[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 19.334153] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.279556] random: sshd: uninitialized urandom read (32 bytes read) [ 22.592152] random: sshd: uninitialized urandom read (32 bytes read) [ 23.353825] random: sshd: uninitialized urandom read (32 bytes read) [ 35.712310] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.50' (ECDSA) to the list of known hosts. [ 41.305335] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/28 09:33:39 parsed 1 programs [ 42.568440] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/28 09:33:41 executed programs: 0 [ 44.067465] IPVS: ftp: loaded support on port[0] = 21 [ 44.074409] IPVS: ftp: loaded support on port[0] = 21 [ 44.075834] IPVS: ftp: loaded support on port[0] = 21 [ 44.089651] IPVS: ftp: loaded support on port[0] = 21 [ 44.090863] IPVS: ftp: loaded support on port[0] = 21 [ 44.098899] IPVS: ftp: loaded support on port[0] = 21 [ 44.105313] IPVS: ftp: loaded support on port[0] = 21 [ 44.120948] IPVS: ftp: loaded support on port[0] = 21 [ 44.878096] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.884566] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.892429] device bridge_slave_0 entered promiscuous mode [ 44.901067] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.907478] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.915774] device bridge_slave_0 entered promiscuous mode [ 44.930418] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.936783] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.951646] device bridge_slave_0 entered promiscuous mode [ 44.958892] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.965418] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.974646] device bridge_slave_0 entered promiscuous mode [ 44.986306] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.992674] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.999927] device bridge_slave_1 entered promiscuous mode [ 45.007633] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.014136] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.021697] device bridge_slave_0 entered promiscuous mode [ 45.029607] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.035998] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.043293] device bridge_slave_1 entered promiscuous mode [ 45.050804] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.057271] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.064888] device bridge_slave_1 entered promiscuous mode [ 45.076121] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.082493] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.094712] device bridge_slave_0 entered promiscuous mode [ 45.102054] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.110255] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.116622] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.124759] device bridge_slave_0 entered promiscuous mode [ 45.132102] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.138465] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.145778] device bridge_slave_1 entered promiscuous mode [ 45.153095] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.161756] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.168714] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.176664] device bridge_slave_1 entered promiscuous mode [ 45.184532] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.190988] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.200628] device bridge_slave_1 entered promiscuous mode [ 45.208762] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.217251] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.225157] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.231523] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.239122] device bridge_slave_1 entered promiscuous mode [ 45.246499] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.255670] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.263124] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.270335] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.276705] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.286943] device bridge_slave_0 entered promiscuous mode [ 45.294102] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.301736] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.316472] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.329611] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.337907] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.354064] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.365582] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.371975] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.386642] device bridge_slave_1 entered promiscuous mode [ 45.417726] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.425747] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.453795] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.468253] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.493477] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.508768] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.524156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.532781] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.556999] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.569088] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.580183] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.599937] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.617221] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.629255] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.664432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.673533] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.687017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.698736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.717014] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.726354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.734962] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.741829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.753423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.766531] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.776380] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.786345] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.797545] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.806556] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.814275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.827161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.846851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.854565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.872415] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.888942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.903850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.912626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.921317] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.928496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.947600] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.956171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.968391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.988979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.017613] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.045160] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.060451] team0: Port device team_slave_0 added [ 46.070113] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.077973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.098054] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.104932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.120082] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.138526] team0: Port device team_slave_0 added [ 46.149802] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.158697] team0: Port device team_slave_0 added [ 46.178521] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.190348] team0: Port device team_slave_1 added [ 46.198149] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.211158] team0: Port device team_slave_0 added [ 46.223521] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.234504] team0: Port device team_slave_1 added [ 46.239739] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.248655] team0: Port device team_slave_0 added [ 46.261333] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.270185] team0: Port device team_slave_1 added [ 46.277721] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.285113] team0: Port device team_slave_0 added [ 46.311899] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.323383] team0: Port device team_slave_1 added [ 46.330181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.346388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.358705] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.368116] team0: Port device team_slave_1 added [ 46.375622] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.383806] team0: Port device team_slave_1 added [ 46.408455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.429555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.438277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.446867] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.455146] team0: Port device team_slave_0 added [ 46.465838] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.474608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.489201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.499546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.507898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.520807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.530349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.542960] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 46.551962] team0: Port device team_slave_0 added [ 46.560736] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.573649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.583581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.596159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.604432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.613305] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.620708] team0: Port device team_slave_1 added [ 46.627884] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.635309] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.646300] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.655475] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.663677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.675510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.690538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.702422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.710319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.718087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.725785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.733534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.741314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.750290] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 46.757714] team0: Port device team_slave_1 added [ 46.764652] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.772164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.780645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.796049] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.803169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.811594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.827370] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.842802] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.852466] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.865313] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.872189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.881761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.896126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.904762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.912663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.920614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.928323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.936208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.947227] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.955797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.972499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.984766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.011529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.020374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.029841] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.037052] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.044260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.052165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.060669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.068655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.086162] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.096558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.117204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.134861] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 