[ 38.945665] audit: type=1800 audit(1575092401.858:31): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [ 38.995058] audit: type=1800 audit(1575092401.858:32): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.247' (ECDSA) to the list of known hosts. 2019/11/30 05:40:32 parsed 1 programs syzkaller login: [ 69.920511] kauditd_printk_skb: 3 callbacks suppressed [ 69.920527] audit: type=1400 audit(1575092432.898:36): avc: denied { map } for pid=7631 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 71.619997] audit: type=1400 audit(1575092434.598:37): avc: denied { map } for pid=7631 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1110 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/11/30 05:40:35 executed programs: 0 [ 72.336150] IPVS: ftp: loaded support on port[0] = 21 [ 72.351402] IPVS: ftp: loaded support on port[0] = 21 [ 72.354270] IPVS: ftp: loaded support on port[0] = 21 [ 72.377836] IPVS: ftp: loaded support on port[0] = 21 [ 72.377888] IPVS: ftp: loaded support on port[0] = 21 [ 72.394692] IPVS: ftp: loaded support on port[0] = 21 [ 72.621526] chnl_net:caif_netlink_parms(): no params data found [ 72.704247] chnl_net:caif_netlink_parms(): no params data found [ 72.723639] chnl_net:caif_netlink_parms(): no params data found [ 72.804811] chnl_net:caif_netlink_parms(): no params data found [ 72.834069] chnl_net:caif_netlink_parms(): no params data found [ 72.938377] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.946065] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.954190] device bridge_slave_0 entered promiscuous mode [ 72.964310] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.971236] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.978495] device bridge_slave_1 entered promiscuous mode [ 72.985623] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.992098] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.999161] device bridge_slave_0 entered promiscuous mode [ 73.005886] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.012849] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.020250] device bridge_slave_0 entered promiscuous mode [ 73.032434] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.038804] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.045900] device bridge_slave_1 entered promiscuous mode [ 73.068443] chnl_net:caif_netlink_parms(): no params data found [ 73.077147] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.084000] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.091533] device bridge_slave_1 entered promiscuous mode [ 73.109619] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.116139] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.125400] device bridge_slave_0 entered promiscuous mode [ 73.138507] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.145013] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.152486] device bridge_slave_1 entered promiscuous mode [ 73.168279] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.184679] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.195874] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.203787] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.212113] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.219145] device bridge_slave_0 entered promiscuous mode [ 73.232752] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.239136] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.247641] device bridge_slave_1 entered promiscuous mode [ 73.285215] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.304481] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.313727] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.324266] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.344702] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.354649] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.369016] team0: Port device team_slave_0 added [ 73.378097] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.394772] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.426584] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.435951] team0: Port device team_slave_0 added [ 73.441661] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.451575] team0: Port device team_slave_1 added [ 73.488527] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.500312] team0: Port device team_slave_1 added [ 73.505726] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 73.519119] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.528295] team0: Port device team_slave_0 added [ 73.534157] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.542652] team0: Port device team_slave_0 added [ 73.547880] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.554390] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.562013] device bridge_slave_0 entered promiscuous mode [ 73.568786] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 73.578654] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 73.586121] team0: Port device team_slave_0 added [ 73.591831] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 73.601876] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.609773] team0: Port device team_slave_1 added [ 73.615173] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.625001] team0: Port device team_slave_1 added [ 73.632071] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 73.639495] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.646553] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.654663] device bridge_slave_1 entered promiscuous mode [ 73.662390] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 73.670372] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 73.678028] team0: Port device team_slave_1 added [ 73.688722] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 73.696994] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 73.726244] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 73.739146] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 73.770457] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.812842] device hsr_slave_0 entered promiscuous mode [ 73.869674] device hsr_slave_1 entered promiscuous mode [ 73.982430] device hsr_slave_0 entered promiscuous mode [ 74.049869] device hsr_slave_1 entered promiscuous mode [ 74.089973] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.097347] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 74.151314] device hsr_slave_0 entered promiscuous mode [ 74.189911] device hsr_slave_1 entered promiscuous mode [ 74.250816] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 74.261216] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 74.268357] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 74.279574] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 74.351410] device hsr_slave_0 entered promiscuous mode [ 74.409988] device hsr_slave_1 entered promiscuous mode [ 74.484074] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 74.491239] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 74.542188] device hsr_slave_0 entered promiscuous mode [ 74.572761] device hsr_slave_1 entered promiscuous mode [ 74.610170] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 