[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 24.378258] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 26.066006] random: sshd: uninitialized urandom read (32 bytes read) [ 26.432301] random: sshd: uninitialized urandom read (32 bytes read) [ 27.011038] random: sshd: uninitialized urandom read (32 bytes read) [ 187.526129] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.23' (ECDSA) to the list of known hosts. [ 193.165401] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/08 05:50:34 parsed 1 programs [ 194.369120] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/08 05:50:35 executed programs: 0 [ 195.517365] IPVS: ftp: loaded support on port[0] = 21 [ 195.519117] IPVS: ftp: loaded support on port[0] = 21 [ 195.528212] IPVS: ftp: loaded support on port[0] = 21 [ 195.548178] IPVS: ftp: loaded support on port[0] = 21 [ 195.576696] IPVS: ftp: loaded support on port[0] = 21 [ 195.586895] IPVS: ftp: loaded support on port[0] = 21 [ 195.591241] IPVS: ftp: loaded support on port[0] = 21 [ 195.606565] IPVS: ftp: loaded support on port[0] = 21 [ 197.180966] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.189428] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.197175] device bridge_slave_0 entered promiscuous mode [ 197.294677] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.306521] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.314051] device bridge_slave_0 entered promiscuous mode [ 197.350532] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.356903] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.371249] device bridge_slave_0 entered promiscuous mode [ 197.396959] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.403931] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.411954] device bridge_slave_0 entered promiscuous mode [ 197.418819] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.426578] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.434561] device bridge_slave_1 entered promiscuous mode [ 197.471936] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.478386] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.493920] device bridge_slave_0 entered promiscuous mode [ 197.503626] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.509993] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.518349] device bridge_slave_1 entered promiscuous mode [ 197.527293] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.536763] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.544166] device bridge_slave_1 entered promiscuous mode [ 197.553756] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.562338] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.570880] device bridge_slave_0 entered promiscuous mode [ 197.588404] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.596379] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.610838] device bridge_slave_1 entered promiscuous mode [ 197.621171] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.627534] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.634779] device bridge_slave_1 entered promiscuous mode [ 197.641580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 197.650514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 197.659944] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.673917] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.686796] device bridge_slave_0 entered promiscuous mode [ 197.695986] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.703113] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.711057] device bridge_slave_1 entered promiscuous mode [ 197.720718] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 197.730238] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 197.737809] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 197.758945] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 197.778896] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.791501] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.805683] device bridge_slave_0 entered promiscuous mode [ 197.813314] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.819672] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.827121] device bridge_slave_1 entered promiscuous mode [ 197.834940] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 197.855978] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 197.871850] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 197.888091] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.916308] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.932020] device bridge_slave_1 entered promiscuous mode [ 197.939199] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 197.948234] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 197.963074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 197.998829] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 198.013959] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 198.053976] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 198.119934] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 198.131286] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.178125] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.216251] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.265858] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.281488] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.293772] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.308945] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.340728] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.349951] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.379196] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.402466] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.432504] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.456605] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.480795] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.500351] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.559871] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.772522] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 198.779444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.812025] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 198.831216] team0: Port device team_slave_0 added [ 198.881814] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 198.889241] team0: Port