[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 21.995410] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 27.429869] random: sshd: uninitialized urandom read (32 bytes read) [ 27.875925] random: sshd: uninitialized urandom read (32 bytes read) [ 28.373667] random: sshd: uninitialized urandom read (32 bytes read) [ 123.133399] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.202' (ECDSA) to the list of known hosts. [ 128.669952] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/30 19:58:54 parsed 1 programs [ 129.801022] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/30 19:58:56 executed programs: 0 [ 131.447536] IPVS: ftp: loaded support on port[0] = 21 [ 131.648846] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.655319] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.662567] device bridge_slave_0 entered promiscuous mode [ 131.679116] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.685494] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.692863] device bridge_slave_1 entered promiscuous mode [ 131.708495] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 131.724122] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 131.764817] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 131.782464] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.845485] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 131.852674] team0: Port device team_slave_0 added [ 131.867379] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 131.874572] team0: Port device team_slave_1 added [ 131.889697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.907677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 131.925559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.942416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.062560] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.069036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.075878] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.082263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.502905] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 132.509159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.552326] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 132.595818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.603762] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 132.642263] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.903547] ------------[ cut here ]------------ [ 132.908385] usb usb1: BOGUS urb flags, 40 --> 0 [ 132.913280] WARNING: CPU: 0 PID: 4906 at drivers/usb/core/urb.c:503 usb_submit_urb+0x719/0x14d0 [ 132.922096] Kernel panic - not syncing: panic_on_warn set ... [ 132.922096] [ 132.929442] CPU: 0 PID: 4906 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #215 [ 132.936698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 132.946038] Call Trace: [ 132.948620] dump_stack+0x1c9/0x2b4 [ 132.952230] ? dump_stack_print_info.cold.2+0x52/0x52 [ 132.957405] panic+0x238/0x4e7 [ 132.960582] ? add_taint.cold.5+0x16/0x16 [ 132.964722] ? __warn.cold.8+0x148/0x1ba [ 132.968815] ? __warn.cold.8+0x117/0x1ba [ 132.972868] ? usb_submit_urb+0x719/0x14d0 [ 132.977087] __warn.cold.8+0x163/0x1ba [ 132.980966] ? usb_submit_urb+0x719/0x14d0 [ 132.985192] report_bug+0x252/0x2d0 [ 132.988803] do_error_trap+0x1fc/0x4d0 [ 132.992673] ? math_error+0x3e0/0x3e0 [ 132.996460] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 133.001283] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 133.006284] ? vprintk_func+0x81/0x117 [ 133.010154] ? printk+0xa7/0xcf [ 133.013422] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 133.018246] do_invalid_op+0x1b/0x20 [ 133.021941] invalid_op+0x14/0x20 [ 133.025375] RIP: 0010:usb_submit_urb+0x719/0x14d0 [ 133.030200] Code: 08 fd 48 8b 45 d0 48 8d b8 a0 00 00 00 e8 1f ce 72 ff 45 89 e0 44 89 e9 4c 89 fa 48 89 c6 48 c7 c7 40 d8 7d 87 e8 57 ec d2 fc <0f> 0b e8 30 29 08 fd 48 c7 c6 40 d9 7d 87 4c 89 f7 e8 71 2a 08 fd [ 133.049087] RSP: 0018:ffff8801d7e7f278 EFLAGS: 00010282 [ 133.054435] RAX: 0000000000000000 