syzkaller login: [ 23.262457] random: sshd: uninitialized urandom read (32 bytes read) [ 28.782953] random: sshd: uninitialized urandom read (32 bytes read) [ 30.788886] random: cc1: uninitialized urandom read (8 bytes read) [ 31.695832] IPVS: ftp: loaded support on port[0] = 21 [ 32.048734] can: request_module (can-proto-0) failed. [ 33.185917] can: request_module (can-proto-0) failed. [ 33.633822] random: sshd: uninitialized urandom read (32 bytes read) [ 34.079671] random: sshd: uninitialized urandom read (32 bytes read) [ 34.241466] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.2' (ECDSA) to the list of known hosts. 2019/07/30 07:05:23 parsed 1 programs 2019/07/30 07:05:23 executed programs: 0 [ 41.520299] IPVS: ftp: loaded support on port[0] = 21 [ 41.525932] IPVS: ftp: loaded support on port[0] = 21 [ 41.572258] IPVS: ftp: loaded support on port[0] = 21 [ 41.583338] IPVS: ftp: loaded support on port[0] = 21 [ 41.583863] IPVS: ftp: loaded support on port[0] = 21 [ 41.593674] IPVS: ftp: loaded support on port[0] = 21 [ 41.680895] chnl_net:caif_netlink_parms(): no params data found [ 41.789426] chnl_net:caif_netlink_parms(): no params data found [ 41.845559] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.852556] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.859344] device bridge_slave_0 entered promiscuous mode [ 41.867999] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.874640] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.881770] device bridge_slave_1 entered promiscuous mode [ 41.893748] chnl_net:caif_netlink_parms(): no params data found [ 41.906524] chnl_net:caif_netlink_parms(): no params data found [ 41.943705] chnl_net:caif_netlink_parms(): no params data found [ 41.962311] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.969986] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.976718] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.984830] device bridge_slave_0 entered promiscuous mode [ 41.994022] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.000499] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.007461] device bridge_slave_1 entered promiscuous mode [ 42.032737] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.049680] chnl_net:caif_netlink_parms(): no params data found [ 42.068658] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.088578] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.097817] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.104363] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.111583] device bridge_slave_0 entered promiscuous mode [ 42.125132] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.133364] team0: Port device team_slave_0 added [ 42.146881] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.153944] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.160981] device bridge_slave_1 entered promiscuous mode [ 42.169795] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.178993] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.185974] device bridge_slave_0 entered promiscuous mode [ 42.192973] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.200141] team0: Port device team_slave_1 added [ 42.207815] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.215756] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.222319] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.229240] device bridge_slave_0 entered promiscuous mode [ 42.238991] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.245406] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.252383] device bridge_slave_1 entered promiscuous mode [ 42.263749] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.270452] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.277399] device bridge_slave_1 entered promiscuous mode [ 42.290281] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.300795] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.307836] team0: Port device team_slave_0 added [ 42.317552] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.337860] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.346314] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.356395] team0: Port device team_slave_1 added [ 42.364848] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.372493] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.386882] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.396936] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.403369] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.410617] device bridge_slave_0 entered promiscuous mode [ 42.417655] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.426704] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.472569] device hsr_slave_0 entered promiscuous mode [ 42.520372] device hsr_slave_1 entered promiscuous mode [ 42.560529] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.575210] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.582135] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.589077] device bridge_slave_1 entered promiscuous mode [ 42.598940] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.608731] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.652455] device hsr_slave_0 entered promiscuous mode [ 42.690387] device hsr_slave_1 entered promiscuous mode [ 42.743761] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.758719] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.769236] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.776665] team0: Port device team_slave_0 added [ 42.782186] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.789214] team0: Port device team_slave_1 added [ 42.814105] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.821976] team0: Port device team_slave_0 added [ 42.827413] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.834894] team0: Port device team_slave_1 added [ 42.842900] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.851414] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.858461] team0: Port device team_slave_0 added [ 42.866560] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.874838] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.885112] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.893791] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.901138] team0: Port device team_slave_1 added [ 42.907236] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.920248] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.927968] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.939976] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.947328] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.001540] device