74.633012] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 74.645029] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 74.653326] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 74.661947] team0: Port device team_slave_0 added [ 74.669951] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 74.676528] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.683935] team0: Port device team_slave_1 added [ 74.691017] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 74.698585] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 74.707629] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 74.728820] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 74.749077] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 74.802642] device hsr_slave_0 entered promiscuous mode [ 74.839903] device hsr_slave_1 entered promiscuous mode [ 74.911146] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 74.925710] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 74.934333] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 74.945028] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 74.985421] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 75.032875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.043696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.071866] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.090228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.098264] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.114643] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.124504] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.132310] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.148774] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.156010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.164820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.172322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.179432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.186501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.193953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.204182] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 75.210655] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.221531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.228828] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 75.235068] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.244174] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 75.250862] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.271276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.279704] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.289016] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.300264] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.311155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.323450] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.330252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.338067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.346665] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.353230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.360569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.368346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.376398] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.382801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.389959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.397677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.405380] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.411737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.418564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.429172] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.443415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.450544] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.461772] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.475022] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 75.483875] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.490968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.498193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.510466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.518513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.528791] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.535225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.543262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.551325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.559415] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.565783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.573075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.581309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.589076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.597760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.605710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.614931] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.626173] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.635415] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.644525] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.655609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.663494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.670887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.679144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.687682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.695570] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.702001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.711135] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.721034] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 75.727136] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.735299] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.745261] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 75.755651] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 75.767733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.775093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.782260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.789173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.796596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.804821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.812899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.820810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.830450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.839171] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 75.849564] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.856834] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 75.863070] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.871433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.882512] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 