[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 23.708365] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 28.381499] random: sshd: uninitialized urandom read (32 bytes read) [ 28.942639] random: sshd: uninitialized urandom read (32 bytes read) [ 29.531009] random: sshd: uninitialized urandom read (32 bytes read) [ 124.177630] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.61' (ECDSA) to the list of known hosts. [ 129.829433] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/30 19:39:35 parsed 1 programs [ 131.135510] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/30 19:39:37 executed programs: 0 [ 132.839798] IPVS: ftp: loaded support on port[0] = 21 [ 133.060537] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.066997] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.074591] device bridge_slave_0 entered promiscuous mode [ 133.092301] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.098672] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.105960] device bridge_slave_1 entered promiscuous mode [ 133.124445] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 133.141327] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 133.187518] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 133.207316] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 133.274823] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 133.282401] team0: Port device team_slave_0 added [ 133.299157] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 133.306405] team0: Port device team_slave_1 added [ 133.323097] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.342175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.361007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.379032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.508827] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.515511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.522427] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.528818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.981568] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 133.987674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.997438] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 134.037240] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 134.083156] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 134.089443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.097158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.140158] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.421954] ------------[ cut here ]------------ [ 134.426822] usb usb1: BOGUS urb flags, 40 --> 0 [ 134.431809] WARNING: CPU: 1 PID: 4916 at drivers/usb/core/urb.c:503 usb_submit_urb+0x719/0x14d0 [ 134.440645] Kernel panic - not syncing: panic_on_warn set ... [ 134.440645] [ 134.448008] CPU: 1 PID: 4916 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #215 [ 134.455265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 134.464598] Call Trace: [ 134.467187] dump_stack+0x1c9/0x2b4 [ 134.470810] ? dump_stack_print_info.cold.2+0x52/0x52 [ 134.475991] panic+0x238/0x4e7 [ 134.479173] ? add_taint.cold.5+0x16/0x16 [ 134.483433] ? __warn.cold.8+0x148/0x1ba [ 134.487484] ? __warn.cold.8+0x117/0x1ba [ 134.491536] ? usb_submit_urb+0x719/0x14d0 [ 134.495764] __warn.cold.8+0x163/0x1ba [ 134.499640] ? usb_submit_urb+0x719/0x14d0 [ 134.503864] report_bug+0x252/0x2d0 [ 134.507489] do_error_trap+0x1fc/0x4d0 [ 134.511364] ? math_error+0x3e0/0x3e0 [ 134.515295] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 134.520229] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 134.525232] ? vprintk_func+0x81/0x117 [ 134.529105] ? printk+0xa7/0xcf [ 134.532386] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 134.537219] do_invalid_op+0x1b/0x20 [ 134.540918] invalid_op+0x14/0x20 [ 134.544358] RIP: 0010:usb_submit_urb+0x719/0x14d0 [ 134.549309] Code: 08 fd 48 8b 45 d0 48 8d b8 a0 00 00 00 e8 1f ce 72 ff 45 89 e0 44 89 e9 4c 89 fa 48 89 c6 48 c7 c7 40 d8 7d 87 e8 57 ec d2 fc <0f> 0b e8 30 29 08 fd 48 c7 c6 40 d9 7d 87 4c 89 f7 e8 71 2a 08 fd [ 134.568200] RSP: 