hsr_slave_0 entered promiscuous mode [ 43.040405] device hsr_slave_1 entered promiscuous mode [ 43.113779] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.162505] device hsr_slave_0 entered promiscuous mode [ 43.230296] device hsr_slave_1 entered promiscuous mode [ 43.310554] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.317666] team0: Port device team_slave_0 added [ 43.323237] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.330346] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.337431] team0: Port device team_slave_1 added [ 43.382577] device hsr_slave_0 entered promiscuous mode [ 43.420350] device hsr_slave_1 entered promiscuous mode [ 43.460731] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.471278] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.479485] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.486351] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.493743] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.504785] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.514345] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.535806] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.591526] device hsr_slave_0 entered promiscuous mode [ 43.640461] device hsr_slave_1 entered promiscuous mode [ 43.710684] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.717533] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.728014] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.738719] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.765670] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.796517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.815437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.825791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.834117] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.843017] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.851719] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.861408] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.869256] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.875735] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.884046] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.893723] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.899784] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.909093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.917721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.925099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.932116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.939423] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.948000] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.960870] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.968137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.975245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.982563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.990272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.997793] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.004224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.012428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.020968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.028439] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.034799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.044395] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.051445] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.061388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.072080] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.082618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.089792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.096890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.104739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.112950] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.119271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.126425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.134134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.141804] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.148225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.156219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.167980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.178975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.185641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.195378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.203128] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.209558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.217410] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.227700] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.237272] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.244069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.251873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.259385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.269480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.279977] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.288298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.297594] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.304722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.312592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.320313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.327768] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.334123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.341222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.349870] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.358465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.366687] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.374707] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.383451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.389459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.398215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.406162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.413748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.420763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.427498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.435303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.443089] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.450857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.459899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