[....] Starting OpenBSD Secure Shell server: sshd[ 28.527095] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 40.143772] random: sshd: uninitialized urandom read (32 bytes read) [ 40.175797] random: crng init done [ 48.540695] IPVS: ftp: loaded support on port[0] = 21 [ 48.836371] can: request_module (can-proto-0) failed. [ 49.784127] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.10.33' (ECDSA) to the list of known hosts. 2019/07/13 01:28:06 parsed 1 programs 2019/07/13 01:28:06 executed programs: 0 [ 57.818369] IPVS: ftp: loaded support on port[0] = 21 [ 57.819464] IPVS: ftp: loaded support on port[0] = 21 [ 57.834669] IPVS: ftp: loaded support on port[0] = 21 [ 57.838105] IPVS: ftp: loaded support on port[0] = 21 [ 57.846161] IPVS: ftp: loaded support on port[0] = 21 [ 57.905071] IPVS: ftp: loaded support on port[0] = 21 [ 58.052349] chnl_net:caif_netlink_parms(): no params data found [ 58.061971] chnl_net:caif_netlink_parms(): no params data found [ 58.073061] chnl_net:caif_netlink_parms(): no params data found [ 58.160358] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.167505] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.174282] device bridge_slave_0 entered promiscuous mode [ 58.184621] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.190979] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.198337] device bridge_slave_0 entered promiscuous mode [ 58.215767] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.222183] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.228836] device bridge_slave_0 entered promiscuous mode [ 58.235006] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.241507] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.248248] device bridge_slave_1 entered promiscuous mode [ 58.259501] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.265892] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.272580] device bridge_slave_1 entered promiscuous mode [ 58.278499] chnl_net:caif_netlink_parms(): no params data found [ 58.290657] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.297172] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.304429] device bridge_slave_1 entered promiscuous mode [ 58.350164] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.364712] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.375726] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.388928] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.397302] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.405828] chnl_net:caif_netlink_parms(): no params data found [ 58.421894] chnl_net:caif_netlink_parms(): no params data found [ 58.433953] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.457026] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 58.464009] team0: Port device team_slave_0 added [ 58.477836] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 58.486244] team0: Port device team_slave_0 added [ 58.491595] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 58.498660] team0: Port device team_slave_1 added [ 58.510675] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 58.518092] team0: Port device team_slave_0 added [ 58.523499] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 58.530435] team0: Port device team_slave_1 added [ 58.538207] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 58.548236] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 58.555432] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.561887] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.568586] device bridge_slave_0 entered promiscuous mode [ 58.574857] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 58.582095] team0: Port device team_slave_1 added [ 58.591540] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 58.598582] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 58.612688] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 58.623636] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.629990] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.636710] device bridge_slave_1 entered promiscuous mode [ 58.646521] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 58.712217] device hsr_slave_0 entered promiscuous mode [ 58.751192] device hsr_slave_1 entered promiscuous mode [ 58.852136] device hsr_slave_0 entered promiscuous mode [ 58.891219] device hsr_slave_1 entered promiscuous mode [ 58.955437] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 58.965261] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 58.972135] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 58.982544] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.988893] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.995972] device bridge_slave_0 entered promiscuous mode [ 59.002098] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.008429] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.015578] device bridge_slave_0 entered promiscuous mode [ 59.021959] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 59.028589] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.034967] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.041871] device bridge_slave_1 entered promiscuous mode [ 59.092139] device hsr_slave_0 entered promiscuous mode [ 59.151214] device hsr_slave_1 entered promiscuous mode [ 59.191573] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 59.198987] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.206926] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.214917] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.221799] device bridge_slave_1 entered promiscuous mode [ 59.242722] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 59.250097] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.265228] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.273623] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.283386] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.298441] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.313280] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.320363] team0: Port device team_slave_0 added [ 59.327618] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.335213] team0: Port device team_slave_1 added [ 59.340449] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 59.351361] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.358417] team0: Port device team_slave_0 added [ 59.366495] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.373592] team0: Port device team_slave_0 added [ 59.378875] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.386072] team0: Port device team_slave_1 added [ 59.392800] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 59.401630] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.408616] team0: Port device team_slave_1 added [ 59.413919] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 59.425777] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 59.434357] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 59.441522] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 59.454577] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 59.493001] device hsr_slave_0 entered promiscuous mode [ 59.532014] device hsr_slave_1 entered promiscuous mode [ 59.572620] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 59.581560] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 59.622964] device hsr_slave_0 entered promiscuous mode [ 59.661218] device hsr_slave_1 entered promiscuous mode [ 59.721390] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 59.728267] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 59.735812] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 59.782883] device hsr_slave_0 entered promiscuous mode [ 59.841282] device hsr_slave_1 entered promiscuous mode [ 59.891642] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 59.898889] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 59.905822] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 59.933345] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 