[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 25.108067] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 27.326565] random: sshd: uninitialized urandom read (32 bytes read) [ 27.876276] random: sshd: uninitialized urandom read (32 bytes read) [ 28.432653] random: sshd: uninitialized urandom read (32 bytes read) [ 28.612950] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.3' (ECDSA) to the list of known hosts. [ 34.227871] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/30 18:35:02 parsed 1 programs [ 35.440836] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/30 18:35:05 executed programs: 0 [ 37.262230] IPVS: ftp: loaded support on port[0] = 21 [ 37.479530] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.485975] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.493490] device bridge_slave_0 entered promiscuous mode [ 37.511587] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.518128] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.525621] device bridge_slave_1 entered promiscuous mode [ 37.542264] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 37.559668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 37.605209] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 37.625258] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 37.695243] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 37.702880] team0: Port device team_slave_0 added [ 37.718148] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 37.725674] team0: Port device team_slave_1 added [ 37.742914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.760925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.780418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.798620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.889491] ip (4779) used greatest stack depth: 17096 bytes left [ 37.931304] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.937726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.944608] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.950985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.408005] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 38.414255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.463126] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 38.470499] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 38.514465] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 38.520610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.528390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.569994] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.853955] ------------[ cut here ]------------ [ 38.858845] usb usb1: BOGUS urb flags, 40 --> 0 [ 38.863818] WARNING: CPU: 0 PID: 4949 at drivers/usb/core/urb.c:503 usb_submit_urb+0x719/0x14d0 [ 38.872654] Kernel panic - not syncing: panic_on_warn set ... [ 38.872654] [ 38.880219] CPU: 0 PID: 4949 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #215 [ 38.887473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.896816] Call Trace: [ 38.899406] dump_stack+0x1c9/0x2b4 [ 38.903023] ? dump_stack_print_info.cold.2+0x52/0x52 [ 38.908205] panic+0x238/0x4e7 [ 38.911382] ? add_taint.cold.5+0x16/0x16 [ 38.915519] ? __warn.cold.8+0x148/0x1ba [ 38.919565] ? __warn.cold.8+0x117/0x1ba [ 38.923617] ? usb_submit_urb+0x719/0x14d0 [ 38.927840] __warn.cold.8+0x163/0x1ba [ 38.931736] ? usb_submit_urb+0x719/0x14d0 [ 38.935965] report_bug+0x252/0x2d0 [ 38.939590] do_error_trap+0x1fc/0x4d0 [ 38.943463] ? math_error+0x3e0/0x3e0 [ 38.947275] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.952112] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 38.957128] ? vprintk_func+0x81/0x117 [ 38.961020] ? printk+0xa7/0xcf [ 38.964443] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.969334] do_invalid_op+0x1b/0x20 [ 38.973040] invalid_op+0x14/0x20 [ 38.976493] RIP: 0010:usb_submit_urb+0x719/0x14d0 [ 38.981323] Code: 08 fd 48 8b 45 d0 48 8d b8 a0 00 00 00 e8 1f ce 72 ff 45 89 e0 44 89 e9 4c 89 fa 48 89 c6 48 c7 c7 40 d8 7d 87 e8 57 ec d2 fc <0f> 0b e8 30 29 08 fd 48 c7 c6 40 d9 7d 87 4c 89 f7 