[....] Starting OpenBSD Secure Shell server: sshd[ 19.523272] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 25.268139] random: sshd: uninitialized urandom read (32 bytes read) [ 25.626407] random: sshd: uninitialized urandom read (32 bytes read) [ 26.503742] random: sshd: uninitialized urandom read (32 bytes read) [ 26.644106] sshd (4416) used greatest stack depth: 16984 bytes left [ 38.463359] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.63' (ECDSA) to the list of known hosts. [ 44.000148] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/29 01:45:12 parsed 1 programs [ 45.193704] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/29 01:45:14 executed programs: 0 [ 46.359389] IPVS: ftp: loaded support on port[0] = 21 [ 46.533399] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.539829] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.547041] device bridge_slave_0 entered promiscuous mode [ 46.561605] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.567984] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.574809] device bridge_slave_1 entered promiscuous mode [ 46.588589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.603598] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.640117] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.656413] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.712456] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.719657] team0: Port device team_slave_0 added [ 46.733221] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.740273] team0: Port device team_slave_1 added [ 46.753507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.768562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.783878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.798697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.901059] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.907523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.914277] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.920627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.280470] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 47.286605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.324653] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.361424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.368670] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 47.402674] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.408774] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.488209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.046161] ================================================================== [ 48.053668] BUG: KASAN: use-after-free in __dev_map_entry_free+0x2a8/0x300 [ 48.060663] Read of size 8 at addr ffff8801c5a87948 by task udevd/2288 [ 48.067306] [ 48.068920] CPU: 0 PID: 2288 Comm: udevd Not tainted 4.18.0-rc6+ #166 [ 48.075478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.084822] Call Trace: [ 48.087385] [ 48.089533] dump_stack+0x1c9/0x2b4 [ 48.093155] ? dump_stack_print_info