[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.016671] random: sshd: uninitialized urandom read (32 bytes read) [ 33.498030] kauditd_printk_skb: 9 callbacks suppressed [ 33.498038] audit: type=1400 audit(1568979705.438:35): avc: denied { map } for pid=6772 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 33.538196] random: sshd: uninitialized urandom read (32 bytes read) [ 34.103456] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.207' (ECDSA) to the list of known hosts. [ 40.737872] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/20 11:41:52 fuzzer started [ 40.933194] audit: type=1400 audit(1568979712.878:36): avc: denied { map } for pid=6782 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 41.855846] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/20 11:41:54 dialing manager at 10.128.0.105:35365 2019/09/20 11:41:54 syscalls: 2472 2019/09/20 11:41:54 code coverage: enabled 2019/09/20 11:41:54 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/20 11:41:54 extra coverage: extra coverage is not supported by the kernel 2019/09/20 11:41:54 setuid sandbox: enabled 2019/09/20 11:41:54 namespace sandbox: enabled 2019/09/20 11:41:54 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/20 11:41:54 fault injection: enabled 2019/09/20 11:41:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/20 11:41:54 net packet injection: enabled 2019/09/20 11:41:54 net device setup: enabled [ 43.749655] random: crng init done 11:43:14 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000000040)={0x20071026, r1}, &(0x7f0000000080)) 11:43:14 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="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", 0x12a}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 11:43:14 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="a4ab12f728db4b2b2f2f3ff7ad273b1e89e46f905090af4c90ccb170e60b3a8bf574b763e3062d037dca291318d0a17270bbce74b47888318b04aeb0747555ba16ea10e6ddb915ceb6397e514f3494fcf78a4d8b2c4f5c89d0e574092c82ca3c22e31ebc6da732ee3d854a1d3b9b3c0875a22cf550250fc7204eaa3d026ef9d3f316f9fb6e05b4eb24d9694ae300003e10ff44910738fe2229aad8dc604bb8c133e8382f58", 0xa5}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 11:43:14 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000540)=@req={0x0, 0x401}, 0x10) 11:43:14 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="a4ab12f728db4b2b2f2f3ff7ad273b1e89e46f905090af4c90ccb170e60b3a8bf574b763e3062d037dca291318d0a17270bbce74b47888318b04aeb0747555ba16ea10e6ddb915ceb6397e514f3494fcf78a4d8b2c4f5c89d0e574092c82ca3c22e31ebc6da732ee3d854a1d3b9b3c0875a22cf550250fc7204eaa3d026ef9d3f316f9fb6e05b4eb24d9694ae300003e10ff44910738fe2229aad8dc604bb8c133e8382f58f1bd2aa7f74ae6338331", 0xaf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 11:43:14 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="a4ab12f728db4b2b2f2f3ff7ad273b1e89e46f905090af4c90ccb170e60b3a8bf574b763e3062d037dca291318d0a17270bbce74b47888318b04aeb0747555ba16ea10e6ddb915ceb6397e514f3494fcf78a4d8b2c4f5c89d0", 0x59}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) [ 122.528146] audit: type=1400 audit(1568979794.468:37): avc: denied { map } for pid=6800 comm="syz-executor.3" path="/sys/kernel/debug/kcov" dev="debugfs" ino=27 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 122.632210] IPVS: ftp: loaded support on port[0] = 21 [ 123.467429] chnl_net:caif_netlink_parms(): no params data found [ 123.482018] IPVS: ftp: loaded support on port[0] = 21 [ 123.503883] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.510494] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.517324] device bridge_slave_0 entered promiscuous mode [ 123.523996] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.530715] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.537966] device bridge_slave_1 entered promiscuous mode [ 123.556873] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 123.566545] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 123.589888] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 123.596988] team0: Port device team_slave_0 added [ 123.603883] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 123.610902] team0: Port device team_slave_1 added [ 123.617680] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 123.626483] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 123.642985] IPVS: ftp: loaded support on port[0] = 21 [ 123.692799] device hsr_slave_0 entered promiscuous mode [ 123.730261] device hsr_slave_1 entered promiscuous mode [ 123.770505] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 123.783349] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 123.830114] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.836507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.843255] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.849580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.872639] IPVS: ftp: loaded support on port[0] = 21 [ 123.880961] chnl_net:caif_netlink_parms(): no params data found [ 123.956730] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.963186] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.969954] device bridge_slave_0 entered promiscuous mode [ 123.978193] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.984668] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.991954] device bridge_slave_1 entered promiscuous mode [ 124.015966] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 124.023649] chnl_net:caif_netlink_parms(): no params data found [ 124.038179] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 124.058352] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 124.065760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.082894] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.089876] team0: Port device team_slave_0 added [ 124.112695] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 124.119019] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.126327] team0: Port device team_slave_1 added [ 124.131580] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.137910] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.145352] device bridge_slave_0 entered promiscuous mode [ 124.145802] IPVS: ftp: loaded support on port[0] = 21 [ 124.156655] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.163356] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.171245] device bridge_slave_1 entered promiscuous mode [ 124.184149] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 124.203538] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 124.211523] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 124.219201] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 124.227455] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 124.233664] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.239663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.247350] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.264296] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.302596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.310309] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.316633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.351822] device