[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 19.286687] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [ 19.561744] random: sshd: uninitialized urandom read (32 bytes read) [ 19.899234] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 20.667159] random: sshd: uninitialized urandom read (32 bytes read) [ 23.059333] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.32' (ECDSA) to the list of known hosts. [ 28.524230] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/28 06:06:07 parsed 1 programs 2018/05/28 06:06:07 executed programs: 0 [ 29.023170] IPVS: ftp: loaded support on port[0] = 21 [ 29.145313] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.151820] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.159237] device bridge_slave_0 entered promiscuous mode [ 29.175146] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.181508] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.188908] device bridge_slave_1 entered promiscuous mode [ 29.205096] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 29.221223] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 29.269849] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 29.291962] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 29.373990] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 29.381724] team0: Port device team_slave_0 added [ 29.398973] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 29.406132] team0: Port device team_slave_1 added [ 29.422887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.439177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.455116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.474152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.600458] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.606957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.613838] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.620222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.046623] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 30.052784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.097325] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 30.111593] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 30.147835] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 30.154433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.161753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.198521] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/28 06:06:09 result: failed=false hanged=false err=executor 0: failed: RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument setsockopt(EBT_SO_SET_ENTRIES) (errno 22) loop failed (errno 0) RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument setsockopt(EBT_SO_SET_ENTRIES) (errno 22) loop failed (errno 0) [ 30.475871] IPVS: ftp: loaded support on port[0] = 21 [ 30.582233] device bridge_slave_1 left promiscuous mode [ 30.588134] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.602491] device bridge_slave_0 left promiscuous mode [ 30.608044] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.636315] team0 (unregistering): Port device team_slave_1 removed [ 30.645725] team0 (unregistering): Port device team_slave_0 removed [ 30.655195] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 30.669711] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 30.693711] bond0 (unregistering): Released all slaves [ 30.740309] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.746710] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.753783] device bridge_slave_0 entered promiscuous mode [ 30.770114] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.776531] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.783941] device bridge_slave_1 entered promiscuous mode [ 30.800192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 30.817383] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 30.860363] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 30.878707] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 30.940695] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 30.947819] team0: Port device team_slave_0 added [ 30.962658] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 30.969821] team0: Port device team_slave_1 added [ 30.984899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.004532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.022339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.040601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.162529] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.168928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.175531] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.181862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.190125] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 31.748806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.792691] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 31.835798] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 31.842199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.849286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.889211] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/28 06:06:10 result: failed=false hanged=false err=executor 0: failed: RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument setsockopt(EBT_SO_SET_ENTRIES) (errno 22) loop failed (errno 0) RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument setsockopt(EBT_SO_SET_ENTRIES) (errno 22) loop failed (errno 0) [ 32.119121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.159254] BUG: unable to handle kernel [ 32.159263] IPVS: ftp: loaded support on port[0] = 21 [ 32.168609] paging request at ffffc90001f30003 [ 32.173169] PGD 1da946067 P4D 1da946067 PUD 1da947067 PMD 1afa9e067 PTE 