[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 20.667296] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 24.449326] random: sshd: uninitialized urandom read (32 bytes read) [ 24.821562] random: sshd: uninitialized urandom read (32 bytes read) [ 25.582983] random: sshd: uninitialized urandom read (32 bytes read) [ 25.744959] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.53' (ECDSA) to the list of known hosts. [ 31.323918] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/08 00:01:43 parsed 1 programs [ 32.634865] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/08 00:01:44 executed programs: 0 [ 33.763831] IPVS: ftp: loaded support on port[0] = 21 [ 33.768774] IPVS: ftp: loaded support on port[0] = 21 [ 33.772782] IPVS: ftp: loaded support on port[0] = 21 [ 33.776169] IPVS: ftp: loaded support on port[0] = 21 [ 33.796271] IPVS: ftp: loaded support on port[0] = 21 [ 33.800563] IPVS: ftp: loaded support on port[0] = 21 [ 33.810642] IPVS: ftp: loaded support on port[0] = 21 [ 33.816867] IPVS: ftp: loaded support on port[0] = 21 [ 34.591677] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.598358] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.614345] device bridge_slave_0 entered promiscuous mode [ 34.626729] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.633164] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.640427] device bridge_slave_0 entered promiscuous mode [ 34.649160] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.655708] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.663435] device bridge_slave_0 entered promiscuous mode [ 34.686525] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.692960] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.703241] device bridge_slave_0 entered promiscuous mode [ 34.711739] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.718144] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.726195] device bridge_slave_1 entered promiscuous mode [ 34.734786] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.741186] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.748915] device bridge_slave_1 entered promiscuous mode [ 34.755914] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.762552] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.770085] device bridge_slave_0 entered promiscuous mode [ 34.784405] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.791078] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.804384] device bridge_slave_0 entered promiscuous mode [ 34.813115] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.819522] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.827295] device bridge_slave_0 entered promiscuous mode [ 34.836545] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.843066] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.850783] device bridge_slave_1 entered promiscuous mode [ 34.858196] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.864632] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.872874] device bridge_slave_1 entered promiscuous mode [ 34.881358] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 34.890643] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.897073] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.906760] device bridge_slave_1 entered promiscuous mode [ 34.913691] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 34.921711] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.928212] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.937068] device bridge_slave_1 entered promiscuous mode [ 34.944898] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.951306] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.960484] device bridge_slave_1 entered promiscuous mode [ 34.967962] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.974396] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.982232] device bridge_slave_0 entered promiscuous mode [ 34.991366] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 35.000520] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 35.009451] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 35.017395] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 35.024740] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 35.040396] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 35.051267] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 35.061251] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.067676] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.085274] device bridge_slave_1 entered promiscuous mode [ 35.094049] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 35.104196] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 35.120606] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 35.128385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 35.152147] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 35.200427] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 35.261419] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 35.303182] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 35.315454] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 35.329575] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 35.360238] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 35.369618] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 35.380717] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 35.390614] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 35.400380] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 35.425444] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 35.438164] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 35.449904] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 35.462492] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 35.482809] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 35.498132] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 35.507572] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 35.517307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.532497] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 35.540674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.568772] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 35.575762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.610555] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 35.713598] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 35.793309] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 35.804933] team0: Port device team_slave_0 added [ 35.824899] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 35.840593] team0: Port device team_slave_0 added [ 35.861458] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 35.871614] team0: Port device team_slave_0 added [ 35.882255] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 35.895289] team0: Port device team_slave_0 added [ 