[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting O[ 20.636831] random: sshd: uninitialized urandom read (32 bytes read, 35 bits of entropy available) penBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 25.374230] random: sshd: uninitialized urandom read (32 bytes read, 40 bits of entropy available) [ 25.679143] random: sshd: uninitialized urandom read (32 bytes read, 41 bits of entropy available) [ 26.631702] random: sshd: uninitialized urandom read (32 bytes read, 113 bits of entropy available) [ 26.796345] random: sshd: uninitialized urandom read (32 bytes read, 117 bits of entropy available) Warning: Permanently added '10.128.10.21' (ECDSA) to the list of known hosts. [ 32.183850] random: sshd: uninitialized urandom read (32 bytes read, 122 bits of entropy available) 2018/03/22 20:05:54 parsed 1 programs 2018/03/22 20:05:54 executed programs: 0 [ 32.521458] IPVS: Creating netns size=2552 id=1 [ 32.551376] audit: type=1400 audit(1521749154.984:5): avc: denied { create } for pid=3809 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 32.576768] audit: type=1400 audit(1521749155.014:6): avc: denied { write } for pid=3809 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 32.600674] kasan: CONFIG_KASAN_INLINE enabled [ 32.605051] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN [ 32.618085] Dumping ftrace buffer: [ 32.621595] (ftrace buffer empty) [ 32.625273] Modules linked in: [ 32.628552] CPU: 0 PID: 3809 Comm: syz-executor0 Not tainted 4.4.120-gd63fdf6 #29 [ 32.636143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.645470] task: ffff8800a9f8c800 task.stack: ffff8800a9e68000 [ 32.651493] RIP: 0010:[] [] netlink_unicast+0x1c0/0x760 [ 32.660158] RSP: 0018:ffff8800a9e6f6f8 EFLAGS: 00010293 [ 32.665585] RAX: dffffc0000000048 RBX: dffffc0000000000 RCX: ffffffff82f89d89 [ 32.672829] RDX: 0000000000000000 RSI: 00000000024000c0 RDI: ffff8801cb4ae218 [ 32.680067] RBP: ffff8800a9e6f7b8 R08: ffffed0038a4e5d4 R09: ffffed0038a4e5d4 [ 32.687309] R10: 0000000000000000 R11: ffffed0038a4e5d3 R12: 0000000000000000 [ 32.694556] R13: dffffc0000000000 R14: ffff8801cb4ae140 R15: dffffc0000000006 [ 32.701799] FS: 0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:0000000008ab0900 [ 32.710001] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 32.715852] CR2: 0000000008068550 CR3: 00000000aa3cc000 CR4: 0000000000160670 [ 32.723093] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.730352] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.737589] Stack: [ 32.739716] 1ffff100153cdee6 ffff8801c5272200 0000000000000240 0000000000000030 [ 32.747711] 1ffff100153cdee6 dffffc0000000048 0000000000000002 0000000041b58ab3 [ 32.755703] ffffffff84001503 ffffffff82f89bd0 ffff8801cb4ae140 0000000000000000 [ 32.763667] Call Trace: [ 32.766234] [] ? netlink_attachskb+0x6c0/0x6c0 [ 32.772436] [] ? __nlmsg_put+0x14c/0x1b0 [ 32.778118] [] netlink_ack+0x231/0x4b0 [ 32.783623] [] nfnetlink_rcv+0xaa2/0x1070 [ 32.789393] [] netlink_unicast+0x522/0x760 [ 32.795255] [] ? netlink_unicast+0x44f/0x760 [ 32.801282] [] ? netlink_attachskb+0x6c0/0x6c0 [ 32.807481] [] netlink_sendmsg+0x8e8/0xc50 [ 32.813333] [] ? netlink_unicast+0x760/0x760 [ 32.819373] [] ? move_addr_to_kernel.part.12+0xc5/0x110 [ 32.826358] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 32.832821] [] ? security_socket_sendmsg+0x89/0xb0 [ 32.839367] [] ? netlink_unicast+0x760/0x760 [ 32.845395] [] sock_sendmsg+0xca/0x110 [ 32.850900] [] ___sys_sendmsg+0x6c1/0x7c0 [ 32.856665] [] ? copy_msghdr_from_user+0x550/0x550 [ 32.863216] [] ? __alloc_pages_direct_compact+0x250/0x250 [ 32.870374] [] ? do_futex+0x3f4/0x15d0 [ 32.875881] [] ? __wake_up_locked_key+0x20/0x20 [ 32.882170] [] ? exit_robust_list+0x240/0x240 [ 32.888286] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 32.895009] [] ? __fget_light+0xa3/0x1e0 [ 32.900687] [] ? __fdget+0x18/0x20 [ 32.905844] [] ? sockfd_lookup_light+0x118/0x160 [ 32.912218] [] __sys_sendmsg+0xd3/0x190 [ 32.917810] [] ? SyS_shutdown+0x1b0/0x1b0 [ 32.923587] [] ? compat_SyS_futex+0x1f9/0x2a0 [ 32.929700] [] ? __do_page_fault+0x380/0xa00 [ 32.935730] [] compat_SyS_sendmsg+0x2a/0x40 [ 32.941673] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 32.948220] [] do_fast_syscall_32+0x321/0x8a0 [ 32.954338] [] sysenter_flags_fixed+0xd/0x17 [ 32.960359] Code: e7 6f 3d fe 48 8d 55 98 4c 89 e1 4c 89 f6 48 89 df e8 95 f7 ff ff 83 f8 01 0f 85 e1 03 00 00 e8 c7 6f 3d fe 48 8b 85 68 ff ff ff <0f> b6 00 84 c0 74 08 3c 03 0f 8e 63 05 00 00 41 80 3f 00 41 0f [ 32.986905] RIP [] netlink_unicast+0x1c0/0x760 [ 32.993233] RSP [ 32.996903] ---[ end trace a347f91764028aba ]--- [ 33.001643] Kernel panic - not syncing: Fatal exception [ 33.007494] Dumping ftrace buffer: [ 33.011010] (ftrace buffer empty) [ 33.014688] Kernel Offset: disabled [ 33.018290] Rebooting in 86400 seconds..