[....] Starting OpenBSD Secure Shell server: sshd[ 11.927120] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.135183] random: sshd: uninitialized urandom read (32 bytes read) [ 16.321810] audit: type=1400 audit(1571768480.633:6): avc: denied { map } for pid=1762 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 16.358488] random: sshd: uninitialized urandom read (32 bytes read) [ 16.835003] random: sshd: uninitialized urandom read (32 bytes read) [ 18.368353] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.1.54' (ECDSA) to the list of known hosts. [ 23.869505] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 23.960538] audit: type=1400 audit(1571768488.273:7): avc: denied { map } for pid=1780 comm="syz-executor889" path="/root/syz-executor889713255" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 23.962922] ------------[ cut here ]------------ [ 23.991602] WARNING: CPU: 0 PID: 1780 at mm/page_alloc.c:4245 __alloc_pages_nodemask+0x3d5/0x2370 [ 24.000592] Kernel panic - not syncing: panic_on_warn set ... [ 24.000592] [ 24.007946] CPU: 0 PID: 1780 Comm: syz-executor889 Not tainted 4.14.150+ #0 [ 24.015031] Call Trace: [ 24.017606] dump_stack+0xca/0x134 [ 24.021128] panic+0x1f1/0x3da [ 24.024311] ? add_taint.cold+0x16/0x16 [ 24.028271] ? __alloc_pages_nodemask+0x3d5/0x2370 [ 24.033179] ? __probe_kernel_read+0x163/0x1c0 [ 24.037753] ? __alloc_pages_nodemask+0x3d5/0x2370 [ 24.042672] __warn.cold+0x2f/0x33 [ 24.046223] ? __alloc_pages_nodemask+0x3d5/0x2370 [ 24.051161] report_bug+0x20a/0x248 [ 24.054770] do_error_trap+0x1bf/0x2d0 [ 24.058650] ? math_error+0x2d0/0x2d0 [ 24.062459] ? __lock_acquire+0x5d7/0x4320 [ 24.066673] ? lock_acquire+0x12b/0x360 [ 24.070630] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 24.075455] invalid_op+0x18/0x40 [ 24.078888] RIP: 0010:__alloc_pages_nodemask+0x3d5/0x2370 [ 24.084933] RSP: 0018:ffff8881cc107938 EFLAGS: 00010246 [ 24.090288] RAX: 0000000000000000 RBX: 1ffff11039820f3b RCX: 0000000000000000 [ 24.097534] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000000000 [ 24.104783] RBP: 00000001002000a0 R08: 0000000000002dc0 R09: ffffed103a56ba42 [ 24.112032] R10: ffff8881cc107bc8 R11: ffff8881d2b5d20f R12: 000000000140c0c0 [ 24.119294] R13: 0000000000000000 R14: ffff8881c0def700 R15: ffff8881c0def728 [ 24.126565] ? __kasan_slab_free+0x1c5/0x210 [ 24.130969] ? lock_acquire+0x12b/0x360 [ 24.134925] ? uinput_ioctl_handler.isra.0+0xa6/0x1850 [ 24.140178] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 24.145010] ? avc_has_extended_perms+0x5e0/0xc20 [ 24.149834] ? lock_downgrade+0x630/0x630 [ 24.153972] ? avc_has_extended_perms+0xd0/0xc20 [ 24.158714] ? check_preemption_disabled+0x35/0x1f0 [ 24.163711] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 24.169169] kmalloc_order+0x1e/0x50 [ 24.172862] kmalloc_order_trace+0x17/0x160 [ 24.177165] input_mt_init_slots+0xca/0x3f0 [ 24.181482] uinput_ioctl_handler.isra.0+0x13df/0x1850 [ 24.186753] ? uinput_request_submit.part.0+0x280/0x280 [ 24.192098] ? uinput_ioctl+0x50/0x50 [ 24.195879] ? trace_hardirqs_on+0x10/0x10 [ 24.200110] ? uinput_compat_ioctl+0x90/0x90 [ 24.204497] do_vfs_ioctl+0xabe/0x1040 [ 24.208375] ? selinux_file_ioctl+0x426/0x590 [ 24.212853] ? selinux_file_ioctl+0x116/0x590 [ 24.217327] ? ioctl_preallocate+0x1e0/0x1e0 [ 24.221725] ? selinux_socket_sock_rcv_skb+0x610/0x610 [ 24.226991] ? vfs_write+0x319/0x4d0 [ 24.230690] ? security_file_ioctl+0x7c/0xb0 [ 24.235091] SyS_ioctl+0x7f/0xb0 [ 24.238435] ? do_vfs_ioctl+0x1040/0x1040 [ 24.242575] do_syscall_64+0x19b/0x520 [ 24.246445] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 24.251613] RIP: 0033:0x440d99 [ 24.254779] RSP: 002b:00007fff57cdda08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 24.262464] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440d99 [ 24.269711] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 24.276962] RBP: 00000000006cb018 R08: 00000000004002c8 R09: 00000000004002c8 [ 24.284209] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000402620 [ 24.291552] R13: 00000000004026b0 R14: 0000000000000000 R15: 0000000000000000 [ 24.299468] Kernel Offset: 0x18600000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 24.310402] Rebooting in 86400 seconds..