.469014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.476384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.483352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.491298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.498678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.506509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.516446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.523624] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.532361] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.539252] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.545348] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.555194] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.562894] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.573265] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.581777] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.587836] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.596081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.604097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.612800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.620461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.628448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.636200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.644524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.652161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.660226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.667725] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.674088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.682155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.688877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.695995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.703927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.713796] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.724650] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.733562] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.742400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.752884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.760499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.768118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.776133] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.782509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.789713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.797774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.805784] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.812168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.820876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.829422] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.836782] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.844819] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.854004] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.861231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.868065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.875184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.882752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.890143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.897657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.905250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.913746] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.922216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.932985] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.939051] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.946967] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.953657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.963291] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.972141] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.979330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.989098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.997044] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.003511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.011015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.018540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.026218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.033948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.041740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.050744] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.057984] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.064922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.073265] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.086401] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.093407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.100517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.108117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.116008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.124174] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.130562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.137532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.147507] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.155115] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.165519] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.174715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.185801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.193505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.204055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.214039] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.220499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.227277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.234967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.242947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.253293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.263432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.274875] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.285679] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.294825] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.306992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.315168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.323335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.331113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.338754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.346866] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.354562] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.364379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.376089] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.389584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.399502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.415236] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.427412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.437454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.445469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.453362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.461527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.476873] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.516290] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.525901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.540722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.553961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.566094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.576589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.584921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.596880] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.609155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.617234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.635527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.648196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.668280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.677720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.699179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.718266] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.725042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.739114] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.753718] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.772070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.779481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.787462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.800437] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.810788] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.819626] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.830793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.838784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.846799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.855343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.872247] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.878945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.926755] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.945203] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/07/30 07:05:28 executed programs: 54 2019/07/30 07:05:33 executed programs: 469 2019/07/30 07:05:38 executed programs: 890 2019/07/30 07:05:43 executed programs: 1314 2019/07/30 07:05:48 executed programs: 1736 2019/07/30 07:05:53 executed programs: 2169 2019/07/30 07:05:58 executed programs: 2585 2019/07/30 07:06:03 executed programs: 2997 2019/07/30 07:06:08 executed programs: 3408 2019/07/30 07:06:13 executed programs: 3821 2019/07/30 07:06:18 executed programs: 4231 2019/07/30 07:06:24 executed programs: 4637 2019/07/30 07:06:29 executed programs: 5033 2019/07/30 07:06:34 executed programs: 5425 2019/07/30 07:06:39 executed programs: 5841 2019/07/30 07:06:44 executed programs: 6244 2019/07/30 07:06:49 executed programs: 6643 2019/07/30 07:06:54 executed programs: 7026 2019/07/30 07:06:59 executed programs: 7416 2019/07/30 07:07:04 executed programs: 7796 2019/07/30 07:07:09 executed programs: 8214 2019/07/30 07:07:14 executed programs: 8603 2019/07/30 07:07:19 executed programs: 8990 2019/07/30 07:07:24 executed programs: 9375 2019/07/30 07:07:29 executed programs: 9748 2019/07/30 07:07:34 executed programs: 10124 2019/07/30 07:07:39 executed programs: 10523 2019/07/30 07:07:44 executed programs: 10919 2019/07/30 07:07:49 executed programs: 11288 2019/07/30 07:07:54 executed programs: 11673 2019/07/30 07:07:59 executed programs: 12045 2019/07/30 07:08:04 executed programs: 12412 2019/07/30 07:08:09 executed programs: 12807 2019/07/30 07:08:14 executed programs: 13178 2019/07/30 07:08:19 executed programs: 13553 2019/07/30 07:08:24 executed programs: 13908 2019/07/30 07:08:29 executed programs: 14271 2019/07/30 07:08:34 executed programs: 14622 2019/07/30 07:08:39 executed programs: 15035 2019/07/30 07:08:44 executed programs: 15426 2019/07/30 07:08:49 executed programs: 15808 2019/07/30 07:08:54 executed programs: 16160 2019/07/30 07:08:59 executed programs: 16505 2019/07/30 07:09:04 executed programs: 16858 2019/07/30 07:09:09 executed programs: 17252 2019/07/30 07:09:14 executed programs: 17644 2019/07/30 07:09:19 executed programs: 18017 2019/07/30 07:09:24 executed programs: 18363 2019/07/30 07:09:29 executed programs: 18713 2019/07/30 07:09:34 executed programs: 19058 2019/07/30 07:09:39 executed programs: 19452 2019/07/30 07:09:44 executed programs: 19818 2019/07/30 07:09:49 executed programs: 20162 2019/07/30 07:09:54 executed programs: 20506 2019/07/30 07:09:59 executed programs: 20836 2019/07/30 07:10:04 executed programs: 21170 2019/07/30 07:10:09 executed programs: 21549 2019/07/30 07:10:14 executed programs: 21934 2019/07/30 07:10:19 executed programs: 22290 2019/07/30 07:10:24 executed programs: 22637 2019/07/30 07:10:29 executed programs: 22975 2019/07/30 07:10:34 executed programs: 23316 2019/07/30 07:10:39 executed programs: 23729 2019/07/30 07:10:44 executed programs: 24149 2019/07/30 07:10:49 executed programs: 24572 2019/07/30 07:10:54 executed programs: 24985 2019/07/30 07:10:59 executed programs: 25398 2019/07/30 07:11:04 executed programs: 25804 2019/07/30 07:11:09 executed programs: 26224 2019/07/30 07:11:14 executed programs: 26635 2019/07/30 07:11:19 executed programs: 27033 2019/07/30 07:11:24 executed programs: 27433 2019/07/30 07:11:29 executed programs: 27835 2019/07/30 07:11:34 executed programs: 28242 2019/07/30 07:11:39 executed programs: 28645 2019/07/30 07:11:44 executed programs: 29059 [ 422.284528] random: crng init done 2019/07/30 07:11:49 executed programs: 29451 2019/07/30 07:11:54 executed programs: 29849 2019/07/30 07:11:59 executed programs: 30232 [ 437.666833] ================================================================== [ 437.674344] BUG: KASAN: use-after-free in bpf_tcp_close+0x469/0xb90 [ 437.674350] Write of size 8 at addr ffff880088a90880 by task syz-executor.3/27874 [ 437.674352] [ 437.674363] CPU: 0 PID: 27874 Comm: syz-executor.3 