[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 15.879999] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 20.370142] random: sshd: uninitialized urandom read (32 bytes read) [ 20.560944] random: sshd: uninitialized urandom read (32 bytes read) [ 21.287624] random: sshd: uninitialized urandom read (32 bytes read) [ 32.668840] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.13' (ECDSA) to the list of known hosts. [ 38.057715] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/10 08:04:11 parsed 1 programs [ 38.848214] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/10 08:04:12 executed programs: 0 [ 39.613423] IPVS: ftp: loaded support on port[0] = 21 [ 39.614365] IPVS: ftp: loaded support on port[0] = 21 [ 39.620596] IPVS: ftp: loaded support on port[0] = 21 [ 39.625455] IPVS: ftp: loaded support on port[0] = 21 [ 39.634173] IPVS: ftp: loaded support on port[0] = 21 [ 39.635667] IPVS: ftp: loaded support on port[0] = 21 [ 39.641232] IPVS: ftp: loaded support on port[0] = 21 [ 39.649816] IPVS: ftp: loaded support on port[0] = 21 [ 40.237126] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.243530] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.250868] device bridge_slave_0 entered promiscuous mode [ 40.269564] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.275969] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.283059] device bridge_slave_0 entered promiscuous mode [ 40.299835] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.306239] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.313904] device bridge_slave_1 entered promiscuous mode [ 40.321044] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.327514] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.334850] device bridge_slave_0 entered promiscuous mode [ 40.341626] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.347991] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.355239] device bridge_slave_0 entered promiscuous mode [ 40.364538] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.371385] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.378995] device bridge_slave_1 entered promiscuous mode [ 40.388661] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.395038] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.402231] device bridge_slave_0 entered promiscuous mode [ 40.409360] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.415732] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.424553] device bridge_slave_0 entered promiscuous mode [ 40.430863] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.437221] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.444239] device bridge_slave_0 entered promiscuous mode [ 40.451488] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.457998] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.465577] device bridge_slave_1 entered promiscuous mode [ 40.472707] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.479083] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.486342] device bridge_slave_0 entered promiscuous mode [ 40.492729] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 40.500996] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.507691] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.515578] device bridge_slave_1 entered promiscuous mode [ 40.522653] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.529091] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.535941] device bridge_slave_1 entered promiscuous mode [ 40.543167] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 40.550678] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.557032] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.564515] device bridge_slave_1 entered promiscuous mode [ 40.571566] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 40.579052] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 40.586785] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.593140] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.600763] device bridge_slave_1 entered promiscuous mode [ 40.607918] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 40.615177] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.621553] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.630533] device bridge_slave_1 entered promiscuous mode [ 40.637412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 40.645275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 40.654221] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 40.662457] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 40.670530] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 40.677883] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 40.685401] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 40.694294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 40.709192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 40.749440] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 40.769864] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 40.791455] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.807591] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.818159] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.834827] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.843308] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.852954] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.867204] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.878642] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.892985] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.901524] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.912746] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.927504] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.942905] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.956367] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.972161] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.009781] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.061223] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.070340] team0: Port device team_slave_0 added [ 41.076624] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 41.083657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.091877] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.100771] team0: Port device team_slave_0 added [ 41.113123] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 41.125405] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.134334] team0: Port device team_slave_1 added [ 41.140672] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.148578] team0: Port device team_slave_0 added [ 41.153587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.162680] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.170622] team0: Port device team_slave_1 added [ 41.188572] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.195713] team0: Port device team_slave_0 added [ 41.204715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 41.211728] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.220973] team0: Port device team_slave_1 added [ 41.226122] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 41.232937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.242883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.252289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.259843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.268825] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.276009] team0: Port device team_slave_0 added [ 41.282590] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.289785] team0: Port device team_slave_1 added [ 41.296092] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.303435] team0: Port device team_slave_0 added [ 41.309522] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 41.318451] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 41.325934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.333607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.341316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.348887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.362202] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.369983] team0: Port device team_slave_1 added [ 