[ 29.202424] random: sshd: uninitialized urandom read (32 bytes read) [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 29.478988] random: sshd: uninitialized urandom read (32 bytes read) [ 29.804648] random: sshd: uninitialized urandom read (32 bytes read) [ 30.364700] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 30.557423] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.61' (ECDSA) to the list of known hosts. [ 36.009710] random: sshd: uninitialized urandom read (32 bytes read) [ 36.135284] kauditd_printk_skb: 10 callbacks suppressed [ 36.135293] audit: type=1400 audit(1568049366.166:36): avc: denied { map } for pid=6879 comm="syz-executor792" path="/root/syz-executor792428676" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 36.391236] IPVS: ftp: loaded support on port[0] = 21 [ 37.219931] chnl_net:caif_netlink_parms(): no params data found [ 37.249942] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.257994] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.265909] device bridge_slave_0 entered promiscuous mode [ 37.274905] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.281641] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.288625] device bridge_slave_1 entered promiscuous mode [ 37.303893] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 37.313130] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 37.329415] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 37.338026] team0: Port device team_slave_0 added [ 37.344042] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 37.351940] team0: Port device team_slave_1 added [ 37.357849] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 37.366523] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 37.432249] device hsr_slave_0 entered promiscuous mode [ 37.470663] device hsr_slave_1 entered promiscuous mode [ 37.520710] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 37.528208] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 37.541951] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.549688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.557226] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.565302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.593079] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 37.600216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.608183] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 37.617835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.637145] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.644606] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.655292] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 37.662086] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.671289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.679901] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.687030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.697218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.705643] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.712299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.731619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.739653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.747785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.756055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.764071] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.773394] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 37.780803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready executing program [ 37.792878] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 37.805390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.870031] INFO: rcu_preempt self-detected stall on CPU [ 142.875531] 0-...: (10499 ticks this GP) idle=dbe/140000000000001/0 softirq=9290/9290 fqs=38 [ 142.884287] (t=10500 jiffies g=1038 c=1037 q=14) [ 142.889390] rcu_preempt kthread starved for 10424 jiffies! g1038 c1037 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x402 ->cpu=1 [ 142.900204] rcu_preempt I29776 8 2 0x80000000 [ 142.905826] Call Trace: [ 142.908425] __schedule+0x7b8/0x1cd0 [ 142.912140] ? pci_mmcfg_check_reserved+0x150/0x150 [ 142.917271] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 142.922371] schedule+0x92/0x1c0 [ 142.925721] schedule_timeout+0x43e/0xe10 [ 142.929861] ? usleep_range+0x130/0x130 [ 142.934255] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 142.939372] ? prepare_to_swait+0xcc/0x100 [ 142.943601] ? call_timer_fn+0x670/0x670 [ 142.947649] rcu_gp_kthread+0xbf4/0x1ec0 [ 142.951791] ? force_qs_rnp+0x4d0/0x4d0 [ 142.955755] kthread+0x319/0x430 [ 