59.941541] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 59.961750] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 59.988860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.998346] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.007736] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.018820] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 60.025166] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.034733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.041600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.050117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.059715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.073385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.081846] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.089557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.097663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.105377] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.111726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.118474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.126932] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.138074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.144844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.153516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.160924] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.167280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.179237] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 60.185452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.193266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.200710] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.208227] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.215324] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.222500] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 60.229372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.237817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.244739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.254145] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.260855] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.269689] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.278221] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.285698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.294440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.301375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.308050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.314906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.323213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.329909] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 60.336220] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.343652] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.352304] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.360770] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 60.367025] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.373643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.381590] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 60.387656] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.393951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.401725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.409168] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.415517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.422169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.429693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.437485] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.443945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.450623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.458152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.465623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.472578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.480600] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.488199] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.495241] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.503813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.511704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.519282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.526162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.532959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.540491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.548128] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.554479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.562676] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 60.568745] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.576468] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.584669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.593109] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.602230] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.609197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.616448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.624403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.631928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.639445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.647065] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.653436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.660050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.667668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.675090] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.681428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.688037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.695647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.703116] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.709421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.716350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.724500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.732968] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.741537] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.749134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.756727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.766054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.773515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.780953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.788524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.795966] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.802709] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.810969] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 60.820293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 60.828245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.834978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.842151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.849719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.857201] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.863523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.870126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.877785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.885009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.892336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.899568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.907480] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.915481] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 60.921917] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.928556] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.936754] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 60.944184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.952021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.959499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.967110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.975580] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.983628] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.993844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.002349] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 