41.375292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 41.383673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.391548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.400268] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.407474] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.416688] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.424223] team0: Port device team_slave_0 added [ 41.430475] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 41.438735] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.446952] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 41.457101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.464842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.472914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.481127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.488804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.496440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.503808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.511449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.519068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.526585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.535239] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.542399] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.549470] team0: Port device team_slave_0 added [ 41.558752] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.566425] team0: Port device team_slave_1 added [ 41.577364] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.584550] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.594625] team0: Port device team_slave_1 added [ 41.602148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.610862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.619619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.627125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.634474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.642453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.651922] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.659303] team0: Port device team_slave_1 added [ 41.667406] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.682724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.690761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.699523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.712552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.720422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.730626] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.737962] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.746672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.754567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.762769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.772607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.789880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.808993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.826227] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.837744] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.852461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.864760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.881638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.889510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.897510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.905412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.914418] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.922419] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.936469] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.949406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.959911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.979085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.986837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.994547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.002283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.014188] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.025984] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.039580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.051502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.067154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.075120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.097958] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.114369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.122626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.238049] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.244467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.251192] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.257555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.265658] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.395142] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.401604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.408247] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.414789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.422726] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.492856] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.499375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.506050] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.512435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.528765] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.551830] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.558258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.564917] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.571296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.586836] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.605728] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.612402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.619060] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.625426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.634450] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.701689] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.708133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.714759] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.721146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.732663] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.740488] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.746873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.753469] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.759797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.767254] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.777400] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.783789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.790412] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.796779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.804343] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.106797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.115805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.127097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.136300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.143610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.150906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.158311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.165484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.335489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.535312] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.622567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.635945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.654235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.706010] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.712834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.720237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.769386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.793229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.827214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.840007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.852889] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.862472] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.870793] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.951859] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.964224] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.017958] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.033543] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.040593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.048456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.068598] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.079973] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.087904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.101994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.114413] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.122886] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.138097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.148648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.203352] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.209721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.219881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.252536] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.262515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.273444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.305329] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.332199] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.355234] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.361546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.370532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.383749] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.395719] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.404638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.414493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.486976] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.502863] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.549963] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.574715] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.187474] ================================================================== [ 46.194911] BUG: KASAN: use-after-free in _copy_to_user+0xe9/0x110 [ 46.201235] Read of size 924 at addr ffff8801a03ffff2 by task syz-executor3/6390 [ 46.208854] [ 46.210574] CPU: 0 PID: 6390 Comm: syz-executor3 Not tainted 4.18.0-rc3+ #48 [ 46.217757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.227115] Call Trace: [ 46.229713] dump_stack+0x1c9/0x2b4 [ 46.233362] ? dump_stack_print_info.cold.2+0x52/0x52 [ 46.238557] ? printk+0xa7/0xcf [ 46.241841] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 46.246610] ? _copy_to_user+0xe9/0x110 [ 46.250589] print_address_description+0x6c/0x20b [ 46.255443] ? _copy_to_user+0xe9/0x110 [ 46.259427] kasan_report.cold.7+0x242/0x2fe [ 46.263843] check_memory_region+0x13e/0x1b0 [ 46.268258] kasan_check_read+0x11/0x20 [ 46.272240] _copy_to_user+0xe9/0x110 [ 46.276049] bpf_test_finish.isra.7+0xee/0x1f0 [ 46.280636] ? bpf_test_init.isra.8+0x100/0x100 [ 46.285327] ? bpf_test_run+0x2fc/0x3b0 [ 46.289311] bpf_prog_test_run_skb+0x7d7/0xa30 [ 46.293904] ? bpf_test_finish.isra.7+0x1f0/0x1f0 [ 46.298755] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 46.304294] ? fput+0x130/0x1a0 [ 46.307583] ? __bpf_prog_get+0x9b/0x290 [ 46.311664] ? bpf_test_finish.isra.7+0x1f0/0x1f0 [ 46.316569] bpf_prog_test_run+0x130/0x1a0 [ 46.320808] __x64_sys_bpf+0x3d8/0x510 [ 46.324701] ? bpf_prog_get+0x20/0x20 [ 46.328509] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.334061] do_syscall_64+0x1b9/0x820 [ 46.337957] ? finish_task_switch+0x1d3/0x890 [ 46.342455] ? syscall_return_slowpath+0x5e0/0x5e0 [ 46.347391] ? syscall_return_slowpath+0x31d/0x5e0 [ 46.352329] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 46.357351] ? prepare_exit_to_usermode+0x291/0x3b0 [ 46.362598] ? perf_trace_sys_enter+0xb10/0xb10 [ 46.367275] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 46.372129] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.377319] RIP: 0033:0x455e29 [ 46.380508] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 46.399822] RSP: 002b:00007f7a80583c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.407522] RAX: ffffffffffffffda RBX: 00007f7a805846d4 RCX: 0000000000455e29 [ 46.414777] RDX: 0000000000000028 RSI: 0000000020000380 RDI: 000000000000000a [ 46.422031] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 46.429283] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 46.436536] R13: 00000000004bbaee R14: 00000000004c8d20 R15: 0000000000000000 [ 46.443795] [ 46.445400] The buggy address belongs to the page: [ 46.450324] page:ffffea000680ffc0 count:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 46.458447] flags: 0x2fffc0000000000() [ 46.462322] raw: 02fffc0000000000 ffffea000680ffc8 ffffea000680ffc8 0000000000000000 [ 46.470187] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 46.478045] page dumped because: kasan: bad access detected [ 46.483735] [ 46.485343] Memory state around the buggy address: [ 46.490252] ffff8801a03ffe80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 46.497593] ffff8801a03fff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 46.504947] >ffff8801a03fff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 46.512286] ^ [ 46.519288] ffff8801a0400000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.526627] ffff8801a0400080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.533973] ================================================================== [ 46.542832] Kernel panic - not syncing: panic_on_warn set ... [ 46.542832] [ 46.550221] CPU: 0 PID: 6390 Comm: syz-executor3 Tainted: G B 4.18.0-rc3+ #48 [ 46.558798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.568154] Call Trace: [ 46.570759] dump_stack+0x1c9/0x2b4 [ 46.574396] ? dump_stack_print_info.cold.2+0x52/0x52 [ 46.579591] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 46.584358] panic+0x238/0x4e7 [ 46.587561] ? add_taint.cold.5+0x16/0x16 [ 46.591714] ? do_raw_spin_unlock+0xa7/0x2f0 [ 46.596129] ? do_raw_spin_unlock+0xa7/0x2f0 [ 46.600543] ? _copy_to_user+0xe9/0x110 [ 46.604522] kasan_end_report+0x47/0x4f [ 46.608503] kasan_report.cold.7+0x76/0x2fe [ 46.612832] check_memory_region+0x13e/0x1b0 [ 46.617246] kasan_check_read+0x11/0x20 [ 46.621222] _copy_to_user+0xe9/0x110 [ 46.625025] bpf_test_finish.isra.7+0xee/0x1f0 [ 46.629612] ? bpf_test_init.isra.8+0x100/0x100 [ 46.634292] ? bpf_test_run+0x2fc/0x3b0 [ 46.638276] bpf_prog_test_run_skb+0x7d7/0xa30 [ 46.642868] ? bpf_test_finish.isra.7+0x1f0/0x1f0 [ 46.647719] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 46.653260] ? fput+0x130/0x1a0 [ 46.656544] ? __bpf_prog_get+0x9b/0x290 [ 46.660634] ? bpf_test_finish.isra.7+0x1f0/0x1f0 [ 46.665484] bpf_prog_test_run+0x130/0x1a0 [ 46.669724] __x64_sys_bpf+0x3d8/0x510 [ 46.673616] ? bpf_prog_get+0x20/0x20 [ 46.677420] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.682971] do_syscall_64+0x1b9/0x820 [ 46.686860] ? finish_task_switch+0x1d3/0x890 [ 46.691362] ? syscall_return_slowpath+0x5e0/0x5e0 [ 46.696295] ? syscall_return_slowpath+0x31d/0x5e0 [ 46.701232] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 46.706255] ? prepare_exit_to_usermode+0x291/0x3b0 [ 46.711273] ? perf_trace_sys_enter+0xb10/0xb10 [ 46.715946] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 46.720798] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.725992] RIP: 0033:0x455e29 [ 46.729198] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 46.748450] RSP: 002b:00007f7a80583c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.756172] RAX: ffffffffffffffda RBX: 00007f7a805846d4 RCX: 0000000000455e29 [ 46.763448] RDX: 0000000000000028 RSI: 0000000020000380 RDI: 000000000000000a [ 46.770718] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 46.778000] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 46.785280] R13: 00000000004bbaee R14: 00000000004c8d20 R15: 0000000000000000 [ 46.793071] Dumping ftrace buffer: [ 46.796603] (ftrace buffer empty) [ 46.800291] Kernel Offset: disabled [ 46.803917] Rebooting in 86400 seconds..