[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 21.459489] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 23.845672] random: sshd: uninitialized urandom read (32 bytes read) [ 24.090105] random: sshd: uninitialized urandom read (32 bytes read) [ 24.644816] random: sshd: uninitialized urandom read (32 bytes read) [ 28.717979] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.8' (ECDSA) to the list of known hosts. [ 34.423265] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/27 06:08:57 parsed 1 programs [ 35.490433] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/27 06:08:59 executed programs: 0 [ 36.549432] IPVS: ftp: loaded support on port[0] = 21 [ 36.556356] IPVS: ftp: loaded support on port[0] = 21 [ 36.572037] IPVS: ftp: loaded support on port[0] = 21 [ 36.579348] IPVS: ftp: loaded support on port[0] = 21 [ 36.580397] IPVS: ftp: loaded support on port[0] = 21 [ 36.588436] IPVS: ftp: loaded support on port[0] = 21 [ 36.617786] IPVS: ftp: loaded support on port[0] = 21 [ 36.618559] IPVS: ftp: loaded support on port[0] = 21 [ 37.644154] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.650664] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.663823] device bridge_slave_0 entered promiscuous mode [ 37.701739] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.708175] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.720939] device bridge_slave_0 entered promiscuous mode [ 37.750017] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.756417] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.768130] device bridge_slave_0 entered promiscuous mode [ 37.777590] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.784018] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.792503] device bridge_slave_0 entered promiscuous mode [ 37.812584] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.819025] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.828499] device bridge_slave_0 entered promiscuous mode [ 37.840427] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.846964] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.855145] device bridge_slave_1 entered promiscuous mode [ 37.864391] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.870796] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.879351] device bridge_slave_1 entered promiscuous mode [ 37.887932] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.894527] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.902098] device bridge_slave_1 entered promiscuous mode [ 37.910895] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.917302] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.924902] device bridge_slave_1 entered promiscuous mode [ 37.933956] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.940347] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.948241] device bridge_slave_0 entered promiscuous mode [ 37.965613] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 37.974412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 37.981551] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.987947] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.008344] device bridge_slave_0 entered promiscuous mode [ 38.017149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 38.024779] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.031173] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.041902] device bridge_slave_1 entered promiscuous mode [ 38.052501] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.058888] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.067777] device bridge_slave_1 entered promiscuous mode [ 38.077105] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.083564] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.091983] device bridge_slave_0 entered promiscuous mode [ 38.100440] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 38.109289] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 38.118644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 38.129879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 38.137507] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 38.145876] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 38.156299] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.162840] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.196908] device bridge_slave_1 entered promiscuous mode [ 38.205745] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.212146] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.219642] device bridge_slave_1 entered promiscuous mode [ 38.236490] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 38.245507] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 38.254565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 38.262075] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 38.294248] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 38.369149] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 38.385805] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 38.432112] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.488495] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.511169] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.520432] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.531159] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.540505] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.566288] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.579112] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.590402] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.606604] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.619959] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.661297] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.671616] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.685677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 38.692898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 38.700726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.722021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.739408] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 38.748479] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 38.755899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.765066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.775016] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.783107] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 