47.142221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.154302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.191510] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.200817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.218384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.243512] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 47.253074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.262135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.654638] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.661145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.668118] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.674505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.684454] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.691449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.704771] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.711141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.717752] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.724113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.732409] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.749966] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.756347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.762961] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.769298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.781550] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.790201] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.796585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.803232] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.809592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.817132] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.888048] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.894426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.901105] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.907459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.924753] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.995425] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.001833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.008496] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.014880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.030079] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 48.057317] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.063715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.070372] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.076729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.100588] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 48.205905] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.212293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.218924] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.225276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.236613] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 48.735152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.745905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.759772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.766815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.774296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.781525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.788871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.394966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.440534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.523522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.567338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.592308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.671160] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.688652] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.705937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.794962] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.845174] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.854081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.872340] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.923948] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.944324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.959912] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.971078] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.977728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.985816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.006147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.018245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.111462] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.117653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.128470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.160418] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.169134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.182628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.203537] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.214758] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.223958] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.236510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.248757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.268388] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.277350] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.297285] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.304906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.317491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.462647] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.477947] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.489704] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.500793] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.507152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.518337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.556202] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.598549] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.604786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.611817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.755051] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.851446] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/28 09:33:50 executed programs: 8 2018/06/28 09:33:55 executed programs: 187 2018/06/28 09:34:00 executed programs: 378 2018/06/28 09:34:05 executed programs: 572 2018/06/28 09:34:10 executed programs: 766 2018/06/28 09:34:15 executed programs: 960 2018/06/28 09:34:20 executed programs: 1156 [ 87.056892] ================================================================== [ 87.064452] BUG: KASAN: use-after-free in bpf_tcp_close+0xd93/0xfa0 [ 87.070865] Read of size 8 at addr ffff8801af58e690 by task syz-executor3/15702 [ 87.078309] [ 87.079945] CPU: 0 PID: 15702 Comm: syz-executor3 Not tainted 4.18.0-rc2+ #120 [ 87.087309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.096657] Call Trace: [ 87.099258] dump_stack+0x1c9/0x2b4 [ 87.102895] ? dump_stack_print_info.cold.2+0x52/0x52 [ 87.108090] ? printk+0xa7/0xcf [ 87.111373] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 87.116137] ? bpf_tcp_close+0xd93/0xfa0 [ 87.120195] print_address_description+0x6c/0x20b [ 87.125043] ? bpf_tcp_close+0xd93/0xfa0 [ 87.129106] kasan_report.cold.7+0x242/0x2fe [ 87.133521] __asan_report_load8_noabort+0x14/0x20 [ 87.138448] bpf_tcp_close+0xd93/0xfa0 [ 87.142332] ? tcp_check_oom+0x530/0x530 [ 87.146404] ? sock_hash_free+0x6f0/0x6f0 [ 87.150556] ? lock_release+0xa30/0xa30 [ 87.154535] ? rcu_note_context_switch+0x730/0x730 [ 87.159468] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 87.165005] ? ipv6_sock_ac_close+0x356/0x490 [ 87.169508] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 87.175051] ? ipv6_sock_mc_close+0x162/0x1d0 [ 87.179548] ? ip_mc_drop_socket+0x20f/0x270 [ 87.183957] ? down_write+0x8f/0x130 [ 87.187679] inet_release+0x104/0x1f0 [ 87.191484] inet6_release+0x50/0x70 [ 87.195202] __sock_release+0xd7/0x260 [ 87.199088] ? __sock_release+0x260/0x260 [ 87.203240] sock_close+0x19/0x20 [ 87.206694] __fput+0x35b/0x8b0 [ 87.209981] ? fput+0x1a0/0x1a0 [ 87.213269] ? check_same_owner+0x340/0x340 [ 87.217594] ? _raw_spin_unlock_irq+0x27/0x70 [ 87.222098] ____fput+0x15/0x20 [ 87.225389] task_work_run+0x1ec/0x2a0 [ 87.229289] ? task_work_cancel+0x250/0x250 [ 87.233629] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 87.239170] ? switch_task_namespaces+0xa2/0xd0 [ 87.243847] do_exit+0x1b08/0x2750 [ 87.247401] ? mm_update_next_owner+0x9a0/0x9a0 [ 87.252075] ? print_usage_bug+0xc0/0xc0 [ 87.256144] ? graph_lock+0x170/0x170 [ 87.259948] ? rcu_note_context_switch+0x730/0x730 [ 87.264876] ? lock_acquire+0x1e4/0x540 [ 87.268865] ? __lock_acquire+0x7fc/0x5020 [ 87.273110] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 87.278215] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 87.283318] ? perf_trace_run_bpf_submit+0x270/0x3b0 [ 87.288430] ? perf_tp_event+0xc40/0xc40 [ 87.292499] ? kasan_check_write+0x14/0x20 [ 87.296739] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 87.301930] ? memset+0x31/0x40 [ 87.305221] ? perf_trace_lock+0x49d/0x920 [ 87.309480] ? zap_class+0x740/0x740 [ 87.313215] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 87.318322] ? graph_lock+0x170/0x170 [ 87.322131] ? memset+0x31/0x40 [ 87.325418] ? find_held_lock+0x36/0x1c0 [ 87.329495] ? lock_downgrade+0x8f0/0x8f0 [ 87.333654] do_group_exit+0x177/0x440 [ 87.337541] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 87.342128] ? __ia32_sys_exit+0x50/0x50 [ 87.346194] ? _raw_spin_unlock_irq+0x27/0x70 [ 87.350693] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 87.355714] get_signal+0x88e/0x1970 [ 87.359441] ? ptrace_notify+0x130/0x130 [ 87.363499] ? find_held_lock+0x36/0x1c0 [ 87.367573] ? lock_downgrade+0x8f0/0x8f0 [ 87.371727] ? rcu_is_watching+0x8c/0x150 [ 87.375876] ? __lock_is_held+0xb5/0x140 [ 87.379944] do_signal+0x9c/0x21c0 [ 87.383490] ? __fd_install+0x2db/0x880 [ 87.387474] ? setup_sigcontext+0x7d0/0x7d0 [ 87.391798] ? get_unused_fd_flags+0x1a0/0x1a0 [ 87.396389] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 87.401926] ? alloc_file+0x44/0x3e0 [ 87.405647] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 87.411183] ? sock_alloc_file+0x2ac/0x500 [ 87.415440] ? exit_to_usermode_loop+0x8c/0x370 [ 87.420116] exit_to_usermode_loop+0x2e0/0x370 [ 87.424707] ? syscall_slow_exit_work+0x500/0x500 [ 87.429553] ? do_syscall_64+0x9a/0x820 [ 87.433535] do_syscall_64+0x6be/0x820 [ 87.437423] ? finish_task_switch+0x1d3/0x890 [ 87.441922] ? syscall_return_slowpath+0x5e0/0x5e0 [ 87.446852] ? syscall_return_slowpath+0x31d/0x5e0 [ 87.451786] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 87.457157] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 87.462008] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 87.467194] RIP: 0033:0x455a99 [ 87.470375] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 87.489762] RSP: 002b:00007fe58ee21ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 87.497477] RAX: fffffffffffffe00 RBX: 000000000072bf68 RCX: 0000000000455a99 [ 87.504748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000072bf68 [ 87.512015] RBP: 000000000072bf68 R08: 0000000000000000 R09: 000000000072bf48 [ 87.519284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.526553] R13: 00007ffcf82db2df R14: 00007fe58ee229c0 R15: 0000000000000001 [ 87.533842] [ 87.535486] Allocated by task 15675: [ 87.539214] save_stack+0x43/0xd0 [ 87.542672] kasan_kmalloc+0xc4/0xe0 [ 87.546387] __kmalloc_node+0x47/0x70 [ 87.550192] sock_hash_ctx_update_elem.isra.24+0xa72/0x1580 [ 87.555908] sock_hash_update_elem+0x157/0x2f0 [ 87.560489] map_update_elem+0x5c4/0xc90 [ 87.564551] __x64_sys_bpf+0x32d/0x510 [ 87.568438] do_syscall_64+0x1b9/0x820 [ 87.572327] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 87.577512] [ 87.579134] Freed by task 5018: [ 87.582419] save_stack+0x43/0xd0 [ 87.585873] __kasan_slab_free+0x11a/0x170 [ 87.590114] kasan_slab_free+0xe/0x10 [ 87.593914] kfree+0xd9/0x260 [ 87.597025] sock_hash_free+0x256/0x6f0 [ 87.600998] bpf_map_free_deferred+0xba/0xf0 [ 87.605406] process_one_work+0xc73/0x1ba0 [ 87.609640] worker_thread+0x189/0x13c0 [ 87.613613] kthread+0x345/0x410 [ 87.616984] ret_from_fork+0x3a/0x50 [ 87.620687] [ 87.622313] The buggy address belongs to the object at ffff8801af58e680 [ 87.622313] which belongs to the cache kmalloc-64 of size 64 [ 87.634805] The buggy address is located 16 bytes inside of [ 87.634805] 64-byte region [ffff8801af58e680, ffff8801af58e6c0) [ 87.646503] The buggy address belongs to the page: [ 87.651450] page:ffffea0006bd6380 count:1 mapcount:0 mapping:ffff8801da800340 index:0x0 [ 87.660726] flags: 0x2fffc0000000100(slab) [ 87.664979] raw: 02fffc0000000100 ffffea0006ae29c8 ffffea0006bf03c8 ffff8801da800340 [ 87.672864] raw: 0000000000000000 ffff8801af58e000 0000000100000020 0000000000000000 [ 87.680737] page dumped because: kasan: bad access detected [ 87.686438] [ 87.688060] Memory state around the buggy address: [ 87.692994] ffff8801af58e580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 87.700366] ffff8801af58e600: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 87.707735] >ffff8801af58e680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 87.715091] ^ [ 87.718972] ffff8801af58e700: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 87.726334] ffff8801af58e780: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 87.733684] ================================================================== [ 87.741033] Disabling lock debugging due to kernel taint [ 87.746534] Kernel panic - not syncing: panic_on_warn set ... [ 87.746534] [ 87.753900] CPU: 0 PID: 15702 Comm: syz-executor3 Tainted: G B 4.18.0-rc2+ #120 [ 87.762635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.771979] Call Trace: [ 87.774566] dump_stack+0x1c9/0x2b4 [ 87.778193] ? dump_stack_print_info.cold.2+0x52/0x52 [ 87.783383] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 87.788140] panic+0x238/0x4e7 [ 87.791340] ? add_taint.cold.5+0x16/0x16 [ 87.795481] ? do_raw_spin_unlock+0xa7/0x2f0 [ 87.799873] ? bpf_tcp_close+0xd93/0xfa0 [ 87.803913] kasan_end_report+0x47/0x4f [ 87.807866] kasan_report.cold.7+0x76/0x2fe [ 87.812166] __asan_report_load8_noabort+0x14/0x20 [ 87.817084] bpf_tcp_close+0xd93/0xfa0 [ 87.820949] ? tcp_check_oom+0x530/0x530 [ 87.824990] ? sock_hash_free+0x6f0/0x6f0 [ 87.829123] ? lock_release+0xa30/0xa30 [ 87.833078] ? rcu_note_context_switch+0x730/0x730 [ 87.837989] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 87.843505] ? ipv6_sock_ac_close+0x356/0x490 [ 87.847978] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 87.853493] ? ipv6_sock_mc_close+0x162/0x1d0 [ 87.857966] ? ip_mc_drop_socket+0x20f/0x270 [ 87.862353] ? down_write+0x8f/0x130 [ 87.866049] inet_release+0x104/0x1f0 [ 87.869830] inet6_release+0x50/0x70 [ 87.873522] __sock_release+0xd7/0x260 [ 87.877387] ? __sock_release+0x260/0x260 [ 87.881520] sock_close+0x19/0x20 [ 87.884952] __fput+0x35b/0x8b0 [ 87.888213] ? fput+0x1a0/0x1a0 [ 87.891471] ? check_same_owner+0x340/0x340 [ 87.895780] ? _raw_spin_unlock_irq+0x27/0x70 [ 87.900257] ____fput+0x15/0x20 [ 87.903516] task_work_run+0x1ec/0x2a0 [ 87.907390] ? task_work_cancel+0x250/0x250 [ 87.911691] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 87.917205] ? switch_task_namespaces+0xa2/0xd0 [ 87.921851] do_exit+0x1b08/0x2750 [ 87.925369] ? mm_update_next_owner+0x9a0/0x9a0 [ 87.930026] ? print_usage_bug+0xc0/0xc0 [ 87.934072] ? graph_lock+0x170/0x170 [ 87.937853] ? rcu_note_context_switch+0x730/0x730 [ 87.942758] ? lock_acquire+0x1e4/0x540 [ 87.946716] ? __lock_acquire+0x7fc/0x5020 [ 87.950930] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 87.956017] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 87.961106] ? perf_trace_run_bpf_submit+0x270/0x3b0 [ 87.966188] ? perf_tp_event+0xc40/0xc40 [ 87.970229] ? kasan_check_write+0x14/0x20 [ 87.974443] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 87.979608] ? memset+0x31/0x40 [ 87.982868] ? perf_trace_lock+0x49d/0x920 [ 87.987083] ? zap_class+0x740/0x740 [ 87.990774] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 87.995861] ? graph_lock+0x170/0x170 [ 87.999647] ? memset+0x31/0x40 [ 88.002908] ? find_held_lock+0x36/0x1c0 [ 88.006949] ? lock_downgrade+0x8f0/0x8f0 [ 88.011077] do_group_exit+0x177/0x440 [ 88.014944] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 88.019503] ? __ia32_sys_exit+0x50/0x50 [ 88.023542] ? _raw_spin_unlock_irq+0x27/0x70 [ 88.028041] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 88.033043] get_signal+0x88e/0x1970 [ 88.036737] ? ptrace_notify+0x130/0x130 [ 88.040774] ? find_held_lock+0x36/0x1c0 [ 88.044816] ? lock_downgrade+0x8f0/0x8f0 [ 88.048951] ? rcu_is_watching+0x8c/0x150 [ 88.053077] ? __lock_is_held+0xb5/0x140 [ 88.057118] do_signal+0x9c/0x21c0 [ 88.060637] ? __fd_install+0x2db/0x880 [ 88.064589] ? setup_sigcontext+0x7d0/0x7d0 [ 88.068886] ? get_unused_fd_flags+0x1a0/0x1a0 [ 88.073449] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 88.078961] ? alloc_file+0x44/0x3e0 [ 88.082652] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 88.088165] ? sock_alloc_file+0x2ac/0x500 [ 88.092383] ? exit_to_usermode_loop+0x8c/0x370 [ 88.097037] exit_to_usermode_loop+0x2e0/0x370 [ 88.101606] ? syscall_slow_exit_work+0x500/0x500 [ 88.106427] ? do_syscall_64+0x9a/0x820 [ 88.110380] do_syscall_64+0x6be/0x820 [ 88.114245] ? finish_task_switch+0x1d3/0x890 [ 88.118822] ? syscall_return_slowpath+0x5e0/0x5e0 [ 88.123736] ? syscall_return_slowpath+0x31d/0x5e0 [ 88.128643] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 88.133985] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 88.138810] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 88.143974] RIP: 0033:0x455a99 [ 88.147136] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 88.166469] RSP: 002b:00007fe58ee21ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 88.174160] RAX: fffffffffffffe00 RBX: 000000000072bf68 RCX: 0000000000455a99 [ 88.181410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000072bf68 [ 88.188665] RBP: 000000000072bf68 R08: 0000000000000000 R09: 000000000072bf48 [ 88.195919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.203172] R13: 00007ffcf82db2df R14: 00007fe58ee229c0 R15: 0000000000000001 [ 88.210880] Dumping ftrace buffer: [ 88.214399] (ftrace buffer empty) [ 88.218085] Kernel Offset: disabled [ 88.221691] Rebooting in 86400 seconds..