[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 19.859353] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 24.667222] random: sshd: uninitialized urandom read (32 bytes read) [ 25.149269] random: sshd: uninitialized urandom read (32 bytes read) [ 25.937564] random: sshd: uninitialized urandom read (32 bytes read) [ 26.096385] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.30' (ECDSA) to the list of known hosts. [ 31.514379] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/13 15:25:04 parsed 1 programs [ 32.763683] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/13 15:25:06 executed programs: 0 [ 33.991105] IPVS: ftp: loaded support on port[0] = 21 [ 34.003169] IPVS: ftp: loaded support on port[0] = 21 [ 34.012893] IPVS: ftp: loaded support on port[0] = 21 [ 34.014954] IPVS: ftp: loaded support on port[0] = 21 [ 34.032653] IPVS: ftp: loaded support on port[0] = 21 [ 34.051931] IPVS: ftp: loaded support on port[0] = 21 [ 34.058719] IPVS: ftp: loaded support on port[0] = 21 [ 34.070866] IPVS: ftp: loaded support on port[0] = 21 [ 35.196813] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.203370] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.220618] device bridge_slave_0 entered promiscuous mode [ 35.247450] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.253946] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.269597] device bridge_slave_0 entered promiscuous mode [ 35.277258] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.283627] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.292814] device bridge_slave_0 entered promiscuous mode [ 35.305554] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.311929] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.320289] device bridge_slave_0 entered promiscuous mode [ 35.348241] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.354686] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.364835] device bridge_slave_1 entered promiscuous mode [ 35.379714] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.386109] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.398305] device bridge_slave_1 entered promiscuous mode [ 35.406117] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.412510] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.419826] device bridge_slave_1 entered promiscuous mode [ 35.427119] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.433685] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.441807] device bridge_slave_1 entered promiscuous mode [ 35.450164] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.456534] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.464403] device bridge_slave_0 entered promiscuous mode [ 35.471889] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.478279] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.485989] device bridge_slave_0 entered promiscuous mode [ 35.494943] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 35.502328] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.508689] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.516452] device bridge_slave_0 entered promiscuous mode [ 35.525355] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 35.532732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 35.541259] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.547649] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.560995] device bridge_slave_0 entered promiscuous mode [ 35.568889] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.575257] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.583316] device bridge_slave_1 entered promiscuous mode [ 35.591746] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.598147] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.605888] device bridge_slave_1 entered promiscuous mode [ 35.613754] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 35.622583] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 35.630217] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 35.639147] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.645670] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.664183] device bridge_slave_1 entered promiscuous mode [ 35.670969] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.677385] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.685375] device bridge_slave_1 entered promiscuous mode [ 35.691898] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 35.700492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 35.727490] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 35.734985] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 35.745196] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 35.753720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 35.761542] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 35.797190] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 35.843761] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 35.854236] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 35.863288] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 35.879441] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 35.937801] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 35.981856] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 35.993261] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 36.004455] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 36.022784] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 36.039501] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 36.055902] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 36.065247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.081514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 36.088428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.105120] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 36.116243] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 36.126942] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 36.138317] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 36.146118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.164680] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 36.175335] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 36.184540] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 36.192301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.208461] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 36.255762] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 36.317873] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 36.368164] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 36.383989] team0: Port device