[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.492506] random: sshd: uninitialized urandom read (32 bytes read, 38 bits of entropy available) [ 21.862822] random: sshd: uninitialized urandom read (32 bytes read, 38 bits of entropy available) [ 22.856000] random: sshd: uninitialized urandom read (32 bytes read, 123 bits of entropy available) [ 23.022572] random: sshd: uninitialized urandom read (32 bytes read, 128 bits of entropy available) [ 23.122449] random: nonblocking pool is initialized Warning: Permanently added '10.128.0.44' (ECDSA) to the list of known hosts. executing program [ 28.488425] audit: type=1400 audit(1516951248.331:5): avc: denied { create } for pid=3318 comm="syzkaller251093" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 28.514068] audit: type=1400 audit(1516951248.371:6): avc: denied { write } for pid=3318 comm="syzkaller251093" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 28.538957] kasan: CONFIG_KASAN_INLINE enabled [ 28.543369] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN [ 28.556180] Dumping ftrace buffer: [ 28.559689] (ftrace buffer empty) [ 28.563374] Modules linked in: [ 28.566649] CPU: 1 PID: 3318 Comm: syzkaller251093 Not tainted 4.4.113-ge70c132 #27 [ 28.574411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.583735] task: ffff8801d2358000 task.stack: ffff8800b16b0000 [ 28.589760] RIP: 0010:[] [] __lock_acquire+0x5c9/0x4b50 [ 28.598436] RSP: 0018:ffff8800b16b73e0 EFLAGS: 00010006 [ 28.603857] RAX: dffffc0000000000 RBX: ffff8801d2358000 RCX: 0000000000000000 [ 28.611115] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000028 [ 28.618362] RBP: ffff8800b16b7580 R08: 0000000000000001 R09: 0000000000000000 [ 28.625601] R10: 0000000000000001 R11: 1ffff100162d6e8e R12: 0000000000000000 [ 28.632839] R13: ffff8801d2358000 R14: 0000000000000028 R15: 0000000000000000 [ 28.640090] FS: 0000000000000000(0000) GS:ffff8801db300000(0063) knlGS:000000000971a840 [ 28.648313] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 28.654168] CR2: 000055e4849ee0f0 CR3: 00000000b4f5a000 CR4: 0000000000160670 [ 28.661420] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.668668] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.675914] Stack: [ 28.678030] ffffffff842bdba0 0000000000000000 ffff8800b16b75a0 ffffffff81236f1f [ 28.685997] 0000000041b58ab3 ffffffff83fb1858 ffffffff812363c0 ffff8801d2358870 [ 28.693968] dffffc0000000000 ffff8801d23588b0 ffff8801d2358860 ffff8801d2358868 [ 28.701978] Call Trace: [ 28.704539] [] ? __lock_acquire+0xb5f/0x4b50 [ 28.710565] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 28.717546] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 28.724526] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 28.731507] [] ? __lock_acquire+0xb5f/0x4b50 [ 28.737542] [] lock_acquire+0x15e/0x460 [ 28.743141] [] ? nfulnl_recv_config+0x935/0x1430 [ 28.749516] [] ? get_parent_ip+0xd/0x50 [ 28.755109] [] _raw_spin_lock_bh+0x3a/0x50 [ 28.760958] [] ? nfulnl_recv_config+0x935/0x1430 [ 28.767338] [] nfulnl_recv_config+0x935/0x1430 [ 28.773539] [] ? nfulnl_recv_config+0x7f/0x1430 [ 28.779824] [] ? nfulnl_log_packet+0x2290/0x2290 [ 28.786208] [] nfnetlink_rcv_msg+0xa63/0xbc0 [ 28.792247] [] ? nfnetlink_rcv_msg+0x3d6/0xbc0 [ 28.798454] [] netlink_rcv_skb+0x13e/0x370 [ 28.804306] [] ? nfnetlink_bind+0x250/0x250 [ 28.810250] [] nfnetlink_rcv+0x29e/0x1070 [ 28.816016] [] netlink_unicast+0x522/0x760 [ 28.821895] [] ? netlink_unicast+0x44f/0x760 [ 28.827932] [] ? netlink_attachskb+0x6c0/0x6c0 [ 28.834132] [] netlink_sendmsg+0x8e8/0xc50 [ 28.839993] [] ? netlink_unicast+0x760/0x760 [ 28.846024] [] ? move_addr_to_kernel.part.12+0xc5/0x110 [ 28.853009] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 28.859472] [] ? security_socket_sendmsg+0x89/0xb0 [ 28.866017] [] ? netlink_unicast+0x760/0x760 [ 28.872051] [] sock_sendmsg+0xca/0x110 [ 28.877557] [] ___sys_sendmsg+0x6c1/0x7c0 [ 28.883322] [] ? copy_msghdr_from_user+0x550/0x550 [ 28.889872] [] ? __alloc_pages_direct_compact+0x250/0x250 [ 28.897027] [] ? __lock_is_held+0xa1/0xf0 [ 28.902797] [] ? check_preemption_disabled+0x3b/0x200 [ 28.909608] [] ? do_huge_pmd_anonymous_page+0x549/0xa10 [ 28.916588] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 28.923309] [] ? __fget_light+0xa1/0x1e0 [ 28.928987] [] ? __fdget+0x18/0x20 [ 28.934170] [] ? sockfd_lookup_light+0x118/0x160 [ 28.940567] [] __sys_sendmsg+0xd3/0x190 [ 28.946175] [] ? SyS_shutdown+0x1b0/0x1b0 [ 28.951945] [] ? __do_page_fault+0x380/0xa00 [ 28.958395] [] compat_SyS_sendmsg+0x2a/0x40 [ 28.964344] [] ? compat_SyS_getsockopt+0x2a0/0x2a0 [ 28.970895] [] do_fast_syscall_32+0x314/0x890 [ 28.977009] [] sysenter_flags_fixed+0xd/0x17 [ 28.983032] Code: 25 28 00 00 00 0f 85 0e 31 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 94 32 00 00 49 81 3e 20 39 a2 84 41 ba 00 00 [ 29.009630] RIP [] __lock_acquire+0x5c9/0x4b50 [ 29.015958] RSP [ 29.019554] ---[ end trace 6f395324ee3aacf2 ]--- [ 29.024284] Kernel panic - not syncing: Fatal exception in interrupt [ 29.031224] Dumping ftrace buffer: [ 29.034751] (ftrace buffer empty) [ 29.038433] Kernel Offset: disabled [ 29.042030] Rebooting in 86400 seconds..