61.009617] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 61.015727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.023637] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.030581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.039213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.046946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.054475] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.060805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.067519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.075069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.082536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.089717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.097365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.104797] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.111134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.118064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.126112] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.135553] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 61.141672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.151582] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.159573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.167509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.175100] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.181446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.188056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.195581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.204894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.213589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.220975] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.229359] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.237293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.244463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.252045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.259485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.266920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.274530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.283932] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.292980] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.301366] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.308983] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.315768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.323443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.330889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.338392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.346125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.354151] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 61.361178] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 61.370172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.378076] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.388187] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.396462] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 61.406407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.413303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.420818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.428441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.436140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.443597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.451033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.458303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.465800] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.474864] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 61.483517] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 61.521050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.528795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.543539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.553133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.560921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.576861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.586221] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.607792] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 61.616685] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 61.625264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.641924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 61.649398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.665190] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 61.671928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.678924] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.686605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.694559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.702358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.709736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.717150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.724785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.733952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 61.742090] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 61.753309] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 61.765319] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 61.772252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.779592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.787930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.795592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.804015] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 61.810120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.824107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.832638] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 61.841401] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 61.847860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.855945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.864693] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 61.870799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.879641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.895401] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 61.913188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.923101] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/07/13 01:28:11 executed programs: 103 2019/07/13 01:28:16 executed programs: 700 2019/07/13 01:28:21 executed programs: 1326 2019/07/13 01:28:26 executed programs: 1950 2019/07/13 01:28:31 executed programs: 2558 2019/07/13 01:28:36 executed programs: 3170 2019/07/13 01:28:41 executed programs: 3779 2019/07/13 01:28:46 executed programs: 4375 2019/07/13 01:28:51 executed programs: 4974 2019/07/13 01:28:56 executed programs: 5565 2019/07/13 01:29:01 executed programs: 6183 2019/07/13 01:29:06 executed programs: 6789 2019/07/13 01:29:11 executed programs: 7382 2019/07/13 01:29:16 executed programs: 7971 2019/07/13 01:29:21 executed programs: 8564 2019/07/13 01:29:26 executed programs: 9160 2019/07/13 01:29:31 executed programs: 9761 2019/07/13 01:29:36 executed programs: 10366 2019/07/13 01:29:41 executed programs: 10941 2019/07/13 01:29:46 executed programs: 11525 2019/07/13 01:29:51 executed programs: 12100 2019/07/13 01:29:56 executed programs: 12695 2019/07/13 01:30:01 executed programs: 13280 2019/07/13 01:30:06 executed programs: 13871 2019/07/13 01:30:11 executed programs: 14453 2019/07/13 01:30:16 executed programs: 15028 2019/07/13 01:30:21 executed programs: 15592 2019/07/13 01:30:26 executed programs: 16176 2019/07/13 01:30:31 executed programs: 16782 2019/07/13 01:30:36 executed programs: 17362 2019/07/13 01:30:41 executed programs: 17947 2019/07/13 01:30:46 executed programs: 18508 2019/07/13 01:30:51 executed programs: 19073 2019/07/13 01:30:56 