[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 23.727420] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 26.004477] random: sshd: uninitialized urandom read (32 bytes read) [ 26.328747] random: sshd: uninitialized urandom read (32 bytes read) [ 26.867427] random: sshd: uninitialized urandom read (32 bytes read) [ 192.963861] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.51' (ECDSA) to the list of known hosts. [ 198.563555] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/01 05:12:08 parsed 1 programs [ 199.799245] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/01 05:12:09 executed programs: 0 [ 200.911204] IPVS: ftp: loaded support on port[0] = 21 [ 200.933562] IPVS: ftp: loaded support on port[0] = 21 [ 200.936965] IPVS: ftp: loaded support on port[0] = 21 [ 200.942667] IPVS: ftp: loaded support on port[0] = 21 [ 200.953837] IPVS: ftp: loaded support on port[0] = 21 [ 200.962403] IPVS: ftp: loaded support on port[0] = 21 [ 200.970719] IPVS: ftp: loaded support on port[0] = 21 [ 200.977408] IPVS: ftp: loaded support on port[0] = 21 [ 202.318424] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.325102] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.332476] device bridge_slave_0 entered promiscuous mode [ 202.352717] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.359126] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.367287] device bridge_slave_0 entered promiscuous mode [ 202.397150] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.403531] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.411215] device bridge_slave_0 entered promiscuous mode [ 202.420496] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.427025] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.440359] device bridge_slave_1 entered promiscuous mode [ 202.448281] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.454686] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.461698] device bridge_slave_0 entered promiscuous mode [ 202.469664] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.476021] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.484269] device bridge_slave_0 entered promiscuous mode [ 202.493334] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.499702] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.507433] device bridge_slave_1 entered promiscuous mode [ 202.530247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 202.547359] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.553780] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.563768] device bridge_slave_1 entered promiscuous mode [ 202.570951] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.577498] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.585516] device bridge_slave_0 entered promiscuous mode [ 202.593337] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.599753] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.609019] device bridge_slave_1 entered promiscuous mode [ 202.617890] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 202.627583] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.633980] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.643319] device bridge_slave_0 entered promiscuous mode [ 202.652360] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.658800] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.666838] device bridge_slave_1 entered promiscuous mode [ 202.674878] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 202.683576] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.689974] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.700387] device bridge_slave_0 entered promiscuous mode [ 202.711439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 202.720743] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 202.739576] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 202.748673] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.755123] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.778124] device bridge_slave_1 entered promiscuous mode [ 202.790904] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.797408] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.805347] device bridge_slave_1 entered promiscuous mode [ 202.814704] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 202.834006] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 202.843118] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 202.858362] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 202.865468] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.872099] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.901190] device bridge_slave_1 entered promiscuous mode [ 202.919477] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 202.928718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 202.937917] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 202.960808] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 202.970764] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 202.997888] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 203.060410] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 203.080956] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 203.115044] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 203.138029] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 203.154697] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 203.167688] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 203.193816] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 203.215668] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 203.225161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.254552] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 203.269820] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 203.298688] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 203.311533] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 203.320498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.338546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 203.346731] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 203.368664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.401956] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 203.417553] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 203.449804] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 203.507469] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 203.556150] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 203.634983] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 203.651338] team0: Port device team_slave_0 added [ 203.691605] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 203.711001] team0: Port device team_slave_0 added [ 203.732884] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 203.746401] team0: Port device team_slave_0 added [ 203.774672] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 203.784202] team0: Port device team_slave_1 added [ 203.794669] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 203.804694] team0: Port device team_slave_0 added [ 203.821230] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 203.834750] team0: Port device team_slave_1 added [ 203.843682] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 203.852507] team0: Port device team_slave_1 added [ 203.869532] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 203.877004] team0: Port device team_slave_0 added [ 203.891379] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 