device team_slave_0 added [ 198.908436] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 198.920984] team0: Port device team_slave_0 added [ 198.929502] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 198.941103] team0: Port device team_slave_0 added [ 198.949659] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 198.960907] team0: Port device team_slave_1 added [ 198.978722] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 198.990466] team0: Port device team_slave_1 added [ 198.999364] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 199.010862] team0: Port device team_slave_0 added [ 199.016198] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 199.027355] team0: Port device team_slave_0 added [ 199.036595] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 199.049207] team0: Port device team_slave_1 added [ 199.058381] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 199.066246] team0: Port device team_slave_0 added [ 199.085033] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 199.095878] team0: Port device team_slave_1 added [ 199.104237] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 199.113052] team0: Port device team_slave_1 added [ 199.119100] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 199.131495] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 199.138878] team0: Port device team_slave_1 added [ 199.156611] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 199.172349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 199.184282] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 199.192597] team0: Port device team_slave_0 added [ 199.200195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.208657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.223804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.231646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.239039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.246882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.257246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 199.266349] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 199.292247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 199.299386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.313090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.327459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.336269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.344087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.351714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.359111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.367054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.376281] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 199.384242] team0: Port device team_slave_1 added [ 199.389690] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 199.397236] team0: Port device team_slave_1 added [ 199.409777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.420840] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 199.442532] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 199.468354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.482914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.506747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.514805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.522578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.529972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.538130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.546334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.558031] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 199.568013] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 199.577915] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 199.593957] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 199.606487] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 199.620537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.630861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.639544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.654408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.662494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.670704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.678383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.686303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.694303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.701936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.709630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.720021] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 199.731078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.742315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.755522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.768112] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 199.779279] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 199.792441] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 199.805132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.816781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.844359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.852984] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.860903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.868603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.877109] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 199.886089] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 199.894152] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 199.921532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.933570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.953890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.968522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.977918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.985916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.994563] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 200.023413] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 200.035997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.055379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.077340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.090803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.117159] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 