[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 21.420848] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c[ 21.555844] random: sshd: uninitialized urandom read (32 bytes read) . [ 21.821400] random: sshd: uninitialized urandom read (32 bytes read) [ 22.577535] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 31.871750] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.29' (ECDSA) to the list of known hosts. [ 37.413870] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/07 20:08:14 parsed 1 programs [ 38.906979] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/07 20:08:16 executed programs: 0 [ 40.160835] IPVS: ftp: loaded support on port[0] = 21 [ 40.166744] IPVS: ftp: loaded support on port[0] = 21 [ 40.173239] IPVS: ftp: loaded support on port[0] = 21 [ 40.179472] IPVS: ftp: loaded support on port[0] = 21 [ 40.183578] IPVS: ftp: loaded support on port[0] = 21 [ 40.194352] IPVS: ftp: loaded support on port[0] = 21 [ 40.208174] IPVS: ftp: loaded support on port[0] = 21 [ 40.236046] IPVS: ftp: loaded support on port[0] = 21 [ 40.748262] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.754749] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.772698] device bridge_slave_0 entered promiscuous mode [ 40.780719] ip (4726) used greatest stack depth: 15960 bytes left [ 40.809041] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.815477] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.829068] device bridge_slave_0 entered promiscuous mode [ 40.836882] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.843296] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.850596] device bridge_slave_1 entered promiscuous mode [ 40.870871] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.877322] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.886066] device bridge_slave_0 entered promiscuous mode [ 40.901811] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.908298] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.917577] device bridge_slave_1 entered promiscuous mode [ 40.926136] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 40.933603] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.940080] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.949738] device bridge_slave_0 entered promiscuous mode [ 40.962035] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.968427] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.975830] device bridge_slave_0 entered promiscuous mode [ 40.983429] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.989793] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.997199] device bridge_slave_0 entered promiscuous mode [ 41.005318] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.013930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 41.022899] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.029415] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.039684] device bridge_slave_1 entered promiscuous mode [ 41.052185] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.058636] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.067874] device bridge_slave_1 entered promiscuous mode [ 41.074526] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.080996] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.089762] device bridge_slave_0 entered promiscuous mode [ 41.097711] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.104178] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.111535] device bridge_slave_1 entered promiscuous mode [ 41.126193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.135179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 41.143278] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.149671] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.169604] device bridge_slave_1 entered promiscuous mode [ 41.179366] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.185912] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.193269] device bridge_slave_1 entered promiscuous mode [ 41.201302] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 41.209711] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.216128] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.230583] device bridge_slave_0 entered promiscuous mode [ 41.239007] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.246939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 41.255612] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 41.264148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 41.272616] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.301857] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.308270] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.323984] device bridge_slave_1 entered promiscuous mode [ 41.331947] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.348608] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.360777] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.393428] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.403848] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.437939] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.446799] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 41.478084] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.489049] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.504197] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.528284] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.546047] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 41.554611] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.563849] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.582841] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.592708] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 41.602311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.616144] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 41.623787] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 41.639125] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.647315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.660586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.674014] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.683215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 41.690837] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 41.697928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.711437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.721420] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 41.730311] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 41.737262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.748947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.761368] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 41.769902] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.785123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.802186] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.815611] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 41.831095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 41.845165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.853841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.873273] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 41.880192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.893693] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.913350] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 