203.899045] team0: Port device team_slave_1 added [ 203.922632] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 203.931784] team0: Port device team_slave_0 added [ 203.942598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.952669] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.979542] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 203.986974] team0: Port device team_slave_1 added [ 203.994825] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 204.004327] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 204.013232] team0: Port device team_slave_1 added [ 204.032533] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 204.039673] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 204.046575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.059747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.077934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.085806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.093524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.101346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.111577] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 204.118645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.126840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.135141] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 204.142268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.150841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.161176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 204.171707] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 204.184358] team0: Port device team_slave_0 added [ 204.191159] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 204.200762] team0: Port device team_slave_0 added [ 204.208360] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 204.216398] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 204.223927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.234620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.253583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.261806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.269517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.277371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.286860] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 204.293994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.302320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.315914] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 204.323437] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 204.335588] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 204.345640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.357169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.366592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.377126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.384900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.392806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.402525] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 204.410641] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 204.419222] team0: Port device team_slave_1 added [ 204.426270] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 204.437464] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 204.453753] team0: Port device team_slave_1 added [ 204.459653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.474519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.482702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.490565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.499496] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 204.506698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.515163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.525545] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 204.532859] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 204.541157] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 204.551501] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 204.560867] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 204.578001] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 204.584917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.597539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.620295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.628046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.635770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.643668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.651442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.659343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.667594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.675654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.683506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.691241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.699007] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 204.705934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.714315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.725044] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 204.743699] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 204.758425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.789805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.808993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.816713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.824631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.854803] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 204.865507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.880862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.901886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.914365] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 204.940334] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 204.947683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.965236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.995035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.003121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.061369] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 205.068577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.079716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.630450] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.636981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.644015] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.650466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.666693] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.678208] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.684607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.691310] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.697759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.706875] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.720255] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.726664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.733360] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.739752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.747906] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.762609] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.769027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.775771] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.782167