80000001b7d3e163 [ 32.181386] Oops: 0000 [#1] SMP KASAN [ 32.185180] Dumping ftrace buffer: [ 32.188692] (ftrace buffer empty) [ 32.192376] Modules linked in: [ 32.195551] CPU: 0 PID: 8 Comm: ksoftirqd/0 Not tainted 4.17.0-rc6+ #95 [ 32.202273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.211617] RIP: 0010:ebt_do_table+0x1983/0x2140 [ 32.216355] RSP: 0018:ffff8801d9aaeb68 EFLAGS: 00010246 [ 32.221717] RAX: ffffc90001f30003 RBX: ffffc90001f30003 RCX: ffffc90001f24000 [ 32.228963] RDX: 0000000000000000 RSI: ffffffff86a8513c RDI: 0000000000000000 [ 32.236208] RBP: ffff8801d9aaed38 R08: ffff8801d9a9c200 R09: ffffed003b5c46d2 [ 32.243455] R10: ffffed003b5c46d2 R11: ffff8801dae23693 R12: ffffc90001f24000 [ 32.250706] R13: ffffc90001f201a0 R14: ffffc90001f200d0 R15: dffffc0000000000 [ 32.257955] FS: 0000000000000000(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 32.266159] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.272019] CR2: ffffc90001f30003 CR3: 00000001ad782000 CR4: 00000000001406f0 [ 32.279269] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.286518] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.293763] Call Trace: [ 32.296349] ? find_inlist_lock.constprop.14+0x220/0x220 [ 32.301781] ? ipv6_chk_mcast_addr+0x374/0x930 [ 32.306344] ? graph_lock+0x170/0x170 [ 32.310121] ? find_held_lock+0x36/0x1c0 [ 32.314165] ? rb_erase_cached+0xc6a/0x32a0 [ 32.318465] ebt_broute+0x1f8/0x320 [ 32.322069] ? broute_net_init+0x30/0x30 [ 32.326104] ? broute_net_init+0x30/0x30 [ 32.330144] ? broute_net_init+0x30/0x30 [ 32.334186] br_handle_frame+0x6b6/0x19f0 [ 32.338313] ? rcu_is_watching+0x85/0x140 [ 32.342437] ? br_handle_frame_finish+0x1860/0x1860 [ 32.347429] ? broute_net_init+0x30/0x30 [ 32.351467] ? update_curr+0x4d5/0xbe0 [ 32.355333] ? __account_cfs_rq_runtime+0x600/0x600 [ 32.360326] ? debug_check_no_locks_freed+0x280/0x310 [ 32.365490] ? lock_downgrade+0x8e0/0x8e0 [ 32.369613] ? print_usage_bug+0xc0/0xc0 [ 32.373650] ? graph_lock+0x170/0x170 [ 32.377426] ? __enqueue_entity+0x10d/0x1f0 [ 32.381722] ? __lock_is_held+0xb5/0x140 [ 32.385760] ? br_handle_frame_finish+0x1860/0x1860 [ 32.390754] __netif_receive_skb_core+0xc6e/0x3630 [ 32.395659] ? __lock_acquire+0x7f5/0x5140 [ 32.399868] ? debug_check_no_locks_freed+0x280/0x310 [ 32.405041] ? nf_ingress+0xa00/0xa00 [ 32.408820] ? __lock_acquire+0x7f5/0x5140 [ 32.413039] ? debug_check_no_locks_freed+0x310/0x310 [ 32.418210] ? attach_entity_load_avg+0x850/0x850 [ 32.423030] ? attach_entity_load_avg+0x850/0x850 [ 32.427848] ? graph_lock+0x170/0x170 [ 32.431651] ? br_handle_frame_finish+0x1860/0x1860 [ 32.436653] ? print_usage_bug+0xc0/0xc0 [ 32.440779] ? graph_lock+0x170/0x170 [ 32.444561] ? find_held_lock+0x36/0x1c0 [ 32.448598] ? graph_lock+0x170/0x170 [ 32.452377] ? find_held_lock+0x36/0x1c0 [ 32.456417] ? find_held_lock+0x36/0x1c0 [ 32.460470] ? lock_acquire+0x1dc/0x520 [ 32.464420] ? process_backlog+0x1a6/0x760 [ 32.468636] ? kasan_check_read+0x11/0x20 [ 32.472760] ? rcu_is_watching+0x85/0x140 [ 32.476887] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 32.481446] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 32.486613] ? kasan_check_write+0x14/0x20 [ 32.490825] __netif_receive_skb+0x2c/0x1e0 [ 32.495125] process_backlog+0x219/0x760 [ 32.499165] net_rx_action+0x7b7/0x1930 [ 32.503118] ? napi_complete_done+0x6a0/0x6a0 [ 32.507590] ? reweight_task+0x130/0x130 [ 32.511629] ? kthread+0x345/0x410 [ 32.515146] ? graph_lock+0x170/0x170 [ 32.518924] ? pick_next_task_fair+0x97c/0x1780 [ 32.523569] ? find_held_lock+0x36/0x1c0 [ 32.527623] ? lock_downgrade+0x8e0/0x8e0 [ 32.531749] ? finish_task_switch+0x182/0x840 [ 32.536222] ? kasan_check_read+0x11/0x20 [ 32.540348] ? do_raw_spin_unlock+0x9e/0x2e0 [ 32.544733] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 32.549296] ? compat_start_thread+0x80/0x80 [ 32.553681] ? _raw_spin_unlock_irq+0x27/0x70 [ 32.558153] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 32.563149] ? kasan_check_write+0x14/0x20 [ 32.567370] ? finish_task_switch+0x28b/0x840 [ 32.571843] ? preempt_notifier_register+0x1e0/0x1e0 [ 32.576922] ? lock_repin_lock+0x410/0x410 [ 32.581144] ? __schedule+0x809/0x1e30 [ 32.585015] ? kasan_check_read+0x11/0x20 [ 32.589146] ? rcu_is_watching+0x85/0x140 [ 32.593270] ? rcu_pm_notify+0xc0/0xc0 [ 32.597140] __do_softirq+0x2e0/0xaf5 [ 32.600921] ? __irqentry_text_end+0x1f98a8/0x1f98a8 [ 32.605998] ? find_held_lock+0x36/0x1c0 [ 32.610057] ? schedule+0xef/0x430 [ 32.613572] ? schedule+0xef/0x430 [ 32.617087] ? find_held_lock+0x36/0x1c0 [ 32.621129] ? __schedule+0x1e30/0x1e30 [ 32.625080] ? rcu_note_context_switch+0x710/0x710 [ 32.629988] ? check_same_owner+0x320/0x320 [ 32.634289] ? schedule+0xef/0x430 [ 32.637809] ? run_ksoftirqd+0x8b/0x100 [ 32.641759] ? takeover_tasklets+0xa50/0xa50 [ 32.646141] run_ksoftirqd+0x86/0x100 [ 32.649918] smpboot_thread_fn+0x417/0x870 [ 32.654127] ? sort_range+0x30/0x30 [ 32.657732] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 32.662724] ? trace_hardirqs_on+0xd/0x10 [ 32.666850] kthread+0x345/0x410 [ 32.670190] ? sort_range+0x30/0x30 [ 32.673793] ? kthread_bind+0x40/0x40 [ 32.677570] ret_from_fork+0x3a/0x50 [ 32.681256] Code: 6c 24 08 48 89 d8 48 89 9d d0 fe ff ff 48 c1 e8 03 42 0f b6 04 38 84 c0 74 08 3c 03 0f 8e 3b 06 00 00 48 8b 85 d0 fe ff ff 31 ff <8b> 18 89 de e8 54 f1 d0 fa 85 db 0f 85 a0 02 00 00 e8 37 f0 d0 [ 32.700387] RIP: ebt_do_table+0x1983/0x2140 RSP: ffff8801d9aaeb68 [ 32.706593] CR2: ffffc90001f30003 [ 32.710028] ---[ end trace d121cd1897af50a4 ]--- [ 32.714757] Kernel panic - not syncing: Fatal exception in interrupt [ 32.721657] Dumping ftrace buffer: [ 32.725170] (ftrace buffer empty) [ 32.728857] Kernel Offset: disabled [ 32.732458] Rebooting in 86400 seconds..