[....] Starting OpenBSD Secure Shell server: sshd[ 11.883433] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.212251] random: sshd: uninitialized urandom read (32 bytes read) [ 16.486295] audit: type=1400 audit(1567206677.649:6): avc: denied { map } for pid=1761 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 16.536383] random: sshd: uninitialized urandom read (32 bytes read) [ 17.047731] random: sshd: uninitialized urandom read (32 bytes read) [ 17.223590] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.212' (ECDSA) to the list of known hosts. [ 22.710601] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 22.803504] audit: type=1400 audit(1567206683.969:7): avc: denied { map } for pid=1779 comm="syz-executor195" path="/root/syz-executor195311216" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 22.832676] audit: type=1400 audit(1567206683.999:8): avc: denied { prog_load } for pid=1779 comm="syz-executor195" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 22.856294] audit: type=1400 audit(1567206684.019:9): avc: denied { prog_run } for pid=1779 comm="syz-executor195" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 22.856328] kasan: CONFIG_KASAN_INLINE enabled [ 22.883388] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 22.890773] general protection fault: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 22.897498] Modules linked in: [ 22.900671] CPU: 0 PID: 1779 Comm: syz-executor195 Not tainted 4.14.140+ #39 [ 22.907845] task: (ptrval) task.stack: (ptrval) [ 22.913895] RIP: 0010:bpf_clone_redirect+0x6a/0x2b0 [ 22.918888] RSP: 0018:ffff8881cfc1f808 EFLAGS: 00010202 [ 22.924263] RAX: dffffc0000000000 RBX: ffff8881d697ae20 RCX: 00000000607cfff9 [ 22.931516] RDX: 00000000000000a7 RSI: 0000000000000006 RDI: 0000000000000538 [ 22.938766] RBP: 0000000000000000 R08: ffffffffa9dfd0bb R09: ffffed103b7444fa [ 22.946014] R10: ffffed103b7444f9 R11: ffff8881dba227cf R12: 0000000000000000 [ 22.953347] R13: 0000000000000006 R14: ffffffffaafb97e0 R15: ffffc90000496088 [ 22.960603] FS: 0000000000a19880(0000) GS:ffff8881dba00000(0000) knlGS:0000000000000000 [ 22.968885] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.974752] CR2: 0000000020000200 CR3: 00000001d1288006 CR4: 00000000001606b0 [ 22.982222] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.989470] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.996712] Call Trace: [ 22.999284] ? __bpf_redirect+0xa30/0xa30 [ 23.003412] ___bpf_prog_run+0x2478/0x5510 [ 23.007622] ? lock_downgrade+0x5d0/0x5d0 [ 23.011741] ? lock_acquire+0x12b/0x360 [ 23.015705] ? bpf_jit_compile+0x30/0x30 [ 23.019758] ? __bpf_prog_run512+0x99/0xe0 [ 23.023978] ? ___bpf_prog_run+0x5510/0x5510 [ 23.028370] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 23.033453] ? trace_hardirqs_on_caller+0x37b/0x540 [ 23.038444] ? __lock_acquire+0x5d7/0x4320 [ 23.042667] ? __lock_acquire+0x5d7/0x4320 [ 23.046895] ? __kasan_kmalloc.part.0+0x8a/0xc0 [ 23.051545] ? trace_hardirqs_on+0x10/0x10 [ 23.055757] ? kasan_init_slab_obj+0x21/0x30 [ 23.060169] ? new_slab+0x226/0x3e0 [ 23.063782] ? __lock_acquire+0x5d7/0x4320 [ 23.068001] ? bpf_test_run+0x42/0x340 [ 23.071874] ? lock_acquire+0x12b/0x360 [ 23.075996] ? bpf_test_run+0x13a/0x340 [ 23.079956] ? check_preemption_disabled+0x35/0x1f0 [ 23.084963] ? rcu_dynticks_curr_cpu_in_eqs+0x4c/0xa0 [ 23.090136] ? bpf_test_run+0xa8/0x340 [ 23.094011] ? bpf_prog_test_run_skb+0x638/0x8c0 [ 23.098768] ? bpf_test_init.isra.0+0xc0/0xc0 [ 23.103246] ? bpf_prog_add+0x53/0xc0 [ 23.107033] ? bpf_test_init.isra.0+0xc0/0xc0 [ 23.111514] ? SyS_bpf+0xa3b/0x3830 [ 23.115123] ? bpf_prog_get+0x20/0x20 [ 23.118923] ? __do_page_fault+0x49f/0xbb0 [ 23.123134] ? lock_downgrade+0x5d0/0x5d0 [ 23.127273] ? __do_page_fault+0x677/0xbb0 [ 23.131495] ? do_syscall_64+0x43/0x520 [ 23.135452] ? bpf_prog_get+0x20/0x20 [ 23.139229] ? do_syscall_64+0x19b/0x520 [ 23.143277] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 23.148623] Code: 48 c1 ea 03 80 3c 02 00 0f 85 55 02 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 10 49 8d bc 24 38 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 12 02 00 00 49 8b bc 24 38 05 00 00 44 89 ee [ 23.167860] RIP: bpf_clone_redirect+0x6a/0x2b0 RSP: ffff8881cfc1f808 [ 23.174436] ---[ end trace 7f4889397ebda4c3 ]--- [ 23.179173] Kernel panic - not syncing: Fatal exception [ 23.185007] Kernel Offset: 0x28c00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 23.195909] Rebooting in 86400 seconds..