38.792181] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 38.803497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.817315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.834326] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 38.841270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.853896] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.864015] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 38.875060] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.886383] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 38.895890] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 38.904843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 38.912637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.938251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.949601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.957219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.160690] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.172676] team0: Port device team_slave_0 added [ 39.182216] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.191293] team0: Port device team_slave_0 added [ 39.199189] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.207789] team0: Port device team_slave_0 added [ 39.214216] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.224005] team0: Port device team_slave_0 added [ 39.231996] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.239793] team0: Port device team_slave_0 added [ 39.266641] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.275966] team0: Port device team_slave_0 added [ 39.286616] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.298449] team0: Port device team_slave_1 added [ 39.311022] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.322275] team0: Port device team_slave_1 added [ 39.328183] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.335766] team0: Port device team_slave_1 added [ 39.343173] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.354934] team0: Port device team_slave_1 added [ 39.360816] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.368369] team0: Port device team_slave_1 added [ 39.376154] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.385895] team0: Port device team_slave_0 added [ 39.393700] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.401344] team0: Port device team_slave_1 added [ 39.419521] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 39.431146] team0: Port device team_slave_0 added [ 39.443386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.464216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.476992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.491939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 39.498883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.507160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.518498] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 39.528177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 39.536338] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 39.544095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.554272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.570659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.581856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.589395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.597256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.606132] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.613416] team0: Port device team_slave_1 added [ 39.620149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 39.628889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.637191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.648113] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.657589] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 39.664871] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 39.672646] team0: Port device team_slave_1 added [ 39.679395] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 39.687802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 39.695257] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.702658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.716177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.736409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.747511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.755235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.763051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.770454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.778246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.785653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.793501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.803974] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.811655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 39.827971] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.835546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.845113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.853494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.861494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.869643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.877477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.887324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 39.895124] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 39.903030] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.911594] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 39.925563] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 39.933605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 39.940516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.952502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.975623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.989025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.997077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.004955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.012771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.020490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.028322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.036183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.043647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.051419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.061276] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.068779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.078064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.095178] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.107261] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.117038] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.126152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 