41.920659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.953587] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.961432] team0: Port device team_slave_0 added [ 41.984936] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.004360] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 42.013601] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.028163] team0: Port device team_slave_1 added [ 42.043389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.069617] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.082128] team0: Port device team_slave_0 added [ 42.089938] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.104007] team0: Port device team_slave_0 added [ 42.135946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.146662] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.155611] team0: Port device team_slave_0 added [ 42.170326] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.181245] team0: Port device team_slave_0 added [ 42.195803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.215647] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.229307] team0: Port device team_slave_1 added [ 42.243991] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.252639] team0: Port device team_slave_1 added [ 42.259495] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.270719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.281988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.292577] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.300117] team0: Port device team_slave_0 added [ 42.307709] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.315562] team0: Port device team_slave_0 added [ 42.332538] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.341294] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.354679] team0: Port device team_slave_1 added [ 42.365294] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.372713] team0: Port device team_slave_1 added [ 42.379250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.389348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.397770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.408280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.417981] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.425352] team0: Port device team_slave_0 added [ 42.439247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.451789] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.462592] team0: Port device team_slave_1 added [ 42.471394] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.482188] team0: Port device team_slave_1 added [ 42.499916] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.508931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.525509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.534062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.541681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.550103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.560180] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 42.567236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.575778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.585473] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 42.593379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.602716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.612761] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.620535] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.628012] team0: Port device team_slave_1 added [ 42.634967] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 42.645190] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 42.653734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.667895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.687764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.695514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.703141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.710817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.719848] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.728128] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.737146] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 42.748463] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 42.756144] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 42.763771] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.773235] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.787117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.813125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.826192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.834316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.842098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.849769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.857332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.865243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.872676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.880432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.887854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.895694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.903650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.911676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.922395] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.931712] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.939584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.949049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.957291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.965283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.975167] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.995864] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.003810] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.011414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.021993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.038230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.050474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.058374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.066098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.073853] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.080988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.089310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.102696] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.112113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.124223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.134599] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.142152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.154666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.235436] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.242619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.255917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.448012] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.454600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.461627] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.468066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.483710] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.559149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.742532] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.748962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.755650] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.762088