as /devices/virtual/input/input22 [ 55.079066][ T7796] input: syz1 as /devices/virtual/input/input23 executing program [ 55.108608][ T7775] input: syz1 as /devices/virtual/input/input24 [ 55.130612][ T7806] input: syz1 as /devices/virtual/input/input25 executing program executing program [ 55.188633][ T7812] input: syz1 as /devices/virtual/input/input28 [ 55.221439][ T7797] input: syz1 as /devices/virtual/input/input29 [ 55.236520][ T7816] input: syz1 as /devices/virtual/input/input30 [ 55.269787][ T7796] input: syz1 as /devices/virtual/input/input31 executing program [ 55.330329][ T7806] input: syz1 as /devices/virtual/input/input32 [ 55.380164][ T7827] input: syz1 as /devices/virtual/input/input33 [ 55.412920][ T7812] input: syz1 as /devices/virtual/input/input34 executing program executing program [ 55.460031][ T7816] input: syz1 as /devices/virtual/input/input36 [ 55.478677][ T7832] input: syz1 as /devices/virtual/input/input37 [ 55.521538][ T7836] input: syz1 as /devices/virtual/input/input38 [ 55.560478][ T7827] input: syz1 as /devices/virtual/input/input39 executing program executing program executing program [ 55.610526][ T7843] input: syz1 as /devices/virtual/input/input41 [ 55.643561][ T7847] input: syz1 as /devices/virtual/input/input42 [ 55.674615][ T7852] input: syz1 as /devices/virtual/input/input43 [ 55.699968][ T7832] input: syz1 as /devices/virtual/input/input44 executing program executing program executing program [ 55.835998][ T7865] input: syz1 as /devices/virtual/input/input46 executing program [ 55.876472][ T7868] input: syz1 as /devices/virtual/input/input49 [ 55.904432][ T7870] input: syz1 as /devices/virtual/input/input50 executing program [ 55.945107][ T7881] input: syz1 as /devices/virtual/input/input51 [ 55.985212][ T7886] input: syz1 as /devices/virtual/input/input52 [ 56.061670][ T7868] input: syz1 as /devices/virtual/input/input55 executing program [ 56.145774][ T7881] input: syz1 as /devices/virtual/input/input56 [ 56.157945][ T7907] input: syz1 as /devices/virtual/input/input57 [ 56.167550][ T7893] ------------[ cut here ]------------ [ 56.173446][ T7893] refcount_t: increment on 0; use-after-free. [ 56.179943][ T7893] WARNING: CPU: 0 PID: 7893 at lib/refcount.c:156 refcount_inc_checked+0x61/0x70 [ 56.189166][ T7893] Kernel panic - not syncing: panic_on_warn set ... [ 56.195860][ T7893] CPU: 0 PID: 7893 Comm: syz-executor835 Not tainted 5.1.0-rc6-next-20190426 #31 [ 56.205195][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.215439][ T7893] Call Trace: [ 56.218810][ T7893] dump_stack+0x172/0x1f0 [ 56.223179][ T7893] ? refcount_inc_not_zero_checked+0x170/0x200 [ 56.229353][ T7893] panic+0x2cb/0x75a [ 56.233359][ T7893] ? __warn_printk+0xf3/0xf3 [ 56.237974][ T7893] ? refcount_inc_checked+0x61/0x70 [ 56.243301][ T7893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 56.249567][ T7893] ? __warn.cold+0x5/0x47 [ 56.253917][ T7893] ? __warn+0xe8/0x1d0 [ 56.258001][ T7893] ? refcount_inc_checked+0x61/0x70 [ 56.263211][ T7893] __warn.cold+0x20/0x47 [ 56.267569][ T7893] ? refcount_inc_checked+0x61/0x70 [ 56.272901][ T7893] report_bug+0x263/0x2b0 [ 56.277248][ T7893] do_error_trap+0x11b/0x200 [ 56.281868][ T7893] do_invalid_op+0x37/0x50 [ 56.286311][ T7893] ? refcount_inc_checked+0x61/0x70 [ 56.291528][ T7893] invalid_op+0x14/0x20 [ 56.295710][ T7893] RIP: 0010:refcount_inc_checked+0x61/0x70 [ 56.301708][ T7893] Code: 1d 5c 80 27 06 31 ff 89 de e8 6b 69 3c fe 84 db 75 dd e8 22 68 3c fe 48 c7 c7 40 2a a2 87 c6 05 3c 80 27 06 01 e8 9d 8b 0e fe <0f> 0b eb c1 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 [ 56.322810][ T7893] RSP: 0018:ffff8880a4def8b8 EFLAGS: 00010282 [ 56.329117][ T7893] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 56.339981][ T7893] RDX: 0000000000000000 RSI: ffffffff815b4656 RDI: ffffed10149bdf09 [ 56.347967][ T7893] RBP: ffff8880a4def8c8 R08: ffff88809f88c280 R09: ffff88809f88cb20 [ 56.355964][ T7893] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a430d2b8 [ 56.363951][ T7893] R13: 0000000000000000 R14: ffff88808c2a5ac0 R15: ffff8880a9151f10 [ 56.372313][ T7893] ? vprintk_func+0x86/0x189 [ 56.376946][ T7893] ? refcount_inc_checked+0x61/0x70 [ 56.382364][ T7893] kobject_get+0x66/0xc0 [ 56.386728][ T7893] cdev_get+0x60/0xb0 [ 56.391042][ T7893] chrdev_open+0xb0/0x6b0 [ 56.395669][ T7893] ? cdev_put.part.0+0x50/0x50 [ 56.400468][ T7893] ? security_file_open+0x8d/0x300 [ 56.405718][ T7893] do_dentry_open+0x4e2/0x1250 [ 56.410521][ T7893] ? kasan_check_read+0x11/0x20 [ 56.416092][ T7893] ? cdev_put.part.0+0x50/0x50 [ 56.420887][ T7893] ? chown_common+0x5c0/0x5c0 [ 56.425676][ T7893] ? inode_permission+0xb4/0x570 [ 56.430812][ T7893] vfs_open+0xa0/0xd0 [ 56.434815][ T7893] path_openat+0x10e9/0x46e0 [ 56.440176][ T7893] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 56.445994][ T7893] ? kasan_slab_alloc+0xf/0x20 [ 56.452251][ T7893] ? kmem_cache_alloc+0x11a/0x6f0 [ 56.457292][ T7893] ? getname_flags+0xd6/0x5b0 [ 56.461982][ T7893] ? getname+0x1a/0x20 [ 56.466104][ T7893] ? do_sys_open+0x2c9/0x5d0 [ 56.471015][ T7893] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 56.476437][ T7893] ? __alloc_fd+0x44d/0x560 [ 56.481104][ T7893] do_filp_open+0x1a1/0x280 [ 56.485736][ T7893] ? may_open_dev+0x100/0x100 [ 56.490455][ T7893] ? kasan_check_read+0x11/0x20 [ 56.495343][ T7893] ? do_raw_spin_unlock+0x57/0x270 [ 56.500483][ T7893] ? _raw_spin_unlock+0x2d/0x50 [ 56.505355][ T7893] ? __alloc_fd+0x44d/0x560 [ 56.509947][ T7893] do_sys_open+0x3fe/0x5d0 [ 56.514744][ T7893] ? filp_open+0x80/0x80 [ 56.519009][ T7893] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 56.524756][ T7893] ? do_syscall_64+0x26/0x670 [ 56.529454][ T7893] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.535668][ T7893] ? do_syscall_64+0x26/0x670 [ 56.540376][ T7893] __x64_sys_open+0x7e/0xc0 [ 56.544912][ T7893] do_syscall_64+0x103/0x670 [ 56.549564][ T7893] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.555468][ T7893] RIP: 0033:0x407841 [ 56.559378][ T7893] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a4 18 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 56.579093][ T7893] RSP: 002b:00007fa8e6cd78b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 56.587518][ T7893] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000407841 [ 56.595491][ T7893] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fa8e6cd78d0 [ 56.603469][ T7893] RBP: 00000000006dec30 R08: 000000000000000f R09: 0000000000000000 [ 56.611475][ T7893] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000006dec3c [ 56.619460][ T7893] R13: 00007fffb0c3dd3f R14: 00007fa8e6cd89c0 R15: 0000000000000003 [ 56.628729][ T7893] Kernel Offset: disabled [ 56.633137][ T7893] Rebooting in 86400 seconds..