35.907885] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 35.916260] team0: Port device team_slave_1 added [ 35.923942] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 35.931576] team0: Port device team_slave_1 added [ 35.937114] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 35.950783] team0: Port device team_slave_0 added [ 35.960157] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 35.968087] team0: Port device team_slave_0 added [ 35.983688] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 35.992515] team0: Port device team_slave_1 added [ 36.007292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.020568] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 36.027847] team0: Port device team_slave_0 added [ 36.035703] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 36.043229] team0: Port device team_slave_1 added [ 36.049165] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 36.056663] team0: Port device team_slave_1 added [ 36.076730] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 36.090332] team0: Port device team_slave_1 added [ 36.103089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.114770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.129208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.141903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.153282] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 36.160781] team0: Port device team_slave_1 added [ 36.168999] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 36.176916] team0: Port device team_slave_0 added [ 36.185422] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 36.192789] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 36.200765] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 36.209835] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 36.218592] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 36.226658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.235974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.257527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.268723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.276444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.285186] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.293560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.301422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.308933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.316741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.324796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 36.331803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.342581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.352653] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 36.359787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.368335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.376532] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 36.386092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 36.393004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.400981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.409474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.417802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.431435] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 36.440535] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 36.448378] team0: Port device team_slave_1 added [ 36.455662] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 36.464740] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 36.471758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.484573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.496404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.504903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.513682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.523347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.533804] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 36.541481] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 36.550898] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 36.559661] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 36.570254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.578772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.597417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.605398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.613218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.621057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.628578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.636453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.644638] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 36.652542] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 36.659983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.671402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.680112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.688892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.698958] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 36.708253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 36.717920] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 36.729213] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 36.739212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.759619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.772735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.780598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.788360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.796268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.804120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.811911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.821997] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 36.832203] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 36.844828] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 36.856322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.870951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.886574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.899192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.907241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.915261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.923793] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 36.931185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.939195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.990814] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 36.998134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.009927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.249493] ip (5088) used greatest stack depth: 16088 bytes left [ 37.462965] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.469516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.476517] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.482909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.493438] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 