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.769535] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.840444] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.846858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.853516] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.859918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.871162] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.886678] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.893087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.899807] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.906183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.925611] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.942736] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.949158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.955854] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.962280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.987093] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.996103] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.002521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.009181] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.015541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.023248] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.035667] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.042183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.048829] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.055218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.072419] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.140765] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.147178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.153847] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.160230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.168916] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.575726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.589263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.596647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.604758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.612320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.619652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.627278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.329148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.567363] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.583080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.596584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.705931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.775468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.785896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.793847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.817066] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.864275] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.870749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.885550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.900108] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.954595] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.974498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.035404] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.060927] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.108668] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.129068] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.135560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.143126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.160956] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.185205] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.191809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.202517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.243716] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.250488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.261767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.284348] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.296894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.304646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.332898] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.366771] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.373241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.382404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.399288] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.410968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.424232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.453202] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.495874] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.517393] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.601508] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.631172] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.645876] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.660843] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.667207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.677199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.973162] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/07 20:08:25 executed programs: 8 2018/06/07 20:08:30 executed programs: 282 2018/06/07 20:08:35 executed programs: 561 2018/06/07 20:08:40 executed programs: 848 2018/06/07 20:08:45 executed programs: 1128 2018/06/07 20:08:50 executed programs: 1417 2018/06/07 20:08:55 executed programs: 1704 2018/06/07 20:09:00 executed programs: 1988 2018/06/07 20:09:05 executed programs: 2272 [ 93.523533] bpfilter: read fail -512 invalid request 0 [ 93.531448] ================================================================== [ 93.538988] BUG: KASAN: use-after-free in __vfs_write+0x929/0x960 [ 93.545227] Read of size 8 at addr ffff8801d1c15348 by task syz-executor1/4609 [ 93.553453] [ 93.555097] CPU: 0 PID: 4609 Comm: syz-executor1 Not tainted 4.17.0+ #89 [ 93.561935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.571295] Call Trace: [ 93.573893] dump_stack+0x1b9/0x294 [ 93.577538] ? dump_stack_print_info.cold.2+0x52/0x52 [ 93.582738] ? printk+0x9e/0xba [ 93.586033] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 93.590802] ? kasan_check_write+0x14/0x20 [ 93.595257] print_address_description+0x6c/0x20b [ 93.600103] ? __vfs_write+0x929/0x960 [ 93.604006] kasan_report.cold.7+0x242/0x2fe [ 93.608548] __asan_report_load8_noabort+0x14/0x20 [ 93.613470] __vfs_write+0x929/0x960 [ 93.617174] ? sock_alloc_file+0x1f3/0x4e0 [ 93.621395] ? kernel_read+0x120/0x120 [ 93.625270] ? lock_downgrade+0x8e0/0x8e0 [ 93.629414] ? graph_lock+0x170/0x170 [ 93.633199] ? debug_mutex_init+0x1c/0x60 [ 93.637419] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 93.642432] __kernel_write+0x10c/0x380 [ 93.646395] __bpfilter_process_sockopt+0x1d8/0x35b [ 93.651405] ? ipv6_mc_check_mld+0xf60/0xf60 [ 93.655817] ? lock_downgrade+0x8e0/0x8e0 [ 93.659961] ? lock_release+0xa10/0xa10 [ 93.663934] ? check_same_owner+0x320/0x320 [ 93.668253] ? lock_downgrade+0x8e0/0x8e0 [ 93.672391] ? ipv6_mc_check_mld+0xf60/0xf60 [ 93.676886] bpfilter_mbox_request+0x4d/0xb0 [ 93.681278] bpfilter_ip_get_sockopt+0x6b/0x90 [ 93.685847] ip_getsockopt+0x238/0x2a0 [ 93.689732] ? do_ip_getsockopt+0x2300/0x2300 [ 93.694238] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.699758] ? alloc_file+0x44/0x3e0 [ 