[?25l[?1c7[ ok 8[?25h[?0c. [ 31.480796] random: sshd: uninitialized urandom read (32 bytes read) [ 31.896003] kauditd_printk_skb: 10 callbacks suppressed [ 31.896011] audit: type=1400 audit(1576534238.922:35): avc: denied { map } for pid=7062 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 31.985740] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.600537] random: sshd: uninitialized urandom read (32 bytes read) [ 36.938323] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.11' (ECDSA) to the list of known hosts. [ 42.475124] random: sshd: uninitialized urandom read (32 bytes read) [ 42.591667] audit: type=1400 audit(1576534249.622:36): avc: denied { map } for pid=7076 comm="syz-executor905" path="/root/syz-executor905322712" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 42.841052] IPVS: ftp: loaded support on port[0] = 21 [ 43.678035] audit: type=1400 audit(1576534250.702:37): avc: denied { create } for pid=7077 comm="syz-executor905" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 43.704416] audit: type=1400 audit(1576534250.702:38): avc: denied { write } for pid=7077 comm="syz-executor905" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 43.729934] audit: type=1400 audit(1576534250.702:39): avc: denied { read } for pid=7077 comm="syz-executor905" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 43.779690] chnl_net:caif_netlink_parms(): no params data found [ 43.815059] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.822240] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.829918] device bridge_slave_0 entered promiscuous mode [ 43.838066] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.845061] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.852469] device bridge_slave_1 entered promiscuous mode [ 43.868280] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.878127] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.897014] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.905620] team0: Port device team_slave_0 added [ 43.911545] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.918860] team0: Port device team_slave_1 added [ 43.924880] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.932680] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.012111] device hsr_slave_0 entered promiscuous mode [ 44.050488] device hsr_slave_1 entered promiscuous mode [ 44.130966] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.138877] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.154521] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.161774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.168839] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.175571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.209866] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 44.217632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.226795] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.237473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.256877] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.265849] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.277344] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.284883] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.293942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.302964] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.309742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.319637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.329037] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.336106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.352984] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.362073] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.372767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.385602] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.396759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.408148] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.414616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.423293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.431526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.447034] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready executing