0018:ffff8801d7477278 EFLAGS: 00010282 [ 134.573549] RAX: 0000000000000000 RBX: ffff8801d2f56a00 RCX: 0000000000000000 [ 134.580803] RDX: 0000000000000000 RSI: ffffffff8163ac01 RDI: ffff8801d7476f68 [ 134.588056] RBP: ffff8801d74772e8 R08: ffff8801b6b8a200 R09: 0000000000000006 [ 134.595312] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 134.602565] R13: 0000000000000040 R14: 0000000000000000 R15: ffff8801cebcc280 [ 134.609837] ? vprintk_func+0x81/0x117 [ 134.613720] ? usb_submit_urb+0x719/0x14d0 [ 134.617967] ? kasan_check_write+0x14/0x20 [ 134.622232] proc_do_submiturb+0x2669/0x3d70 [ 134.626651] ? free_async+0x490/0x490 [ 134.630452] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 134.635979] ? _copy_from_user+0xdf/0x150 [ 134.640116] proc_submiturb_compat+0x544/0x800 [ 134.644688] ? proc_do_submiturb+0x3d70/0x3d70 [ 134.649270] usbdev_do_ioctl+0x19a5/0x3b30 [ 134.653495] ? processcompl_compat+0x680/0x680 [ 134.658069] ? __pagevec_lru_add+0x30/0x30 [ 134.662286] ? graph_lock+0x170/0x170 [ 134.666075] ? kasan_check_read+0x11/0x20 [ 134.670214] ? rcu_is_watching+0x8c/0x150 [ 134.674348] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 134.679536] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 134.685061] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 134.690158] ? futex_wake+0x304/0x760 [ 134.693947] ? get_futex_key+0x2000/0x2000 [ 134.698165] ? graph_lock+0x170/0x170 [ 134.701954] ? trace_hardirqs_on+0xbd/0x2c0 [ 134.706273] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 134.711367] ? do_futex+0x249/0x27d0 [ 134.715069] ? lock_downgrade+0x8f0/0x8f0 [ 134.719207] ? exit_robust_list+0x290/0x290 [ 134.723524] ? do_raw_spin_unlock+0xa7/0x2f0 [ 134.727922] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 134.732498] ? pud_val+0x100/0x100 [ 134.736033] ? kasan_check_write+0x14/0x20 [ 134.740270] ? do_raw_spin_lock+0xc1/0x200 [ 134.744493] ? _raw_spin_unlock+0x22/0x30 [ 134.748626] ? __handle_mm_fault+0x945/0x4350 [ 134.753116] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 134.757953] ? graph_lock+0x170/0x170 [ 134.761747] ? graph_lock+0x170/0x170 [ 134.765552] ? find_held_lock+0x36/0x1c0 [ 134.769606] usbdev_ioctl+0x25/0x30 [ 134.773221] ? usbdev_compat_ioctl+0x30/0x30 [ 134.777616] do_vfs_ioctl+0x1de/0x1720 [ 134.781510] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 134.787061] ? ioctl_preallocate+0x300/0x300 [ 134.791483] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 134.797057] ? __fget_light+0x2f7/0x440 [ 134.801031] ? __handle_mm_fault+0x4350/0x4350 [ 134.805600] ? fget_raw+0x20/0x20 [ 134.809046] ? __x64_sys_futex+0x47f/0x6a0 [ 134.813268] ? do_syscall_64+0x9a/0x820 [ 134.817226] ? do_syscall_64+0x9a/0x820 [ 134.821191] ? lockdep_hardirqs_on+0x421/0x5c0 [ 134.825771] ? security_file_ioctl+0x94/0xc0 [ 134.830216] ksys_ioctl+0xa9/0xd0 [ 134.833667] __x64_sys_ioctl+0x73/0xb0 [ 134.837577] do_syscall_64+0x1b9/0x820 [ 134.841485] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 134.846854] ? syscall_return_slowpath+0x5e0/0x5e0 [ 134.851778] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 134.856609] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 134.861610] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 134.866614] ? prepare_exit_to_usermode+0x291/0x3b0 [ 134.871618] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 134.876452] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 134.881626] RIP: 0033:0x457089 [ 134.884806] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 134.903715] RSP: 002b:00007ffdf472cc28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.911456] RAX: ffffffffffffffda RBX: 0000000000ea7914 RCX: 0000000000457089 [ 134.918716] RDX: 0000000020000080 RSI: 00000000802c550a RDI: 0000000000000003 [ 134.925981] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 134.933240] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 134.940496] R13: 00000000004cf368 R14: 00000000004c57eb R15: 0000000000000000 [ 134.948255] Dumping ftrace buffer: [ 134.951937] (ftrace buffer empty) [ 134.955650] Kernel Offset: disabled [ 134.959261] Rebooting in 86400 seconds..