[ 43.089127] random: cc1: uninitialized urandom read (8 bytes read) [ 43.700973] IPVS: ftp: loaded support on port[0] = 21 [ 44.798833] can: request_module (can-proto-0) failed. [ 44.808151] can: request_module (can-proto-0) failed. [ 44.952295] audit: type=1400 audit(1578092445.821:37): avc: denied { create } for pid=6855 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 44.975994] audit: type=1400 audit(1578092445.821:38): avc: denied { create } for pid=6855 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 44.999657] audit: type=1400 audit(1578092445.821:39): avc: denied { create } for pid=6855 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 45.302393] random: sshd: uninitialized urandom read (32 bytes read) [ 46.068030] random: sshd: uninitialized urandom read (32 bytes read) [ 46.254853] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.1.25' (ECDSA) to the list of known hosts. 2020/01/03 23:00:53 parsed 1 programs 2020/01/03 23:00:54 executed programs: 0 [ 53.199148] audit: type=1400 audit(1578092454.061:40): avc: denied { map } for pid=6926 comm="syz-execprog" path="/root/syzkaller-shm828280028" dev="sda1" ino=16491 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 53.259513] IPVS: ftp: loaded support on port[0] = 21 [ 54.035950] chnl_net:caif_netlink_parms(): no params data found [ 54.044082] IPVS: ftp: loaded support on port[0] = 21 [ 54.089774] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.096943] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.104204] device bridge_slave_0 entered promiscuous mode [ 54.114290] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.120778] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.127654] device bridge_slave_1 entered promiscuous mode [ 54.141015] IPVS: ftp: loaded support on port[0] = 21 [ 54.158265] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.167098] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.184813] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.192337] team0: Port device team_slave_0 added [ 54.199254] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.206631] team0: Port device team_slave_1 added [ 54.211936] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.223355] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.282843] device hsr_slave_0 entered promiscuous mode [ 54.330364] device hsr_slave_1 entered promiscuous mode [ 54.375883] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.384795] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.424265] chnl_net:caif_netlink_parms(): no params data found [ 54.436190] IPVS: ftp: loaded support on port[0] = 21 [ 54.482627] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.489059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.496045] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.502560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.532256] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.538717] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.546668] device bridge_slave_0 entered promiscuous mode [ 54.554979] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.561924] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.568821] device bridge_slave_1 entered promiscuous mode [ 54.587279] chnl_net:caif_netlink_parms(): no params data found [ 54.608893] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.620380] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.638270] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.645394] team0: Port device team_slave_0 added [ 54.655440] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.662555] team0: Port device team_slave_1 added [ 54.669729] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.683689] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.741970] device hsr_slave_0 entered promiscuous mode [ 54.780360] device hsr_slave_1 entered promiscuous mode [ 54.855153] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.866067] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.887245] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.894103] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.901701] device bridge_slave_0 entered promiscuous mode [ 54.908253] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.915111] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.915906] IPVS: ftp: loaded support on port[0] = 21 [ 54.927775] device bridge_slave_1 entered promiscuous mode [ 54.993447] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.002681] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.013077] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.019424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.026023] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.032583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.043115] chnl_net:caif_netlink_parms(): no params data found [ 55.064312] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.071469] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.078847] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.086103] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.096328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.111444] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 55.118621] team0: Port device team_slave_0 added [ 55.126778] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.134128] team0: Port device team_slave_1 added [ 55.142941] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.153928] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.173331] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.223182] device hsr_slave_0 entered promiscuous mode [ 55.240480] device hsr_slave_1 entered promiscuous mode [ 55.280907] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.288192] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.307435] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.324804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.333073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.353513] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.359919] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.367100] device bridge_slave_0 entered promiscuous mode [ 55.374798] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.381034] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.388628] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.395541] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.402777] device bridge_slave_1 entered promiscuous mode [ 55.403157] IPVS: ftp: loaded support on port[0] = 21 [ 55.419891] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.429397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.439433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.467252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.475334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.483005] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.489352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.496334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.504737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.512475] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.518951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.526951] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.594983] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.603111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.616730] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.629605] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.638294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.658327] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.668277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.675636] chnl_net:caif_netlink_parms(): no params data found [ 55.691151] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 55.698313] team0: Port device team_slave_0 added [ 55.705327] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.713433] team0: Port device team_slave_1 