program [ 44.455650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.463438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.474441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.511761] hsr_addr_subst_dest: Unknown node [ 44.517022] ------------[ cut here ]------------ [ 44.522670] WARNING: CPU: 1 PID: 7077 at net/hsr/hsr_framereg.c:313 hsr_addr_subst_dest.cold+0x45/0x4f [ 44.533069] Kernel panic - not syncing: panic_on_warn set ... [ 44.533069] [ 44.541864] CPU: 1 PID: 7077 Comm: syz-executor905 Not tainted 4.14.158-syzkaller #0 [ 44.550179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.559763] Call Trace: [ 44.562678] dump_stack+0x142/0x197 [ 44.566640] panic+0x1f9/0x42d [ 44.569838] ? add_taint.cold+0x16/0x16 [ 44.574094] ? hsr_addr_subst_dest.cold+0x45/0x4f [ 44.579518] ? hsr_addr_subst_dest.cold+0x45/0x4f [ 44.586023] __warn.cold+0x2f/0x2f [ 44.589825] ? ist_end_non_atomic+0x10/0x10 [ 44.594163] ? hsr_addr_subst_dest.cold+0x45/0x4f [ 44.599264] report_bug+0x216/0x254 [ 44.603180] do_error_trap+0x1bb/0x310 [ 44.607278] ? math_error+0x360/0x360 [ 44.612016] ? vprintk_emit+0x171/0x600 [ 44.616365] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 44.621976] do_invalid_op+0x1b/0x20 [ 44.626709] invalid_op+0x1b/0x40 [ 44.630183] RIP: 0010:hsr_addr_subst_dest.cold+0x45/0x4f [ 44.635819] RSP: 0018:ffff8880a42f7698 EFLAGS: 00010286 [ 44.641734] RAX: 0000000000000021 RBX: dffffc0000000000 RCX: 0000000000000000 [ 44.649280] RDX: 0000000000000000 RSI: ffffffff86cc43c0 RDI: ffffed101485eec9 [ 44.657857] RBP: ffff8880a42f76d8 R08: 0000000000000021 R09: ffff8880a4da6ee0 [ 44.665586] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888083f39660 [ 44.673862] R13: 0000000000000000 R14: ffff888083f39660 R15: 0000000000000000 [ 44.681500] ? hsr_addr_subst_dest.cold+0x45/0x4f [ 44.686435] hsr_forward_skb+0x1025/0x1940 [ 44.690815] hsr_dev_xmit+0x72/0xa0 [ 44.695633] dev_hard_start_xmit+0x18c/0x8b0 [ 44.700578] ? assoc_array_gc+0x1170/0x11d0 [ 44.706020] __dev_queue_xmit+0x1d95/0x25e0 [ 44.710513] ? find_held_lock+0x35/0x130 [ 44.715114] ? netdev_pick_tx+0x300/0x300 [ 44.719591] ? iov_iter_advance+0x218/0xc60 [ 44.724117] ? memcpy+0x46/0x50 [ 44.727513] dev_queue_xmit+0x18/0x20 [ 44.731684] ? dev_queue_xmit+0x18/0x20 [ 44.736012] pppoe_sendmsg+0x5cc/0x720 [ 44.740051] ? ether_setup+0x2d0/0x2d0 [ 44.744168] ? pppoe_getname+0x140/0x140 [ 44.748455] ? selinux_socket_sendmsg+0x36/0x40 [ 44.753528] ? security_socket_sendmsg+0x89/0xb0 [ 44.758487] ? pppoe_getname+0x140/0x140 [ 44.762572] sock_sendmsg+0xce/0x110 [ 44.766514] ___sys_sendmsg+0x349/0x840 [ 44.770672] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 44.775838] ? trace_hardirqs_on+0x10/0x10 [ 44.780441] ? save_trace+0x290/0x290 [ 44.784431] ? save_trace+0x290/0x290 [ 44.788791] ? save_trace+0x290/0x290 [ 44.793260] ? reacquire_held_locks+0xb7/0x3b0 [ 44.798016] ? release_sock+0x14a/0x1b0 [ 44.802279] ? find_held_lock+0x35/0x130 [ 44.806633] ? release_sock+0x14a/0x1b0 [ 44.810746] ? __local_bh_enable_ip+0x99/0x1a0 [ 44.815969] ? __fget_light+0x172/0x1f0 [ 44.820362] ? __fdget+0x1b/0x20 [ 44.823751] ? sockfd_lookup_light+0xb4/0x160 [ 44.828337] __sys_sendmmsg+0x152/0x3a0 [ 44.832991] ? SyS_sendmsg+0x50/0x50 [ 44.837084] ? SYSC_connect+0xe7/0x2d0 [ 44.841296] ? SYSC_bind+0x220/0x220 [ 44.845068] ? up_read+0x1a/0x40 [ 44.848435] ? __do_page_fault+0x358/0xb80 [ 44.853267] SyS_sendmmsg+0x35/0x60 [ 44.858026] ? __sys_sendmmsg+0x3a0/0x3a0 [ 44.862572] do_syscall_64+0x1e8/0x640 [ 44.866460] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 44.871568] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 44.877299] RIP: 0033:0x441fa9 [ 44.880497] RSP: 002b:00007fffad6e83c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 44.888656] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441fa9 [ 44.896970] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000003 [ 44.904866] RBP: 0000000000000004 R08: 0000000000000025 R09: 0000000000000025 [ 44.912291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.920016] R13: 0000000000403520 R14: 0000000000000000 R15: 0000000000000000 [ 44.930328] Kernel Offset: disabled [ 44.934316] Rebooting in 86400 seconds..