RBX: ffff8801d3f96200 RCX: 0000000000000000 [ 133.061690] RDX: 0000000000000000 RSI: ffffffff8163ac01 RDI: ffff8801d7e7ef68 [ 133.068947] RBP: ffff8801d7e7f2e8 R08: ffff8801d77a4640 R09: 0000000000000006 [ 133.076247] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 133.083546] R13: 0000000000000040 R14: 0000000000000000 R15: ffff8801ceb1b7c0 [ 133.090864] ? vprintk_func+0x81/0x117 [ 133.094743] ? usb_submit_urb+0x719/0x14d0 [ 133.098960] ? kasan_check_write+0x14/0x20 [ 133.103179] proc_do_submiturb+0x2669/0x3d70 [ 133.107575] ? free_async+0x490/0x490 [ 133.111414] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 133.116982] ? _copy_from_user+0xdf/0x150 [ 133.121139] proc_submiturb_compat+0x544/0x800 [ 133.125714] ? proc_do_submiturb+0x3d70/0x3d70 [ 133.130289] usbdev_do_ioctl+0x19a5/0x3b30 [ 133.134505] ? processcompl_compat+0x680/0x680 [ 133.139071] ? __pagevec_lru_add+0x30/0x30 [ 133.143287] ? graph_lock+0x170/0x170 [ 133.147071] ? kasan_check_read+0x11/0x20 [ 133.151202] ? rcu_is_watching+0x8c/0x150 [ 133.155332] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 133.160525] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 133.166047] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 133.171131] ? futex_wake+0x304/0x760 [ 133.174966] ? get_futex_key+0x2000/0x2000 [ 133.179194] ? graph_lock+0x170/0x170 [ 133.182984] ? trace_hardirqs_on+0xbd/0x2c0 [ 133.187294] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 133.192390] ? do_futex+0x249/0x27d0 [ 133.196095] ? lock_downgrade+0x8f0/0x8f0 [ 133.200236] ? exit_robust_list+0x290/0x290 [ 133.204559] ? do_raw_spin_unlock+0xa7/0x2f0 [ 133.208959] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 133.213525] ? pud_val+0x100/0x100 [ 133.217052] ? kasan_check_write+0x14/0x20 [ 133.221288] ? do_raw_spin_lock+0xc1/0x200 [ 133.225510] ? _raw_spin_unlock+0x22/0x30 [ 133.229637] ? __handle_mm_fault+0x945/0x4350 [ 133.234122] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 133.238946] ? graph_lock+0x170/0x170 [ 133.242725] ? graph_lock+0x170/0x170 [ 133.246511] ? find_held_lock+0x36/0x1c0 [ 133.250562] usbdev_ioctl+0x25/0x30 [ 133.254185] ? usbdev_compat_ioctl+0x30/0x30 [ 133.258588] do_vfs_ioctl+0x1de/0x1720 [ 133.262474] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 133.267995] ? ioctl_preallocate+0x300/0x300 [ 133.272385] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 133.277904] ? __fget_light+0x2f7/0x440 [ 133.281858] ? __handle_mm_fault+0x4350/0x4350 [ 133.286420] ? fget_raw+0x20/0x20 [ 133.289873] ? __x64_sys_futex+0x47f/0x6a0 [ 133.294093] ? do_syscall_64+0x9a/0x820 [ 133.298052] ? do_syscall_64+0x9a/0x820 [ 133.302011] ? lockdep_hardirqs_on+0x421/0x5c0 [ 133.306575] ? security_file_ioctl+0x94/0xc0 [ 133.310964] ksys_ioctl+0xa9/0xd0 [ 133.314400] __x64_sys_ioctl+0x73/0xb0 [ 133.318269] do_syscall_64+0x1b9/0x820 [ 133.322137] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 133.327482] ? syscall_return_slowpath+0x5e0/0x5e0 [ 133.332391] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 133.337220] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 133.342269] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 133.347274] ? prepare_exit_to_usermode+0x291/0x3b0 [ 133.352275] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 133.357107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 133.362277] RIP: 0033:0x457089 [ 133.365457] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 133.384426] RSP: 002b:00007ffc472a35d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.392185] RAX: ffffffffffffffda RBX: 0000000001fbd914 RCX: 0000000000457089 [ 133.399445] RDX: 0000000020000080 RSI: 00000000802c550a RDI: 0000000000000003 [ 133.406700] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 133.413950] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 133.421201] R13: 00000000004cf368 R14: 00000000004c57eb R15: 0000000000000000 [ 133.429001] Dumping ftrace buffer: [ 133.432600] (ftrace buffer empty) [ 133.436301] Kernel Offset: disabled [ 133.439915] Rebooting in 86400 seconds..