team_slave_0 added [ 36.416951] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 36.437795] team0: Port device team_slave_1 added [ 36.449809] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 36.459405] team0: Port device team_slave_0 added [ 36.467090] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 36.474381] team0: Port device team_slave_0 added [ 36.511309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.536529] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 36.555419] team0: Port device team_slave_1 added [ 36.563109] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 36.572898] team0: Port device team_slave_0 added [ 36.581914] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 36.589881] team0: Port device team_slave_0 added [ 36.603552] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 36.612220] team0: Port device team_slave_1 added [ 36.630682] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 36.646010] team0: Port device team_slave_1 added [ 36.663545] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 36.673594] team0: Port device team_slave_0 added [ 36.685298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.695898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.712784] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 36.720449] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 36.730504] team0: Port device team_slave_1 added [ 36.739426] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 36.751119] team0: Port device team_slave_0 added [ 36.765545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.777208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.789260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.796947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.804631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.813971] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 36.821478] team0: Port device team_slave_1 added [ 36.828764] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 36.840131] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 36.849884] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 36.857826] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 36.866681] team0: Port device team_slave_0 added [ 36.876839] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 36.883757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.896520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.910401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.918855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.926551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.934543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.942175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.949818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.957620] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 36.964937] team0: Port device team_slave_1 added [ 36.971334] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 36.978525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.988685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.999086] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 37.007866] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 37.015258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.023457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.037491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.049595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.059209] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.068344] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 37.075409] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 37.084533] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 37.093091] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 37.107850] team0: Port device team_slave_1 added [ 37.117920] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.125121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.136536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.150310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.159337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.167103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.175899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.183709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.191546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.198983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.206816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.217626] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.226849] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 37.235238] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 37.246405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.258895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.267750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.275616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.283388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.291225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.299297] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 37.306177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.314338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.330831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 37.338788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.348608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.369484] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 37.381387] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.393284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.401654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.415524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.424166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.438874] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 37.452628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 37.459825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.484457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.497620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.505467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.515798] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.536489] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 