93.703469] tcp_getsockopt+0x93/0xe0 [ 93.707270] sock_common_getsockopt+0x9a/0xe0 [ 93.711761] __sys_getsockopt+0x1a5/0x370 [ 93.715924] ? kernel_setsockopt+0x1d0/0x1d0 [ 93.720358] ? __sys_socket+0x19f/0x250 [ 93.724333] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 93.729168] __x64_sys_getsockopt+0xbe/0x150 [ 93.733563] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 93.738576] do_syscall_64+0x1b1/0x800 [ 93.742468] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 93.747396] ? syscall_return_slowpath+0x5c0/0x5c0 [ 93.752320] ? syscall_return_slowpath+0x30f/0x5c0 [ 93.757255] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 93.762615] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 93.767457] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.772642] RIP: 0033:0x4584ea [ 93.775811] Code: b8 34 01 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 1d 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 fa 8e fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 93.795014] RSP: 002b:0000000000a3e328 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 93.802717] RAX: ffffffffffffffda RBX: 0000000000a3e350 RCX: 00000000004584ea [ 93.809971] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 93.817231] RBP: 0000000000705f20 R08: 0000000000a3e34c R09: 0000000000004000 [ 93.824572] R10: 0000000000a3e350 R11: 0000000000000246 R12: 0000000000000003 [ 93.831909] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000703d60 [ 93.839902] [ 93.841533] Allocated by task 2222: [ 93.845151] save_stack+0x43/0xd0 [ 93.848586] kasan_kmalloc+0xc4/0xe0 [ 93.852280] kasan_slab_alloc+0x12/0x20 [ 93.856238] kmem_cache_alloc+0x12e/0x760 [ 93.860365] alloc_inode+0xb2/0x190 [ 93.863973] new_inode_pseudo+0x69/0x1a0 [ 93.868028] create_pipe_files+0x90/0x940 [ 93.872159] umh_pipe_setup+0xac/0x430 [ 93.876033] call_usermodehelper_exec_async+0x3c0/0x9e0 [ 93.881387] ret_from_fork+0x3a/0x50 [ 93.885076] [ 93.886683] Freed by task 2222: [ 93.889948] save_stack+0x43/0xd0 [ 93.893392] __kasan_slab_free+0x11a/0x170 [ 93.897636] kasan_slab_free+0xe/0x10 [ 93.901422] kmem_cache_free+0x86/0x2d0 [ 93.905378] free_inode_nonrcu+0x1c/0x20 [ 93.909434] destroy_inode+0x151/0x1f0 [ 93.913301] evict+0x5cd/0x960 [ 93.916482] iput+0x62d/0xa80 [ 93.919575] dentry_unlink_inode+0x49a/0x620 [ 93.923963] __dentry_kill+0x444/0x790 [ 93.927836] dentry_kill+0xc9/0x5a0 [ 93.931451] dput.part.26+0x65a/0x780 [ 93.935232] dput+0x15/0x20 [ 93.938146] __fput+0x558/0x890 [ 93.941406] ____fput+0x15/0x20 [ 93.944666] task_work_run+0x1e4/0x290 [ 93.948533] do_exit+0x1aee/0x2730 [ 93.952061] do_group_exit+0x16f/0x430 [ 93.955934] __x64_sys_exit_group+0x3e/0x50 [ 93.960235] do_syscall_64+0x1b1/0x800 [ 93.964124] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.969292] [ 93.970921] The buggy address belongs to the object at ffff8801d1c15140 [ 93.970921] which belongs to the cache inode_cache of size 944 [ 93.983560] The buggy address is located 520 bytes inside of [ 93.983560] 944-byte region [ffff8801d1c15140, ffff8801d1c154f0) [ 93.995422] The buggy address belongs to the page: [ 94.000337] page:ffffea0007470540 count:1 mapcount:0 mapping:ffff8801d1c15140 index:0xffff8801d1c15ffd [ 94.009767] flags: 0x2fffc0000000100(slab) [ 94.014077] raw: 02fffc0000000100 ffff8801d1c15140 ffff8801d1c15ffd 0000000100000003 [ 94.021951] raw: ffffea000753fee0 ffffea00074708e0 ffff8801da986ac0 0000000000000000 [ 94.029828] page dumped because: kasan: bad access detected [ 94.035516] [ 94.037122] Memory state around the buggy address: [ 94.042036] ffff8801d1c15200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.049393] ffff8801d1c15280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.056746] >ffff8801d1c15300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.064082] ^ [ 94.069775] ffff8801d1c15380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.077115] ffff8801d1c15400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.084546] ================================================================== [ 94.091883] Disabling lock debugging due to kernel taint [ 94.097479] Kernel panic - not syncing: panic_on_warn set ... [ 94.097479] [ 94.104853] CPU: 0 PID: 4609 Comm: syz-executor1 Tainted: G B 4.17.0+ #89 [ 94.113080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.122432] Call Trace: [ 94.125032] dump_stack+0x1b9/0x294 [ 94.128667] ? dump_stack_print_info.cold.2+0x52/0x52 [ 94.133869] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 94.138633] ? __vfs_write+0x850/0x960 [ 94.142523] panic+0x22f/0x4de [ 94.145721] ? add_taint.cold.5+0x16/0x16 [ 94.149861] ? do_raw_spin_unlock+0x9e/0x2e0 [ 94.154260] ? do_raw_spin_unlock+0x9e/0x2e0 [ 94.158659] ? __vfs_write+0x929/0x960 [ 94.162527] kasan_end_report+0x47/0x4f [ 94.166480] kasan_report.cold.7+0x76/0x2fe [ 94.170783] __asan_report_load8_noabort+0x14/0x20 [ 94.175864] __vfs_write+0x929/0x960 [ 94.179573] ? sock_alloc_file+0x1f3/0x4e0 [ 94.183791] ? kernel_read+0x120/0x120 [ 94.187657] ? lock_downgrade+0x8e0/0x8e0 [ 94.191790] ? graph_lock+0x170/0x170 [ 94.195585] ? debug_mutex_init+0x1c/0x60 [ 94.199712] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 94.204718] __kernel_write+0x10c/0x380 [ 94.208684] __bpfilter_process_sockopt+0x1d8/0x35b [ 94.213682] ? ipv6_mc_check_mld+0xf60/0xf60 [ 94.218070] ? lock_downgrade+0x8e0/0x8e0 [ 94.222198] ? lock_release+0xa10/0xa10 [ 94.226150] ? check_same_owner+0x320/0x320 [ 94.230449] ? lock_downgrade+0x8e0/0x8e0 [ 94.234595] ? ipv6_mc_check_mld+0xf60/0xf60 [ 94.238986] bpfilter_mbox_request+0x4d/0xb0 [ 94.243375] bpfilter_ip_get_sockopt+0x6b/0x90 [ 94.247942] ip_getsockopt+0x238/0x2a0 [ 94.251812] ? do_ip_getsockopt+0x2300/0x2300 [ 94.256286] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.261816] ? alloc_file+0x44/0x3e0 [ 94.265516] tcp_getsockopt+0x93/0xe0 [ 94.269299] sock_common_getsockopt+0x9a/0xe0 [ 94.273777] __sys_getsockopt+0x1a5/0x370 [ 94.277997] ? kernel_setsockopt+0x1d0/0x1d0 [ 94.282386] ? __sys_socket+0x19f/0x250 [ 94.286340] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 94.291157] __x64_sys_getsockopt+0xbe/0x150 [ 94.295558] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 94.300606] do_syscall_64+0x1b1/0x800 [ 94.304484] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 94.309307] ? syscall_return_slowpath+0x5c0/0x5c0 [ 94.314228] ? syscall_return_slowpath+0x30f/0x5c0 [ 94.319148] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 94.324503] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 94.329324] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 94.334499] RIP: 0033:0x4584ea [ 94.337663] Code: b8 34 01 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 1d 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 fa 8e fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 94.357043] RSP: 002b:0000000000a3e328 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 94.364824] RAX: ffffffffffffffda RBX: 0000000000a3e350 RCX: 00000000004584ea [ 94.372074] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 94.379324] RBP: 0000000000705f20 R08: 0000000000a3e34c R09: 0000000000004000 [ 94.386570] R10: 0000000000a3e350 R11: 0000000000000246 R12: 0000000000000003 [ 94.393819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000703d60 [ 94.401627] Dumping ftrace buffer: [ 94.405158] (ftrace buffer empty) [ 94.408846] Kernel Offset: disabled [ 94.412451] Rebooting in 86400 seconds..