75.891853] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.900573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.908598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.917061] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.923565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.931536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.939639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.947955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.955666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.963565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.974431] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.985660] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.998491] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.006826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.016222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.024997] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.031446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.039031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.047296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.056304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.064135] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.070523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.077613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.088030] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.096119] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 76.103604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.113899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.124118] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.135317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.144358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.152484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.160684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.168880] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.175316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.182528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.191256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.198466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.216119] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 76.224644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.234274] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.247681] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 76.257800] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.270636] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 76.280473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.288430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.296653] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.303077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.310871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.319169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.327006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.334967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.343092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.350882] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.357213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.364224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.371065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.378418] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.387558] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.399121] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.411209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.423529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.431230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.439088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.447917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.456330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.464266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.474172] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.484069] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 76.494623] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 76.503512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.514050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.522273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.530378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.537963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.546355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.554582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.563117] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.574980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 76.585454] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 76.594150] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 76.607455] audit: type=1400 audit(1575092439.578:38): avc: denied { associate } for pid=7661 comm="syz-executor.5" name="syz5" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 76.608621] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.645720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.654848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.667141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.681984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.689928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.697538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.705629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.713565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.721929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.729916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.738802] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.747914] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 76.754755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.763861] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.778306] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 76.787963] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 76.801111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.808909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.820908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.828618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.837411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.846136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.862225] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.875700] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.887687] input: s as /devices/virtual/input/input5 [ 76.900377] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 76.908440] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 76.917965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.927613] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 76.937044] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.947764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.960965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.968537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.979525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.987114] input: s as /devices/virtual/input/input6 [ 76.987400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.001096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.011795] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 