Not tainted 4.18.0-rc1+ #1 [ 437.674365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.674368] Call Trace: [ 437.674479] dump_stack+0x109/0x15a [ 437.674492] print_address_description.cold.8+0x9/0x1ff [ 437.674499] kasan_report.cold.9+0x242/0x2fe [ 437.674503] ? bpf_tcp_close+0x469/0xb90 [ 437.674511] check_memory_region+0x13e/0x1b0 [ 437.674517] kasan_check_write+0x14/0x20 [ 437.674521] bpf_tcp_close+0x469/0xb90 [ 437.674550] ? tcp_check_oom+0x4b0/0x4b0 [ 437.674576] inet_release+0xd9/0x1c0 [ 437.706900] inet6_release+0x46/0x60 [ 437.706952] __sock_release+0xc2/0x230 [ 437.764450] sock_close+0x10/0x20 [ 437.767928] __fput+0x238/0x780 [ 437.771242] ? _raw_spin_unlock_irq+0x27/0x80 [ 437.775719] ____fput+0x9/0x10 [ 437.778888] task_work_run+0x111/0x180 [ 437.782866] exit_to_usermode_loop+0x1a2/0x200 [ 437.787432] do_syscall_64+0x407/0x4d0 [ 437.791306] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 437.796472] RIP: 0033:0x413511 [ 437.800421] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 437.819710] RSP: 002b:00007ffcf24f3ee0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 437.827406] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413511 [ 437.834660] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000000000000005 [ 437.841907] RBP: 0000000000000000 R08: 0000000000761170 R09: ffffffffffffffff [ 437.849156] R10: 00007ffcf24f3fb0 R11: 0000000000000293 R12: 000000000075bf20 [ 437.856412] R13: 0000000000000005 R14: 0000000000761178 R15: ffffffffffffffff [ 437.863743] [ 437.865351] Allocated by task 27895: [ 437.869050] save_stack+0x43/0xd0 [ 437.872491] kasan_kmalloc+0xc7/0xe0 [ 437.876188] __kmalloc_node+0x47/0x70 [ 437.879963] bpf_map_area_alloc+0x22/0x50 [ 437.884260] sock_map_alloc+0x2b4/0x350 [ 437.888282] map_create+0x230/0xc40 [ 437.892003] __x64_sys_bpf+0x1d1/0x380 [ 437.895868] do_syscall_64+0xd0/0x4d0 [ 437.899641] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 437.904803] [ 437.906418] Freed by task 15513: [ 437.909761] save_stack+0x43/0xd0 [ 437.913191] __kasan_slab_free+0x102/0x150 [ 437.917405] kasan_slab_free+0xe/0x10 [ 437.921190] kfree+0xcf/0x270 [ 437.924297] kvfree+0x2c/0x30 [ 437.927386] bpf_map_area_free+0x9/0x10 [ 437.931376] sock_map_free+0x22e/0x300 [ 437.935244] bpf_map_free_deferred+0xaf/0xe0 [ 437.939648] process_one_work+0x830/0x1650 [ 437.943859] worker_thread+0x85/0xb60 [ 437.947637] kthread+0x316/0x3d0 [ 437.950977] ret_from_fork+0x24/0x30 [ 437.954669] [ 437.956274] The buggy address belongs to the object at ffff880088a90880 [ 437.956274] which belongs to the cache kmalloc-8192 of size 8192 [ 437.969163] The buggy address is located 0 bytes inside of [ 437.969163] 8192-byte region [ffff880088a90880, ffff880088a92880) [ 437.980923] The buggy address belongs to the page: [ 437.985831] page:ffffea000222a400 count:1 mapcount:0 mapping:ffff8800aa802080 index:0x0 compound_mapcount: 0 [ 437.995776] flags: 0x1fffc0000008100(slab|head) [ 438.000418] raw: 01fffc0000008100 ffffea0002a2e708 ffffea0002152d08 ffff8800aa802080 [ 438.008272] raw: 0000000000000000 ffff880088a90880 0000000100000001 0000000000000000 [ 438.016148] page dumped because: kasan: bad access detected [ 438.021837] [ 438.023446] Memory state around the buggy address: [ 438.028349] ffff880088a90780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 438.035690] ffff880088a90800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 438.043026] >ffff880088a90880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 438.050365] ^ [ 438.053705] ffff880088a90900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 438.061039] ffff880088a90980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 438.068373] ================================================================== [ 438.075719] Disabling lock debugging due to kernel taint [ 438.083120] Kernel panic - not syncing: panic_on_warn set ... [ 438.083120] [ 438.087795] kobject: 'loop0' (000000004532cff3): kobject_uevent_env [ 438.090574] CPU: 0 PID: 27874 Comm: syz-executor.3 Tainted: G B 4.18.0-rc1+ #1 [ 438.090577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.090579] Call Trace: [ 438.090591] dump_stack+0x109/0x15a [ 438.090599] panic+0x1c6/0x36b [ 438.090603] ? __warn_printk+0xd6/0xd6 [ 438.090609] ? ___preempt_schedule+0x16/0x18 [ 438.090619] kasan_end_report+0x47/0x4f [ 438.090623] kasan_report.cold.9+0x76/0x2fe [ 438.090627] ? bpf_tcp_close+0x469/0xb90 [ 438.090632] check_memory_region+0x13e/0x1b0 [ 438.090636] kasan_check_write+0x14/0x20 [ 438.090639] bpf_tcp_close+0x469/0xb90 [ 438.090645] ? tcp_check_oom+0x4b0/0x4b0 [ 438.090652] inet_release+0xd9/0x1c0 [ 438.090658] inet6_release+0x46/0x60 [ 438.090664] __sock_release+0xc2/0x230 [ 438.090668] sock_close+0x10/0x20 [ 438.090675] __fput+0x238/0x780 [ 438.101459] kobject: 'loop0' (000000004532cff3): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 438.105895] ? _raw_spin_unlock_irq+0x27/0x80 [ 438.105904] ____fput+0x9/0x10 [ 438.132123] kobject: 'loop1' (0000000088ee4b02): kobject_uevent_env [ 438.132849] task_work_run+0x111/0x180 [ 438.140139] kobject: 'loop1' (0000000088ee4b02): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 438.141107] exit_to_usermode_loop+0x1a2/0x200 [ 438.147148] kobject: 'loop2' (00000000a27ec14e): kobject_uevent_env [ 438.149657] do_syscall_64+0x407/0x4d0 [ 438.149665] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 438.149669] RIP: 0033:0x413511 [ 438.149672] Code: [ 438.153998] kobject: 'loop2' (00000000a27ec14e): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 438.157578] 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f [ 438.162786] kobject: 'loop5' (000000007fbbd746): kobject_uevent_env [ 438.165416] 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 [ 438.169209] kobject: 'loop5' (000000007fbbd746): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 438.172998] 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 438.173027] RSP: 002b:00007ffcf24f3ee0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 438.173032] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413511 [ 438.173035] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000000000000005 [ 438.173038] RBP: 0000000000000000 R08: 0000000000761170 R09: ffffffffffffffff [ 438.177342] kobject: 'loop1' (0000000088ee4b02): kobject_uevent_env [ 438.179728] R10: 00007ffcf24f3fb0 R11: 0000000000000293 R12: 000000000075bf20 [ 438.179730] R13: 0000000000000005 R14: 0000000000761178 R15: ffffffffffffffff [ 438.180924] Kernel Offset: disabled [ 438.345785] Rebooting in 86400 seconds..