[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 24.661853] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 25.023385] random: sshd: uninitialized urandom read (32 bytes read) [ 25.286186] random: sshd: uninitialized urandom read (32 bytes read) [ 25.914914] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 184.087710] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.15' (ECDSA) to the list of known hosts. [ 189.611740] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/09 17:22:33 parsed 1 programs [ 190.549270] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/09 17:22:34 executed programs: 0 [ 191.543390] IPVS: ftp: loaded support on port[0] = 21 [ 191.578116] IPVS: ftp: loaded support on port[0] = 21 [ 191.585623] IPVS: ftp: loaded support on port[0] = 21 [ 191.596510] IPVS: ftp: loaded support on port[0] = 21 [ 191.597500] IPVS: ftp: loaded support on port[0] = 21 [ 191.616787] IPVS: ftp: loaded support on port[0] = 21 [ 191.616795] IPVS: ftp: loaded support on port[0] = 21 [ 191.626795] IPVS: ftp: loaded support on port[0] = 21 [ 193.282921] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.291952] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.302230] device bridge_slave_0 entered promiscuous mode [ 193.327512] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.337234] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.352191] device bridge_slave_0 entered promiscuous mode [ 193.359153] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.366938] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.374787] device bridge_slave_0 entered promiscuous mode [ 193.415172] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.425061] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.438646] device bridge_slave_0 entered promiscuous mode [ 193.450558] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.457951] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.466139] device bridge_slave_1 entered promiscuous mode [ 193.484103] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.490468] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.499915] device bridge_slave_1 entered promiscuous mode [ 193.510647] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.519599] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.531623] device bridge_slave_0 entered promiscuous mode [ 193.540293] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.546789] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.555001] device bridge_slave_0 entered promiscuous mode [ 193.566067] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.573002] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.580396] device bridge_slave_1 entered promiscuous mode [ 193.588960] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.596536] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.604034] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.614751] device bridge_slave_0 entered promiscuous mode [ 193.624328] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.634951] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.644031] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.651998] device bridge_slave_1 entered promiscuous mode [ 193.660606] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.672612] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.679969] device bridge_slave_0 entered promiscuous mode [ 193.691696] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.699093] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.712620] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.721689] device bridge_slave_1 entered promiscuous mode [ 193.730246] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.737029] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.745875] device bridge_slave_1 entered promiscuous mode [ 193.755216] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.761744] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.771869] device bridge_slave_1 entered promiscuous mode [ 193.780087] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 193.790198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 193.802730] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.811739] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.839999] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 193.854086] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.860445] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.871848] device bridge_slave_1 entered promiscuous mode [ 193.885752] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.897887] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.912377] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 193.924529] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 193.973969] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 194.011769] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 194.034647] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 194.084775] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.096486] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 194.168193] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.184293] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.235370] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.259862] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.289861] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.331714] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.349971] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.378036] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.402331] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.422814] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.444738] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.459475] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.493069] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.543110] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.558716] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.706308] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 194.735377] team0: Port device team_slave_0 added [ 194.802273] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 194.821964] team0: Port device team_slave_0 added [ 194.901049] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 194.908977] team0: Port device team_slave_1 