200.163428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.176409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.747474] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.754093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.761154] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.767536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.785482] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 200.792410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.812238] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.818637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.825370] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.831780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.840870] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 200.868672] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.875113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.881836] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.888204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.925635] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 200.997986] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.004436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.011188] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.017586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.032014] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 201.044773] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.051177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.057839] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.064259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.078241] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 201.166030] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.172457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.179154] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.185587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.193710] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 201.206953] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.213371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.220108] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.226481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.236333] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 201.256690] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.263097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.269767] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.276188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.288737] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 201.851313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.860759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.882451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.889585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.897173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.904478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.911980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.510967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.519519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.597157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.673161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.841911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.851634] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 204.859196] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 204.878065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.897522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.915875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.966488] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 205.022440] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 205.148072] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 205.157139] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 205.173709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.186517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.218929] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 205.245233] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 205.255313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.263907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.294950] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 205.309653] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 205.322145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.329491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.360977] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 205.460594] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 205.468521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.488759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.532916] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.548374] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 205.569745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.581454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.609689] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 205.634352] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.644345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.651748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.679662] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 205.699895] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 205.710930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.727913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.746133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.753616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.775806] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.883544] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.958954] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.976544] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.044958] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.057459] 8021q: adding VLAN 0 to HW filter on device team0 2018/09/08 05:50:48 executed programs: 8 [ 208.666903] ================================================================== [ 208.674319] BUG: KASAN: use-after-free in __lock_acquire+0x37c2/0x4ec0 [ 208.681222] Read of size 8 at addr ffff8801c48846c8 by task syz-executor7/7571 [ 208.688583] [ 208.690230] CPU: 1 PID: 7571 Comm: syz-executor7 