. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 20.924345] random: sshd: uninitialized urandom read (32 bytes read, 36 bits of entropy available) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.143756] random: sshd: uninitialized urandom read (32 bytes read, 36 bits of entropy available) [ 22.039326] random: sshd: uninitialized urandom read (32 bytes read, 103 bits of entropy available) [ 22.201364] random: sshd: uninitialized urandom read (32 bytes read, 106 bits of entropy available) Warning: Permanently added '10.128.0.55' (ECDSA) to the list of known hosts. [ 27.602746] random: sshd: uninitialized urandom read (32 bytes read, 112 bits of entropy available) 2018/03/24 14:32:00 parsed 1 programs 2018/03/24 14:32:00 executed programs: 0 [ 27.986603] IPVS: Creating netns size=2552 id=1 [ 28.017297] IPVS: Creating netns size=2552 id=2 [ 28.045797] IPVS: Creating netns size=2552 id=3 [ 28.104829] IPVS: Creating netns size=2552 id=4 [ 28.196327] IPVS: Creating netns size=2552 id=5 [ 28.305650] IPVS: Creating netns size=2552 id=6 [ 28.433702] IPVS: Creating netns size=2552 id=7 [ 28.530656] IPVS: Creating netns size=2552 id=8 [ 29.245102] kasan: CONFIG_KASAN_INLINE enabled [ 29.255166] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN [ 29.337562] Dumping ftrace buffer: [ 29.341092] (ftrace buffer empty) [ 29.344790] Modules linked in: [ 29.348096] CPU: 0 PID: 4291 Comm: syz-executor2 Not tainted 4.4.120-gd63fdf6 #29 [ 29.355698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.365039] task: ffff8800b984c800 task.stack: ffff8801d9230000 [ 29.371088] RIP: 0010:[] [] sg_remove_scat.isra.17+0x17b/0x2d0 [ 29.380391] RSP: 0018:ffff8801d9237ab0 EFLAGS: 00010202 [ 29.385822] RAX: 1ffff1003ad8f86d RBX: ffff8801d6c7c358 RCX: 0000000000000001 [ 29.393079] RDX: 0000000000000008 RSI: 0000000000000000 RDI: ffff8801d4ada5f4 [ 29.400332] RBP: ffff8801d9237b00 R08: 0000000000000000 R09: 0000000000000001 [ 29.407584] R10: 0000000000000000 R11: 1ffff1003b246f30 R12: 0000000000000001 [ 29.414851] R13: 0000000000000008 R14: 0000000000000000 R15: dffffc0000000000 [ 29.422107] FS: 0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:00000000f7796b40 [ 29.430310] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 29.436168] CR2: 00007f3511b9e000 CR3: 00000001cae24000 CR4: 0000000000160670 [ 29.443427] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.450672] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.457915] Stack: [ 29.460035] ffff8801d6c7c370 ffffed003ad8f86b ffffed003ad8f86e ffff8801d6c7c368 [ 29.468030] ffff8801d4ada5d8 ffff8801d6c7c340 0000000000000000 0000000000000000 [ 29.476037] 0000000000000000 ffff8801d6c7c438 ffff8801d9237b40 ffffffff825b89d5 [ 29.484010] Call Trace: [ 29.486586] [] sg_finish_rem_req+0x2b5/0x340 [ 29.492628] [] sg_read+0xa1b/0x1490 [ 29.497888] [] ? sg_proc_seq_show_debug+0xda0/0xda0 [ 29.504536] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 29.511528] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 29.518347] [] ? sg_proc_seq_show_debug+0xda0/0xda0 [ 29.525023] [] __vfs_read+0x103/0x440 [ 29.530453] [] ? quarantine_put+0xab/0x180 [ 29.536311] [] ? vfs_iter_write+0x2d0/0x2d0 [ 29.542256] [] ? fsnotify+0x5ad/0xee0 [ 29.547678] [] ? fsnotify+0xee0/0xee0 [ 29.553098] [] ? avc_policy_seqno+0x9/0x20 [ 29.558961] [] ? selinux_file_permission+0x348/0x460 [ 29.565685] [] ? security_file_permission+0x89/0x1e0 [ 29.572413] [] ? rw_verify_area+0x100/0x2f0 [ 29.578355] [] vfs_read+0x123/0x3a0 [ 29.583608] [] SyS_read+0xd9/0x1b0 [ 29.588765] [] ? do_sendfile+0xd30/0xd30 [ 29.594445] [] ? vmacache_update+0xfe/0x130 [ 29.600386] [] ? do_fast_syscall_32+0xd7/0x8a0 [ 29.606586] [] ? do_sendfile+0xd30/0xd30 [ 29.612268] [] do_fast_syscall_32+0x321/0x8a0 [ 29.618397] [] sysenter_flags_fixed+0xd/0x17 [ 29.624425] Code: 45 b8 eb 3e e8 a7 87 da fe 48 8b 45 c8 48 c1 e8 03 42 80 3c 38 00 0f 85 3a 01 00 00 4c 8b 73 10 4b 8d 14 2e 48 89 d1 48 c1 e9 03 <42> 80 3c 39 00 0f 85 0b 01 00 00 48 8b 12 49 83 c5 08 48 85 d2 [ 29.651025] RIP [] sg_remove_scat.isra.17+0x17b/0x2d0 [ 29.657957] RSP [ 29.668206] ---[ end trace 7246ca0c777d98b0 ]--- [ 29.672979] Kernel panic - not syncing: Fatal exception [ 29.678782] Dumping ftrace buffer: [ 29.682295] (ftrace buffer empty) [ 29.685975] Kernel Offset: disabled [ 29.689573] Rebooting in 86400 seconds..