added [ 194.924278] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 194.934177] team0: Port device team_slave_1 added [ 194.957954] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 194.969750] team0: Port device team_slave_0 added [ 195.002178] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 195.012491] team0: Port device team_slave_0 added [ 195.021830] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 195.034325] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 195.048541] team0: Port device team_slave_0 added [ 195.062080] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 195.069418] team0: Port device team_slave_0 added [ 195.081920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.099783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.107981] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 195.116281] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 195.125054] team0: Port device team_slave_1 added [ 195.132888] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 195.144797] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 195.156310] team0: Port device team_slave_1 added [ 195.165704] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 195.179406] team0: Port device team_slave_0 added [ 195.185863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.194647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.203034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.211712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.220309] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 195.227830] team0: Port device team_slave_1 added [ 195.233856] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 195.244467] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.254405] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 195.273268] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 195.282066] team0: Port device team_slave_1 added [ 195.289141] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 195.305684] team0: Port device team_slave_0 added [ 195.311439] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 195.318765] team0: Port device team_slave_1 added [ 195.331779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.345208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.357436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.365503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.373204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.380830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.388589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.397184] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.424159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.433389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.460849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.468649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.476447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.487292] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 195.497529] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 195.507762] team0: Port device team_slave_1 added [ 195.527992] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 195.550631] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 195.560871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.568533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.589407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.597995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.606195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.614139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.622037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.629702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.637524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.647852] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.659260] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.675585] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.691401] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.701394] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 195.717028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.739056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.755049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.763834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.771818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.779617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.787760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.795649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.803559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.811410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.824737] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 195.836588] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 195.853819] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 195.860829] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 195.897511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.909354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.917601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.926211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.934193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.942026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.949416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.957366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.966856] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 195.978353] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.993470] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 196.010981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.025399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.050971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.059000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.066807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.074691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.092776] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 196.115335] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 196.140397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.159087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.188094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.196117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.233697] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 