added [ 55.718538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.726675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.734371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.742075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.749724] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.764875] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.773959] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.784340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.793040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.802427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.810355] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 55.818757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.829823] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 55.836155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.850901] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.862225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.870601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.880551] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.889319] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.907247] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 55.917905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.925312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.973401] device hsr_slave_0 entered promiscuous mode [ 56.020446] device hsr_slave_1 entered promiscuous mode [ 56.070600] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 56.095214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.104688] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.110931] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.117914] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 56.143876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.153817] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.173632] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 56.180366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.189581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.197637] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.204415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.215204] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.222245] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.229474] device bridge_slave_0 entered promiscuous mode [ 56.237738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.245436] ------------[ cut here ]------------ [ 56.254536] audit: type=1400 audit(1578092457.111:41): avc: denied { map } for pid=6976 comm="syz-executor.1" path="/root/syzkaller-testdir277905145/syzkaller.K0Dhrz/0/file0/mem" dev="devtmpfs" ino=13698 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file permissive=1 [ 56.259258] WARNING: CPU: 0 PID: 6977 at arch/x86/kernel/cpu/mtrr/generic.c:216 mtrr_type_lookup_variable+0x46e/0x870 [ 56.259263] Kernel panic - not syncing: panic_on_warn set ... [ 56.259263] [ 56.299462] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.300837] CPU: 0 PID: 6977 Comm: syz-executor.1 Not tainted 4.14.161-syzkaller #0 [ 56.300840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.300842] Call Trace: [ 56.300852] dump_stack+0xf7/0x13b [ 56.300860] ? mtrr_type_lookup_variable+0x46e/0x870 [ 56.300866] panic+0x1b0/0x358 [ 56.300870] ? add_taint.cold.5+0x11/0x11 [ 56.300881] ? mtrr_type_lookup_variable+0x46e/0x870 [ 56.311024] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.314320] __warn.cold.8+0x25/0x2c [ 56.324643] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.331519] ? mtrr_type_lookup_variable+0x46e/0x870 [ 56.331528] report_bug+0x1a4/0x1f3 [ 56.331536] do_error_trap+0x1bd/0x310 [ 56.331542] ? math_error+0x300/0x300 [ 56.331550] ? is_bpf_text_address+0x60/0xe0 [ 56.334132] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.337670] ? lock_downgrade+0x7f0/0x7f0 [ 56.345542] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.345940] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 56.352732] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.355382] do_invalid_op+0x1b/0x20 [ 56.363950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.365127] invalid_op+0x1b/0x40 [ 56.373500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.376376] RIP: 0010:mtrr_type_lookup_variable+0x46e/0x870 [ 56.376380] RSP: 0018:ffff8880a1fb75a8 EFLAGS: 00010287 [ 56.383348] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.384965] RAX: ffff8880a1fb7860 RBX: 00000000c0000000 RCX: 00000000ffffffff [ 56.391014] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.393152] RDX: ffffffff887954e0 RSI: 0000000040000000 RDI: 0200000000000f00 [ 56.401497] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.403315] RBP: ffff8880a1fb76c8 R08: ffff8880a1fb77a0 R09: ffff8880a1fb76a0 [ 56.412949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.415249] R10: ffffffff887955e0 R11: 0000000000000001 R12: 0000000000000000 [ 56.415254] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff887955e0 [ 56.423663] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.425914] ? __lock_acquire+0x6a4/0x4500 [ 56.432811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.436228] ? check_type_overlap+0x120/0x120 [ 56.443834] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.448772] ? trace_hardirqs_on+0x10/0x10 [ 56.459727] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.460871] ? trace_hardirqs_off+0x10/0x10 [ 56.460876] ? trace_hardirqs_on+0x10/0x10 [ 56.460883] ? unwind_get_return_address+0x61/0xa0 [ 56.460887] ? trace_hardirqs_off+0x10/0x10 [ 56.460895] mtrr_type_lookup+0x123/0x370 [ 56.460903] ? generic_get_mtrr+0x2e0/0x2e0 [ 56.472454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.475106] ? find_next_iomem_res+0x19c/0x390 [ 56.482463] kobject: 'vlan0' (ffff8880a506e180): kobject_add_internal: parent: 'mesh', set: '' [ 56.489037] ? lock_downgrade+0x7f0/0x7f0 [ 56.613208] ? _raw_read_unlock+0x2c/0x50 [ 56.617348] ? find_next_iomem_res+0x19c/0x390 [ 56.621931] ? pat_enabled+0x10/0x10 [ 56.625623] ? walk_system_ram_range+0xf8/0x130 [ 56.630277] ? walk_system_ram_res+0x110/0x110 [ 56.634933] ? __save_stack_trace+0x7e/0xd0 [ 56.639230] reserve_memtype+0x2c8/0x6e0 [ 56.643289] ? pat_init+0x360/0x360 [ 56.646983] ? pat_pagerange_is_ram+0xb1/0xd0 [ 56.651482] ? __init_cache_modes+0x2c0/0x2c0 [ 56.655961] reserve_pfn_range+0x117/0x340 [ 56.660202] ? arch_io_reserve_memtype_wc+0x80/0x80 [ 56.665211] ? trace_hardirqs_off+0x10/0x10 [ 56.669517] track_pfn_remap+0x10a/0x210 [ 56.673657] remap_pfn_range+0x18e/0x980 [ 56.677706] ? iomem_is_exclusive+0xfb/0x169 [ 56.682107] ? lock_downgrade+0x7f0/0x7f0 [ 56.686605] ? apply_to_page_range+0x530/0x530 [ 56.691168] ? io_free_memtype+0x10/0x10 [ 56.695213] ? iomem_is_exclusive+0xfb/0x169 [ 56.699609] mmap_mem+0x1c7/0x25a [ 56.703047] mmap_region+0x7a2/0xf90 [ 56.706750] do_mmap+0x544/0xe20 [ 56.710122] vm_mmap_pgoff+0x181/0x200 [ 56.714008] ? vma_is_stack_for_current+0x90/0x90 [ 56.718852] SyS_mmap_pgoff+0x3ca/0x6b0 [ 56.722819] ? find_mergeable_anon_vma+0x290/0x290 [ 56.727723] ? SyS_clock_settime+0x1a0/0x1a0 [ 56.732122] ? do_syscall_64+0x4c/0x5b0 [ 56.736090] ? align_vdso_addr+0x60/0x60 [ 56.740220] SyS_mmap+0x16/0x20 [ 56.743484] do_syscall_64+0x1c7/0x5b0 [ 56.747355] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 56.752176] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 56.757348] RIP: 0033:0x459829 [ 56.760524] RSP: 002b:00007fd94a501c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 56.768221] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459829 [ 56.775586] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 56.782845] RBP: 000000000075bf20 R08: 0000000000000003 R09: 02000000bfffd000 [ 56.790136] R10: 0000000000000012 R11: 0000000000000246 R12: 00007fd94a5026d4 [ 56.797522] R13: 00000000004c5d1b R14: 00000000004da750 R15: 00000000ffffffff [ 56.806895] Kernel Offset: disabled [ 56.810628] Rebooting in 86400 seconds..