executed programs: 19647 2019/07/13 01:31:01 executed programs: 20231 2019/07/13 01:31:06 executed programs: 20802 2019/07/13 01:31:11 executed programs: 21367 2019/07/13 01:31:16 executed programs: 21896 2019/07/13 01:31:21 executed programs: 22447 2019/07/13 01:31:26 executed programs: 23028 2019/07/13 01:31:31 executed programs: 23630 2019/07/13 01:31:36 executed programs: 24208 2019/07/13 01:31:41 executed programs: 24766 2019/07/13 01:31:46 executed programs: 25315 2019/07/13 01:31:51 executed programs: 25861 2019/07/13 01:31:56 executed programs: 26418 2019/07/13 01:32:01 executed programs: 27023 2019/07/13 01:32:06 executed programs: 27628 2019/07/13 01:32:12 executed programs: 28193 2019/07/13 01:32:17 executed programs: 28748 2019/07/13 01:32:22 executed programs: 29295 2019/07/13 01:32:27 executed programs: 29845 2019/07/13 01:32:32 executed programs: 30429 2019/07/13 01:32:37 executed programs: 30947 2019/07/13 01:32:42 executed programs: 31441 2019/07/13 01:32:47 executed programs: 31953 2019/07/13 01:32:52 executed programs: 32420 2019/07/13 01:32:57 executed programs: 32935 2019/07/13 01:33:02 executed programs: 33541 [ 356.116499] ================================================================== [ 356.123914] BUG: KASAN: use-after-free in do_raw_spin_lock+0x1c0/0x200 [ 356.130568] Read of size 4 at addr ffff8800a133c6f4 by task syz-executor.0/16893 [ 356.138074] [ 356.139681] CPU: 1 PID: 16893 Comm: syz-executor.0 Not tainted 4.19.0-rc6+ #1 [ 356.146928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.156255] Call Trace: [ 356.158888] dump_stack+0x109/0x15a [ 356.162501] print_address_description.cold.8+0x9/0x1ff [ 356.167845] kasan_report.cold.9+0x242/0x309 [ 356.172240] ? do_raw_spin_lock+0x1c0/0x200 [ 356.172246] __asan_report_load4_noabort+0x14/0x20 [ 356.172249] do_raw_spin_lock+0x1c0/0x200 [ 356.172295] _raw_spin_lock_bh+0x39/0x40 [ 356.172318] ? psock_map_pop.isra.23+0x1f/0x1b0 [ 356.194428] psock_map_pop.isra.23+0x1f/0x1b0 [ 356.198907] bpf_tcp_remove+0x435/0x960 [ 356.198914] ? __local_bh_enable_ip+0x160/0x260 [ 356.198973] ? tcp_check_oom+0x4b0/0x4b0 [ 356.198985] bpf_tcp_close+0xd2/0x280 [ 356.215489] inet_release+0xd9/0x1c0 [ 356.219231] inet6_release+0x46/0x60 [ 356.222984] __sock_release+0xc2/0x230 [ 356.222992] sock_close+0x10/0x20 [ 356.230305] __fput+0x249/0x7f0 [ 356.230312] ____fput+0x9/0x10 [ 356.230318] task_work_run+0x108/0x180 [ 356.230327] exit_to_usermode_loop+0x1a9/0x200 [ 356.230332] do_syscall_64+0x407/0x4d0 [ 356.230341] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.245207] RIP: 0033:0x413501 [ 356.245214] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 356.245217] RSP: 002b:00007ffde70b7450 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 356.245222] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413501 [ 356.245225] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000000000000005 [ 356.245227] RBP: 0000000000000000 R08: 00000000007613a0 R09: ffffffffffffffff [ 356.245230] R10: 00007ffde70b7520 R11: 0000000000000293 R12: 000000000075bfc8 [ 356.245233] R13: 0000000000000005 R14: 00000000007613a8 R15: ffffffffffffffff [ 356.245240] [ 356.257451] Allocated by task 16905: [ 356.257459] save_stack+0x43/0xd0 [ 356.257463] kasan_kmalloc+0xc7/0xe0 [ 356.257469] kmem_cache_alloc_node_trace+0x14c/0x730 [ 356.257482] __sock_map_ctx_update_elem.isra.26+0x32c/0xcd0 [ 356.257486] sock_hash_ctx_update_elem.isra.30+0x63a/0x1040 [ 356.257492] sock_hash_update_elem+0x1b6/0x390 [ 356.313090] map_update_elem+0x591/0xb50 [ 356.313095] __x64_sys_bpf+0x208/0x380 [ 356.313101] do_syscall_64+0xd0/0x4d0 [ 356.313107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.313109] [ 356.313112] Freed by task 8881: [ 356.313117] save_stack+0x43/0xd0 [ 356.313120] __kasan_slab_free+0x102/0x150 [ 356.313123] kasan_slab_free+0xe/0x10 [ 356.313126] kfree+0xcf/0x220 [ 356.313133] smap_gc_work+0x775/0xa90 [ 356.320633] kobject: 'loop4' (00000000b8120fa7): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 356.322001] process_one_work+0x830/0x15c0 [ 356.322004] worker_thread+0x85/0xb60 [ 356.322007] kthread+0x324/0x3e0 [ 356.322011] ret_from_fork+0x24/0x30 [ 356.322013] [ 356.322017] The buggy address belongs to the object at ffff8800a133c4c0 [ 356.322017] which belongs to the cache kmalloc-1024 of size 1024 [ 356.322021] The buggy address is located 564 bytes inside of [ 356.322021] 1024-byte region [ffff8800a133c4c0, ffff8800a133c8c0) [ 356.322023] The buggy address belongs to the page: [ 356.322027] page:ffffea000284cf00 count:1 mapcount:0 mapping:ffff88012c35cac0 index:0xffff8800a133d240 compound_mapcount: 0 [ 356.322034] flags: 0x1fffc0000008100(slab|head) [ 356.322040] raw: 01fffc0000008100 ffffea0002537d88 ffffea000252a988 ffff88012c35cac0 [ 356.340796] kobject: 'loop2' (00000000cfd0cfa3): kobject_uevent_env [ 356.343643] raw: ffff8800a133d240 ffff8800a133c040 0000000100000006 0000000000000000 [ 356.343646] page dumped because: kasan: bad access detected [ 356.343647] [ 356.343649] Memory state around the buggy address: [ 356.343653] ffff8800a133c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 356.343656] ffff8800a133c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 356.343660] >ffff8800a133c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 356.350739] kobject: 'loop2' (00000000cfd0cfa3): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 356.353914] ^ [ 356.353919] ffff8800a133c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 356.353922] ffff8800a133c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 356.353923] ================================================================== [ 356.353956] Kernel panic - not syncing: panic_on_warn set ... [ 356.353956] [ 356.364707] kobject: 'loop3' (0000000024877cce): kobject_uevent_env [ 356.365653] CPU: 1 PID: 16893 Comm: syz-executor.0 Tainted: G B 4.19.0-rc6+ #1 [ 356.365656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.365658] Call Trace: [ 356.365669] dump_stack+0x109/0x15a [ 356.365678] panic+0x1c6/0x36b [ 356.371791] kobject: 'loop3' (0000000024877cce): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 356.372459] ? __warn_printk+0xd6/0xd6 [ 356.372467] ? do_raw_spin_unlock+0x54/0x220 [ 356.372481] kasan_end_report+0x47/0x4f [ 356.372486] kasan_report.cold.9+0x76/0x309 [ 356.412049] kobject: 'loop1' (0000000018e5c90d): kobject_uevent_env [ 356.414857] ? do_raw_spin_lock+0x1c0/0x200 [ 356.414865] __asan_report_load4_noabort+0x14/0x20 [ 356.414870] do_raw_spin_lock+0x1c0/0x200 [ 356.418647] kobject: 'loop1' (0000000018e5c90d): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 356.420197] _raw_spin_lock_bh+0x39/0x40 [ 356.420204] ? psock_map_pop.isra.23+0x1f/0x1b0 [ 356.420210] psock_map_pop.isra.23+0x1f/0x1b0 [ 356.676327] bpf_tcp_remove+0x435/0x960 [ 356.680280] ? __local_bh_enable_ip+0x160/0x260 [ 356.684924] ? tcp_check_oom+0x4b0/0x4b0 [ 356.688972] bpf_tcp_close+0xd2/0x280 [ 356.692752] inet_release+0xd9/0x1c0 [ 356.696442] inet6_release+0x46/0x60 [ 356.700147] __sock_release+0xc2/0x230 [ 356.704017] sock_close+0x10/0x20 [ 356.707445] __fput+0x249/0x7f0 [ 356.710698] ____fput+0x9/0x10 [ 356.713864] task_work_run+0x108/0x180 [ 356.717743] exit_to_usermode_loop+0x1a9/0x200 [ 356.722300] do_syscall_64+0x407/0x4d0 [ 356.726165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.731333] RIP: 0033:0x413501 [ 356.734498] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 356.753375] RSP: 002b:00007ffde70b7450 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 356.761056] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413501 [ 356.768299] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000000000000005 [ 356.775541] RBP: 0000000000000000 R08: 00000000007613a0 R09: ffffffffffffffff [ 356.782785] R10: 00007ffde70b7520 R11: 0000000000000293 R12: 000000000075bfc8 [ 356.790025] R13: 0000000000000005 R14: 00000000007613a8 R15: ffffffffffffffff [ 356.798207] Kernel Offset: disabled [ 356.801821] Rebooting in 86400 seconds..