40.133217] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.145637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.158813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.179966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.189486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.197376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.205508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.213404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.221216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.228863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.236558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.258302] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.272389] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.286653] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.293992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.307418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.334331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.343674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.351432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.359316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.385445] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.397856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.408678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.950395] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.956919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.963889] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.970295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.989510] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.069126] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.075534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.082231] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.088630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.116530] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.125331] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.131762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.138452] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.144865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.152407] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.175263] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.181655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.188387] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.195299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.208476] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.278991] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.285379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.292055] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.298508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.307601] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.319912] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.326815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.333515] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.339911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.347849] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.356953] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.363345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.370037] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.376434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.385243] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.394035] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.400425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.407117] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.413523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.421966] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.446240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.458334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.480800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.491512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.498601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.506176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.513663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.521199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.382026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.412358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.432160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.472501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.497152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.533238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.549620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.574941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.693093] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.707978] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.721164] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.758837] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.803275] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.834284] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.851517] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.883573] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.989986] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.996646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.006496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.025589] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.037978] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.047024] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.054027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.067641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.087337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.100483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.107433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.114636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.198548] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.204969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.214439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.230810] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.239808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.248331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.269389] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.279425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.288471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.314881] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.325164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.347044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.365282] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.390954] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.426759] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.456962] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.547171] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.575483] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.599093] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.655217] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.168258] hrtimer: interrupt took 27846 ns 2018/08/27 06:09:10 executed programs: 8 [ 47.865131] ================================================================== [ 47.872643] BUG: KASAN: use-after-free in ccid_hc_tx_delete+0xe0/0x100 [ 47.879307] Read of size 8 at addr ffff8801b6d720c0 by task ksoftirqd/0/9 [ 47.886256] [ 47.887887] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.19.0-rc1-next-20180827+ #48 [ 47.895852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.905205] Call Trace: [ 47.907809] dump_stack+0x1c9/0x2b4 [ 47.911448] ? dump_stack_print_info.cold.2+0x52/0x52 [ 47.916654] ? printk+0xa7/0xcf [ 47.919941] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 47.924700] ? ccid_hc_tx_delete+0xe0/0x100 [ 47.929042] print_address_description+0x6c/0x20b [ 47.933884] ? ccid_hc_tx_delete+0xe0/0x100 [ 47.938206] kasan_report.cold.7+0x242/0x30d [ 47.942638] __asan_report_load8_noabort+0x14/0x20 [ 47.947565] ccid_hc_tx_delete+0xe0/0x100 [ 47.951713] ? dccp_init_sock+0x4a0/0x4a0 [ 47.955867] dccp_sk_destruct+0x3c/0x80 [ 47.959844] __sk_destruct+0x107/0xa60 [ 47.963740] ? sock_warn_obsolete_bsdism+0xb0/0xb0 [ 47.968674] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 47.973774] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 47.978878] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 47.983467] ? trace_hardirqs_on+0xbd/0x2c0 [ 47.987785] ? kasan_check_read+0x11/0x20 [ 47.991951] ? debug_object_deactivate+0x2eb/0x450 [ 47.996880] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 48.001982] ? lock_acquire+0x1e4/0x4f0 [ 48.005958] ? rcu_process_callbacks+0x1065/0x27c0 [ 48.010893] ? lock_release+0x9f0/0x9f0 [ 48.014866] ? debug_stats_show+0x100/0x100 [ 48.019184] ? __do_softirq+0x2eb/0xa74 [ 48.023156] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 48.028262] ? sock_warn_obsolete_bsdism+0xb0/0xb0 [ 48.033194] rcu_process_callbacks+0xf78/0x27c0 [ 48.037888] ? call_rcu_sched+0x20/0x20 [ 48.041868] ? perf_event_update_userpage+0xd30/0xd30 [ 48.047056] ? graph_lock+0x170/0x170 [ 48.050858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 48.056393] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 48.061580] ? _raw_spin_unlock_irq+0x27/0x70 [ 48.066077] ? find_held_lock+0x36/0x1c0 [ 48.070143] ? _raw_spin_unlock_irq+0x27/0x70 [ 48.074639] ? _raw_spin_unlock_irq+0x27/0x70 [ 48.079133] ? lockdep_hardirqs_on+0x421/0x5c0 [ 48.083713] ? trace_hardirqs_on+0xbd/0x2c0 [ 48.088040] ? kasan_check_read+0x11/0x20 [ 48.092184] ? finish_task_switch+0x1d3/0x870 [ 48.096679] ? compat_start_thread+0x80/0x80 [ 48.101095] ? kasan_check_write+0x14/0x20 [ 48.105331] ? finish_task_switch+0x2ca/0x870 [ 48.109823] ? __switch_to_asm+0x40/0x70 [ 48.113884] ? preempt_notifier_register+0x200/0x200 [ 48.118983] ? __switch_to_asm+0x34/0x70 [ 48.123040] ? __switch_to_asm+0x34/0x70 [ 48.127095] ? __switch_to_asm+0x40/0x70 [ 48.131151] ? __switch_to_asm+0x34/0x70 [ 48.135207] ? __switch_to_asm+0x40/0x70 [ 48.139264] ? __switch_to_asm+0x34/0x70 [ 48.143319] ? __switch_to_asm+0x40/0x70 [ 48.147378] ? __switch_to_asm+0x34/0x70 [ 48.151451] ? __switch_to_asm+0x34/0x70 [ 48.155518] ? __switch_to_asm+0x40/0x70 [ 48.159577] ? __switch_to_asm+0x34/0x70 [ 48.163634] ? __switch_to_asm+0x40/0x70 [ 48.167689] ? __switch_to_asm+0x34/0x70 [ 48.171753] ? __switch_to_asm+0x40/0x70 [ 48.175817] ? __do_softirq+0x278/0xa74 [ 48.179793] ? kasan_check_read+0x11/0x20 [ 48.183937] ? rcu_is_watching+0x8c/0x150 [ 48.188079] ? trace_hardirqs_on+0xbd/0x2c0 [ 48.192603] ? rcu_pm_notify+0xc0/0xc0 [ 48.196505] __do_softirq+0x2eb/0xa74 [ 48.200314] ? __irqentry_text_end+0x1f9f00/0x1f9f00 [ 48.205419] ? schedule+0xfb/0x450 [ 48.208963] ? trace_hardirqs_off+0xb8/0x2b0 [ 48.213371] ? smpboot_thread_fn+0x425/0x880 [ 48.217775] ? trace_hardirqs_on+0x2c0/0x2c0 [ 48.222191] ? check_same_owner+0x340/0x340 [ 48.226526] ? takeover_tasklets+0x9a0/0x9a0 [ 48.230935] ? takeover_tasklets+0x9a0/0x9a0 [ 48.235374] run_ksoftirqd+0x88/0x100 [ 48.239185] smpboot_thread_fn+0x425/0x880 [ 48.243433] ? sort_range+0x30/0x30 [ 48.247072] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 48.252606] ? __kthread_parkme+0x106/0x1b0 [ 48.256931] kthread+0x35a/0x420 [ 48.260295] ? sort_range+0x30/0x30 [ 48.263918] ? kthread_bind+0x40/0x40 [ 48.267719] ret_from_fork+0x3a/0x50 [ 48.271443] [ 48.273071] Allocated by task 6523: [ 48.276696] save_stack+0x43/0xd0 [ 48.280319] kasan_kmalloc+0xc4/0xe0 [ 48.284027] kasan_slab_alloc+0x12/0x20 [ 48.288992] kmem_cache_alloc+0x12e/0x710 [ 48.293823] ccid_new+0x25b/0x3e0 [ 48.297625] dccp_hdlr_ccid+0x27/0x150 [ 48.301865] __dccp_feat_activate+0x184/0x270 [ 48.306359] dccp_feat_activate_values+0x3b6/0x839 [ 48.311289] dccp_rcv_state_process+0x11dc/0x1a30 [ 48.317618] dccp_v6_do_rcv+0x26f/0xb80 [ 48.321597] __release_sock+0x12f/0x3a0 [ 48.326607] release_sock+0xad/0x2c0 [ 48.330342] __inet_stream_connect+0x61f/0x1160 [ 48.335019] inet_stream_connect+0x58/0xa0 [ 48.339269] __sys_connect+0x37d/0x4c0 [ 48.343154] __x64_sys_connect+0x73/0xb0 [ 48.347217] do_syscall_64+0x1b9/0x820 [ 48.351106] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.356290] [ 48.357915] Freed by task 6539: [ 48.362213] save_stack+0x43/0xd0 [ 48.365662] __kasan_slab_free+0x11a/0x170 [ 48.369896] kasan_slab_free+0xe/0x10 [ 48.373694] kmem_cache_free+0x86/0x280 [ 48.377671] ccid_hc_tx_delete+0xc3/0x100 [ 48.381909] dccp_hdlr_ccid+0x7d/0x150 [ 48.385812] __dccp_feat_activate+0x184/0x270 [ 48.391755] dccp_feat_activate_values+0x3b6/0x839 [ 48.396688] dccp_create_openreq_child+0x47a/0x620 [ 48.401622] dccp_v6_request_recv_sock+0x253/0x2040 [ 48.406636] dccp_check_req+0x46e/0x6c0 [ 48.410608] dccp_v6_rcv+0x88e/0x1d9c [ 48.414408] ip6_input_finish+0x407/0x1a40 [ 48.418642] ip6_input+0xe9/0x600 [ 48.422095] ip6_rcv_finish+0x17a/0x330 [ 48.426071] ipv6_rcv+0x11e/0x650 [ 48.429526] __netif_receive_skb_one_core+0x14d/0x200 [ 48.434715] __netif_receive_skb+0x2c/0x1e0 [ 48.439044] process_backlog+0x219/0x760 [ 48.443104] net_rx_action+0x799/0x1900 [ 48.448089] __do_softirq+0x2eb/0xa74 [ 48.451877] [ 48.453502] The buggy address belongs to the object at ffff8801b6d720c0 [ 48.453502] which belongs to the cache ccid2_hc_tx_sock of size 1240 [ 48.466678] The buggy address is located 0 bytes inside of [ 48.466678] 1240-byte region [ffff8801b6d720c0, ffff8801b6d72598) [ 48.479938] The buggy address belongs to the page: [ 48.484863] page:ffffea0006db5c80 count:1 mapcount:0 mapping:ffff8801cd8b5080 index:0x0 compound_mapcount: 0 [ 48.494830] flags: 0x2fffc0000008100(slab|head) [ 48.499505] raw: 02fffc0000008100 ffffea00072e1188 ffffea000726bd88 ffff8801cd8b5080 [ 48.507383] raw: 0000000000000000 ffff8801b6d720c0 0000000100000005 0000000000000000 [ 48.516201] page dumped because: kasan: bad access detected [ 48.521897] [ 48.523516] Memory state around the buggy address: [ 48.528438] ffff8801b6d71f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.535805] ffff8801b6d72000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.543161] >ffff8801b6d72080: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 48.550511] ^ [ 48.555954] ffff8801b6d72100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.563310] ffff8801b6d72180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.570659] ================================================================== [ 48.580510] Disabling lock debugging due to kernel taint [ 48.585996] Kernel panic - not syncing: panic_on_warn set ... [ 48.585996] [ 48.593364] CPU: 0 PID: 9 Comm: ksoftirqd/0 Tainted: G B 4.19.0-rc1-next-20180827+ #48 [ 48.604689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.614041] Call Trace: [ 48.616635] dump_stack+0x1c9/0x2b4 [ 48.620269] ? dump_stack_print_info.cold.2+0x52/0x52 [ 48.627933] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 48.632694] panic+0x238/0x4e7 [ 48.635888] ? add_taint.cold.5+0x16/0x16 [ 48.640046] ? trace_hardirqs_on+0x9a/0x2c0 [ 48.647398] ? trace_hardirqs_on+0xb4/0x2c0 [ 48.651722] ? trace_hardirqs_on+0xb4/0x2c0 [ 48.656051] ? trace_hardirqs_on+0x9a/0x2c0 [ 48.660378] ? ccid_hc_tx_delete+0xe0/0x100 [ 48.664714] kasan_end_report+0x47/0x4f [ 48.671745] kasan_report.cold.7+0x76/0x30d [ 48.676073] __asan_report_load8_noabort+0x14/0x20 [ 48.681011] ccid_hc_tx_delete+0xe0/0x100 [ 48.685161] ? dccp_init_sock+0x4a0/0x4a0 [ 48.689330] dccp_sk_destruct+0x3c/0x80 [ 48.697766] __sk_destruct+0x107/0xa60 [ 48.701671] ? sock_warn_obsolete_bsdism+0xb0/0xb0 [ 48.706616] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 48.711745] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 48.716853] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 48.724938] ? trace_hardirqs_on+0xbd/0x2c0 [ 48.729265] ? kasan_check_read+0x11/0x20 [ 48.737445] ? debug_object_deactivate+0x2eb/0x450 [ 48.742388] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 48.747497] ? lock_acquire+0x1e4/0x4f0 [ 48.751485] ? rcu_process_callbacks+0x1065/0x27c0 [ 48.756423] ? lock_release+0x9f0/0x9f0 [ 48.763441] ? debug_stats_show+0x100/0x100 [ 48.767773] ? __do_softirq+0x2eb/0xa74 [ 48.771773] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 48.781404] ? sock_warn_obsolete_bsdism+0xb0/0xb0 [ 48.786365] rcu_process_callbacks+0xf78/0x27c0 [ 48.791039] ? call_rcu_sched+0x20/0x20 [ 48.795027] ? perf_event_update_userpage+0xd30/0xd30 [ 48.800215] ? graph_lock+0x170/0x170 [ 48.808010] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 48.813547] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 48.818749] ? _raw_spin_unlock_irq+0x27/0x70 [ 48.827714] ? find_held_lock+0x36/0x1c0 [ 48.831797] ? _raw_spin_unlock_irq+0x27/0x70 [ 48.836297] ? _raw_spin_unlock_irq+0x27/0x70 [ 48.840790] ? lockdep_hardirqs_on+0x421/0x5c0 [ 48.845375] ? trace_hardirqs_on+0xbd/0x2c0 [ 48.853661] ? kasan_check_read+0x11/0x20 [ 48.857814] ? finish_task_switch+0x1d3/0x870 [ 48.862312] ? compat_start_thread+0x80/0x80 [ 48.871250] ? kasan_check_write+0x14/0x20 [ 48.875498] ? finish_task_switch+0x2ca/0x870 [ 48.879994] ? __switch_to_asm+0x40/0x70 [ 48.884060] ? preempt_notifier_register+0x200/0x200 [ 48.889167] ? __switch_to_asm+0x34/0x70 [ 48.893231] ? __switch_to_asm+0x34/0x70 [ 48.900816] ? __switch_to_asm+0x40/0x70 [ 48.909876] ? __switch_to_asm+0x34/0x70 [ 48.913936] ? __switch_to_asm+0x40/0x70 [ 48.917996] ? __switch_to_asm+0x34/0x70 [ 48.922055] ? __switch_to_asm+0x40/0x70 [ 48.926115] ? __switch_to_asm+0x34/0x70 [ 48.930178] ? __switch_to_asm+0x34/0x70 [ 48.937259] ? __switch_to_asm+0x40/0x70 [ 48.941321] ? __switch_to_asm+0x34/0x70 [ 48.949848] ? __switch_to_asm+0x40/0x70 [ 48.953907] ? __switch_to_asm+0x34/0x70 [ 48.957968] ? __switch_to_asm+0x40/0x70 [ 48.962040] ? __do_softirq+0x278/0xa74 [ 48.966017] ? kasan_check_read+0x11/0x20 [ 48.970182] ? rcu_is_watching+0x8c/0x150 [ 48.977840] ? trace_hardirqs_on+0xbd/0x2c0 [ 48.982164] ? rcu_pm_notify+0xc0/0xc0 [ 48.991056] __do_softirq+0x2eb/0xa74 [ 48.994865] ? __irqentry_text_end+0x1f9f00/0x1f9f00 [ 49.000002] ? schedule+0xfb/0x450 [ 49.003545] ? trace_hardirqs_off+0xb8/0x2b0 [ 49.007969] ? smpboot_thread_fn+0x425/0x880 [ 49.015405] ? trace_hardirqs_on+0x2c0/0x2c0 [ 49.019846] ? check_same_owner+0x340/0x340 [ 49.029670] ? takeover_tasklets+0x9a0/0x9a0 [ 49.034086] ? takeover_tasklets+0x9a0/0x9a0 [ 49.038505] run_ksoftirqd+0x88/0x100 [ 49.042311] smpboot_thread_fn+0x425/0x880 [ 49.046551] ? sort_range+0x30/0x30 [ 49.053686] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 49.064217] ? __kthread_parkme+0x106/0x1b0 [ 49.068539] kthread+0x35a/0x420 [ 49.071911] ? sort_range+0x30/0x30 [ 49.075541] ? kthread_bind+0x40/0x40 [ 49.079347] ret_from_fork+0x3a/0x50 [ 49.083571] Dumping ftrace buffer: [ 49.090117] (ftrace buffer empty) [ 49.093807] Kernel Offset: disabled [ 49.097414] Rebooting in 86400 seconds..