Not tainted 4.19.0-rc2+ #89 [ 208.697425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.706783] Call Trace: [ 208.709381] dump_stack+0x1c4/0x2b4 [ 208.713027] ? dump_stack_print_info.cold.2+0x52/0x52 [ 208.718223] ? printk+0xa7/0xcf [ 208.721511] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 208.726275] print_address_description.cold.8+0x9/0x1ff [ 208.731648] kasan_report.cold.9+0x242/0x309 [ 208.736067] ? __lock_acquire+0x37c2/0x4ec0 [ 208.740403] __asan_report_load8_noabort+0x14/0x20 [ 208.745354] __lock_acquire+0x37c2/0x4ec0 [ 208.749505] ? find_held_lock+0x36/0x1c0 [ 208.753586] ? mark_held_locks+0x130/0x130 [ 208.757830] ? _raw_spin_unlock_irq+0x27/0x80 [ 208.762331] ? _raw_spin_unlock_irq+0x27/0x80 [ 208.766834] ? lockdep_hardirqs_on+0x421/0x5c0 [ 208.771423] ? trace_hardirqs_on+0xbd/0x310 [ 208.775755] ? kasan_check_read+0x11/0x20 [ 208.779910] ? finish_task_switch+0x1f5/0x900 [ 208.784680] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 208.790147] ? compat_start_thread+0x80/0x80 [ 208.794574] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 208.800121] ? _raw_spin_unlock_irq+0x60/0x80 [ 208.804637] ? finish_task_switch+0x1f5/0x900 [ 208.809147] ? finish_task_switch+0x1b5/0x900 [ 208.814166] ? __switch_to_asm+0x34/0x70 [ 208.818239] ? preempt_notifier_register+0x200/0x200 [ 208.823348] ? __switch_to_asm+0x34/0x70 [ 208.827416] ? __switch_to_asm+0x34/0x70 [ 208.831482] ? __switch_to_asm+0x40/0x70 [ 208.835546] ? __switch_to_asm+0x34/0x70 [ 208.839623] ? __switch_to_asm+0x40/0x70 [ 208.843688] ? __switch_to_asm+0x34/0x70 [ 208.847753] ? __switch_to_asm+0x40/0x70 [ 208.851817] ? __switch_to_asm+0x34/0x70 [ 208.855887] ? print_usage_bug+0xc0/0xc0 [ 208.859954] ? __switch_to_asm+0x40/0x70 [ 208.864024] ? __switch_to_asm+0x34/0x70 [ 208.868087] ? __switch_to_asm+0x40/0x70 [ 208.872165] ? __schedule+0x874/0x1ed0 [ 208.876065] ? __sched_text_start+0x8/0x8 [ 208.880223] lock_acquire+0x1ed/0x520 [ 208.884032] ? psock_map_pop.isra.22+0x93/0x3b0 [ 208.888711] ? lock_release+0x970/0x970 [ 208.892692] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 208.897455] ? trace_hardirqs_off_caller+0x300/0x300 [ 208.897468] ? retint_kernel+0x1b/0x2d [ 208.897482] ? trace_hardirqs_on+0x310/0x310 [ 208.897499] _raw_spin_lock_bh+0x31/0x40 [ 208.897514] ? psock_map_pop.isra.22+0x93/0x3b0 [ 208.897528] psock_map_pop.isra.22+0x93/0x3b0 [ 208.897542] ? retint_kernel+0x2d/0x2d [ 208.897555] ? smap_list_map_remove+0x360/0x360 [ 208.897584] ? kfree+0x11a/0x230 [ 208.897600] bpf_tcp_close+0x6ca/0x10c0 [ 208.906698] ? tcp_check_oom+0x530/0x530 [ 208.906716] ? sock_hash_free+0x6a0/0x6a0 [ 208.906731] ? lock_release+0x970/0x970 [ 208.906747] ? arch_local_save_flags+0x40/0x40 [ 208.906760] ? graph_lock+0x170/0x170 [ 208.906777] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 208.906796] ? ipv6_sock_ac_close+0x34f/0x470 [ 208.915250] ? ipv6_sock_mc_close+0x162/0x1d0 [ 208.915263] ? ip_mc_drop_socket+0x20b/0x270 [ 208.915274] ? down_write+0x8a/0x130 [ 208.915290] inet_release+0x104/0x1f0 [ 208.915305] inet6_release+0x50/0x70 [ 208.915319] __sock_release+0xd7/0x250 [ 208.915332] ? __sock_release+0x250/0x250 [ 208.915344] sock_close+0x19/0x20 [ 208.915355] __fput+0x385/0xa30 [ 208.915372] ? get_max_files+0x20/0x20 [ 208.924514] ? trace_hardirqs_on+0xbd/0x310 [ 208.924529] ? kasan_check_read+0x11/0x20 [ 208.924543] ? task_work_run+0x1af/0x2a0 [ 208.924567] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 208.924584] ? kasan_check_write+0x14/0x20 [ 208.924599] ? do_raw_spin_lock+0xc1/0x200 [ 208.924611] ____fput+0x15/0x20 [ 208.924628] task_work_run+0x1e8/0x2a0 [ 208.933161] ? task_work_cancel+0x240/0x240 [ 208.933177] ? copy_fd_bitmaps+0x210/0x210 [ 208.933192] ? do_syscall_64+0x9a/0x820 [ 208.933209] exit_to_usermode_loop+0x318/0x380 [ 208.933225] ? syscall_slow_exit_work+0x520/0x520 [ 208.933242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 208.933257] do_syscall_64+0x6be/0x820 [ 208.933271] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 208.933286] ? syscall_return_slowpath+0x5e0/0x5e0 [ 208.933300] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 208.933318] ? trace_hardirqs_off+0x300/0x300 [ 208.940637] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 208.940653] ? prepare_exit_to_usermode+0x291/0x3b0 [ 208.940670] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 208.940688] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 208.940698] RIP: 0033:0x410c51 [ 208.940713] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 208.940720] RSP: 002b:00007ffe7413ccd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 208.940733] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000410c51 [ 208.940746] RDX: 0000000000000000 RSI: 00000000007305f0 RDI: 0000000000000003 [ 209.014234] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffffffffffff [ 209.014247] R10: 00000000009300a0 R11: 0000000000000293 R12: 0000000000000004 [ 209.022432] R13: 0000000000032e86 R14: 0000000000000005 R15: badc0ffeebadface [ 209.022444] [ 209.022451] Allocated by task 7572: [ 209.022466] save_stack+0x43/0xd0 [ 209.022476] kasan_kmalloc+0xc7/0xe0 [ 209.022490] kmem_cache_alloc_node_trace+0x14c/0x740 [ 209.022510] __sock_map_ctx_update_elem.isra.23+0x7a9/0x12f0 [ 209.052059] sock_map_ctx_update_elem.isra.24+0x1a3/0xbe0 [ 209.052072] sock_map_update_elem+0x22a/0x5a0 [ 209.052083] map_update_elem+0x753/0xd50 [ 209.052093] __x64_sys_bpf+0x32d/0x510 [ 209.052106] do_syscall_64+0x1b9/0x820 [ 209.052133] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 209.071005] [ 209.071012] Freed by task 24: [ 209.071025] save_stack+0x43/0xd0 [ 209.071035] __kasan_slab_free+0x102/0x150 [ 209.071046] kasan_slab_free+0xe/0x10 [ 209.071056] kfree+0xcf/0x230 [ 209.071069] smap_gc_work+0x910/0xc70 [ 209.071085] process_one_work+0xc90/0x1b90 [ 209.080329] worker_thread+0x17f/0x1390 [ 209.080348] kthread+0x35a/0x420 [ 209.080361] ret_from_fork+0x3a/0x50 [ 209.080364] [ 209.080374] The buggy address belongs to the object at ffff8801c4884480 [ 209.080374] which belongs to the cache kmalloc-1024 of size 1024 [ 209.080385] The buggy address is located 584 bytes inside of [ 209.080385] 1024-byte region [ffff8801c4884480, ffff8801c4884880) [ 209.080389] The buggy address belongs to the page: [ 209.080404] page:ffffea0007122100 count:1 mapcount:0 