e8 71 2a 08 fd [ 39.000236] RSP: 0018:ffff8801b4f6f278 EFLAGS: 00010282 [ 39.005597] RAX: 0000000000000000 RBX: ffff8801d4bf0a00 RCX: 0000000000000000 [ 39.012853] RDX: 0000000000000000 RSI: ffffffff8163ac01 RDI: ffff8801b4f6ef68 [ 39.020237] RBP: ffff8801b4f6f2e8 R08: ffff8801b4fe84c0 R09: 0000000000000006 [ 39.028013] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 39.035269] R13: 0000000000000040 R14: 0000000000000000 R15: ffff8801ceb86c80 [ 39.042539] ? vprintk_func+0x81/0x117 [ 39.046416] ? usb_submit_urb+0x719/0x14d0 [ 39.050635] ? kasan_check_write+0x14/0x20 [ 39.054860] proc_do_submiturb+0x2669/0x3d70 [ 39.059300] ? free_async+0x490/0x490 [ 39.063122] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 39.068650] ? _copy_from_user+0xdf/0x150 [ 39.072791] proc_submiturb_compat+0x544/0x800 [ 39.077362] ? proc_do_submiturb+0x3d70/0x3d70 [ 39.081949] usbdev_do_ioctl+0x19a5/0x3b30 [ 39.086188] ? processcompl_compat+0x680/0x680 [ 39.090774] ? __pagevec_lru_add+0x30/0x30 [ 39.094997] ? graph_lock+0x170/0x170 [ 39.098788] ? kasan_check_read+0x11/0x20 [ 39.102938] ? rcu_is_watching+0x8c/0x150 [ 39.107094] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 39.112292] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 39.117823] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 39.122916] ? futex_wake+0x304/0x760 [ 39.126708] ? get_futex_key+0x2000/0x2000 [ 39.130926] ? graph_lock+0x170/0x170 [ 39.134712] ? trace_hardirqs_on+0xbd/0x2c0 [ 39.139173] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 39.144289] ? do_futex+0x249/0x27d0 [ 39.148002] ? lock_downgrade+0x8f0/0x8f0 [ 39.152145] ? exit_robust_list+0x290/0x290 [ 39.156555] ? do_raw_spin_unlock+0xa7/0x2f0 [ 39.160955] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 39.165545] ? pud_val+0x100/0x100 [ 39.169203] ? kasan_check_write+0x14/0x20 [ 39.173434] ? do_raw_spin_lock+0xc1/0x200 [ 39.177724] ? _raw_spin_unlock+0x22/0x30 [ 39.181866] ? __handle_mm_fault+0x945/0x4350 [ 39.186368] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 39.191207] ? graph_lock+0x170/0x170 [ 39.195006] ? graph_lock+0x170/0x170 [ 39.198813] ? find_held_lock+0x36/0x1c0 [ 39.202865] usbdev_ioctl+0x25/0x30 [ 39.206479] ? usbdev_compat_ioctl+0x30/0x30 [ 39.210875] do_vfs_ioctl+0x1de/0x1720 [ 39.214907] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 39.220556] ? ioctl_preallocate+0x300/0x300 [ 39.224972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 39.230505] ? __fget_light+0x2f7/0x440 [ 39.234478] ? __handle_mm_fault+0x4350/0x4350 [ 39.239044] ? fget_raw+0x20/0x20 [ 39.242555] ? __x64_sys_futex+0x47f/0x6a0 [ 39.246779] ? do_syscall_64+0x9a/0x820 [ 39.250740] ? do_syscall_64+0x9a/0x820 [ 39.254701] ? lockdep_hardirqs_on+0x421/0x5c0 [ 39.259270] ? security_file_ioctl+0x94/0xc0 [ 39.263666] ksys_ioctl+0xa9/0xd0 [ 39.267118] __x64_sys_ioctl+0x73/0xb0 [ 39.271030] do_syscall_64+0x1b9/0x820 [ 39.274905] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 39.280256] ? syscall_return_slowpath+0x5e0/0x5e0 [ 39.285179] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 39.290012] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 39.295026] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 39.300071] ? prepare_exit_to_usermode+0x291/0x3b0 [ 39.305104] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 39.309956] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 39.315135] RIP: 0033:0x457089 [ 39.318336] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 39.337218] RSP: 002b:00007fff25971838 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 39.344911] RAX: ffffffffffffffda RBX: 0000000001704914 RCX: 0000000000457089 [ 39.352169] RDX: 0000000020000080 RSI: 00000000802c550a RDI: 0000000000000003 [ 39.359422] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 39.366689] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 39.373965] R13: 00000000004cf368 R14: 00000000004c57eb R15: 0000000000000000 [ 39.381722] Dumping ftrace buffer: [ 39.385323] (ftrace buffer empty) [ 39.389018] Kernel Offset: disabled [ 39.392631] Rebooting in 86400 seconds..