37.544529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.557603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.566460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.578618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.587524] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.594969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.604204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.629414] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.639718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.660938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.084289] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.090842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.097857] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.104310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.117619] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 38.124674] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.131070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.137723] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.144077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.151539] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 38.166113] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.172500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.179172] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.185533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.193782] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 38.211829] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.218239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.224922] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.231301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.242343] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 38.358784] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.365206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.371892] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.378282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.391262] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 38.410856] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.417357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.424156] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.430528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.441695] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 38.454608] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.461051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.467712] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.474107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.490613] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 38.618166] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.624602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.631244] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.637640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.656243] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 38.879488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.891633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.900606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.912785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.920371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.927919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.935499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.942769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.844700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.858837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.946273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.983847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.099580] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.122599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.131987] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.152253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.190799] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.225680] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.246373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.329363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.359394] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.365730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.375479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.392968] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.408548] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.414871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.427639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.444676] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.451180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.461497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.483644] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.531013] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.537260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.544970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.566974] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.630544] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.673126] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.693988] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.702685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.711895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.737880] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.751944] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.758333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.767314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.806098] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.866516] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.872919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.881118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.891628] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.963615] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.984162] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 41.993792] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.013289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.024543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.209367] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.236901] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.282115] ================================================================== [ 43.289644] BUG: KASAN: slab-out-of-bounds in bpf_skb_vlan_push+0x6b7/0x720 [ 43.296751] Read of size 5 at addr ffff8801b77347d0 by task syz-executor6/6529 [ 43.304109] [ 43.305744] CPU: 1 PID: 6529 Comm: syz-executor6 Not tainted 4.17.0-rc7+ #38 [ 43.314225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.323580] Call Trace: [ 43.326178] dump_stack+0x1b9/0x294 [ 43.329816] ? dump_stack_print_info.cold.2+0x52/0x52 [ 43.335013] ? printk+0x9e/0xba [ 