[ 31.533748] audit: type=1800 audit(1572217843.077:33): pid=6816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 31.563455] audit: type=1800 audit(1572217843.077:34): pid=6816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 [ 31.745860] random: sshd: uninitialized urandom read (32 bytes read) [ 32.044385] audit: type=1400 audit(1572217843.587:35): avc: denied { map } for pid=6989 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 32.095665] random: sshd: uninitialized urandom read (32 bytes read) [ 32.731185] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 41.105967] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.119' (ECDSA) to the list of known hosts. [ 46.784701] random: sshd: uninitialized urandom read (32 bytes read) [ 46.903994] audit: type=1400 audit(1572217858.447:36): avc: denied { map } for pid=7002 comm="syz-executor166" path="/root/syz-executor166412742" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 47.181076] IPVS: ftp: loaded support on port[0] = 21 [ 48.039009] chnl_net:caif_netlink_parms(): no params data found [ 48.070264] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.076984] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.084525] device bridge_slave_0 entered promiscuous mode [ 48.091869] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.098257] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.105599] device bridge_slave_1 entered promiscuous mode [ 48.120212] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.128957] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.145445] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.152883] team0: Port device team_slave_0 added [ 48.158455] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.165634] team0: Port device team_slave_1 added [ 48.170910] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.178200] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.242332] device hsr_slave_0 entered promiscuous mode [ 48.280486] device hsr_slave_1 entered promiscuous mode [ 48.330737] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.337970] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.353009] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.359432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.366509] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.372890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.399377] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 48.405639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.414262] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.424052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.432940] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.440552] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.451356] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 48.457532] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.466803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.475090] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.481543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.491371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.499159] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.505586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.518789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.526725] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.536513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.546817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.557365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.566615] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.572980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.586403] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready executing program [ 48.596349] 8021q: adding VLAN 0 to HW filter on device batadv0 executing program [ 48.680348] protocol 88fb is buggy, dev hsr_slave_0 [ 48.685777] protocol 88fb is buggy, dev hsr_slave_1 executing program [ 48.800182] protocol 88fb is buggy, dev hsr_slave_0 [ 48.805402] protocol 88fb is buggy, dev hsr_slave_1 executing program [ 48.920196] protocol 88fb is buggy, dev