[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.887177] random: sshd: uninitialized urandom read (32 bytes read) [ 35.231006] kauditd_printk_skb: 10 callbacks suppressed [ 35.231014] audit: type=1400 audit(1576778953.239:35): avc: denied { map } for pid=6908 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 35.294819] random: sshd: uninitialized urandom read (32 bytes read) [ 35.870904] random: sshd: uninitialized urandom read (32 bytes read) [ 46.462362] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.208' (ECDSA) to the list of known hosts. [ 52.096171] random: sshd: uninitialized urandom read (32 bytes read) [ 52.212266] audit: type=1400 audit(1576778970.219:36): avc: denied { map } for pid=6921 comm="syz-executor692" path="/root/syz-executor692756876" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 52.441174] IPVS: ftp: loaded support on port[0] = 21 [ 53.175052] audit: type=1400 audit(1576778971.179:37): avc: denied { create } for pid=6922 comm="syz-executor692" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 53.199454] audit: type=1400 audit(1576778971.179:38): avc: denied { write } for pid=6922 comm="syz-executor692" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 53.223485] audit: type=1400 audit(1576778971.179:39): avc: denied { read } for pid=6922 comm="syz-executor692" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 53.273228] chnl_net:caif_netlink_parms(): no params data found [ 53.301481] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.308071] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.315230] device bridge_slave_0 entered promiscuous mode [ 53.322214] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.328698] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.335806] device bridge_slave_1 entered promiscuous mode [ 53.350955] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.359842] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.376408] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.383896] team0: Port device team_slave_0 added [ 53.389378] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.396571] team0: Port device team_slave_1 added [ 53.401966] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.409280] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.462131] device hsr_slave_0 entered promiscuous mode [ 53.530296] device hsr_slave_1 entered promiscuous mode [ 53.601012] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.608137] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.621760] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.628170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.635048] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.642024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.671561] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 53.677654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.685873] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.695039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.713238] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.720648] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.729911] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 53.736379] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.744798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.752446] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.758885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.770948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.778513] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.784887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.795443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.804710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.814039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.826317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.836742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.847465] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 53.854583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.862298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.869855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready executing program [ 53.881791] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 53.890578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.897296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.906613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.960451] net/hsr/hsr_forward.c:366: Malformed frame (port_src hsr0) [ 53.967338] ------------[ cut here ]------------ [ 53.972135] WARNING: CPU: 0 PID: 6922 at net/hsr/hsr_forward.c:365 hsr_forward_skb.cold+0xce/0x100 [ 53.981228] Kernel panic - not syncing: panic_on_warn set ... [ 53.981228] [ 53.988579] CPU: 0 PID: 6922 Comm: syz-executor692 Not tainted 4.14.159-syzkaller #0 [ 53.996444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.005791] Call Trace: [ 54.008365] dump_stack+0x142/0x197 [ 54.012003] panic+0x1f9/0x42d [ 54.015187] ? add_taint.cold+0x16/0x16 [ 54.019164] ? hsr_forward_skb.cold+0xce/0x100 [ 54.023741] ? hsr_forward_skb.cold+0xce/0x100 [ 54.028316] __warn.cold+0x2f/0x2f [ 54.031860] ? ist_end_non_atomic+0x10/0x10 [ 54.036175] ? hsr_forward_skb.cold+0xce/0x100 [ 54.040740] report_bug+0x216/0x254 [ 54.044450] do_error_trap+0x1bb/0x310 [ 54.048333] ? math_error+0x360/0x360 [ 54.052133] ? vprintk_emit+0x171/0x600 [ 54.056093] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 54.060920] do_invalid_op+0x1b/0x20 [ 54.064617] invalid_op+0x1b/0x40 [ 54.068047] RIP: 0010:hsr_forward_skb.cold+0xce/0x100 [ 54.073211] RSP: 0018:ffff8880a0227950 EFLAGS: 00010286 [ 54.078565] RAX: 000000000000003a RBX: 0000000000000000 RCX: 0000000000000000 [ 54.085816] RDX: 0000000000000000 RSI: ffffffff86cc4480 RDI: ffffed1014044f20 [ 54.093068] RBP: ffff8880a02279e8 R08: 000000000000003a R09: 0000000000000000 [ 54.100320] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a8c19840 [ 54.108176] R13: ffff8880a7cbe540 R14: ffff888094822200 R15: ffff888094822210 [ 54.115462] ? validate_xmit_skb+0x650/0x9d0 [ 54.119858] hsr_dev_xmit+0x72/0xa0 [ 54.123480] packet_direct_xmit+0x431/0x640 [ 54.127780] packet_sendmsg+0x1dd4/0x5a60 [ 54.131915] ? avc_has_perm_noaudit+0x420/0x420 [ 54.136572] ? trace_hardirqs_on+0x10/0x10 [ 54.140895] ? packet_notifier+0x760/0x760 [ 54.145126] ? release_sock+0x14a/0x1b0 [ 54.149107] ? security_socket_sendmsg+0x89/0xb0 [ 54.153861] ? packet_notifier+0x760/0x760 [ 54.158123] sock_sendmsg+0xce/0x110 [ 54.161825] SYSC_sendto+0x206/0x310 [ 54.165528] ? SYSC_connect+0x2d0/0x2d0 [ 54.169488] ? move_addr_to_kernel.part.0+0x100/0x100 [ 54.174664] ? ioctl_preallocate+0x1c0/0x1c0 [ 54.179059] ? fd_install+0x4d/0x60 [ 54.182669] ? security_file_ioctl+0x7d/0xb0 [ 54.187061] ? security_file_ioctl+0x89/0xb0 [ 54.191461] SyS_sendto+0x40/0x50 [ 54.194899] ? SyS_getpeername+0x30/0x30 [ 54.198946] do_syscall_64+0x1e8/0x640 [ 54.202877] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 54.207716] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 54.213023] RIP: 0033:0x442099 [ 54.216208] RSP: 002b:00007fff929e0308 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 54.223926] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000442099 [ 54.231181] RDX: 000000000000000e RSI: 0000000020000100 RDI: 0000000000000003 [ 54.238478] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 54.245742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.253007] R13: 0000000000403610 R14: 0000000000000000 R15: 0000000000000000 [ 54.261907] Kernel Offset: disabled [ 54.265599] Rebooting in 86400 seconds..