mapping:ffff8801da800ac0 index:0x0 [ 209.090147] compound_mapcount: 0 [ 209.090160] flags: 0x2fffc0000008100(slab|head) [ 209.090177] raw: 02fffc0000008100 ffffea0007005908 ffffea0006fde008 ffff8801da800ac0 [ 209.090192] raw: 0000000000000000 ffff8801c4884000 0000000100000007 0000000000000000 [ 209.090197] page dumped because: kasan: bad access detected [ 209.090200] [ 209.090203] Memory state around the buggy address: [ 209.090215] ffff8801c4884580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.351527] ffff8801c4884600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.358889] >ffff8801c4884680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.366223] ^ [ 209.371910] ffff8801c4884700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.379246] ffff8801c4884780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.386581] ================================================================== [ 209.393934] Disabling lock debugging due to kernel taint [ 209.399365] Kernel panic - not syncing: panic_on_warn set ... [ 209.399365] [ 209.406712] CPU: 1 PID: 7571 Comm: syz-executor7 Tainted: G B 4.19.0-rc2+ #89 [ 209.415267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.424599] Call Trace: [ 209.427170] dump_stack+0x1c4/0x2b4 [ 209.430780] ? dump_stack_print_info.cold.2+0x52/0x52 [ 209.435948] ? lock_downgrade+0x900/0x900 [ 209.440078] panic+0x238/0x4e7 [ 209.443255] ? add_taint.cold.5+0x16/0x16 [ 209.447396] ? add_taint.cold.5+0x5/0x16 [ 209.451438] ? trace_hardirqs_off+0xaf/0x300 [ 209.455827] kasan_end_report+0x47/0x4f [ 209.459779] kasan_report.cold.9+0x76/0x309 [ 209.464079] ? __lock_acquire+0x37c2/0x4ec0 [ 209.468382] __asan_report_load8_noabort+0x14/0x20 [ 209.473289] __lock_acquire+0x37c2/0x4ec0 [ 209.477416] ? find_held_lock+0x36/0x1c0 [ 209.481457] ? mark_held_locks+0x130/0x130 [ 209.485672] ? _raw_spin_unlock_irq+0x27/0x80 [ 209.490153] ? _raw_spin_unlock_irq+0x27/0x80 [ 209.494625] ? lockdep_hardirqs_on+0x421/0x5c0 [ 209.499190] ? trace_hardirqs_on+0xbd/0x310 [ 209.503505] ? kasan_check_read+0x11/0x20 [ 209.507636] ? finish_task_switch+0x1f5/0x900 [ 209.512115] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 209.517549] ? compat_start_thread+0x80/0x80 [ 209.521963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 209.527485] ? _raw_spin_unlock_irq+0x60/0x80 [ 209.531965] ? finish_task_switch+0x1f5/0x900 [ 209.536438] ? finish_task_switch+0x1b5/0x900 [ 209.540913] ? __switch_to_asm+0x34/0x70 [ 209.544954] ? preempt_notifier_register+0x200/0x200 [ 209.550043] ? __switch_to_asm+0x34/0x70 [ 209.554091] ? __switch_to_asm+0x34/0x70 [ 209.558134] ? __switch_to_asm+0x40/0x70 [ 209.562173] ? __switch_to_asm+0x34/0x70 [ 209.566215] ? __switch_to_asm+0x40/0x70 [ 209.570253] ? __switch_to_asm+0x34/0x70 [ 209.574291] ? __switch_to_asm+0x40/0x70 [ 209.578331] ? __switch_to_asm+0x34/0x70 [ 209.582374] ? print_usage_bug+0xc0/0xc0 [ 209.586412] ? __switch_to_asm+0x40/0x70 [ 209.590449] ? __switch_to_asm+0x34/0x70 [ 209.594487] ? __switch_to_asm+0x40/0x70 [ 209.598541] ? __schedule+0x874/0x1ed0 [ 209.602417] ? __sched_text_start+0x8/0x8 [ 209.606547] lock_acquire+0x1ed/0x520 [ 209.610336] ? psock_map_pop.isra.22+0x93/0x3b0 [ 209.614986] ? lock_release+0x970/0x970 [ 209.618941] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 209.623678] ? trace_hardirqs_off_caller+0x300/0x300 [ 209.628759] ? retint_kernel+0x1b/0x2d [ 209.632629] ? trace_hardirqs_on+0x310/0x310 [ 209.637019] _raw_spin_lock_bh+0x31/0x40 [ 209.641060] ? psock_map_pop.isra.22+0x93/0x3b0 [ 209.645709] psock_map_pop.isra.22+0x93/0x3b0 [ 209.650201] ? retint_kernel+0x2d/0x2d [ 209.654067] ? smap_list_map_remove+0x360/0x360 [ 209.658716] ? kfree+0x11a/0x230 [ 209.662063] bpf_tcp_close+0x6ca/0x10c0 [ 209.666021] ? tcp_check_oom+0x530/0x530 [ 209.670067] ? sock_hash_free+0x6a0/0x6a0 [ 209.674196] ? lock_release+0x970/0x970 [ 209.678149] ? arch_local_save_flags+0x40/0x40 [ 209.682712] ? graph_lock+0x170/0x170 [ 209.686492] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 209.692009] ? ipv6_sock_ac_close+0x34f/0x470 [ 209.696487] ? ipv6_sock_mc_close+0x162/0x1d0 [ 209.700960] ? ip_mc_drop_socket+0x20b/0x270 [ 209.705349] ? down_write+0x8a/0x130 [ 209.709063] inet_release+0x104/0x1f0 [ 209.712845] inet6_release+0x50/0x70 [ 209.716537] __sock_release+0xd7/0x250 [ 209.720409] ? __sock_release+0x250/0x250 [ 209.724535] sock_close+0x19/0x20 [ 209.727965] __fput+0x385/0xa30 [ 209.731224] ? get_max_files+0x20/0x20 [ 209.735092] ? trace_hardirqs_on+0xbd/0x310 [ 209.739394] ? kasan_check_read+0x11/0x20 [ 209.743523] ? task_work_run+0x1af/0x2a0 [ 209.747569] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 209.753002] ? kasan_check_write+0x14/0x20 [ 209.757218] ? do_raw_spin_lock+0xc1/0x200 [ 209.761433] ____fput+0x15/0x20 [ 209.764695] task_work_run+0x1e8/0x2a0 [ 209.768569] ? task_work_cancel+0x240/0x240 [ 209.772874] ? copy_fd_bitmaps+0x210/0x210 [ 209.777090] ? do_syscall_64+0x9a/0x820 [ 209.781047] exit_to_usermode_loop+0x318/0x380 [ 209.785613] ? syscall_slow_exit_work+0x520/0x520 [ 209.790443] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 209.795962] do_syscall_64+0x6be/0x820 [ 209.799829] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 209.805172] ? syscall_return_slowpath+0x5e0/0x5e0 [ 209.810085] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 209.814909] ? trace_hardirqs_off+0x300/0x300 [ 209.819387] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 209.824384] ? prepare_exit_to_usermode+0x291/0x3b0 [ 209.829382] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 209.834207] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 209.839376] RIP: 0033:0x410c51 [ 209.842555] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 209.861443] RSP: 002b:00007ffe7413ccd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 209.869132] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000410c51 [ 209.876380] RDX: 0000000000000000 RSI: 00000000007305f0 RDI: 0000000000000003 [ 209.883628] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffffffffffff [ 209.890877] R10: 00000000009300a0 R11: 0000000000000293 R12: 0000000000000004 [ 209.898131] R13: 0000000000032e86 R14: 0000000000000005 R15: badc0ffeebadface [ 209.905729] Dumping ftrace buffer: [ 209.909259] (ftrace buffer empty) [ 209.924123] Kernel Offset: disabled [ 209.927762] Rebooting in 86400 seconds..