[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 19.976959] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 20.219199] random: sshd: uninitialized urandom read (32 bytes read) [ 20.475010] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.289403] random: sshd: uninitialized urandom read (32 bytes read) [ 21.445605] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.4' (ECDSA) to the list of known hosts. [ 26.899620] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/09 17:02:21 parsed 1 programs [ 28.164808] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/09 17:02:22 executed programs: 0 [ 29.406553] IPVS: ftp: loaded support on port[0] = 21 [ 29.406559] IPVS: ftp: loaded support on port[0] = 21 [ 29.415588] IPVS: ftp: loaded support on port[0] = 21 [ 29.421901] IPVS: ftp: loaded support on port[0] = 21 [ 29.424461] IPVS: ftp: loaded support on port[0] = 21 [ 29.441751] IPVS: ftp: loaded support on port[0] = 21 [ 29.452856] IPVS: ftp: loaded support on port[0] = 21 [ 29.461150] IPVS: ftp: loaded support on port[0] = 21 [ 30.246774] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.253317] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.267551] device bridge_slave_0 entered promiscuous mode [ 30.276895] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.283298] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.290971] device bridge_slave_0 entered promiscuous mode [ 30.298438] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.304923] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.312433] device bridge_slave_0 entered promiscuous mode [ 30.321129] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.327520] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.335145] device bridge_slave_0 entered promiscuous mode [ 30.350657] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.357085] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.365085] device bridge_slave_0 entered promiscuous mode [ 30.373583] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.380159] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.388941] device bridge_slave_0 entered promiscuous mode [ 30.396406] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.402942] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.412176] device bridge_slave_0 entered promiscuous mode [ 30.421262] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.427679] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.435117] device bridge_slave_1 entered promiscuous mode [ 30.442684] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.449215] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.457283] device bridge_slave_1 entered promiscuous mode [ 30.465296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.471701] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.478861] device bridge_slave_1 entered promiscuous mode [ 30.485936] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.492332] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.502511] device bridge_slave_1 entered promiscuous mode [ 30.511468] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.517902] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.526836] device bridge_slave_1 entered promiscuous mode [ 30.535964] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.542365] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.555917] device bridge_slave_1 entered promiscuous mode [ 30.563883] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 30.572984] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.579395] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.588592] device bridge_slave_1 entered promiscuous mode [ 30.596520] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 30.603873] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.610376] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.618313] device bridge_slave_0 entered promiscuous mode [ 30.627481] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 30.636845] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 30.645378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 30.652997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 30.661736] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 30.671551] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 30.681273] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 30.693484] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.699918] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.724829] device bridge_slave_1 entered promiscuous mode [ 30.732857] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 30.748968] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 30.759144] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 30.766621] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 30.782284] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 30.789736] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 30.857903] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 30.912142] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 30.942279] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 30.960475] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 30.980753] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 30.999832] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 31.010238] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 31.047261] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 31.058761] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 31.067832] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 31.078313] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 31.094189] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 31.109629] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 31.116971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.128933] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 31.138778] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 31.147660] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 31.156901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.177703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 31.187639] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 31.196762] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 31.207257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.220796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.235948] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 31.248879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 31.257868] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 31.265315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 31.272668] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 31.280379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.305736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.313804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.321597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.331644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 31.339304] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 31.349636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.377673] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 31.386315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.536183] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 31.545921] team0: Port device team_slave_0 added [ 31.553471] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 31.561929] team0: Port device team_slave_0 added [ 31.569517] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 31.577222] team0: Port device team_slave_0 added [ 31.585358] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 31.593999] team0: Port device team_slave_0 added [ 31.610161] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 31.621660] team0: Port device team_slave_0 added [ 31.633142] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 31.640772] team0: Port device team_slave_1 added [ 31.647471] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 31.659252] team0: Port device team_slave_0 added [ 31.669532] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 31.678674] team0: Port device team_slave_1 added [ 31.702125] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 31.712477] team0: Port device team_slave_1 added [ 31.720442] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 31.728499] team0: Port device team_slave_1 added [ 31.738680] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 31.749074] team0: Port device team_slave_1 added [ 31.762524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.773874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.793782] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 31.801305] team0: Port device team_slave_0 added [ 31.807384] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 31.814688] team0: Port device team_slave_1 added [ 31.820527] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 31.828958] team0: Port device team_slave_0 added [ 