142.959373] ? force_qs_rnp+0x4d0/0x4d0 [ 142.963328] ? kthread_create_on_node+0xd0/0xd0 [ 142.968014] ret_from_fork+0x24/0x30 [ 142.971987] NMI backtrace for cpu 0 [ 142.976302] CPU: 0 PID: 6883 Comm: kworker/0:3 Not tainted 4.14.142 #0 [ 142.983729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 142.993615] Workqueue: ipv6_addrconf addrconf_dad_work [ 143.000975] Call Trace: [ 143.003542] [ 143.005680] dump_stack+0x138/0x197 [ 143.009292] nmi_cpu_backtrace.cold+0x57/0x94 [ 143.013867] ? irq_force_complete_move.cold+0x7d/0x7d [ 143.019039] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 143.024304] arch_trigger_cpumask_backtrace+0x14/0x20 [ 143.029497] rcu_dump_cpu_stacks+0x186/0x1d2 [ 143.033897] rcu_check_callbacks.cold+0x43d/0xd0a [ 143.039072] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 143.044523] update_process_times+0x31/0x70 [ 143.048830] tick_sched_handle+0x85/0x160 [ 143.052974] tick_sched_timer+0x43/0x130 [ 143.057028] __hrtimer_run_queues+0x270/0xbc0 [ 143.061510] ? tick_sched_do_timer+0xe0/0xe0 [ 143.065990] ? hrtimer_start_range_ns+0x10d0/0x10d0 [ 143.070994] hrtimer_interrupt+0x1d8/0x5d0 [ 143.076097] smp_apic_timer_interrupt+0x11c/0x5e0 [ 143.080925] apic_timer_interrupt+0x96/0xa0 [ 143.085313] [ 143.087544] RIP: 0010:__sanitizer_cov_trace_pc+0x23/0x60 [ 143.092970] RSP: 0018:ffff8880a6ee7008 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10 [ 143.100661] RAX: ffff88808a1f0300 RBX: ffff88808448ef78 RCX: ffff88808448ef40 [ 143.108012] RDX: 0000000000000000 RSI: ffff88808448f010 RDI: ffff88808448ef88 [ 143.115291] RBP: ffff8880a6ee7060 R08: 0000000000000000 R09: ffff88808a1f0d08 [ 143.122544] R10: ffff88808a1f0ce8 R11: ffff88808a1f0300 R12: dffffc0000000000 [ 143.129823] R13: ffff88808448ed80 R14: 0000000000000001 R15: ffff88808448f000 [ 143.137093] ? hhf_dequeue+0x504/0xa60 [ 143.141150] __qdisc_run+0x2b8/0xe00 [ 143.144869] __dev_queue_xmit+0x1571/0x25e0 [ 143.149265] ? __lock_is_held+0xb6/0x140 [ 143.153326] ? check_preemption_disabled+0x3c/0x250 [ 143.158329] ? netdev_pick_tx+0x300/0x300 [ 143.162457] ? save_trace+0x290/0x290 [ 143.166260] ? br_nf_post_routing+0x27d/0xf00 [ 143.170827] ? br_forward_finish+0x1cc/0x320 [ 143.175249] ? find_held_lock+0x35/0x130 [ 143.179301] ? br_forward_finish+0x1cc/0x320 [ 143.183698] dev_queue_xmit+0x18/0x20 [ 143.187568] ? dev_queue_xmit+0x18/0x20 [ 143.191549] br_dev_queue_push_xmit+0x367/0x530 [ 143.196227] br_forward_finish+0xbc/0x320 [ 143.200369] ? br_dev_queue_push_xmit+0x530/0x530 [ 143.205227] ? br_fdb_add.cold+0x84/0x84 [ 143.209283] __br_forward+0x560/0x9c0 [ 143.213086] ? br_forward_finish+0x320/0x320 [ 143.217484] ? br_dev_queue_push_xmit+0x530/0x530 [ 143.222571] deliver_clone+0x61/0xc0 [ 143.226269] br_flood+0x3c8/0x530 [ 143.229719] br_dev_xmit+0x9a4/0xd40 [ 143.233415] ? check_preemption_disabled+0x3c/0x250 [ 143.238412] ? br_poll_controller+0x10/0x10 [ 143.242811] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 143.248250] dev_hard_start_xmit+0x18c/0x8b0 [ 143.252665] ? assoc_array_gc+0x1130/0x11d0 [ 143.256973] __dev_queue_xmit+0x1d95/0x25e0 [ 143.261280] ? trace_hardirqs_on+0x10/0x10 [ 143.265505] ? netdev_pick_tx+0x300/0x300 [ 143.269651] ? ip6_finish_output2+0x9ab/0x21b0 [ 143.274231] ? memcpy+0x46/0x50 [ 143.277759] dev_queue_xmit+0x18/0x20 [ 143.281544] ? dev_queue_xmit+0x18/0x20 [ 143.285510] neigh_resolve_output+0x4d8/0x870 [ 143.290002] ip6_finish_output2+0x9ab/0x21b0 [ 143.294400] ? ip6_forward_finish+0x480/0x480 [ 143.298881] ? lock_downgrade+0x6e0/0x6e0 [ 143.303019] ip6_finish_output+0x4f4/0xb50 [ 143.307239] ? ip6_finish_output+0x4f4/0xb50 [ 143.311631] ip6_output+0x20f/0x6d0 [ 143.315247] ? ip6_finish_output+0xb50/0xb50 [ 143.319658] ? __lock_is_held+0xb6/0x140 [ 143.323704] ? ip6_fragment+0x32c0/0x32c0 [ 143.327835] ndisc_send_skb+0xb56/0x11e0 [ 143.332165] ? ndisc_error_report+0x190/0x190 [ 143.336669] ndisc_send_ns+0x360/0x7e0 [ 143.340544] ? ndisc_netdev_event+0x3b0/0x3b0 [ 143.345151] ? trace_hardirqs_on_caller+0x400/0x590 [ 143.350172] ? addrconf_dad_work+0x97c/0xff0 [ 143.355357] ? trace_hardirqs_on+0xd/0x10 [ 143.359503] ? __local_bh_enable_ip+0x99/0x1a0 [ 143.364080] addrconf_dad_work+0xa40/0xff0 [ 143.368301] ? addrconf_dad_completed+0xa70/0xa70 [ 143.373127] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 143.378745] process_one_work+0x863/0x1600 [ 143.383174] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 143.387833] worker_thread+0x5d9/0x1050 [ 143.391797] kthread+0x319/0x430 [ 143.395160] ? process_one_work+0x1600/0x1600 [ 143.399632] ? kthread_create_on_node+0xd0/0xd0 [ 143.404286] ret_from_fork+0x24/0x30