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.795605] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.808142] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.814572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.821264] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.827660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.849395] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.868880] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.875293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.882012] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.888420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.919213] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.941548] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.947977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.954751] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.961147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.972031] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.987413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.999469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.028725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.047318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.054558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.061896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.069479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.246303] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.252723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.259477] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.265877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.276117] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 207.030560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.994349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.112616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.170568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.195098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.208731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.226745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.247351] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 209.327748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.360462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.463968] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 209.487579] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 209.515893] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 209.533222] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 209.544905] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 209.580585] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 209.586936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.597650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.623151] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 209.767550] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 209.775003] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 209.783016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.791963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.823949] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 209.833550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.847139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.860989] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 209.868986] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 209.875150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.882501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.897607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.904841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.929030] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 209.937942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.948976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.988492] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.073021] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 210.079714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.087634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.123100] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 210.135312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.145720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.178215] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.194214] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.205553] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.218451] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.310958] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.352571] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.521356] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.993695] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 2018/09/01 05:12:21 executed programs: 8 2018/09/01 05:12:26 executed programs: 228 [ 222.122340] ================================================================== [ 222.129881] BUG: KASAN: use-after-free in finish_task_switch+0x544/0x870 [ 222.136747] Read of size 8 at addr ffff8801c88384d8 by task syz-executor3/8093 [ 222.144102] [ 222.145735] CPU: 0 PID: 8093 Comm: syz-executor3 Not tainted 4.19.0-rc1-next-20180831+ #53 [ 222.154129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.163481] Call Trace: [ 222.166073] dump_stack+0x1c9/0x2b4 [ 222.169709] ? dump_stack_print_info.cold.2+0x52/0x52 [ 222.175425] ? printk+0xa7/0xcf [ 222.178708] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 222.183471] ? finish_task_switch+0x544/0x870 [ 222.187982] print_address_description+0x6c/0x20b [ 222.192830] ? finish_task_switch+0x544/0x870 [ 222.197327] kasan_report.cold.7+0x242/0x30d [ 222.201761] __asan_report_load8_noabort+0x14/0x20 [ 222.206704] finish_task_switch+0x544/0x870 [ 222.211037] ? __switch_to_asm+0x40/0x70 [ 222.215104] ? __switch_to_asm+0x34/0x70 [ 222.219173] ? preempt_notifier_register+0x200/0x200 [ 222.224277] ? __switch_to_asm+0x34/0x70 [ 222.228349] ? __switch_to_asm+0x34/0x70 [ 222.232420] ? __switch_to_asm+0x40/0x70 [ 222.236486] ? __switch_to_asm+0x34/0x70 [ 222.240561] ? __switch_to_asm+0x40/0x70 [ 222.244625] ? __switch_to_asm+0x34/0x70 [ 222.248686] ? __switch_to_asm+0x40/0x70 [ 222.252746] ? __switch_to_asm+0x34/0x70 [ 222.256821] ? __switch_to_asm+0x34/0x70 [ 222.260899] ? __switch_to_asm+0x40/0x70 [ 222.264985] ? __switch_to_asm+0x34/0x70 [ 222.269046] ? __switch_to_asm+0x40/0x70 [ 222.273113] ? __switch_to_asm+0x34/0x70 [ 222.277176] ? __switch_to_asm+0x40/0x70 [ 222.281455] __schedule+0x884/0x1df0 [ 222.285181] ? __sched_text_start+0x8/0x8 [ 222.289334] ? __fget+0x4d5/0x740 [ 222.292807] ? ksys_dup3+0x690/0x690 [ 222.296543] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 222.302257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 222.307800] ? do_vfs_ioctl+0x201/0x1720 [ 222.311859] schedule+0xfb/0x450 [ 222.315230] ? ioctl_preallocate+0x300/0x300 [ 222.319639] ? __schedule+0x1df0/0x1df0 [ 222.323633] ? exit_to_usermode_loop+0x8c/0x380 [ 222.328302] ? exit_to_usermode_loop+0x8c/0x380 [ 222.332972] ? lockdep_hardirqs_on+0x421/0x5c0 [ 222.337557] ? trace_hardirqs_on+0xbd/0x2c0 [ 222.341893] ? do_syscall_64+0x6be/0x820 [ 222.345957] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 222.351067] ? __x64_sys_futex+0x47f/0x6a0 [ 222.355325] exit_to_usermode_loop+0x22f/0x380 [ 222.359919] ? syscall_slow_exit_work+0x490/0x490 [ 222.364762] ? ksys_ioctl+0x81/0xd0 [ 222.368407] do_syscall_64+0x6be/0x820 [ 222.372299] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 222.377669] ? syscall_return_slowpath+0x5e0/0x5e0 [ 222.382617] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 222.387636] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 222.392666] ? recalc_sigpending_tsk+0x180/0x180 [ 222.397423] ? kasan_check_write+0x14/0x20 [ 222.401672] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 222.406526] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 222.411727] RIP: 0033:0x457099 [ 222.414928] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 222.433826] RSP: 002b:00007fb60c5becf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 222.441539] RAX: 0000000000000001 RBX: 0000000000930148 RCX: 0000000000457099 [ 222.448806] RDX: 0000000000000016 RSI: 0000000000000081 RDI: 000000000093014c [ 222.456075] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 222.463354] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000093014c [ 222.470632] R13: 00007fff1bef990f R14: 00007fb60c5bf9c0 R15: 0000000000000001 [ 222.477917] [ 222.479544] Allocated by task 8085: [ 222.483183] save_stack+0x43/0xd0 [ 222.486637] kasan_kmalloc+0xc4/0xe0 [ 222.490358] kasan_slab_alloc+0x12/0x20 [ 222.494346] kmem_cache_alloc+0x12e/0x710 [ 222.498508] vmx_create_vcpu+0xcf/0x2830 [ 222.502576] kvm_arch_vcpu_create+0xe5/0x220 [ 222.506984] kvm_vm_ioctl+0x488/0x1d80 [ 222.510868] do_vfs_ioctl+0x1de/0x1720 [ 222.514757] ksys_ioctl+0xa9/0xd0 [ 222.518213] __x64_sys_ioctl+0x73/0xb0 [ 222.522101] do_syscall_64+0x1b9/0x820 [ 222.525996] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 222.531175] [ 222.532800] Freed by task 8083: [ 222.536079] save_stack+0x43/0xd0 [ 222.539536] __kasan_slab_free+0x11a/0x170 [ 222.543770] kasan_slab_free+0xe/0x10 [ 222.547570] kmem_cache_free+0x86/0x280 [ 222.551543] vmx_free_vcpu+0x26b/0x300 [ 222.555430] kvm_arch_destroy_vm+0x365/0x7c0 [ 222.559842] kvm_put_kvm+0x73f/0x1060 [ 222.563642] kvm_vcpu_release+0x7b/0xa0 [ 222.567614] __fput+0x3c1/0xa80 [ 222.570891] ____fput+0x15/0x20 [ 222.574173] task_work_run+0x1e8/0x2a0 [ 222.578061] exit_to_usermode_loop+0x318/0x380 [ 222.582649] do_syscall_64+0x6be/0x820 [ 222.586541] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 222.591720] [ 222.593367] The buggy address belongs to the object at ffff8801c88384c0 [ 222.593367] which belongs to the cache kvm_vcpu(65:syz3) of size 23872 [ 222.606721] The buggy address is located 24 bytes inside of [ 222.606721] 23872-byte region [ffff8801c88384c0, ffff8801c883e200) [ 222.618682] The buggy address belongs to the page: [ 222.623614] page:ffffea0007220e00 count:1 mapcount:0 mapping:ffff8801bafa87c0 index:0x0 compound_mapcount: 0 [ 222.633585] flags: 0x2fffc0000008100(slab|head) [ 222.638259] raw: 02fffc0000008100 ffffea0006f12a08 ffffea0006d42808 ffff8801bafa87c0 [ 222.646142] raw: 0000000000000000 ffff8801c88384c0 0000000100000001 ffff8801bee4c3c0 [ 222.654011] page dumped because: kasan: bad access detected [ 222.659710] page->mem_cgroup:ffff8801bee4c3c0 [ 222.664195] [ 222.665826] Memory state around the buggy address: [ 222.670766] ffff8801c8838380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 222.678138] ffff8801c8838400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 222.685520] >ffff8801c8838480: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 222.692869] ^ [ 222.699103] ffff8801c8838500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.706460] ffff8801c8838580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.713833] ================================================================== [ 222.721193] Disabling lock debugging due to kernel taint [ 222.727571] Kernel panic - not syncing: panic_on_warn set ... [ 222.727571] [ 222.734983] CPU: 0 PID: 8093 Comm: syz-executor3 Tainted: G B 4.19.0-rc1-next-20180831+ #53 [ 222.744767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.754125] Call Trace: [ 222.756737] dump_stack+0x1c9/0x2b4 [ 222.760391] ? dump_stack_print_info.cold.2+0x52/0x52 [ 222.765596] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 222.770380] panic+0x238/0x4e7 [ 222.773585] ? add_taint.cold.5+0x16/0x16 [ 222.777742] ? trace_hardirqs_on+0xb4/0x2c0 [ 222.782072] ? trace_hardirqs_on+0x9a/0x2c0 [ 222.786405] ? finish_task_switch+0x544/0x870 [ 222.790913] kasan_end_report+0x47/0x4f [ 222.794898] kasan_report.cold.7+0x76/0x30d [ 222.799236] __asan_report_load8_noabort+0x14/0x20 [ 222.804182] finish_task_switch+0x544/0x870 [ 222.808515] ? __switch_to_asm+0x40/0x70 [ 222.812586] ? __switch_to_asm+0x34/0x70 [ 222.816659] ? preempt_notifier_register+0x200/0x200 [ 222.821770] ? __switch_to_asm+0x34/0x70 [ 222.825839] ? __switch_to_asm+0x34/0x70 [ 222.829932] ? __switch_to_asm+0x40/0x70 [ 222.834001] ? __switch_to_asm+0x34/0x70 [ 222.838190] ? __switch_to_asm+0x40/0x70 [ 222.842259] ? __switch_to_asm+0x34/0x70 [ 222.846329] ? __switch_to_asm+0x40/0x70 [ 222.850427] ? __switch_to_asm+0x34/0x70 [ 222.854500] ? __switch_to_asm+0x34/0x70 [ 222.858567] ? __switch_to_asm+0x40/0x70 [ 222.862663] ? __switch_to_asm+0x34/0x70 [ 222.866739] ? __switch_to_asm+0x40/0x70 [ 222.870820] ? __switch_to_asm+0x34/0x70 [ 222.874889] ? __switch_to_asm+0x40/0x70 [ 222.878958] __schedule+0x884/0x1df0 [ 222.882681] ? __sched_text_start+0x8/0x8 [ 222.886836] ? __fget+0x4d5/0x740 [ 222.890300] ? ksys_dup3+0x690/0x690 [ 222.894040] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 222.899767] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 222.905350] ? do_vfs_ioctl+0x201/0x1720 [ 222.909431] schedule+0xfb/0x450 [ 222.912810] ? ioctl_preallocate+0x300/0x300 [ 222.917225] ? __schedule+0x1df0/0x1df0 [ 222.921213] ? exit_to_usermode_loop+0x8c/0x380 [ 222.925892] ? exit_to_usermode_loop+0x8c/0x380 [ 222.930572] ? lockdep_hardirqs_on+0x421/0x5c0 [ 222.935178] ? trace_hardirqs_on+0xbd/0x2c0 [ 222.939508] ? do_syscall_64+0x6be/0x820 [ 222.943578] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 222.948692] ? __x64_sys_futex+0x47f/0x6a0 [ 222.952937] exit_to_usermode_loop+0x22f/0x380 [ 222.957538] ? syscall_slow_exit_work+0x490/0x490 [ 222.962398] ? ksys_ioctl+0x81/0xd0 [ 222.966048] do_syscall_64+0x6be/0x820 [ 222.969949] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 222.975322] ? syscall_return_slowpath+0x5e0/0x5e0 [ 222.980279] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 222.985308] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 222.990372] ? recalc_sigpending_tsk+0x180/0x180 [ 222.995140] ? kasan_check_write+0x14/0x20 [ 222.999388] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 223.004246] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 223.009450] RIP: 0033:0x457099 [ 223.012648] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 223.031557] RSP: 002b:00007fb60c5becf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 223.039272] RAX: 0000000000000001 RBX: 0000000000930148 RCX: 0000000000457099 [ 223.046575] RDX: 0000000000000016 RSI: 0000000000000081 RDI: 000000000093014c [ 223.053852] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 223.061125] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000093014c [ 223.068399] R13: 00007fff1bef990f R14: 00007fb60c5bf9c0 R15: 0000000000000001 [ 223.075970] Dumping ftrace buffer: [ 223.079501] (ftrace buffer empty) [ 223.083194] Kernel Offset: disabled [ 223.086806] Rebooting in 86400 seconds..