196.241805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.265273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.804893] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.811464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.818388] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.824811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.837156] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 196.854481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.936015] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.942440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.949114] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.955545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.966856] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 197.013112] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.019506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.026245] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.032665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.054186] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 197.082675] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.089041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.095745] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.102161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.114215] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 197.204615] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.210989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.217747] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.224181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.246157] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 197.255261] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.261666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.268330] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.274746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.290903] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 197.304856] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.311261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.317906] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.324349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.340147] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 197.355645] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.362054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.368711] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.375170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.396579] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 197.929980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.940728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.964448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.973046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.980154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.987934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.995638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.655822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.782004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.846296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.878033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.903295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.934760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.024078] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 201.194628] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 201.205311] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 201.230183] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 201.250747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.264352] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 201.300250] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 201.313517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.385414] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 201.411955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.423824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.533270] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 201.544697] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 201.557132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.572030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.594917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.602336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.618797] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 201.642635] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 201.655471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.664806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.703879] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 201.717251] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.733272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.743402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.759108] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 201.769156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.788657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.846849] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 201.924118] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.935948] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.001426] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.009870] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 202.022276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.033497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.132829] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.158168] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.248343] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 202.272967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.280033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.306937] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.653604] 8021q: adding VLAN 0 to HW filter on device team0 2018/09/09 17:22:46 executed programs: 8 2018/09/09 17:22:52 executed programs: 338 2018/09/09 17:22:57 executed programs: 696 2018/09/09 17:23:02 executed programs: 1066 2018/09/09 17:23:07 executed programs: 1429 