77.022029] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 77.034671] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 77.042096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.062164] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 77.072232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.093808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.102090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.114909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.123726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.137371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.150221] input: s as /devices/virtual/input/input7 [ 77.165044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 77.178062] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 77.193181] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 77.209443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.217277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.230723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.238624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.256339] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 77.275313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.285555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.300381] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 77.324759] input: s as /devices/virtual/input/input9 [ 77.327197] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 77.338638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.351569] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 77.361033] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 77.375289] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 77.385921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.396562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.404473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.414915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 2019/11/30 05:40:40 executed programs: 8 [ 77.425043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.461601] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 77.471793] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 77.479559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.486381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.505565] input: s as /devices/virtual/input/input11 [ 77.528622] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 77.544853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.555735] input: s as /devices/virtual/input/input12 [ 77.589613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.599363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.606208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.674134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.690046] input: s as /devices/virtual/input/input14 [ 77.746924] input: s as /devices/virtual/input/input15 [ 77.795709] input: s as /devices/virtual/input/input16 [ 77.997026] input: s as /devices/virtual/input/input18 [ 78.028994] input: s as /devices/virtual/input/input19 [ 78.036626] input: s as /devices/virtual/input/input20 [ 78.047491] input: s as /devices/virtual/input/input21 [ 78.332495] input: s as /devices/virtual/input/input23 [ 78.339006] input: s as /devices/virtual/input/input25 [ 78.357136] input: s as /devices/virtual/input/input26 [ 78.385269] input: s as /devices/virtual/input/input27 [ 78.451435] input: s as /devices/virtual/input/input28 [ 78.524768] input: s as /devices/virtual/input/input29 [ 78.580654] input: s as /devices/virtual/input/input30 [ 78.630910] input: s as /devices/virtual/input/input31 [ 78.681544] input: s as /devices/virtual/input/input32 [ 78.743977] input: s as /devices/virtual/input/input34 [ 78.782282] input: s as /devices/virtual/input/input35 [ 78.791101] input: s as /devices/virtual/input/input36 [ 78.874179] input: s as /devices/virtual/input/input37 [ 78.883479] input: s as /devices/virtual/input/input38 [ 79.003990] input: s as /devices/virtual/input/input41 [ 79.068920] input: s as /devices/virtual/input/input42 [ 79.090648] input: s as /devices/virtual/input/input43 [ 79.146528] input: s as /devices/virtual/input/input44 [ 79.203135] input: s as /devices/virtual/input/input45 [ 79.231058] input: s as /devices/virtual/input/input46 [ 79.239163] input: s as /devices/virtual/input/input47 [ 79.381101] input: s as /devices/virtual/input/input49 [ 79.457535] input: s as /devices/virtual/input/input51 [ 79.500328] input: s as /devices/virtual/input/input52 [ 79.514320] input: s as /devices/virtual/input/input54 [ 79.559995] input: s as /devices/virtual/input/input55 [ 79.611278] input: s as /devices/virtual/input/input56 [ 79.682587] input: s as /devices/virtual/input/input57 [ 79.720784] input: s as /devices/virtual/input/input58 [ 79.806643] input: s as /devices/virtual/input/input59 [ 79.822753] input: s as /devices/virtual/input/input60 [ 79.861131] input: s as /devices/virtual/input/input61 [ 79.957499] input: s as /devices/virtual/input/input64 [ 79.964948] input: s as /devices/virtual/input/input65 [ 79.972021] input: s as /devices/virtual/input/input66 [ 80.071177] input: s as /devices/virtual/input/input68 [ 80.084265] input: s as /devices/virtual/input/input69 [ 80.174580] input: s as /devices/virtual/input/input70 [ 80.204496] input: s as /devices/virtual/input/input72 [ 80.230479] input: s as /devices/virtual/input/input73 [ 80.243713] input: s as /devices/virtual/input/input74 [ 80.261720] input: s as /devices/virtual/input/input75 [ 80.380949] input: s as /devices/virtual/input/input77 [ 80.402670] input: s as /devices/virtual/input/input78 [ 80.489914] input: s as /devices/virtual/input/input79 [ 80.500997] input: s as /devices/virtual/input/input80 [ 80.521966] ================================================================== [ 80.529618] BUG: KASAN: use-after-free in cdev_put.part.0+0x4c/0x50 [ 80.536082] Read of size 8 at addr ffff8880a4c4efb0 by task syz-executor.0/8021 [ 80.543553] [ 80.545184] CPU: 1 PID: 8021 Comm: syz-executor.0 Not tainted 4.19.86-syzkaller #0 [ 80.552874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.562306] Call Trace: [ 80.564894] dump_stack+0x197/0x210 [ 80.568512] ? cdev_put.part.0+0x4c/0x50 [ 80.572567] print_address_description.cold+0x7c/0x20d [ 80.577871] ? cdev_put.part.0+0x4c/0x50 [ 80.581921] kasan_report.cold+0x8c/0x2ba [ 80.586083] ? evdev_event+0xc0/0xc0 [ 80.589812] __asan_report_load8_noabort+0x14/0x20 [ 80.594751] cdev_put.part.0+0x4c/0x50 [ 80.598644] chrdev_open+0x2c1/0x6b0 [ 80.602379] ? cdev_put.part.0+0x50/0x50 [ 80.606469] ? security_file_open+0x16b/0x1b0 [ 80.610981] do_dentry_open+0x4c3/0x1210 [ 80.615048] ? kasan_check_read+0x11/0x20 [ 80.619206] ? cdev_put.part.0+0x50/0x50 [ 80.623286] ? chown_common+0x5c0/0x5c0 [ 80.627280] ? inode_permission+0xb4/0x560 [ 80.631588] vfs_open+0xa0/0xd0 [ 80.634875] path_openat+0x10d7/0x45e0 [ 80.638767] ? __lock_acquire+0x6ee/0x49c0 [ 80.643019] ? getname+0x1a/0x20 [ 80.646396] ? do_sys_open+0x2c9/0x550 [ 80.650309] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 80.655005] ? __alloc_fd+0x44d/0x560 [ 80.658826] do_filp_open+0x1a1/0x280 [ 80.662629] ? may_open_dev+0x100/0x100 [ 80.666619] ? do_raw_spin_unlock+0x178/0x270 [ 80.671107] ? _raw_spin_unlock+0x2d/0x50 [ 80.675281] ? __alloc_fd+0x44d/0x560 [ 80.679117] do_sys_open+0x3fe/0x550 [ 80.682858] ? filp_open+0x80/0x80 [ 80.686429] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 80.691192] ? do_syscall_64+0x26/0x620 [ 80.695176] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 80.700535] ? do_syscall_64+0x26/0x620 [ 80.704615] __x64_sys_open+0x7e/0xc0 [ 80.708471] do_syscall_64+0xfd/0x620 [ 80.712298] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 80.717524] RIP: 0033:0x414411 [ 80.720730] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 80.739748] RSP: 002b:00007f76b35597a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 80.747475] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000414411 [ 80.754883] RDX: 0000000000000000 RSI: 0100000000000000 RDI: 00007f76b3559850 [ 80.762421] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 80.769701] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f76b355a6d4 [ 80.776965] R13: 00000000004ca395 R14: 00000000004e2a10 R15: 00000000ffffffff [ 80.784249] [ 80.785890] Allocated by task 8001: [ 80.789540] save_stack+0x45/0xd0 [ 80.793027] kasan_kmalloc+0xce/0xf0 [ 80.796750] kmem_cache_alloc_trace+0x152/0x760 [ 80.801423] evdev_connect+0x83/0x4d0 [ 80.805237] input_attach_handler+0x1a0/0x210 [ 80.809774] input_register_device.cold+0xda/0x22b [ 80.814799] uinput_ioctl_handler.isra.0+0x1035/0x1c50 [ 80.820102] uinput_ioctl+0x4a/0x60 [ 80.823737] do_vfs_ioctl+0xd5f/0x1380 [ 80.827624] ksys_ioctl+0xab/0xd0 [ 80.831085] __x64_sys_ioctl+0x73/0xb0 [ 80.834997] do_syscall_64+0xfd/0x620 [ 80.838806] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 80.844298] [ 80.845923] Freed by task 8019: [ 80.849217] save_stack+0x45/0xd0 [ 80.852673] __kasan_slab_free+0x102/0x150 [ 80.856927] kasan_slab_free+0xe/0x10 [ 80.860742] kfree+0xcf/0x220 [ 80.863856] evdev_free+0x5e/0x70 [ 80.867301] device_release+0x7b/0x210 [ 80.871319] kobject_put.cold+0x289/0x2e6 [ 80.875486] cdev_default_release+0x41/0x50 [ 80.879844] kobject_put.cold+0x289/0x2e6 [ 80.884011] cdev_put.part.0+0x39/0x50 [ 80.887890] chrdev_open+0x2c1/0x6b0 [ 80.891607] do_dentry_open+0x4c3/0x1210 [ 80.895671] vfs_open+0xa0/0xd0 [ 80.898956] path_openat+0x10d7/0x45e0 [ 80.902837] do_filp_open+0x1a1/0x280 [ 80.906623] do_sys_open+0x3fe/0x550 [ 80.910325] __x64_sys_open+0x7e/0xc0 [ 80.914113] do_syscall_64+0xfd/0x620 [ 80.917904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 80.923088] [ 80.924728] The buggy address belongs to the object at ffff8880a4c4e9c0 [ 80.924728] which belongs to the cache kmalloc-2048 of size 2048 [ 80.937546] The buggy address is located 1520 bytes inside of [ 80.937546] 2048-byte region [ffff8880a4c4e9c0, ffff8880a4c4f1c0) [ 80.949588] The buggy address belongs to the page: [ 80.954512] page:ffffea0002931380 count:1 mapcount:0 mapping:ffff88812c31cc40 index:0x0 compound_mapcount: 0 [ 80.964471] flags: 0xfffe0000008100(slab|head) [ 80.969045] raw: 00fffe0000008100 ffffea0001fc7788 ffffea00029ab888 ffff88812c31cc40 [ 80.977003] raw: 0000000000000000 ffff8880a4c4e140 0000000100000003 0000000000000000 [ 80.984867] page dumped because: kasan: bad access detected [ 80.990559] [ 80.992170] Memory state around the buggy address: [ 80.997096] ffff8880a4c4ee80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.004444] ffff8880a4c4ef00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.011806] >ffff8880a4c4ef80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.019153] ^ [ 81.024070] ffff8880a4c4f000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.031415] ffff8880a4c4f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.038766] ================================================================== [ 81.046107] Disabling lock debugging due to kernel taint [ 81.055901] input: s as /devices/virtual/input/input82 [ 81.095965] input: s as /devices/virtual/input/input83 [ 81.110216] input: s as /devices/virtual/input/input84 [ 81.143709] Kernel panic - not syncing: panic_on_warn set ... [ 81.143709] [ 81.151498] CPU: 1 PID: 8021 Comm: syz-executor.0 Tainted: G B 4.19.86-syzkaller #0 [ 81.157201] kobject: 'event5' (00000000b1a1f2c7): kobject_uevent_env [ 81.160616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.160621] Call Trace: [ 81.160643] dump_stack+0x197/0x210 [ 81.160658] ? cdev_put.part.0+0x4c/0x50 [ 81.160668] panic+0x26a/0x50e [ 81.160678] ? __warn_printk+0xf3/0xf3 [ 81.160689] ? cdev_put.part.0+0x4c/0x50 [ 81.160701] ? preempt_schedule+0x4b/0x60 [ 81.160715] ? ___preempt_schedule+0x16/0x18 [ 81.160729] ? trace_hardirqs_on+0x5e/0x220 [ 81.160744] ? cdev_put.part.0+0x4c/0x50 [ 81.171092] kobject: 'event5' (00000000b1a1f2c7): fill_kobj_path: path = '/devices/virtual/input/input79/event5' [ 81.177288] kasan_end_report+0x47/0x4f [ 81.177300] kasan_report.cold+0xa9/0x2ba [ 81.177318] ? evdev_event+0xc0/0xc0 [ 81.183868] kobject: '(null)' (00000000365cf453): kobject_cleanup, parent 00000000b1a1f2c7 [ 81.187567] __asan_report_load8_noabort+0x14/0x20 [ 81.187579] cdev_put.part.0+0x4c/0x50 [ 81.187593] chrdev_open+0x2c1/0x6b0 [ 81.191874] kobject: '(null)' (00000000365cf453): calling ktype release [ 81.194692] ? cdev_put.part.0+0x50/0x50 [ 81.194711] ? security_file_open+0x16b/0x1b0 [ 81.274182] do_dentry_open+0x4c3/0x1210 [ 81.278240] ? kasan_check_read+0x11/0x20 [ 81.282390] ? cdev_put.part.0+0x50/0x50 [ 81.286545] ? chown_common+0x5c0/0x5c0 [ 81.290511] ? inode_permission+0xb4/0x560 [ 81.294734] vfs_open+0xa0/0xd0 [ 81.298008] path_openat+0x10d7/0x45e0 [ 81.301890] ? __lock_acquire+0x6ee/0x49c0 [ 81.306113] ? getname+0x1a/0x20 [ 81.309472] ? do_sys_open+0x2c9/0x550 [ 81.313356] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 81.318016] ? __alloc_fd+0x44d/0x560 [ 81.321806] do_filp_open+0x1a1/0x280 [ 81.325604] ? may_open_dev+0x100/0x100 [ 81.329579] ? do_raw_spin_unlock+0x178/0x270 [ 81.334069] ? _raw_spin_unlock+0x2d/0x50 [ 81.338214] ? __alloc_fd+0x44d/0x560 [ 81.342008] do_sys_open+0x3fe/0x550 [ 81.346076] ? filp_open+0x80/0x80 [ 81.349626] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 81.354382] ? do_syscall_64+0x26/0x620 [ 81.358407] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 81.363788] ? do_syscall_64+0x26/0x620 [ 81.367854] __x64_sys_open+0x7e/0xc0 [ 81.371652] do_syscall_64+0xfd/0x620 [ 81.375457] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 81.380645] RIP: 0033:0x414411 [ 81.383846] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 81.402754] RSP: 002b:00007f76b35597a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 81.410468] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000414411 [ 81.417735] RDX: 0000000000000000 RSI: 0100000000000000 RDI: 00007f76b3559850 [ 81.425081] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 81.432339] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f76b355a6d4 [ 81.439606] R13: 00000000004ca395 R14: 00000000004e2a10 R15: 00000000ffffffff [ 81.448265] Kernel Offset: disabled [ 81.451901] Rebooting in 86400 seconds..