[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 42.310266] random: sshd: uninitialized urandom read (32 bytes read) [ 42.587824] kauditd_printk_skb: 9 callbacks suppressed [ 42.587832] audit: type=1400 audit(1568988956.316:35): avc: denied { map } for pid=6866 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 42.645223] random: sshd: uninitialized urandom read (32 bytes read) [ 43.257277] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.10' (ECDSA) to the list of known hosts. [ 48.693852] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/20 14:16:02 fuzzer started [ 48.889171] audit: type=1400 audit(1568988962.616:36): avc: denied { map } for pid=6875 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 49.576461] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/20 14:16:04 dialing manager at 10.128.0.105:35365 2019/09/20 14:16:04 syscalls: 2472 2019/09/20 14:16:04 code coverage: enabled 2019/09/20 14:16:04 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/20 14:16:04 extra coverage: extra coverage is not supported by the kernel 2019/09/20 14:16:04 setuid sandbox: enabled 2019/09/20 14:16:04 namespace sandbox: enabled 2019/09/20 14:16:04 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/20 14:16:04 fault injection: enabled 2019/09/20 14:16:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/20 14:16:04 net packet injection: enabled 2019/09/20 14:16:04 net device setup: enabled [ 51.528119] random: crng init done [ 107.588073] audit: type=1400 audit(1568989021.316:37): avc: denied { map } for pid=6894 comm="sh" path="/bin/dash" dev="sda1" ino=1473 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 14:17:31 executing program 5: 14:17:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 14:17:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="a1"], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "2710045caa58013ae6d36e7a4dc9f129d305dc"}) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 14:17:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty, 0x9}, 0x1c, 0x0}, 0x0) 14:17:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "2710045caa58013ae6d36e7a4dc9f129d305dc"}) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 14:17:31 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="285474dae6baca58356ed2eb0000000085", 0x11) [ 138.184944] audit: type=1400 audit(1568989051.916:38): avc: denied { map } for pid=6875 comm="syz-fuzzer" path="/root/syzkaller-shm536053323" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 138.232659] audit: type=1400 audit(1568989051.926:39): avc: denied { map } for pid=6896 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=14 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 138.600964] IPVS: ftp: loaded support on port[0] = 21 [ 139.399242] IPVS: ftp: loaded support on port[0] = 21 [ 139.449591] chnl_net:caif_netlink_parms(): no params data found [ 139.495840] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.502829] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.510591] device bridge_slave_0 entered promiscuous mode [ 139.510822] IPVS: ftp: loaded support on port[0] = 21 [ 139.527830] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.534479] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.541649] device bridge_slave_1 entered promiscuous mode [ 139.583633] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 139.594082] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 139.614716] chnl_net:caif_netlink_parms(): no params data found [ 139.655014] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 139.662379] team0: Port device team_slave_0 added [ 139.675738] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 139.683266] team0: Port device team_slave_1 added [ 139.693669] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.701065] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.701857] IPVS: ftp: loaded support on port[0] = 21 [ 139.714453] device bridge_slave_0 entered promiscuous mode [ 139.721568] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 139.732114] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.738506] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.745920] device bridge_slave_1 entered promiscuous mode [ 139.753109] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 139.779976] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 139.832006] device hsr_slave_0 entered promiscuous mode [ 139.890363] device hsr_slave_1 entered promiscuous mode [ 139.973059] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 139.980643] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 139.988439] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 140.018465] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 140.025797] team0: Port device team_slave_0 added [ 140.032870] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 140.040001] team0: Port device team_slave_1 added [ 140.071885] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 140.085646] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 140.152085] device hsr_slave_0 entered promiscuous mode [ 140.190376] device hsr_slave_1 entered promiscuous mode [ 140.240945] chnl_net:caif_netlink_parms(): no params data found [ 140.251141] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 140.268715] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 140.280498] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.286931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.293859] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.300528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.312246] IPVS: ftp: loaded support on port[0] = 21 [ 140.332335] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.338982] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.346683] device bridge_slave_0 entered promiscuous mode [ 140.364073] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.371693] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.378977] device bridge_slave_1 entered promiscuous mode [ 140.397843] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.404271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.410871] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.417213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.454194] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 140.488551] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.506224] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.513556] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.520280] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.528658] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 140.549847] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 140.557503] team0: Port device team_slave_0 added [ 140.566438] chnl_net:caif_netlink_parms(): no params data found [ 140.584139] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 140.591987] team0: Port device team_slave_1 added [ 140.599146] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 140.623889] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 140.672360] device hsr_slave_0 entered promiscuous mode [ 140.730493] device hsr_slave_1 entered promiscuous mode [ 140.770773] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 140.799718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.811860] IPVS: ftp: loaded support on port[0] = 21 [ 140.832898] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 140.839628] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.846753] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.853838] device bridge_slave_0 entered promiscuous mode [ 140.863801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.870988] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 140.877500] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.884176] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.891957] device bridge_slave_1 entered promiscuous mode [ 140.912579] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 140.922932] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 140.952281] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 140.962750] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 140.968894] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.975895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.983385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.990746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.997722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.006169] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 141.013641] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 141.023168] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 141.051195] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 