[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.793789] random: sshd: uninitialized urandom read (32 bytes read) [ 33.075346] kauditd_printk_skb: 9 callbacks suppressed [ 33.075353] audit: type=1400 audit(1566091435.782:35): avc: denied { map } for pid=6788 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 33.119521] random: sshd: uninitialized urandom read (32 bytes read) [ 33.649600] random: sshd: uninitialized urandom read (32 bytes read) [ 993.162196] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.13' (ECDSA) to the list of known hosts. [ 998.685910] random: sshd: uninitialized urandom read (32 bytes read) [ 998.858794] audit: type=1400 audit(1566092401.562:36): avc: denied { map } for pid=6801 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/08/18 01:40:02 parsed 1 programs [ 999.641077] audit: type=1400 audit(1566092402.352:37): avc: denied { map } for pid=6801 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13773 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 1000.171703] random: cc1: uninitialized urandom read (8 bytes read) 2019/08/18 01:40:03 executed programs: 0 [ 1000.822502] audit: type=1400 audit(1566092403.532:38): avc: denied { map } for pid=6801 comm="syz-execprog" path="/root/syzkaller-shm016743699" dev="sda1" ino=16461 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 1001.111073] IPVS: ftp: loaded support on port[0] = 21 [ 1001.962954] chnl_net:caif_netlink_parms(): no params data found [ 1001.988384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.995322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.002226] device bridge_slave_0 entered promiscuous mode [ 1002.008709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.015217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.022452] device bridge_slave_1 entered promiscuous mode [ 1002.036035] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1002.044743] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1002.059235] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1002.066428] team0: Port device team_slave_0 added [ 1002.071756] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1002.078669] team0: Port device team_slave_1 added [ 1002.083890] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1002.091087] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1002.141669] device hsr_slave_0 entered promiscuous mode [ 1002.180331] device hsr_slave_1 entered promiscuous mode [ 1002.220499] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1002.227306] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1002.239223] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.245605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1002.252405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.258727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1002.283462] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1002.289514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1002.297558] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1002.305566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1002.324468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.331402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.339903] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1002.346134] 8021q: adding VLAN 0 to HW filter on device team0 [ 1002.355255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1002.362773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.369076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1002.378938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1002.386861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.393211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1002.409076] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1002.419083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1002.429956] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1002.436670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1002.444619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1002.452032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1002.459368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1002.467318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1002.474148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1002.484319] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1002.494070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1002.960406] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 2019/08/18 01:40:08 executed programs: 3 [ 1006.832740] INFO: trying to register non-static key. [ 1006.838091] the code is fine but needs lockdep annotation. [ 1006.843683] turning off the locking correctness validator. [ 1006.849276] CPU: 0 PID: 6851 Comm: syz-executor.0 Not tainted 4.14.139 #35 [ 1006.856254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1006.865603] Call Trace: [ 1006.868244] dump_stack+0x138/0x19c [ 