2018/09/09 17:23:12 executed programs: 1804 2018/09/09 17:23:17 executed programs: 2177 2018/09/09 17:23:22 executed programs: 2555 2018/09/09 17:23:27 executed programs: 2920 2018/09/09 17:23:32 executed programs: 3298 2018/09/09 17:23:37 executed programs: 3669 2018/09/09 17:23:42 executed programs: 4050 2018/09/09 17:23:47 executed programs: 4420 2018/09/09 17:23:52 executed programs: 4789 [ 272.824938] ================================================================== [ 272.832375] BUG: KASAN: use-after-free in __lock_acquire+0x37c2/0x4ec0 [ 272.839040] Read of size 8 at addr ffff8801cd468b48 by task syz-executor1/15654 [ 272.839049] [ 272.839063] CPU: 0 PID: 15654 Comm: syz-executor1 Not tainted 4.19.0-rc2+ #6 [ 272.839069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.839073] Call Trace: [ 272.839229] dump_stack+0x1c4/0x2b4 [ 272.864866] ? dump_stack_print_info.cold.2+0x52/0x52 [ 272.864880] ? printk+0xa7/0xcf [ 272.864896] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 272.864913] print_address_description.cold.8+0x9/0x1ff [ 272.864929] kasan_report.cold.9+0x242/0x309 [ 272.876302] ? __lock_acquire+0x37c2/0x4ec0 [ 272.876320] __asan_report_load8_noabort+0x14/0x20 [ 272.884333] __lock_acquire+0x37c2/0x4ec0 [ 272.884349] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 272.884368] ? mark_held_locks+0x130/0x130 [ 272.884385] ? is_bpf_text_address+0xac/0x170 [ 272.884402] ? lock_downgrade+0x900/0x900 [ 272.925884] ? check_preemption_disabled+0x48/0x200 [ 272.930911] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 272.936715] ? kasan_check_read+0x11/0x20 [ 272.940888] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 272.946171] ? rcu_bh_qs+0xc0/0xc0 [ 272.949716] ? rcu_bh_qs+0xc0/0xc0 [ 272.953269] ? unwind_dump+0x190/0x190 [ 272.957170] ? is_bpf_text_address+0xd3/0x170 [ 272.961668] ? kernel_text_address+0x79/0xf0 [ 272.966081] ? __kernel_text_address+0xd/0x40 [ 272.970581] ? unwind_get_return_address+0x61/0xa0 [ 272.975520] ? __save_stack_trace+0x8d/0xf0 [ 272.979872] ? save_stack+0xa9/0xd0 [ 272.983516] ? save_stack+0x43/0xd0 [ 272.987144] ? __kasan_slab_free+0x102/0x150 [ 272.991559] lock_acquire+0x1ed/0x520 [ 272.995370] ? psock_map_pop.isra.22+0x93/0x3b0 [ 273.000126] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 273.000144] ? lock_release+0x970/0x970 [ 273.009552] ? trace_hardirqs_on+0x310/0x310 [ 273.014067] ? kasan_check_write+0x14/0x20 [ 273.018347] _raw_spin_lock_bh+0x31/0x40 [ 273.022413] ? psock_map_pop.isra.22+0x93/0x3b0 [ 273.027085] psock_map_pop.isra.22+0x93/0x3b0 [ 273.031606] ? trace_hardirqs_on+0xbd/0x310 [ 273.031621] ? smap_list_map_remove+0x360/0x360 [ 273.031635] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 273.031649] ? __kasan_slab_free+0x119/0x150 [ 273.031664] ? bpf_tcp_close+0x6c2/0x10c0 [ 273.031678] bpf_tcp_close+0x6ca/0x10c0 [ 273.031763] ? tcp_check_oom+0x530/0x530 [ 273.062981] ? sock_hash_free+0x6a0/0x6a0 [ 273.067136] ? lock_release+0x970/0x970 [ 273.071115] ? arch_local_save_flags+0x40/0x40 [ 273.075701] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 273.081316] ? ipv6_sock_ac_close+0x34f/0x470 [ 273.085866] ? ipv6_sock_mc_close+0x162/0x1d0 [ 273.090408] ? ip_mc_drop_socket+0x20b/0x270 [ 273.094824] ? down_write+0x8a/0x130 [ 273.098575] inet_release+0x104/0x1f0 [ 273.102386] inet6_release+0x50/0x70 [ 273.106136] __sock_release+0xd7/0x250 [ 273.110032] ? __sock_release+0x250/0x250 [ 273.114180] sock_close+0x19/0x20 [ 273.117638] __fput+0x385/0xa30 [ 273.120920] ? get_max_files+0x20/0x20 [ 273.120935] ? trace_hardirqs_on+0xbd/0x310 [ 273.120950] ? kasan_check_read+0x11/0x20 [ 273.120964] ? task_work_run+0x1af/0x2a0 [ 273.120982] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 273.129175] ? kasan_check_write+0x14/0x20 [ 273.129191] ? do_raw_spin_lock+0xc1/0x200 [ 273.129204] ____fput+0x15/0x20 [ 273.129217] task_work_run+0x1e8/0x2a0 [ 273.129243] ? task_work_cancel+0x240/0x240 [ 273.162800] ? copy_fd_bitmaps+0x210/0x210 [ 273.167039] ? do_syscall_64+0x9a/0x820 [ 273.171024] exit_to_usermode_loop+0x318/0x380 [ 273.175609] ? syscall_slow_exit_work+0x520/0x520 [ 273.180454] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 273.180477] do_syscall_64+0x6be/0x820 [ 273.180511] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 273.195327] ? syscall_return_slowpath+0x5e0/0x5e0 [ 273.200265] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 273.205123] ? trace_hardirqs_on_caller+0x310/0x310 [ 273.210157] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 273.215224] ? prepare_exit_to_usermode+0x291/0x3b0 [ 273.220266] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 273.225114] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 273.230303] RIP: 0033:0x410c30 [ 273.233517] Code: 01 f0 ff ff 0f 83 60 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 5d 53 63 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 273.252419] RSP: 002b:00007ffc8c24d558 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 273.260176] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000410c30 [ 273.267430] RDX: 0000001b32220000 RSI: 00000000007305f0 RDI: 0000000000000003 [ 273.274693] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 273.281973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 273.289232] R13: 000000000004292a R14: 0000000000000275 R15: badc0ffeebadface [ 273.296485] [ 273.298094] Allocated by task 15654: [ 273.301792] save_stack+0x43/0xd0 [ 273.305227] kasan_kmalloc+0xc7/0xe0 [ 273.308924] kmem_cache_alloc_node_trace+0x14c/0x740 [ 273.314008] __sock_map_ctx_update_elem.isra.23+0x7a9/0x12f0 [ 273.319787] sock_map_ctx_update_elem.isra.24+0x1a3/0xbe0 [ 273.325303] sock_map_update_elem+0x22a/0x5a0 [ 273.329780] map_update_elem+0x753/0xd50 [ 273.333818] __x64_sys_bpf+0x32d/0x510 [ 273.337686] do_syscall_64+0x1b9/0x820 [ 273.341558] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 273.346739] [ 273.348345] Freed by task 2684: [ 273.351604] save_stack+0x43/0xd0 [ 273.355034] __kasan_slab_free+0x102/0x150 [ 273.359247] kasan_slab_free+0xe/0x10 [ 273.363027] kfree+0xcf/0x230 [ 273.366115] smap_gc_work+0x910/0xc70 [ 273.369893] process_one_work+0xc90/0x1b90 [ 273.374107] worker_thread+0x17f/0x1390 [ 273.378061] kthread+0x35a/0x420 [ 273.381408] ret_from_fork+0x3a/0x50 [ 273.385096] [ 273.386717] The buggy address belongs to