141.057474] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.073394] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 141.103652] chnl_net:caif_netlink_parms(): no params data found [ 141.118616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.127032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.135438] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.142104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.150842] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 141.159378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 141.170755] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 141.177911] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 141.185267] team0: Port device team_slave_0 added [ 141.194164] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 141.208454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.216889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.224692] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.231090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.237920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.246014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.253750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.261710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.269421] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.276108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.289372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.298391] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 141.309705] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 141.317950] team0: Port device team_slave_1 added [ 141.324262] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 141.331739] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 141.346183] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 141.354319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.362005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.369798] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.383266] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 141.417672] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 141.425995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.434079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.442221] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.448569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.455668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.463627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.472608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 141.523837] device hsr_slave_0 entered promiscuous mode [ 141.562805] device hsr_slave_1 entered promiscuous mode [ 141.601474] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 141.607852] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 141.615041] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 141.624138] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.631147] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.638208] device bridge_slave_0 entered promiscuous mode [ 141.647011] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.653634] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.662120] device bridge_slave_1 entered promiscuous mode [ 141.671885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 141.679371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.687179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.695005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.702259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.709704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.718862] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 141.725801] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.745795] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 141.755718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 141.765887] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 141.773739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.782710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.791093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.798991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.807095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.814926] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.821317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.836496] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 141.846048] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 141.853823] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 141.859861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.869116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.880378] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 141.902468] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 141.909704] team0: Port device team_slave_0 added [ 141.915708] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 141.923501] team0: Port device team_slave_1 added [ 141.936613] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 141.945987] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 141.955959] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 141.966005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.973907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.981948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.989786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.997517] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.005197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.014228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 142.023420] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 142.031237] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 142.041876] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 142.077605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.085805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.106369] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 142.116596] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 142.130686] chnl_net:caif_netlink_parms(): no params data found [ 142.182169] device hsr_slave_0 entered promiscuous mode [ 142.220540] device hsr_slave_1 entered promiscuous mode [ 142.290384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.297969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.305595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.317197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 142.325908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 142.339122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.346192] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 142.371403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.379030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.386805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.395581] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 142.402354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.415557] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 142.425005] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 142.436870] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 142.447149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.456049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.466254] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 142.477219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.493896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 142.502850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.511110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.521480] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 142.532635] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 142.548747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.557278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.577040] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 142.585263] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 14:17:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x19, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f008001fffffff00004000632f77", 0x0, 0x100, 0x6000000000000000}, 0x28) [ 142.606951] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.614324] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.622140] device bridge_slave_0 entered promiscuous mode [ 142.631689] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 142.641724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.648704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.657493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.665177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.677399] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 142.684003] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.701285] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 