31.846116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.868711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.891196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.898923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.906878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.915565] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 31.922802] team0: Port device team_slave_1 added [ 31.930511] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 31.937832] team0: Port device team_slave_1 added [ 31.945331] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 31.954930] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 31.963875] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 31.971565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 31.981520] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 31.989552] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 31.996862] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 32.004249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.017410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.043206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.051208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.058768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.066658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.074525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.082364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.089799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.097834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.105419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.113130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.120595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.128468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.138212] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 32.145372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.153564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.163958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 32.170859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.179491] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.189659] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 32.197211] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 32.205294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.218652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.226897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.236475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.244201] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 32.251369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.259607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.269495] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 32.278335] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 32.291818] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 32.300265] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 32.308236] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 32.315416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.339111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.356885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.365012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.373091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.380901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.388733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.396639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.404425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.412363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.421779] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 32.433507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.441906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.451558] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 32.460451] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 32.468351] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 32.475423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.493862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.503113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.511711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.519478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.527582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.542608] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 32.549799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.562012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.577556] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 32.587118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.595793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.612559] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 32.619865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.631325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.642762] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 32.666956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.678655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.220023] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.226609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.233837] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.240246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.248835] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.264919] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.271347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.277998] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.284408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.293784] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.309996] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.316444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.323168] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.329566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.351377] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.360829] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.367261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.373935] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.380340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.388555] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.397766] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.404190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.410823] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.417189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.425791] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.510859] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.517275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.523952] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.530345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.547232] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.556657] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.563090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.569736] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.576109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.585879] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.612169] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.618615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.625309] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.631727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.649553] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 33.953462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.964568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.982279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.989656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.997342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.004704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.012263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.019858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.094483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.120700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.186720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.203175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.225791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.315172] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 36.369402] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 36.396286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.414124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.431984] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 36.448661] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 36.511074] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 36.520843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.599170] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 36.605467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.619764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.643089] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 