hsr_slave_0 [ 48.925319] protocol 88fb is buggy, dev hsr_slave_1 executing program executing program [ 49.031146] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 49.040142] protocol 88fb is buggy, dev hsr_slave_0 [ 49.045356] protocol 88fb is buggy, dev hsr_slave_1 executing program executing program executing program executing program executing program executing program [ 49.660437] hsr_addr_subst_dest: Unknown node [ 49.665367] ------------[ cut here ]------------ [ 49.670273] WARNING: CPU: 1 PID: 7023 at net/hsr/hsr_framereg.c:313 hsr_addr_subst_dest.cold+0x45/0x4f [ 49.680100] Kernel panic - not syncing: panic_on_warn set ... [ 49.680100] [ 49.687449] CPU: 1 PID: 7023 Comm: syz-executor166 Not tainted 4.14.150 #0 [ 49.694440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.703998] Call Trace: [ 49.706584] dump_stack+0x138/0x197 [ 49.710202] panic+0x1f9/0x42d [ 49.713749] ? add_taint.cold+0x16/0x16 [ 49.717710] ? hsr_addr_subst_dest.cold+0x45/0x4f [ 49.722536] ? hsr_addr_subst_dest.cold+0x45/0x4f [ 49.727362] __warn.cold+0x2f/0x2f [ 49.731243] ? ist_end_non_atomic+0x10/0x10 [ 49.735552] ? hsr_addr_subst_dest.cold+0x45/0x4f [ 49.740396] report_bug+0x216/0x254 [ 49.744022] do_error_trap+0x1bb/0x310 [ 49.747898] ? math_error+0x360/0x360 [ 49.752645] ? vprintk_emit+0x171/0x600 [ 49.756623] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.761524] do_invalid_op+0x1b/0x20 [ 49.765291] invalid_op+0x1b/0x40 [ 49.768738] RIP: 0010:hsr_addr_subst_dest.cold+0x45/0x4f [ 49.774173] RSP: 0018:ffff8880a84ff608 EFLAGS: 00010286 [ 49.779530] RAX: 0000000000000021 RBX: dffffc0000000000 RCX: 0000000000000000 [ 49.786802] RDX: 0000000000000000 RSI: ffffffff866d10e0 RDI: ffffed101509feb7 [ 49.794052] RBP: ffff8880a84ff648 R08: 0000000000000021 R09: 0000000000000000 [ 49.801301] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809e805960 [ 49.808559] R13: 0000000000000000 R14: ffff88809e805960 R15: 0000000000000000 [ 49.815839] ? hsr_addr_subst_dest.cold+0x45/0x4f [ 49.822064] hsr_forward_skb+0x1025/0x1940 [ 49.826299] hsr_dev_xmit+0x72/0xa0 [ 49.829907] dev_hard_start_xmit+0x18c/0x8b0 [ 49.834297] ? assoc_array_gc+0x1140/0x11d0 [ 49.838597] __dev_queue_xmit+0x1d95/0x25e0 [ 49.842904] ? SyS_shutdown+0x160/0x170 [ 49.846859] ? netdev_pick_tx+0x300/0x300 [ 49.851001] ? sock_wmalloc+0xf0/0xf0 [ 49.854781] ? skb_copy_datagram_from_iter+0x3b7/0x5b0 [ 49.860055] ? memcpy+0x46/0x50 [ 49.863318] dev_queue_xmit+0x18/0x20 [ 49.867099] ? dev_queue_xmit+0x18/0x20 [ 49.871074] packet_sendmsg+0x1de0/0x5a70 [ 49.875203] ? avc_has_perm_noaudit+0x420/0x420 [ 49.879863] ? __might_fault+0x110/0x1d0 [ 49.883910] ? rw_copy_check_uvector+0x1f1/0x290 [ 49.888652] ? packet_notifier+0x760/0x760 [ 49.892871] ? copy_msghdr_from_user+0x292/0x3f0 [ 49.897612] ? security_socket_sendmsg+0x89/0xb0 [ 49.902349] ? packet_notifier+0x760/0x760 [ 49.906566] sock_sendmsg+0xce/0x110 [ 49.910270] ___sys_sendmsg+0x70a/0x840 [ 49.914233] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 49.918990] ? ___sys_sendmsg+0x840/0x840 [ 49.923135] ? __thp_get_unmapped_area+0x130/0x130 [ 49.928056] ? __handle_mm_fault+0x6a1/0x3470 [ 49.932538] ? __fdget+0x1b/0x20 [ 49.935901] ? sockfd_lookup_light+0xb4/0x160 [ 49.940375] __sys_sendmsg+0xb9/0x140 [ 49.944154] ? SyS_shutdown+0x170/0x170 [ 49.948132] SyS_sendmsg+0x2d/0x50 [ 49.951647] ? __sys_sendmsg+0x140/0x140 [ 49.955707] do_syscall_64+0x1e8/0x640 [ 49.959574] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.964397] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 49.969565] RIP: 0033:0x442ca9 [ 49.972746] RSP: 002b:00007fff5b4457e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.980528] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000442ca9 [ 49.987779] RDX: 0000000000000000 RSI: 0000000020001e40 RDI: 0000000000000003 [ 49.995027] RBP: 0000000000000000 R08: 00000000004aa2df R09: 00000000004aa2df [ 50.002277] R10: 00000000004aa2df R11: 0000000000000246 R12: 000000000000000b [ 50.009526] R13: 0000000000403ab0 R14: 0000000000000000 R15: 0000000000000000 [ 50.018418] Kernel Offset: disabled [ 50.022122] Rebooting in 86400 seconds..