37.573594] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.580178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.586967] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.593363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.606651] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 37.614784] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.621339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.628096] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.634511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.642173] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 37.715696] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.722119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.728774] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.735156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.747969] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 37.765278] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.771745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.778433] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.784821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.792981] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 37.816591] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.823072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.829850] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.836273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.860230] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 37.869807] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.876227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.882909] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.889293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.896975] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 37.918274] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.924723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.931420] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.937818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.950079] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 38.239161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.247690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.265546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.275783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.283604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.291195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.298639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.306358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.436448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.515993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.539010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.559909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.653176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.686416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.710150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.731983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.750523] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.780817] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.819183] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.833282] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.928332] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.949614] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.981065] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.002893] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.034448] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.040769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.051663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.070659] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.079642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.090684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.126293] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.132832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.141144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.156887] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.165303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.175288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.250825] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.257212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.265098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.281860] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.292358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.309126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.321442] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.340470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.348852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.365966] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.386699] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.395900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.404938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.429199] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.468306] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.541448] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.551655] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.602347] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.644971] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.759566] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/08 00:01:54 executed programs: 8 2018/06/08 00:01:59 executed programs: 265 2018/06/08 00:02:04 executed programs: 531 2018/06/08 00:02:09 executed programs: 805 [ 58.753518] bpfilter: read fail -512 invalid request 0 [ 58.773514] ================================================================== [ 58.781083] BUG: KASAN: use-after-free in __kernel_write+0x301/0x380 [ 58.787587] Read of size 4 at addr ffff8801cda96a7c by task syz-executor4/4562 [ 58.794940] [ 58.796585] CPU: 0 PID: 4562 Comm: syz-executor4 Not tainted 4.17.0+ #89 [ 58.803429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.813012] Call Trace: [ 58.815616] dump_stack+0x1b9/0x294 [ 58.819332] ? dump_stack_print_info.cold.2+0x52/0x52 [ 58.824553] ? printk+0x9e/0xba [ 58.827851] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 58.832648] ? kasan_check_write+0x14/0x20 [ 58.836905] print_address_description+0x6c/0x20b [ 58.841763] ? __kernel_write+0x301/0x380 [ 58.845932] kasan_report.cold.7+0x242/0x2fe [ 58.850632] __asan_report_load4_noabort+0x14/0x20 [ 58.855564] __kernel_write+0x301/0x380 [ 58.859556] __bpfilter_process_sockopt+0x1d8/0x35b [ 58.864589] ? ipv6_mc_check_mld+0xf60/0xf60 [ 58.869015] ? lock_downgrade+0x8e0/0x8e0 [ 58.873185] ? lock_release+0xa10/0xa10 [ 