36.649714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.672278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.704684] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 36.711489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.737339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.751050] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 36.759791] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 36.771822] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 36.780525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.792108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.811542] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 36.817804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.826876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.919667] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 36.936526] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.956874] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.996452] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.016607] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 37.026949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.039913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.060803] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.088527] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.105980] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 37.123525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.131700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.226858] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 37.233193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.247583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.275226] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.378436] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.539199] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.630724] ================================================================== [ 38.638299] BUG: KASAN: slab-out-of-bounds in sha512_final+0x34a/0x3e0 [ 38.644971] Write of size 8 at addr ffff8801b808bf70 by task syz-executor2/6431 [ 38.652408] [ 38.654036] CPU: 1 PID: 6431 Comm: syz-executor2 Not tainted 4.17.0+ #117 [ 38.660987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.670336] Call Trace: [ 38.672935] dump_stack+0x1b9/0x294 [ 38.676564] ? dump_stack_print_info.cold.2+0x52/0x52 [ 38.681752] ? printk+0x9e/0xba [ 38.685033] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 38.689807] ? kasan_check_write+0x14/0x20 [ 38.694049] print_address_description+0x6c/0x20b [ 38.698908] ? sha512_final+0x34a/0x3e0 [ 38.702886] kasan_report.cold.7+0x242/0x2fe [ 38.707300] __asan_report_store8_noabort+0x17/0x20 [ 38.712317] sha512_final+0x34a/0x3e0 [ 38.716127] crypto_shash_final+0x104/0x260 [ 38.720502] ? sha512_generic_block_fn+0x70/0x70 [ 38.725269] __keyctl_dh_compute+0x1184/0x1bc0 [ 38.729868] ? copy_overflow+0x30/0x30 [ 38.733779] ? find_held_lock+0x36/0x1c0 [ 38.737853] ? lock_downgrade+0x8e0/0x8e0 [ 38.742008] ? check_same_owner+0x320/0x320 [ 38.746332] ? kasan_check_write+0x14/0x20 [ 38.750570] ? do_raw_spin_lock+0xc1/0x200 [ 38.754820] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 38.760359] ? _copy_from_user+0xdf/0x150 [ 38.764514] compat_keyctl_dh_compute+0x2c8/0x3e0 [ 38.769366] ? __x32_compat_sys_keyctl+0x3b0/0x3b0 [ 38.774309] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 38.779521] __ia32_compat_sys_keyctl+0x137/0x3b0 [ 38.784374] do_fast_syscall_32+0x345/0xf9b [ 38.788701] ? do_int80_syscall_32+0x880/0x880 [ 38.793291] ? _raw_spin_unlock_irq+0x27/0x70 [ 38.797789] ? finish_task_switch+0x1ca/0x840 [ 38.802309] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 38.807852] ? syscall_return_slowpath+0x30f/0x5c0 [ 38.812790] ? sysret32_from_system_call+0x5/0x46 [ 38.817642] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.822497] entry_SYSENTER_compat+0x70/0x7f [ 38.826908] RIP: 0023:0xf7fb1cb9 [ 38.830261] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 38.849617] RSP: 002b:00000000f7fad0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000120 [ 38.857327] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000020000080 [ 38.864595] RDX: 00000000200003c0 RSI: 0000000000000043 RDI: 0000000020000600 [ 38.871861] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 38.879128] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 38.886395] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 38.893671] [ 38.895295] Allocated by task 6431: [ 38.898922] save_stack+0x43/0xd0 [ 38.902376] kasan_kmalloc+0xc4/0xe0 [ 38.906086] __kmalloc+0x14e/0x760 [ 38.909628] __keyctl_dh_compute+0xfe9/0x1bc0 [ 38.914122] compat_keyctl_dh_compute+0x2c8/0x3e0 [ 38.918995] __ia32_compat_sys_keyctl+0x137/0x3b0 [ 38.923836] do_fast_syscall_32+0x345/0xf9b [ 38.928166] entry_SYSENTER_compat+0x70/0x7f [ 38.932564] [ 38.934185] Freed by task 5263: [ 38.937466] save_stack+0x43/0xd0 [ 38.940928] __kasan_slab_free+0x11a/0x170 [ 38.945166] kasan_slab_free+0xe/0x10 [ 38.948975] kfree+0xd9/0x260 [ 38.952165] rcu_process_callbacks+0xfc5/0x1760 [ 38.956836] __do_softirq+0x2e0/0xaf5 [ 38.960627] [ 38.962255] The buggy address belongs to the object at ffff8801b808bf00 [ 38.962255] which belongs to the cache kmalloc-128 of size 128 [ 38.974922] The buggy address is located 112 bytes inside of [ 38.974922] 128-byte region [ffff8801b808bf00, ffff8801b808bf80) [ 38.986795] The buggy address belongs to the page: [ 38.991728] page:ffffea0006e022c0 count:1 mapcount:0 mapping:ffff8801da800640 index:0x0 [ 38.999875] flags: 0x2fffc0000000100(slab) [ 39.004117] raw: 02fffc0000000100 ffffea0006db2648 ffffea000708c808 ffff8801da800640 [ 39.012003] raw: 0000000000000000 ffff8801b808b000 0000000100000015 0000000000000000 [ 39.019876] page dumped because: kasan: bad access detected [ 39.025577] [ 39.027195] Memory state around the buggy address: [ 39.032122] ffff8801b808be00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 39.039487] ffff8801b808be80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 39.046937] >ffff8801b808bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 39.054289] ^ [ 39.061301] ffff8801b808bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 39.068660] ffff8801b808c000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.076019] ================================================================== [ 39.083371] Disabling lock debugging due to kernel taint [ 39.090605] Kernel panic - not syncing: panic_on_warn set ... [ 39.090605] [ 39.097987] CPU: 1 PID: 6431 Comm: syz-executor2 Tainted: G B 4.17.0+ #117 [ 39.106290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.115635] Call Trace: [ 39.118225] dump_stack+0x1b9/0x294 [ 39.121851] ? dump_stack_print_info.cold.2+0x52/0x52 [ 39.127041] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 39.131793] ? sha512_final+0x290/0x3e0 [ 39.135765] panic+0x22f/0x4de [ 39.138973] ? add_taint.cold.5+0x16/0x16 [ 39.143130] ? do_raw_spin_unlock+0x9e/0x2e0 [ 39.147535] ? do_raw_spin_unlock+0x9e/0x2e0 [ 39.151941] ? sha512_final+0x34a/0x3e0 [ 39.155924] kasan_end_report+0x47/0x4f [ 39.159898] kasan_report.cold.7+0x76/0x2fe [ 39.164226] __asan_report_store8_noabort+0x17/0x20 [ 39.169239] sha512_final+0x34a/0x3e0 [ 39.173039] crypto_shash_final+0x104/0x260 [ 39.177358] ? sha512_generic_block_fn+0x70/0x70 [ 39.182112] __keyctl_dh_compute+0x1184/0x1bc0 [ 39.186698] ? copy_overflow+0x30/0x30 [ 39.190601] ? find_held_lock+0x36/0x1c0 [ 39.194668] ? lock_downgrade+0x8e0/0x8e0 [ 39.198818] ? check_same_owner+0x320/0x320 [ 39.203137] ? kasan_check_write+0x14/0x20 [ 39.207368] ? do_raw_spin_lock+0xc1/0x200 [ 39.211607] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 39.217140] ? _copy_from_user+0xdf/0x150 [ 39.221288] compat_keyctl_dh_compute+0x2c8/0x3e0 [ 39.226130] ? __x32_compat_sys_keyctl+0x3b0/0x3b0 [ 39.231064] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 39.236253] __ia32_compat_sys_keyctl+0x137/0x3b0 [ 39.241098] do_fast_syscall_32+0x345/0xf9b [ 39.245429] ? do_int80_syscall_32+0x880/0x880 [ 39.250007] ? _raw_spin_unlock_irq+0x27/0x70 [ 39.254507] ? finish_task_switch+0x1ca/0x840 [ 39.259003] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 39.264539] ? syscall_return_slowpath+0x30f/0x5c0 [ 39.269470] ? sysret32_from_system_call+0x5/0x46 [ 39.274317] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 39.279160] entry_SYSENTER_compat+0x70/0x7f [ 39.283565] RIP: 0023:0xf7fb1cb9 [ 39.286939] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 39.306186] RSP: 002b:00000000f7fad0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000120 [ 39.313895] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000020000080 [ 39.321161] RDX: 00000000200003c0 RSI: 0000000000000043 RDI: 0000000020000600 [ 39.328440] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 39.335751] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 39.343013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 39.350761] Dumping ftrace buffer: [ 39.354285] (ftrace buffer empty) [ 39.357977] Kernel Offset: disabled [ 39.361586] Rebooting in 86400 seconds..