the object at ffff8801cd468900 [ 273.386717] which belongs to the cache kmalloc-1024 of size 1024 [ 273.399533] The buggy address is located 584 bytes inside of [ 273.399533] 1024-byte region [ffff8801cd468900, ffff8801cd468d00) [ 273.411477] The buggy address belongs to the page: [ 273.416386] page:ffffea0007351a00 count:1 mapcount:0 mapping:ffff8801da800ac0 index:0x0 compound_mapcount: 0 [ 273.426364] flags: 0x2fffc0000008100(slab|head) [ 273.431016] raw: 02fffc0000008100 ffffea0007343108 ffffea0007343588 ffff8801da800ac0 [ 273.438877] raw: 0000000000000000 ffff8801cd468000 0000000100000007 0000000000000000 [ 273.446738] page dumped because: kasan: bad access detected [ 273.452421] [ 273.454024] Memory state around the buggy address: [ 273.458930] ffff8801cd468a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 273.466268] ffff8801cd468a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 273.473606] >ffff8801cd468b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 273.480939] ^ [ 273.486627] ffff8801cd468b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 273.493964] ffff8801cd468c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 273.501294] ================================================================== [ 273.508645] Disabling lock debugging due to kernel taint [ 273.514071] Kernel panic - not syncing: panic_on_warn set ... [ 273.514071] [ 273.521415] CPU: 0 PID: 15654 Comm: syz-executor1 Tainted: G B 4.19.0-rc2+ #6 [ 273.529966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.539316] Call Trace: [ 273.541893] dump_stack+0x1c4/0x2b4 [ 273.545500] ? dump_stack_print_info.cold.2+0x52/0x52 [ 273.550881] ? lock_downgrade+0x900/0x900 [ 273.555009] panic+0x238/0x4e7 [ 273.558183] ? add_taint.cold.5+0x16/0x16 [ 273.562311] ? add_taint.cold.5+0x5/0x16 [ 273.566365] ? trace_hardirqs_off+0xaf/0x310 [ 273.570765] kasan_end_report+0x47/0x4f [ 273.574718] kasan_report.cold.9+0x76/0x309 [ 273.579024] ? __lock_acquire+0x37c2/0x4ec0 [ 273.583327] __asan_report_load8_noabort+0x14/0x20 [ 273.588234] __lock_acquire+0x37c2/0x4ec0 [ 273.592363] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 273.597881] ? mark_held_locks+0x130/0x130 [ 273.602096] ? is_bpf_text_address+0xac/0x170 [ 273.606572] ? lock_downgrade+0x900/0x900 [ 273.610699] ? check_preemption_disabled+0x48/0x200 [ 273.615713] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 273.621511] ? kasan_check_read+0x11/0x20 [ 273.625641] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 273.630898] ? rcu_bh_qs+0xc0/0xc0 [ 273.634416] ? rcu_bh_qs+0xc0/0xc0 [ 273.637974] ? unwind_dump+0x190/0x190 [ 273.641847] ? is_bpf_text_address+0xd3/0x170 [ 273.646324] ? kernel_text_address+0x79/0xf0 [ 273.650713] ? __kernel_text_address+0xd/0x40 [ 273.655192] ? unwind_get_return_address+0x61/0xa0 [ 273.660114] ? __save_stack_trace+0x8d/0xf0 [ 273.664431] ? save_stack+0xa9/0xd0 [ 273.668035] ? save_stack+0x43/0xd0 [ 273.671641] ? __kasan_slab_free+0x102/0x150 [ 273.676032] lock_acquire+0x1ed/0x520 [ 273.679812] ? psock_map_pop.isra.22+0x93/0x3b0 [ 273.684467] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 273.689812] ? lock_release+0x970/0x970 [ 273.693765] ? trace_hardirqs_on+0x310/0x310 [ 273.698154] ? kasan_check_write+0x14/0x20 [ 273.702371] _raw_spin_lock_bh+0x31/0x40 [ 273.706410] ? psock_map_pop.isra.22+0x93/0x3b0 [ 273.711082] psock_map_pop.isra.22+0x93/0x3b0 [ 273.715580] ? trace_hardirqs_on+0xbd/0x310 [ 273.719881] ? smap_list_map_remove+0x360/0x360 [ 273.724530] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 273.729957] ? __kasan_slab_free+0x119/0x150 [ 273.734344] ? bpf_tcp_close+0x6c2/0x10c0 [ 273.738494] bpf_tcp_close+0x6ca/0x10c0 [ 273.742453] ? tcp_check_oom+0x530/0x530 [ 273.746506] ? sock_hash_free+0x6a0/0x6a0 [ 273.750637] ? lock_release+0x970/0x970 [ 273.754594] ? arch_local_save_flags+0x40/0x40 [ 273.759161] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 273.764680] ? ipv6_sock_ac_close+0x34f/0x470 [ 273.769159] ? ipv6_sock_mc_close+0x162/0x1d0 [ 273.773647] ? ip_mc_drop_socket+0x20b/0x270 [ 273.778035] ? down_write+0x8a/0x130 [ 273.781735] inet_release+0x104/0x1f0 [ 273.785533] inet6_release+0x50/0x70 [ 273.789242] __sock_release+0xd7/0x250 [ 273.793112] ? __sock_release+0x250/0x250 [ 273.797239] sock_close+0x19/0x20 [ 273.800669] __fput+0x385/0xa30 [ 273.803929] ? get_max_files+0x20/0x20 [ 273.807799] ? trace_hardirqs_on+0xbd/0x310 [ 273.812104] ? kasan_check_read+0x11/0x20 [ 273.816233] ? task_work_run+0x1af/0x2a0 [ 273.820275] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 273.825706] ? kasan_check_write+0x14/0x20 [ 273.829926] ? do_raw_spin_lock+0xc1/0x200 [ 273.834139] ____fput+0x15/0x20 [ 273.837396] task_work_run+0x1e8/0x2a0 [ 273.841263] ? task_work_cancel+0x240/0x240 [ 273.845571] ? copy_fd_bitmaps+0x210/0x210 [ 273.849784] ? do_syscall_64+0x9a/0x820 [ 273.853760] exit_to_usermode_loop+0x318/0x380 [ 273.858347] ? syscall_slow_exit_work+0x520/0x520 [ 273.863260] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 273.868778] do_syscall_64+0x6be/0x820 [ 273.872649] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 273.877993] ? syscall_return_slowpath+0x5e0/0x5e0 [ 273.882904] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 273.887730] ? trace_hardirqs_on_caller+0x310/0x310 [ 273.892736] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 273.897738] ? prepare_exit_to_usermode+0x291/0x3b0 [ 273.902740] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 273.907566] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 273.912739] RIP: 0033:0x410c30 [ 273.915914] Code: 01 f0 ff ff 0f 83 60 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 5d 53 63 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 273.934793] RSP: 002b:00007ffc8c24d558 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 273.942483] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000410c30 [ 273.949735] RDX: 0000001b32220000 RSI: 00000000007305f0 RDI: 0000000000000003 [ 273.956985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 273.964236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 273.971487] R13: 000000000004292a R14: 0000000000000275 R15: badc0ffeebadface [ 273.979065] Dumping ftrace buffer: [ 273.982590] (ftrace buffer empty) [ 273.986932] Kernel Offset: disabled [ 273.990554] Rebooting in 86400 seconds..