58.877166] ? check_same_owner+0x320/0x320 [ 58.881478] ? ipv6_mc_check_mld+0xf60/0xf60 [ 58.885871] bpfilter_mbox_request+0x4d/0xb0 [ 58.890267] bpfilter_ip_get_sockopt+0x6b/0x90 [ 58.894835] ip_getsockopt+0x238/0x2a0 [ 58.898707] ? do_ip_getsockopt+0x2300/0x2300 [ 58.903187] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 58.908715] ? alloc_file+0x44/0x3e0 [ 58.912412] tcp_getsockopt+0x93/0xe0 [ 58.916207] sock_common_getsockopt+0x9a/0xe0 [ 58.920700] __sys_getsockopt+0x1a5/0x370 [ 58.924836] ? kernel_setsockopt+0x1d0/0x1d0 [ 58.929575] ? __sys_socket+0x19f/0x250 [ 58.933535] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 58.938366] __x64_sys_getsockopt+0xbe/0x150 [ 58.942761] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 58.947763] do_syscall_64+0x1b1/0x800 [ 58.951643] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 58.956478] ? syscall_return_slowpath+0x5c0/0x5c0 [ 58.961401] ? syscall_return_slowpath+0x30f/0x5c0 [ 58.966329] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 58.971682] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 58.976522] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.981694] RIP: 0033:0x4584ea [ 58.984888] Code: b8 34 01 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 1d 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 fa 8e fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 59.004164] RSP: 002b:00007ffc19531c48 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 59.011859] RAX: ffffffffffffffda RBX: 00007ffc19531c70 RCX: 00000000004584ea [ 59.019119] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 59.026374] RBP: 0000000000705f20 R08: 00007ffc19531c6c R09: 0000000000004000 [ 59.033631] R10: 00007ffc19531c70 R11: 0000000000000246 R12: 0000000000000003 [ 59.040895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000704420 [ 59.048157] [ 59.049771] Allocated by task 2223: [ 59.053400] save_stack+0x43/0xd0 [ 59.056839] kasan_kmalloc+0xc4/0xe0 [ 59.060544] kasan_slab_alloc+0x12/0x20 [ 59.064506] kmem_cache_alloc+0x12e/0x760 [ 59.068634] get_empty_filp+0x125/0x520 [ 59.072589] alloc_file+0x24/0x3e0 [ 59.076113] create_pipe_files+0x4db/0x940 [ 59.080332] umh_pipe_setup+0xac/0x430 [ 59.084200] call_usermodehelper_exec_async+0x3c0/0x9e0 [ 59.089556] ret_from_fork+0x3a/0x50 [ 59.093260] [ 59.094867] Freed by task 4572: [ 59.098127] save_stack+0x43/0xd0 [ 59.101568] __kasan_slab_free+0x11a/0x170 [ 59.105785] kasan_slab_free+0xe/0x10 [ 59.109564] kmem_cache_free+0x86/0x2d0 [ 59.113521] file_free_rcu+0x6f/0x90 [ 59.117219] rcu_process_callbacks+0xe9d/0x1760 [ 59.121870] __do_softirq+0x2e0/0xaf5 [ 59.125644] [ 59.127254] The buggy address belongs to the object at ffff8801cda96a00 [ 59.127254] which belongs to the cache filp of size 456 [ 59.139291] The buggy address is located 124 bytes inside of [ 59.139291] 456-byte region [ffff8801cda96a00, ffff8801cda96bc8) [ 59.151151] The buggy address belongs to the page: [ 59.156070] page:ffffea000736a580 count:1 mapcount:0 mapping:ffff8801cda96000 index:0x0 [ 59.164200] flags: 0x2fffc0000000100(slab) [ 59.168420] raw: 02fffc0000000100 ffff8801cda96000 0000000000000000 0000000100000006 [ 59.176292] raw: ffffea000738ce20 ffffea00072a20e0 ffff8801da986940 0000000000000000 [ 59.184152] page dumped because: kasan: bad access detected [ 59.189862] [ 59.191473] Memory state around the buggy address: [ 59.196380] ffff8801cda96900: fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc [ 59.203719] ffff8801cda96980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 59.211063] >ffff8801cda96a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.218418] ^ [ 59.225687] ffff8801cda96a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.233040] ffff8801cda96b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.240377] ================================================================== [ 59.247718] Disabling lock debugging due to kernel taint [ 59.253273] Kernel panic - not syncing: panic_on_warn set ... [ 59.253273] [ 59.260638] CPU: 0 PID: 4562 Comm: syz-executor4 Tainted: G B 4.17.0+ #89 [ 59.268844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.278185] Call Trace: [ 59.280759] dump_stack+0x1b9/0x294 [ 59.284366] ? dump_stack_print_info.cold.2+0x52/0x52 [ 59.289539] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 59.294296] ? __kernel_write+0x2f0/0x380 [ 59.298426] panic+0x22f/0x4de [ 59.301600] ? add_taint.cold.5+0x16/0x16 [ 59.305731] ? do_raw_spin_unlock+0x9e/0x2e0 [ 59.310120] ? do_raw_spin_unlock+0x9e/0x2e0 [ 59.314532] ? __kernel_write+0x301/0x380 [ 59.318662] kasan_end_report+0x47/0x4f [ 59.322624] kasan_report.cold.7+0x76/0x2fe [ 59.326935] __asan_report_load4_noabort+0x14/0x20 [ 59.331845] __kernel_write+0x301/0x380 [ 59.335814] __bpfilter_process_sockopt+0x1d8/0x35b [ 59.340811] ? ipv6_mc_check_mld+0xf60/0xf60 [ 59.345206] ? lock_downgrade+0x8e0/0x8e0 [ 59.349337] ? lock_release+0xa10/0xa10 [ 59.353290] ? check_same_owner+0x320/0x320 [ 59.357594] ? ipv6_mc_check_mld+0xf60/0xf60 [ 59.362074] bpfilter_mbox_request+0x4d/0xb0 [ 59.366465] bpfilter_ip_get_sockopt+0x6b/0x90 [ 59.371036] ip_getsockopt+0x238/0x2a0 [ 59.375352] ? do_ip_getsockopt+0x2300/0x2300 [ 59.379838] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 59.385357] ? alloc_file+0x44/0x3e0 [ 59.389141] tcp_getsockopt+0x93/0xe0 [ 59.392934] sock_common_getsockopt+0x9a/0xe0 [ 59.397411] __sys_getsockopt+0x1a5/0x370 [ 59.401541] ? kernel_setsockopt+0x1d0/0x1d0 [ 59.405931] ? __sys_socket+0x19f/0x250 [ 59.409889] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 59.414715] __x64_sys_getsockopt+0xbe/0x150 [ 59.419107] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 59.424113] do_syscall_64+0x1b1/0x800 [ 59.427989] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 59.432814] ? syscall_return_slowpath+0x5c0/0x5c0 [ 59.437724] ? syscall_return_slowpath+0x30f/0x5c0 [ 59.442637] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 59.447999] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 59.452832] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.458005] RIP: 0033:0x4584ea [ 59.461177] Code: b8 34 01 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 1d 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 fa 8e fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 59.480303] RSP: 002b:00007ffc19531c48 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 59.487990] RAX: ffffffffffffffda RBX: 00007ffc19531c70 RCX: 00000000004584ea [ 59.495238] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 59.502486] RBP: 0000000000705f20 R08: 00007ffc19531c6c R09: 0000000000004000 [ 59.510093] R10: 00007ffc19531c70 R11: 0000000000000246 R12: 0000000000000003 [ 59.517356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000704420 [ 59.525219] Dumping ftrace buffer: [ 59.528745] (ftrace buffer empty) [ 59.532438] Kernel Offset: disabled [ 59.536061] Rebooting in 86400 seconds..