hsr_slave_0 entered promiscuous mode [ 124.390266] device hsr_slave_1 entered promiscuous mode [ 124.432532] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 124.443305] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.450527] team0: Port device team_slave_0 added [ 124.457875] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.465162] team0: Port device team_slave_1 added [ 124.470999] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 124.478123] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 124.495842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.503830] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.510211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.517900] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 124.530502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 124.538785] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 124.589614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.662809] device hsr_slave_0 entered promiscuous mode [ 124.730204] device hsr_slave_1 entered promiscuous mode [ 124.781792] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 124.789049] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 124.805788] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 124.812917] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 124.820116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.830818] chnl_net:caif_netlink_parms(): no params data found [ 124.842945] IPVS: ftp: loaded support on port[0] = 21 [ 124.861466] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 124.871404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.878946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.886890] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.930870] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 124.943364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.950961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.959278] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 124.985255] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 125.006684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.014508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.027006] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 125.035162] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.045333] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 125.051701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.066353] chnl_net:caif_netlink_parms(): no params data found [ 125.074862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.084017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.097768] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 125.119741] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.126885] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.133859] device bridge_slave_0 entered promiscuous mode [ 125.148784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.157562] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.164096] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.171352] device bridge_slave_1 entered promiscuous mode [ 125.183392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.206652] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 125.239195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.248968] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 125.258288] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 125.264458] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.271575] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 125.318723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.325896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.335640] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 125.349465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 125.361454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.369076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.376988] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.383383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.391149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.398091] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.405416] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.412810] device bridge_slave_0 entered promiscuous mode [ 125.427172] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 125.436686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 125.446697] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 125.454886] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 125.465259] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.471743] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.478819] device bridge_slave_1 entered promiscuous mode [ 125.486191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.494042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.501762] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.508107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.517277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.525478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.532614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.540903] chnl_net:caif_netlink_parms(): no params data found [ 125.551485] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 125.557545] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.564242] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready 11:43:17 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000800)}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x100000002, 0x0, 0x0, &(0x7f0000000800)}) [ 125.573569] team0: Port device team_slave_0 added [ 125.580779] ptrace attach of "/root/syz-executor.1"[6836] was attempted by "/root/syz-executor.1"[6837] [ 125.606648] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 11:43:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070") connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) [ 125.627359] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 125.635624] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 125.643742] team0: Port device team_slave_1 added [ 125.648746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.656487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.664179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.671771] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.678088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.685993] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 125.696481] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 125.706326] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 125.714288] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.721573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.728453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.736645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.744231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.752249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.759702] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.766056] bridge0: port 2(bridge_slave_1) entered forwarding state 11:43:17 