[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 31.855661] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.160322] kauditd_printk_skb: 10 callbacks suppressed [ 32.160330] audit: type=1400 audit(1556449969.146:35): avc: denied { map } for pid=6882 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 32.217529] random: sshd: uninitialized urandom read (32 bytes read) [ 32.830337] random: sshd: uninitialized urandom read (32 bytes read) [ 43.226099] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.176' (ECDSA) to the list of known hosts. [ 48.955718] random: sshd: uninitialized urandom read (32 bytes read) [ 49.074474] audit: type=1400 audit(1556449986.056:36): avc: denied { map } for pid=6895 comm="syz-executor174" path="/root/syz-executor174640762" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 49.810267] IPVS: ftp: loaded support on port[0] = 21 [ 50.114355] chnl_net:caif_netlink_parms(): no params data found [ 50.142980] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.149481] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.156523] device bridge_slave_0 entered promiscuous mode [ 50.163331] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.169684] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.176686] device bridge_slave_1 entered promiscuous mode [ 50.191511] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.201136] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.216659] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.224140] team0: Port device team_slave_0 added [ 50.229519] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.237023] team0: Port device team_slave_1 added [ 50.242413] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.249619] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.302146] device hsr_slave_0 entered promiscuous mode [ 50.350346] device hsr_slave_1 entered promiscuous mode [ 50.390552] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.397464] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.410672] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.417108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.424205] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.430763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.458613] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 50.465516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.474228] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.483696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.502558] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.509843] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.519830] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.526112] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.534667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.542345] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.548803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.557848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.565788] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.572191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.586999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.594842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.604109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.617153] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.627344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.638777] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.645469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.653168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready executing program [ 50.661072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.672333] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.682544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.709032] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 50.820311] kasan: CONFIG_KASAN_INLINE enabled [ 50.825311] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 50.832763] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 50.839400] Modules linked in: [ 50.843696] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.14.114 #4 [ 50.849909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.859330] task: ffffffff87676240 task.stack: ffffffff87600000 [ 50.865387] RIP: 0010:rose_send_frame+0x18d/0x270 [ 50.870633] RSP: 0018:ffff8880aee07b48 EFLAGS: 00010202 [ 50.876106] RAX: dffffc0000000000 RBX: ffff8882163fb780 RCX: 0000000000000006 [ 50.883549] RDX: 000000000000006b RSI: ffffffff86f9bae0 RDI: 0000000000000358 [ 50.890917] RBP: ffff8880aee07b78 R08: 1ffff110122e81b8 R09: ffff888091740dc0 [ 50.898225] R10: ffffed10122e81bc R11: ffff888091740de3 R12: ffff88808e793580 [ 50.905541] R13: 0000000000000078 R14: 0000000000000005 R15: 0000000000000000 [ 50.912803] FS: 0000000000000000(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 50.921027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.926896] CR2: 0000000020000190 CR3: 0000000082bbb000 CR4: 00000000001406f0 [ 50.934387] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.942171] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.949500] Call Trace: [ 50.952109] [ 50.954258] ? skb_put+0x161/0x1c0 [ 50.957794] rose_transmit_clear_request+0x1da/0x290 [ 50.962895] ? __local_bh_enable_ip+0x99/0x1a0 [ 50.967518] rose_rx_call_request+0x452/0x1940 [ 50.972151] ? rose_dev_get+0x1c5/0x2b0 [ 50.976449] ? rose_release+0x3e0/0x3e0 [ 50.980566] rose_loopback_timer+0x232/0x3b0 [ 50.984975] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 50.990426] call_timer_fn+0x164/0x680 [ 50.994307] ? rose_link_rx_restart.cold+0xa0/0xa0 [ 50.999224] ? __next_timer_interrupt+0x140/0x140 [ 51.004161] ? trace_hardirqs_on_caller+0x19b/0x590 [ 51.009179] run_timer_softirq+0x5b4/0x1570 [ 51.013489] ? rose_link_rx_restart.cold+0xa0/0xa0 [ 51.018408] ? add_timer+0xae0/0xae0 [ 51.022120] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 51.027656] __do_softirq+0x24e/0x9ae [ 51.031448] ? sched_clock+0x2e/0x50 [ 51.035156] irq_exit+0x160/0x1b0 [ 51.038601] smp_apic_timer_interrupt+0x156/0x600 [ 51.043435] apic_timer_interrupt+0x8e/0xa0 [ 51.047810] [ 51.050057] RIP: 0010:native_safe_halt+0x2/0x10 [ 51.054717] RSP: 0018:ffffffff87607de8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10 [ 51.062665] RAX: 1ffffffff0ee2970 RBX: ffffffff87676240 RCX: 0000000000000000 [ 51.069935] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff87676abc [ 51.077206] RBP: ffffffff87607e10 R08: 1ffffffff1049a01 R09: 0000000000000000 [ 51.084537] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff87714b70 [ 51.091799] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87676240 [ 51.099196] ? default_idle+0x4c/0x380 [ 51.103187] arch_cpu_idle+0x10/0x20 [ 51.107036] default_idle_call+0x36/0x90 [ 51.111362] do_idle+0x262/0x3d0 [ 51.114764] cpu_startup_entry+0x1b/0x20 [ 51.118817] rest_init+0xf1/0xf6 [ 51.122183] ? trace_event_define_fields_x86_irq_vector+0x2c/0x2c [ 51.128485] start_kernel+0x6e2/0x700 [ 51.132285] ? mem_encrypt_init+0xb/0xb [ 51.136251] ? x86_family+0x32/0x40 [ 51.139944] ? load_ucode_bsp+0x1ea/0x1f6 [ 51.144166] x86_64_start_reservations+0x29/0x2b [ 51.148941] x86_64_start_kernel+0x77/0x7b [ 51.153191] secondary_startup_64+0xa5/0xb0 [ 51.157495] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 8b 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 7b 20 49 8d bf 58 03 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 7d 49 8b 97 58 03 00 00 e9 c7 fe ff ff e8 2c 9b [ 51.176588] RIP: rose_send_frame+0x18d/0x270 RSP: ffff8880aee07b48 [ 51.182976] ---[ end trace 4c6478e5ff1c6744 ]--- [ 51.187734] Kernel panic - not syncing: Fatal exception in interrupt [ 51.195275] Kernel Offset: disabled [ 51.198975] Rebooting in 86400 seconds..