43.338309] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 43.343075] ? kasan_check_write+0x14/0x20 [ 43.347315] print_address_description+0x6c/0x20b [ 43.352163] ? bpf_skb_vlan_push+0x6b7/0x720 [ 43.356579] kasan_report.cold.7+0x242/0x2fe [ 43.360994] __asan_report_load_n_noabort+0xf/0x20 [ 43.365933] bpf_skb_vlan_push+0x6b7/0x720 [ 43.370160] ? lock_downgrade+0x8e0/0x8e0 [ 43.374293] ? rcu_pm_notify+0xc0/0xc0 [ 43.378170] ? pvclock_read_flags+0x160/0x160 [ 43.382648] ? rcu_read_lock_sched_held+0x108/0x120 [ 43.387650] ? kmem_cache_alloc+0x5fa/0x760 [ 43.391956] ? ktime_get+0x33e/0x430 [ 43.395656] ? lock_acquire+0x1dc/0x520 [ 43.399613] ? bpf_test_run+0x1f3/0x3b0 [ 43.403584] ? kasan_check_read+0x11/0x20 [ 43.407715] ? rcu_is_watching+0x85/0x140 [ 43.411847] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 43.417034] ? __might_sleep+0x95/0x190 [ 43.421009] ? bpf_test_run+0xaf/0x3b0 [ 43.424890] ? bpf_prog_test_run_skb+0x622/0xa20 [ 43.429633] ? bpf_test_finish.isra.7+0x1e0/0x1e0 [ 43.434461] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 43.439982] ? fput+0x130/0x1a0 [ 43.443248] ? __bpf_prog_get+0x9b/0x290 [ 43.447296] ? bpf_test_finish.isra.7+0x1e0/0x1e0 [ 43.452129] ? bpf_prog_test_run+0x130/0x1a0 [ 43.456523] ? __x64_sys_bpf+0x3d8/0x510 [ 43.460566] ? bpf_prog_get+0x20/0x20 [ 43.464349] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 43.469874] ? do_syscall_64+0x92/0x800 [ 43.473845] ? do_syscall_64+0x1b1/0x800 [ 43.477892] ? syscall_return_slowpath+0x5c0/0x5c0 [ 43.482805] ? syscall_return_slowpath+0x30f/0x5c0 [ 43.487722] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 43.493095] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 43.497927] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 43.503276] [ 43.504888] Allocated by task 6523: [ 43.508495] save_stack+0x43/0xd0 [ 43.511926] kasan_kmalloc+0xc4/0xe0 [ 43.515624] kasan_slab_alloc+0x12/0x20 [ 43.519580] kmem_cache_alloc_node+0x144/0x780 [ 43.524145] __alloc_skb+0x111/0x780 [ 43.527842] netlink_sendmsg+0xb01/0xfa0 [ 43.531884] sock_sendmsg+0xd5/0x120 [ 43.535577] ___sys_sendmsg+0x805/0x940 [ 43.539536] __sys_sendmsg+0x115/0x270 [ 43.543407] __x64_sys_sendmsg+0x78/0xb0 [ 43.547453] do_syscall_64+0x1b1/0x800 [ 43.551324] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 43.556487] [ 43.558094] Freed by task 5303: [ 43.561353] save_stack+0x43/0xd0 [ 43.564795] __kasan_slab_free+0x11a/0x170 [ 43.569010] kasan_slab_free+0xe/0x10 [ 43.572796] kmem_cache_free+0x86/0x2d0 [ 43.576752] kfree_skbmem+0x13c/0x210 [ 43.580533] consume_skb+0x193/0x550 [ 43.584227] netlink_dump+0xafa/0xd20 [ 43.588010] netlink_recvmsg+0xe97/0x1450 [ 43.592162] sock_recvmsg+0xd0/0x110 [ 43.595867] ___sys_recvmsg+0x2b6/0x680 [ 43.599831] __sys_recvmsg+0x112/0x260 [ 43.603698] __x64_sys_recvmsg+0x78/0xb0 [ 43.607740] do_syscall_64+0x1b1/0x800 [ 43.611619] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 43.616780] [ 43.618392] The buggy address belongs to the object at ffff8801b77346c0 [ 43.618392] which belongs to the cache skbuff_head_cache of size 232 [ 43.631551] The buggy address is located 40 bytes to the right of [ 43.631551] 232-byte region [ffff8801b77346c0, ffff8801b77347a8) [ 43.643923] The buggy address belongs to the page: [ 43.648836] page:ffffea0006ddcd00 count:1 mapcount:0 mapping:ffff8801b7734080 index:0x0 [ 43.656958] flags: 0x2fffc0000000100(slab) [ 43.661180] raw: 02fffc0000000100 ffff8801b7734080 0000000000000000 000000010000000c [ 43.669045] raw: ffffea00073a2da0 ffffea0006ddc060 ffff8801d942b840 0000000000000000 [ 43.676904] page dumped because: kasan: bad access detected [ 43.682605] [ 43.684209] Memory state around the buggy address: [ 43.689117] ffff8801b7734680: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 43.696456] ffff8801b7734700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.703795] >ffff8801b7734780: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 43.711133] ^ [ 43.717103] ffff8801b7734800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 43.724441] ffff8801b7734880: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 43.731776] ================================================================== [ 43.739113] Disabling lock debugging due to kernel taint [ 43.746389] Kernel panic - not syncing: panic_on_warn set ... [ 43.746389] [ 43.753857] CPU: 1 PID: 6529 Comm: syz-executor6 Tainted: G B 4.17.0-rc7+ #38 [ 43.762432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.771780] Call Trace: [ 43.774372] dump_stack+0x1b9/0x294 [ 43.778011] ? dump_stack_print_info.cold.2+0x52/0x52 [ 43.783204] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 43.787963] ? bpf_skb_vlan_push+0x630/0x720 [ 43.792356] panic+0x22f/0x4de [ 43.795532] ? add_taint.cold.5+0x16/0x16 [ 43.799663] ? do_raw_spin_unlock+0x9e/0x2e0 [ 43.804139] ? do_raw_spin_unlock+0x9e/0x2e0 [ 43.808533] ? bpf_skb_vlan_push+0x6b7/0x720 [ 43.812926] kasan_end_report+0x47/0x4f [ 43.816879] kasan_report.cold.7+0x76/0x2fe [ 43.821183] __asan_report_load_n_noabort+0xf/0x20 [ 43.826092] bpf_skb_vlan_push+0x6b7/0x720 [ 43.830309] ? lock_downgrade+0x8e0/0x8e0 [ 43.834440] ? rcu_pm_notify+0xc0/0xc0 [ 43.838312] ? pvclock_read_flags+0x160/0x160 [ 43.842787] ? rcu_read_lock_sched_held+0x108/0x120 [ 43.847801] ? kmem_cache_alloc+0x5fa/0x760 [ 43.852107] ? ktime_get+0x33e/0x430 [ 43.855802] ? lock_acquire+0x1dc/0x520 [ 43.859758] ? bpf_test_run+0x1f3/0x3b0 [ 43.863715] ? kasan_check_read+0x11/0x20 [ 43.867842] ? rcu_is_watching+0x85/0x140 [ 43.871974] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 43.877328] ? __might_sleep+0x95/0x190 [ 43.881283] ? bpf_test_run+0xaf/0x3b0 [ 43.885153] ? bpf_prog_test_run_skb+0x622/0xa20 [ 43.889892] ? bpf_test_finish.isra.7+0x1e0/0x1e0 [ 43.894718] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 43.900236] ? fput+0x130/0x1a0 [ 43.903498] ? __bpf_prog_get+0x9b/0x290 [ 43.907540] ? bpf_test_finish.isra.7+0x1e0/0x1e0 [ 43.912799] ? bpf_prog_test_run+0x130/0x1a0 [ 43.917190] ? __x64_sys_bpf+0x3d8/0x510 [ 43.921234] ? bpf_prog_get+0x20/0x20 [ 43.925042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 43.930561] ? do_syscall_64+0x92/0x800 [ 43.934533] ? do_syscall_64+0x1b1/0x800 [ 43.938586] ? syscall_return_slowpath+0x5c0/0x5c0 [ 43.943506] ? syscall_return_slowpath+0x30f/0x5c0 [ 43.948531] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 43.953877] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 43.958701] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 43.964549] Dumping ftrace buffer: [ 43.968085] (ftrace buffer empty) [ 43.971770] Kernel Offset: disabled [ 43.975374] Rebooting in 86400 seconds..