[....] Starting OpenBSD Secure Shell server: sshd[ 12.117770] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 23.782725] random: sshd: uninitialized urandom read (32 bytes read) [ 24.193395] audit: type=1400 audit(1537538042.679:6): avc: denied { map } for pid=1768 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 24.231083] random: sshd: uninitialized urandom read (32 bytes read) [ 24.705147] random: sshd: uninitialized urandom read (32 bytes read) [ 24.864928] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.74' (ECDSA) to the list of known hosts. [ 30.372974] random: sshd: uninitialized urandom read (32 bytes read) [ 30.459491] audit: type=1400 audit(1537538048.939:7): avc: denied { map } for pid=1780 comm="syz-executor923" path="/root/syz-executor923076128" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 30.461667] uinput: invalid abs[2f] min:2504 max:-4 [ 30.461703] ------------[ cut here ]------------ [ 30.461714] WARNING: CPU: 0 PID: 1780 at mm/page_alloc.c:3889 __alloc_pages_nodemask+0x1662/0x2300 [ 30.461717] Kernel panic - not syncing: panic_on_warn set ... [ 30.461717] [ 30.461722] CPU: 0 PID: 1780 Comm: syz-executor923 Not tainted 4.14.71+ #8 [ 30.461724] Call Trace: [ 30.461731] dump_stack+0xb9/0x11b [ 30.461737] ? __alloc_pages_nodemask+0x1660/0x2300 [ 30.461743] panic+0x1bf/0x3a4 [ 30.461748] ? add_taint.cold.4+0x16/0x16 [ 30.461755] ? __probe_kernel_read+0x163/0x1c0 [ 30.461762] ? __alloc_pages_nodemask+0x1662/0x2300 [ 30.461767] __warn.cold.7+0x148/0x185 [ 30.461772] ? __alloc_pages_nodemask+0x1662/0x2300 [ 30.461777] report_bug+0x1f7/0x26c [ 30.461786] do_error_trap+0x1ba/0x2c0 [ 30.461791] ? math_error+0x2d0/0x2d0 [ 30.461797] ? unwind_next_frame+0xea9/0x1930 [ 30.461807] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.461816] invalid_op+0x18/0x40 [ 30.461821] RIP: 0010:__alloc_pages_nodemask+0x1662/0x2300 [ 30.461823] RSP: 0018:ffff8801d0a5f8c0 EFLAGS: 00010246 [ 30.461827] RAX: 00000000ffff96b5 RBX: 0000000000000000 RCX: ffffffffb681eb50 [ 30.461830] RDX: 1ffffffff6c81200 RSI: 0000000000000001 RDI: 000000000140c0c0 [ 30.461832] RBP: ffff8801d2664680 R08: 0000000000000001 R09: fffffffffc0bbf7f [ 30.461835] R10: ffff8801d2664ed8 R11: 0000000000000000 R12: 000000000140c0c0 [ 30.461837] R13: 0000000000000000 R14: 000000000140c0c0 R15: ffff8801d0a5fad0 [ 30.461861] ? quarantine_put+0xd5/0x180 [ 30.461872] ? trace_hardirqs_on+0x10/0x10 [ 30.461878] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 30.461882] ? lock_acquire+0x10f/0x380 [ 30.461887] ? uinput_ioctl_handler.isra.4+0xa0/0x1850 [ 30.461898] ? __mutex_lock+0x6f4/0x1480 [ 30.461908] ? __ww_mutex_wakeup_for_backoff+0x240/0x240 [ 30.461913] ? lock_downgrade+0x560/0x560 [ 30.461916] ? lock_acquire+0x10f/0x380 [ 30.461923] ? avc_has_extended_perms+0xd8/0xd50 [ 30.461929] ? check_preemption_disabled+0x34/0x160 [ 30.461938] kmalloc_order+0x1f/0x60 [ 30.461944] kmalloc_order_trace+0x18/0x160 [ 30.461951] input_mt_init_slots+0xc7/0x3f0 [ 30.461958] uinput_ioctl_handler.isra.4+0x14fd/0x1850 [ 30.461964] ? uinput_request_submit.part.3+0x280/0x280 [ 30.461968] ? uinput_write+0x88/0xce0 [ 30.461976] ? uinput_ioctl+0x50/0x50 [ 30.461979] ? lock_acquire+0x10f/0x380 [ 30.461983] ? debug_check_no_obj_freed+0x150/0x77c [ 30.461989] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 30.461999] ? uinput_compat_ioctl+0x80/0x80 [ 30.462006] do_vfs_ioctl+0x1a0/0x1030 [ 30.462014] ? ioctl_preallocate+0x1d0/0x1d0 [ 30.462018] ? avc_policy_seqno+0x5/0x10 [ 30.462023] ? selinux_file_permission+0x79/0x440 [ 30.462029] ? selinux_parse_skb.constprop.42+0x1a90/0x1a90 [ 30.462040] ? vfs_write+0x318/0x4d0 [ 30.462049] ? security_file_ioctl+0x7c/0xb0 [ 30.462055] SyS_ioctl+0x7e/0xb0 [ 30.462060] ? do_vfs_ioctl+0x1030/0x1030 [ 30.462065] do_syscall_64+0x19b/0x4b0 [ 30.462073] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 30.462076] RIP: 0033:0x441859 [ 30.462078] RSP: 002b:00007fffa40f8f38 EFLAGS: 00000286 ORIG_RAX: 0000000000000010 [ 30.462082] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441859 [ 30.462085] RDX: 0000000000441859 RSI: 0000000000005501 RDI: 0000000000000003 [ 30.462087] RBP: 0000000000000000 R08: 00007fffa40f90b8 R09: 00007fffa40f90b8 [ 30.462089] R10: 00007fffa40f90b8 R11: 0000000000000286 R12: 0000000000000000 [ 30.462092] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000307a7973 [ 30.486097] Kernel Offset: 0x33000000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 30.831403] Rebooting in 86400 seconds..