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000800)}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x100000002, 0x0, 0x0, &(0x7f0000000800)}) [ 125.772991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.780674] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 125.805900] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 125.817244] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 11:43:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070") sendto$inet(r0, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) [ 125.846260] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 125.857167] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.865054] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.877344] device bridge_slave_0 entered promiscuous mode [ 125.884136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.893871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.901647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.911055] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 125.972335] device hsr_slave_0 entered promiscuous mode [ 126.010255] device hsr_slave_1 entered promiscuous mode [ 126.050708] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.057101] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.064478] device bridge_slave_1 entered promiscuous mode [ 126.077052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.084631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.094492] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 11:43:18 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x52, 0x20000800, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x4) write$FUSE_INTERRUPT(r0, &(0x7f0000000140)={0xfffffffffffffeb3}, 0xffffff7b) [ 126.101585] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 126.108565] team0: Port device team_slave_0 added [ 126.114167] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 126.121214] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 126.135559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.143164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.158374] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 126.164853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.177874] kasan: CONFIG_KASAN_INLINE enabled [ 126.182869] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 126.186252] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 126.194174] team0: Port device team_slave_1 added [ 126.197195] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 126.204665] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 126.207956] Modules linked in: [ 126.216567] kobject: 'bonding_slave' (ffff88808e7edcd8): kobject_add_internal: parent: 'bond_slave_0', set: '' [ 126.217866] CPU: 1 PID: 6856 Comm: syz-executor.1 Not tainted 4.14.145 #0 [ 126.229536] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 126.235395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 126.235401] task: ffff888063cd0700 task.stack: ffff888063cd8000 [ 126.235416] RIP: 0010:tcp_sendmsg_locked+0x50e/0x3200 [ 126.235421] RSP: 0018:ffff888063cdf9b0 EFLAGS: 00010206 [ 126.235430] RAX: 0000000000000012 RBX: 0000000000000000 RCX: ffffc9000784a000 [ 126.249681] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 126.252271] RDX: 00000000000000fe RSI: ffffffff85240e44 RDI: 0000000000000090 [ 126.252277] RBP: ffff888063cdfb48 R08: 0000000000000001 R09: ffff888063cd0fa0 [ 126.252281] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 126.252286] R13: ffff888098790c80 R14: ffff888063cdfc28 R15: ffff8880661cc000 [ 126.252292] FS: 00007f4b45986700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 126.252299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.277266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.282337] CR2: 0000000000d93ad0 CR3: 00000000a9903000 CR4: 00000000001406e0 [ 126.282344] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 126.282349] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 126.282352] Call Trace: [ 126.282368] ? trace_hardirqs_on+0x10/0x10 [ 126.282380] ? lock_sock_nested+0x9e/0x110 [ 126.282388] ? find_held_lock+0x35/0x130 [ 126.282400] ? tcp_sendpage+0x60/0x60 [ 126.282410] ? trace_hardirqs_on_caller+0x400/0x590 [ 126.293072] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 126.296942] ? trace_hardirqs_on+0xd/0x10 [ 126.305804] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 126.311461] tcp_sendmsg+0x30/0x50 [ 126.311471] inet_sendmsg+0x122/0x500 [ 126.311480] ? inet_recvmsg+0x500/0x500 [ 126.311488] sock_sendmsg+0xce/0x110 [ 126.311498] sock_write_iter+0x21d/0x390 [ 126.321921] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 126.325574] ? sock_sendmsg+0x110/0x110 [ 126.332812] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.338688] ? iov_iter_init+0xaf/0x1d0 [ 126.347664] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 126.353185] __vfs_write+0x4a7/0x6b0 [ 126.353195] ? selinux_file_open+0x420/0x420 [ 126.353205] ? kernel_read+0x120/0x120 [ 126.353218] ? rw_verify_area+0xea/0x2b0 [ 126.353226] vfs_write+0x198/0x500 [ 126.353238] SyS_write+0xfd/0x230 [ 126.359452] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 126.360016] ? SyS_read+0x230/0x230 [ 126.360026] ? do_syscall_64+0x53/0x640 [ 126.360040] ? SyS_read+0x230/0x230 [ 126.360050] do_syscall_64+0x1e8/0x640 [ 126.360058] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 126.360071] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 126.365844] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 126.368328] RIP: 0033:0x459a09 [ 126.376559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 126.377099] RSP: 002b:00007f4b45985c78 EFLAGS: 00000246 [ 126.384744] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 126.387259] ORIG_RAX: 0000000000000001 [ 126.396412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 126.396814] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a09 [ 126.405028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.408239] RDX: 00000000ffffff7b RSI: 0000000020000140 RDI: 0000000000000003 [ 126.413911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.418311] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 126.422807] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 126.428129] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b459866d4 [ 126.438165] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 126.438983] R13: 00000000004c9465 R14: 00000000004e0940 R15: 00000000ffffffff [ 126.445820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.447076] Code: [ 126.452608] kobject: 'vlan0' (ffff888082c68800): kobject_add_internal: parent: 'mesh', set: '' [ 126.454979] d4 38 fc 4d 85 ed 0f 84 40 08 00 00 e8 ac d4 38 fc 8b 85 78 ff ff ff 48 8d bb 90 00 00 00 89 85 50 ff ff ff 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 06 0f 8e 4a 25 00 00 f6 83 90 00 00 00 [ 126.636652] RIP: tcp_sendmsg_locked+0x50e/0x3200 RSP: ffff888063cdf9b0 [ 126.643525] protocol 88fb is buggy, dev hsr_slave_0 [ 126.648552] protocol 88fb is buggy, dev hsr_slave_1 [ 126.654149] ---[ end trace 395261f663adb071 ]--- [ 126.659245] Kernel panic - not syncing: Fatal exception [ 126.665909] Kernel Offset: disabled [ 126.669564] Rebooting in 86400 seconds..