142.707344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.724466] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.731212] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.738828] device bridge_slave_1 entered promiscuous mode 14:17:36 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="008700003804000019000300e60100006c000000000000000100000001000000040000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) [ 142.754674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.764254] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 142.779288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.815404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.832862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.841752] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 142.845908] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.857278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.861436] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 142.871535] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 142.887691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.898530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.903253] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 142.910898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.915124] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 142.930417] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.935036] EXT4-fs (loop5): group descriptors corrupted! [ 142.941167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.947041] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 142.966147] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 142.974605] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 142.983339] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.003681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.016079] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 143.028706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 143.039415] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.056078] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 143.060632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.066118] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 143.080847] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 143.082005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.090496] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 143.101902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.105820] EXT4-fs (loop5): group descriptors corrupted! [ 143.122939] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 143.129196] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.136916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.144854] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 14:17:36 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) socket$inet6_sctp(0xa, 0x5, 0x84) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000280)) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0x3a9, &(0x7f0000000240)={&(0x7f0000000040)={'streebog256\x00\x8d\xff\xff\xff\x00'}}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, &(0x7f0000000200), &(0x7f00000013c0)) socket$inet6_sctp(0xa, 0x0, 0x84) [ 143.163190] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 143.176346] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 143.194004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.210707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.219622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.227592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.235675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.240035] hrtimer: interrupt took 30113 ns [ 143.244183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.256530] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.262969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.268809] could not allocate digest TFM handle streebog256 [ 143.270277] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 143.284851] team0: Port device team_slave_0 added [ 143.295737] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 143.309131] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.316945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.325174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.333159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.341260] could not allocate digest TFM handle streebog256 [ 143.348350] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 143.360412] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready 14:17:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x74) sendto$inet(r0, 0x0, 0x198, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="23ba99d38ba2fe656c54019027f2d9fe402856f3581f6845db55b5de3eb4c1337b112b90503772d286268282ea0fcd77bb26784c3ee38233df964fdd376792eb17eca23d099daf8ac2bcf727358b7b6eaf7314edec", 0xcf7bd7d0783d3371, 0x1, 0x0, 0x150) shutdown(r0, 0x1) [ 143.374199] team0: Port device team_slave_1 added [ 143.389431] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 143.397557] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 143.410100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.423402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.430596] kasan: CONFIG_KASAN_INLINE enabled [ 143.433402] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.441812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.452767] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 143.464528] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 143.470941] Modules linked in: [ 143.474158] CPU: 1 PID: 6970 Comm: syz-executor.5 Not tainted 4.14.145 #0 [ 143.481336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.490865] task: ffff888064acc040 task.stack: ffff888064ad0000 [ 143.497027] RIP: 0010:tcp_sendmsg_locked+0x50e/0x3200 [ 143.502984] RSP: 0018:ffff888064ad7aa8 EFLAGS: 00010206 [ 143.508635] RAX: 0000000000000012 RBX: 0000000000000000 RCX: ffffc90005e25000 [ 143.515924] RDX: 000000000000009d RSI: ffffffff85240e44 RDI: 0000000000000090 [ 143.523555] RBP: ffff888064ad7c40 R08: 0000000000000001 R09: ffff888064acc8e0 [ 143.530837] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 143.538492] R13: ffff888088d9d340 R14: ffff888064ad7d60 R15: ffff8880661d0a80 [ 143.547975] FS: 00007fc15a602700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 143.556332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.562267] CR2: 00007fffc2536cec CR3: 00000000a57e2000 CR4: 00000000001406e0 [ 143.569684] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 143.576959] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 143.584228] Call Trace: [ 143.586809] ? lock_sock_nested+0x9e/0x110 [ 143.591053] ? find_held_lock+0x35/0x130 [ 143.595217] ? tcp_sendpage+0x60/0x60 [ 143.599002] ? trace_hardirqs_on_caller+0x400/0x590 [ 143.604003] ? trace_hardirqs_on+0xd/0x10 [ 143.608148] tcp_sendmsg+0x30/0x50 [ 143.611672] inet_sendmsg+0x122/0x500 [ 143.615458] ? inet_recvmsg+0x500/0x500 [ 143.619596] sock_sendmsg+0xce/0x110 [ 143.623392] SYSC_sendto+0x206/0x310 [ 143.627094] ? SYSC_connect+0x2d0/0x2d0 [ 143.631158] ? kasan_check_read+0x11/0x20 [ 143.635386] ? _copy_to_user+0x87/0xd0 [ 143.639281] ? put_timespec64+0xb4/0x100 [ 143.643454] ? nsecs_to_jiffies+0x30/0x30 [ 143.647759] ? SyS_clock_gettime+0xf8/0x180 [ 143.652081] SyS_sendto+0x40/0x50 [ 143.655871] ? SyS_getpeername+0x30/0x30 [ 143.659964] do_syscall_64+0x1e8/0x640 [ 143.663873] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 143.668717] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 143.673919] RIP: 0033:0x459a09 [ 143.677112] RSP: 002b:00007fc15a601c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 143.685019] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459a09 [ 143.692712] RDX: cf7bd7d0783d3371 RSI: 0000000020000100 RDI: 0000000000000003 [ 143.700081] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000150 [ 143.707366] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fc15a6026d4 [ 143.714639] R13: 00000000004c79ac R14: 00000000004dd400 R15: 00000000ffffffff [ 143.721905] Code: d4 38 fc 4d 85 ed 0f 84 40 08 00 00 e8 ac d4 38 fc 8b 85 78 ff ff ff 48 8d bb 90 00 00 00 89 85 50 ff ff ff 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 06 0f 8e 4a 25 00 00 f6 83 90 00 00 00 [ 143.743088] RIP: tcp_sendmsg_locked+0x50e/0x3200 RSP: ffff888064ad7aa8 [ 143.755857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 143.761427] ---[ end trace 96e2f4146a54bc48 ]--- [ 143.767591] Kernel panic - not syncing: Fatal exception [ 143.769016] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 143.774798] Kernel Offset: disabled [ 143.785101] Rebooting in 86400 seconds..