1006.871848] register_lock_class+0x2fd/0x1730 [ 1006.876313] ? check_noncircular+0x20/0x20 [ 1006.880518] __lock_acquire+0x147/0x4620 [ 1006.884549] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1006.890414] ? unwind_next_frame.part.0+0x188/0x8b0 [ 1006.895396] ? lock_downgrade+0x6e0/0x6e0 [ 1006.899515] ? check_preemption_disabled+0x3c/0x250 [ 1006.904500] ? bpf_prog_kallsyms_find+0x39/0x280 [ 1006.909229] ? trace_hardirqs_on+0x10/0x10 [ 1006.913431] ? is_bpf_text_address+0xa6/0x120 [ 1006.917897] ? kernel_text_address+0x73/0xf0 [ 1006.922276] ? __unwind_start+0x1f6/0x3d0 [ 1006.926396] ? __kernel_text_address+0xd/0x40 [ 1006.930863] ? unwind_get_return_address+0x61/0xa0 [ 1006.935766] ? __save_stack_trace+0x7b/0xd0 [ 1006.940057] ? __lock_acquire+0x5f7/0x4620 [ 1006.944294] lock_acquire+0x16f/0x430 [ 1006.948063] ? flush_work+0x84/0x730 [ 1006.951748] flush_work+0xae/0x730 [ 1006.955258] ? flush_work+0x84/0x730 [ 1006.958942] ? insert_work+0x320/0x320 [ 1006.962802] ? trace_hardirqs_on+0x10/0x10 [ 1006.967010] ? trace_hardirqs_on+0x10/0x10 [ 1006.971215] ? mark_held_locks+0xb1/0x100 [ 1006.975345] ? __cancel_work_timer+0x166/0x480 [ 1006.980017] __cancel_work_timer+0x2f0/0x480 [ 1006.984418] ? cancel_delayed_work+0x20/0x20 [ 1006.988799] ? trace_hardirqs_on_caller+0x400/0x590 [ 1006.993827] ? release_sock+0x14a/0x1b0 [ 1006.997772] ? trace_hardirqs_on+0xd/0x10 [ 1007.001910] ? smc_accept_dequeue+0x3b6/0x5e0 [ 1007.006373] ? __local_bh_enable_ip+0x99/0x1a0 [ 1007.010925] cancel_work_sync+0x18/0x20 [ 1007.014885] smc_close_active+0x68e/0xba0 [ 1007.019005] smc_release+0x45a/0x630 [ 1007.022708] __sock_release+0xce/0x2b0 [ 1007.026573] ? __sock_release+0x2b0/0x2b0 [ 1007.030690] sock_close+0x1b/0x30 [ 1007.034115] __fput+0x275/0x7a0 [ 1007.037384] ____fput+0x16/0x20 [ 1007.040634] task_work_run+0x114/0x190 [ 1007.044499] exit_to_usermode_loop+0x1da/0x220 [ 1007.049050] do_syscall_64+0x4bc/0x640 [ 1007.052906] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1007.057749] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1007.062910] RIP: 0033:0x413511 [ 1007.066076] RSP: 002b:00007ffc5ad350f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1007.073753] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413511 [ 1007.080999] RDX: fffffffffffffff7 RSI: 0000000000000081 RDI: 0000000000000005 [ 1007.088238] RBP: 0000000000000000 R08: 0000000000760630 R09: ffffffffffffffff [ 1007.095477] R10: 00007ffc5ad351c0 R11: 0000000000000293 R12: 000000000075bfc8 [ 1007.102725] R13: 0000000000000004 R14: 0000000000760638 R15: ffffffffffffffff [ 1007.112873] kobject: 'loop0' (ffff8880a4928620): kobject_uevent_env [ 1007.119296] kobject: 'loop0' (ffff8880a4928620): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1007.919444] kobject: 'loop0' (ffff8880a4928620): kobject_uevent_env [ 1007.925926] kobject: 'loop0' (ffff8880a4928620): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1008.727833] kobject: 'loop0' (ffff8880a4928620): kobject_uevent_env [ 1008.734326] kobject: 'loop0' (ffff8880a4928620): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1009.534702] kobject: 'loop0' (ffff8880a4928620): kobject_uevent_env [ 1009.541285] kobject: 'loop0' (ffff8880a4928620): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1010.342566] kobject: 'loop0' (ffff8880a4928620): kobject_uevent_env [ 1010.349012] kobject: 'loop0' (ffff8880a4928620): fill_kobj_path: path = '/devices/virtual/block/loop0' 2019/08/18 01:40:13 executed programs: 9 [ 1011.149736] kobject: 'loop0' (ffff8880a4928620): kobject_uevent_env [ 1011.156299] kobject: 'loop0' (ffff8880a4928620): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1011.956357] kobject: 'loop0' (ffff8880a4928620): kobject_uevent_env [ 1011.963066] kobject: 'loop0' (ffff8880a4928620): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1012.761918] kobject: 'loop0' (ffff8880a4928620): kobject_uevent_env [ 1012.768455] kobject: 'loop0' (ffff8880a4928620): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1013.567749] kobject: 'loop0' (ffff8880a4928620): kobject_uevent_env [ 1013.574424] kobject: 'loop0' (ffff8880a4928620): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1014.374463] kobject: 'loop0' (ffff8880a4928620): kobject_uevent_env [ 1014.380962] kobject: 'loop0' (ffff8880a4928620): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1015.182572] kobject: 'loop0' (ffff8880a4928620): kobject_uevent_env [ 1015.189102] kobject: 'loop0' (ffff8880a4928620): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1015.990051] kobject: 'loop0' (ffff8880a4928620): kobject_uevent_env [ 1015.996491] kobject: 'loop0' (ffff8880a4928620): fill_kobj_path: path = '/devices/virtual/block/loop0' 2019/08/18 01:40:19 executed programs: 16 [ 1016.797098] kobject: 'loop0' (ffff8880a4928620): kobject_uevent_env [ 1016.803606] kobject: 'loop0' (ffff8880a4928620): fill_kobj_path: path = '/devices/virtual/block/loop0'