[ 33.785126][ T27] audit: type=1800 audit(1556472066.950:27): pid=7320 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 33.785146][ T27] audit: type=1800 audit(1556472066.950:28): pid=7320 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 34.492474][ T27] audit: type=1800 audit(1556472067.680:29): pid=7320 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 34.516457][ T27] audit: type=1800 audit(1556472067.680:30): pid=7320 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.173' (ECDSA) to the list of known hosts. syzkaller login: [ 98.523146][ T7485] IPVS: ftp: loaded support on port[0] = 21 [ 98.523152][ T7484] IPVS: ftp: loaded support on port[0] = 21 [ 98.534427][ T7481] IPVS: ftp: loaded support on port[0] = 21 [ 98.540569][ T7480] IPVS: ftp: loaded support on port[0] = 21 [ 98.541816][ T7483] IPVS: ftp: loaded support on port[0] = 21 [ 98.548830][ T7482] IPVS: ftp: loaded support on port[0] = 21 executing program executing program executing program executing program executing program executing program [ 98.796756][ T7486] input: syz1 as /devices/virtual/input/input5 [ 98.803017][ T7490] input: syz1 as /devices/virtual/input/input8 [ 98.810601][ T7487] input: syz1 as /devices/virtual/input/input6 [ 98.823468][ T7489] input: syz1 as /devices/virtual/input/input7 [ 98.830541][ T7488] input: syz1 as /devices/virtual/input/input10 [ 98.836789][ T7494] input: syz1 as /devices/virtual/input/input9 executing program executing program executing program [ 98.929642][ T7501] input: syz1 as /devices/virtual/input/input11 [ 98.957046][ T7503] input: syz1 as /devices/virtual/input/input12 executing program [ 98.986414][ T7505] input: syz1 as /devices/virtual/input/input13 [ 99.048789][ T7507] input: syz1 as /devices/virtual/input/input14 executing program executing program executing program [ 99.156221][ T7509] input: syz1 as /devices/virtual/input/input15 [ 99.163112][ T7510] input: syz1 as /devices/virtual/input/input16 executing program [ 99.206106][ T7513] input: syz1 as /devices/virtual/input/input17 [ 99.225281][ T7515] input: syz1 as /devices/virtual/input/input18 executing program executing program executing program [ 99.304210][ T7517] input: syz1 as /devices/virtual/input/input19 [ 99.334223][ T7519] input: syz1 as /devices/virtual/input/input20 executing program [ 99.374709][ T7521] input: syz1 as /devices/virtual/input/input21 [ 99.414817][ T7523] input: syz1 as /devices/virtual/input/input22 executing program [ 99.464511][ T7525] input: syz1 as /devices/virtual/input/input23 executing program [ 99.505057][ T7527] input: syz1 as /devices/virtual/input/input24 executing program executing program executing program [ 99.594078][ T7529] input: syz1 as /devices/virtual/input/input25 [ 99.601787][ T7530] input: syz1 as /devices/virtual/input/input26 [ 99.637051][ T7533] input: syz1 as /devices/virtual/input/input27 executing program executing program executing program [ 99.703210][ T7535] input: syz1 as /devices/virtual/input/input28 [ 99.718705][ T7537] input: syz1 as /devices/virtual/input/input29 executing program [ 99.766438][ T7539] input: syz1 as /devices/virtual/input/input30 executing program [ 99.815572][ T7541] input: syz1 as /devices/virtual/input/input31 executing program [ 99.865237][ T7543] input: syz1 as /devices/virtual/input/input32 [ 99.913863][ T7545] input: syz1 as /devices/virtual/input/input33 executing program executing program [ 99.997122][ T7547] input: syz1 as /devices/virtual/input/input34 executing program [ 100.045220][ T7549] input: syz1 as /devices/virtual/input/input35 executing program executing program [ 100.096857][ T7551] input: syz1 as /devices/virtual/input/input36 [ 100.132846][ T7553] input: syz1 as /devices/virtual/input/input37 executing program executing program [ 100.174106][ T7555] input: syz1 as /devices/virtual/input/input38 [ 100.196284][ T7557] input: syz1 as /devices/virtual/input/input39 executing program [ 100.224274][ T7559] input: syz1 as /devices/virtual/input/input40 executing program [ 100.278604][ T7561] input: syz1 as /devices/virtual/input/input41 executing program [ 100.327472][ T7563] input: syz1 as /devices/virtual/input/input42 executing program executing program [ 100.378056][ T7565] input: syz1 as /devices/virtual/input/input43 [ 100.415340][ T7567] input: syz1 as /devices/virtual/input/input44 [ 100.459557][ T7569] input: syz1 as /devices/virtual/input/input45 executing program executing program executing program executing program [ 100.547326][ T7571] input: syz1 as /devices/virtual/input/input46 [ 100.559958][ T7572] input: syz1 as /devices/virtual/input/input47 [ 100.586022][ T7575] input: syz1 as /devices/virtual/input/input48 executing program [ 100.615430][ T7577] input: syz1 as /devices/virtual/input/input49 executing program [ 100.675778][ T7579] input: syz1 as /devices/virtual/input/input50 [ 100.717070][ T7581] input: syz1 as /devices/virtual/input/input51 executing program executing program [ 100.783283][ T7583] input: syz1 as /devices/virtual/input/input52 executing program executing program [ 100.835449][ T7585] input: syz1 as /devices/virtual/input/input53 [ 100.866416][ T7587] input: syz1 as /devices/virtual/input/input54 executing program [ 100.904731][ T7589] input: syz1 as /devices/virtual/input/input55 [ 100.944432][ T7591] input: syz1 as /devices/virtual/input/input56 executing program executing program [ 100.995911][ T7593] input: syz1 as /devices/virtual/input/input57 [ 101.046860][ T7595] input: syz1 as /devices/virtual/input/input58 executing program executing program [ 101.134653][ T7597] input: syz1 as /devices/virtual/input/input59 [ 101.164646][ T7599] input: syz1 as /devices/virtual/input/input60 executing program executing program [ 101.214148][ T7601] input: syz1 as /devices/virtual/input/input61 executing program executing program [ 101.255857][ T7603] input: syz1 as /devices/virtual/input/input62 [ 101.285540][ T7605] input: syz1 as /devices/virtual/input/input63 [ 101.326376][ T7607] input: syz1 as /devices/virtual/input/input64 executing program executing program [ 101.404746][ T7609] input: syz1 as /devices/virtual/input/input65 [ 101.424903][ T7611] input: syz1 as /devices/virtual/input/input66 executing program [ 101.490163][ T7613] input: syz1 as /devices/virtual/input/input67 executing program executing program executing program [ 101.589944][ T7616] input: syz1 as /devices/virtual/input/input68 [ 101.600008][ T7615] input: syz1 as /devices/virtual/input/input69 [ 101.626635][ T7619] input: syz1 as /devices/virtual/input/input70 executing program executing program [ 101.714198][ T7621] input: syz1 as /devices/virtual/input/input71 [ 101.721941][ T7622] input: syz1 as /devices/virtual/input/input72 executing program executing program executing program [ 101.795063][ T7625] input: syz1 as /devices/virtual/input/input73 [ 101.825235][ T7627] input: syz1 as /devices/virtual/input/input74 executing program [ 101.865017][ T7629] input: syz1 as /devices/virtual/input/input75 executing program executing program [ 101.906700][ T7631] input: syz1 as /devices/virtual/input/input76 [ 101.944407][ T7633] input: syz1 as /devices/virtual/input/input77 [ 101.987976][ T7635] input: syz1 as /devices/virtual/input/input78 executing program executing program [ 102.064322][ T7637] input: syz1 as /devices/virtual/input/input79 [ 102.097711][ T7639] input: syz1 as /devices/virtual/input/input80 executing program [ 102.154916][ T7641] input: syz1 as /devices/virtual/input/input81 executing program executing program executing program [ 102.234006][ T7643] input: syz1 as /devices/virtual/input/input82 [ 102.255151][ T7645] input: syz1 as /devices/virtual/input/input83 executing program [ 102.284889][ T7647] input: syz1 as /devices/virtual/input/input84 [ 102.305932][ T7649] input: syz1 as /devices/virtual/input/input85 executing program executing program executing program [ 102.395069][ T7651] input: syz1 as /devices/virtual/input/input86 [ 102.412309][ T7652] input: syz1 as /devices/virtual/input/input87 executing program executing program [ 102.444742][ T7655] input: syz1 as /devices/virtual/input/input88 [ 102.469277][ T7657] input: syz1 as /devices/virtual/input/input89 executing program [ 102.517826][ T7659] input: syz1 as /devices/virtual/input/input90 [ 102.574803][ T7661] input: syz1 as /devices/virtual/input/input91 executing program executing program executing program [ 102.665221][ T7663] input: syz1 as /devices/virtual/input/input92 [ 102.695075][ T7665] input: syz1 as /devices/virtual/input/input93 [ 102.740106][ T7667] input: syz1 as /devices/virtual/input/input94 executing program executing program [ 102.794525][ T7669] input: syz1 as /devices/virtual/input/input95 [ 102.835737][ T7671] input: syz1 as /devices/virtual/input/input96 executing program [ 102.884427][ T7673] input: syz1 as /devices/virtual/input/input97 executing program executing program executing program [ 102.964009][ T7675] input: syz1 as /devices/virtual/input/input98 [ 102.985777][ T7677] input: syz1 as /devices/virtual/input/input99 [ 103.036386][ T7679] input: syz1 as /devices/virtual/input/input100 executing program executing program executing program executing program [ 103.134767][ T7681] input: syz1 as /devices/virtual/input/input101 [ 103.157632][ T7683] input: syz1 as /devices/virtual/input/input102 [ 103.169786][ T7684] input: syz1 as /devices/virtual/input/input103 executing program [ 103.215787][ T7687] input: syz1 as /devices/virtual/input/input104 executing program [ 103.257786][ T7689] input: syz1 as /devices/virtual/input/input105 executing program executing program [ 103.315080][ T7691] input: syz1 as /devices/virtual/input/input106 [ 103.346447][ T7693] input: syz1 as /devices/virtual/input/input107 executing program executing program [ 103.379657][ T7695] input: syz1 as /devices/virtual/input/input108 [ 103.415646][ T7697] input: syz1 as /devices/virtual/input/input109 [ 103.454387][ T7699] input: syz1 as /devices/virtual/input/input110 executing program [ 103.505570][ T7701] input: syz1 as /devices/virtual/input/input111 executing program [ 103.573772][ T7703] input: syz1 as /devices/virtual/input/input112 [ 103.582373][ T7697] ------------[ cut here ]------------ [ 103.588149][ T7697] refcount_t: increment on 0; use-after-free. [ 103.588436][ T7697] WARNING: CPU: 1 PID: 7697 at lib/refcount.c:156 refcount_inc_checked+0x61/0x70 [ 103.596213][ T7699] kobject: 'event6' (00000000e9030140): kobject_uevent_env [ 103.603458][ T7697] Kernel panic - not syncing: panic_on_warn set ... [ 103.603474][ T7697] CPU: 1 PID: 7697 Comm: syz-executor872 Not tainted 5.1.0-rc6-next-20190426 #31 [ 103.603482][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 103.603488][ T7697] Call Trace: [ 103.603509][ T7697] dump_stack+0x172/0x1f0 [ 103.603533][ T7697] ? refcount_inc_not_zero_checked+0x170/0x200 [ 103.603553][ T7697] panic+0x2cb/0x75a [ 103.611949][ T7695] kobject: '(null)' (00000000674a0f34): calling ktype release [ 103.617314][ T7697] ? __warn_printk+0xf3/0xf3 [ 103.617335][ T7697] ? refcount_inc_checked+0x61/0x70 [ 103.617357][ T7697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 103.617370][ T7697] ? __warn.cold+0x5/0x47 [ 103.681724][ T7697] ? __warn+0xe8/0x1d0 [ 103.685794][ T7697] ? refcount_inc_checked+0x61/0x70 [ 103.690976][ T7697] __warn.cold+0x20/0x47 [ 103.695201][ T7697] ? refcount_inc_checked+0x61/0x70 [ 103.700381][ T7697] report_bug+0x263/0x2b0 [ 103.704701][ T7697] do_error_trap+0x11b/0x200 [ 103.709275][ T7697] do_invalid_op+0x37/0x50 [ 103.713672][ T7697] ? refcount_inc_checked+0x61/0x70 [ 103.718854][ T7697] invalid_op+0x14/0x20 [ 103.723002][ T7697] RIP: 0010:refcount_inc_checked+0x61/0x70 [ 103.728789][ T7697] Code: 1d 5c 80 27 06 31 ff 89 de e8 6b 69 3c fe 84 db 75 dd e8 22 68 3c fe 48 c7 c7 40 2a a2 87 c6 05 3c 80 27 06 01 e8 9d 8b 0e fe <0f> 0b eb c1 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 [ 103.748378][ T7697] RSP: 0018:ffff88808f84f8b8 EFLAGS: 00010282 [ 103.754425][ T7697] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 103.762379][ T7697] RDX: 0000000000000000 RSI: ffffffff815b4656 RDI: ffffed1011f09f09 [ 103.770330][ T7697] RBP: ffff88808f84f8c8 R08: ffff88809934a440 R09: ffff88809934ace0 [ 103.778283][ T7697] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888095a1bbb8 [ 103.786235][ T7697] R13: 0000000000000000 R14: ffff8880892c8a80 R15: ffff88809f8b8ed0 [ 103.794205][ T7697] ? vprintk_func+0x86/0x189 [ 103.798785][ T7697] ? refcount_inc_checked+0x61/0x70 [ 103.803980][ T7697] kobject_get+0x66/0xc0 [ 103.808206][ T7697] cdev_get+0x60/0xb0 [ 103.812170][ T7697] chrdev_open+0xb0/0x6b0 [ 103.816484][ T7697] ? cdev_put.part.0+0x50/0x50 [ 103.821236][ T7697] ? security_file_open+0x8d/0x300 [ 103.826329][ T7697] do_dentry_open+0x4e2/0x1250 [ 103.831074][ T7697] ? kasan_check_read+0x11/0x20 [ 103.835913][ T7697] ? cdev_put.part.0+0x50/0x50 [ 103.840661][ T7697] ? chown_common+0x5c0/0x5c0 [ 103.845322][ T7697] ? inode_permission+0xb4/0x570 [ 103.850247][ T7697] vfs_open+0xa0/0xd0 [ 103.854210][ T7697] path_openat+0x10e9/0x46e0 [ 103.858781][ T7697] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 103.864563][ T7697] ? kasan_slab_alloc+0xf/0x20 [ 103.869306][ T7697] ? kmem_cache_alloc+0x11a/0x6f0 [ 103.874308][ T7697] ? getname_flags+0xd6/0x5b0 [ 103.878963][ T7697] ? getname+0x1a/0x20 [ 103.883013][ T7697] ? do_sys_open+0x2c9/0x5d0 [ 103.887592][ T7697] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 103.892950][ T7697] ? __alloc_fd+0x44d/0x560 [ 103.897436][ T7697] do_filp_open+0x1a1/0x280 [ 103.901926][ T7697] ? may_open_dev+0x100/0x100 [ 103.906601][ T7697] ? kasan_check_read+0x11/0x20 [ 103.911437][ T7697] ? do_raw_spin_unlock+0x57/0x270 [ 103.916530][ T7697] ? _raw_spin_unlock+0x2d/0x50 [ 103.921362][ T7697] ? __alloc_fd+0x44d/0x560 [ 103.925858][ T7697] do_sys_open+0x3fe/0x5d0 [ 103.930258][ T7697] ? filp_open+0x80/0x80 [ 103.934491][ T7697] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 103.939933][ T7697] ? do_syscall_64+0x26/0x670 [ 103.944589][ T7697] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 103.951651][ T7697] ? do_syscall_64+0x26/0x670 [ 103.956319][ T7697] __x64_sys_open+0x7e/0xc0 [ 103.960808][ T7697] do_syscall_64+0x103/0x670 [ 103.965384][ T7697] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 103.971261][ T7697] RIP: 0033:0x402e80 [ 103.975137][ T7697] Code: 48 83 c4 08 48 3d 01 f0 ff ff 0f 83 3a 0e 00 00 c3 66 0f 1f 84 00 00 00 00 00 83 3d 6d fa 2d 00 00 75 14 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 14 0e 00 00 c3 48 83 ec 08 e8 7a 03 00 00 [ 103.994724][ T7697] RSP: 002b:00007ffc1c7e3458 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 104.003116][ T7697] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000402e80 [ 104.011081][ T7697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffc1c7e3470 [ 104.019033][ T7697] RBP: 0000000000000000 R08: 000000000000000f R09: 00000000000003e8 [ 104.026983][ T7697] R10: 00000000000003e8 R11: 0000000000000246 R12: 0000000000000011 [ 104.034934][ T7697] R13: 00000000004aac70 R14: 0000000000000000 R15: 0000000000000000 [ 104.044591][ T7697] Kernel Offset: disabled [ 104.049016][ T7697] Rebooting in 86400 seconds..