[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 15.520956] random: sshd: uninitialized urandom read (32 bytes read, 32 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 20.811590] random: sshd: uninitialized urandom read (32 bytes read, 38 bits of entropy available) [ 21.066567] random: sshd: uninitialized urandom read (32 bytes read, 38 bits of entropy available) [ 21.859366] random: sshd: uninitialized urandom read (32 bytes read, 86 bits of entropy available) [ 36.517923] random: sshd: uninitialized urandom read (32 bytes read, 99 bits of entropy available) Warning: Permanently added '10.128.0.32' (ECDSA) to the list of known hosts. [ 41.922535] random: sshd: uninitialized urandom read (32 bytes read, 103 bits of entropy available) net.ipv6.conf.syz2.accept_dad = 0 net.ipv6.conf.syz2.router_solicitations = 0 net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz1.accept_dad = 0 net.ipv6.conf.syz4.accept_dad = 0 net.ipv6.conf.syz7.accept_dad = 0 net.ipv6.conf.syz3.accept_dad = 0 net.ipv6.conf.syz5.accept_dad = 0 net.ipv6.conf.syz6.accept_dad = 0 net.ipv6.conf.syz4.router_solicitations = 0 net.ipv6.conf.syz0.router_solicitations = 0 net.ipv6.conf.syz3.router_solicitations = 0 net.ipv6.conf.syz7.router_solicitations = 0 net.ipv6.conf.syz6.router_solicitations = 0 net.ipv6.conf.syz1.router_solicitations = 0 net.ipv6.conf.syz5.router_solicitations = 0 [ 44.782582] random: nonblocking pool is initialized [ 44.785937] kasan: CONFIG_KASAN_INLINE enabled [ 44.785946] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 44.785951] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 44.785954] Dumping ftrace buffer: [ 44.785958] (ftrace buffer empty) [ 44.785961] Modules linked in: [ 44.785967] CPU: 1 PID: 3328 Comm: syzkaller795646 Not tainted 4.4.111-gf851888 #23 [ 44.785971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.785975] task: ffff8801d10917c0 task.stack: ffff8801cc268000 [ 44.785989] RIP: 0010:[] [] __free_pages+0x21/0x90 [ 44.785992] RSP: 0018:ffff8801cc26f9f0 EFLAGS: 00010a07 [ 44.785996] RAX: dffffc0000000000 RBX: dead4ead00000000 RCX: ffffffff825b9e9b [ 44.786000] RDX: 1bd5a9d5a0000003 RSI: 0000000000000001 RDI: dead4ead0000001c [ 44.786003] RBP: ffff8801cc26fa00 R08: 0000000000000001 R09: 0000000000000001 [ 44.786006] R10: 0000000000000000 R11: 1ffff1003984df1c R12: 0000000000000004 [ 44.786010] R13: 0000000000000020 R14: ffff8801c97e8000 R15: dffffc0000000000 [ 44.786015] FS: 0000000002678940(0063) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 44.786018] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.786022] CR2: 0000000020dc8000 CR3: 00000001d19ca000 CR4: 0000000000160670 [ 44.786027] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.786030] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.786031] Stack: [ 44.786039] ffffffff83776469 ffff8801c97e8158 ffff8801cc26fa60 ffffffff825b9ec1 [ 44.786046] ffff8801c97e8170 ffffed00392fd02b ffffed00392fd02e ffff8801c97e8168 [ 44.786053] dead4ead00000000 ffff8801c97e8140 0000000000000000 0000000000000000 [ 44.786054] Call Trace: [ 44.786063] [] ? retint_kernel+0x2d/0x2d [ 44.786073] [] sg_remove_scat.isra.17+0x1c1/0x2d0 [ 44.786079] [] sg_finish_rem_req+0x2b5/0x340 [ 44.786086] [] sg_new_read.isra.18+0x336/0x3c0 [ 44.786092] [] sg_read+0x8c2/0x1490 [ 44.786100] [] ? __check_object_size+0x154/0x35b [ 44.786107] [] ? sg_proc_seq_show_debug+0xd30/0xd30 [ 44.786113] [] ? fsnotify+0xee0/0xee0 [ 44.786122] [] ? avc_policy_seqno+0x9/0x20 [ 44.786129] [] do_loop_readv_writev+0x141/0x1e0 [ 44.786136] [] ? security_file_permission+0x89/0x1e0 [ 44.786142] [] ? sg_proc_seq_show_debug+0xd30/0xd30 [ 44.786149] [] ? sg_proc_seq_show_debug+0xd30/0xd30 [ 44.786155] [] do_readv_writev+0x5dd/0x6e0 [ 44.786161] [] ? vfs_write+0x530/0x530 [ 44.786166] [] ? _raw_spin_unlock+0x2c/0x50 [ 44.786173] [] ? do_huge_pmd_anonymous_page+0x3dd/0xa10 [ 44.786180] [] ? handle_mm_fault+0x3f2/0x3190 [ 44.786187] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 44.786192] [] ? __fsnotify_parent+0xbc/0x340 [ 44.786199] [] ? avc_policy_seqno+0x9/0x20 [ 44.786203] [] ? fsnotify+0x5ad/0xee0 [ 44.786210] [] vfs_readv+0x78/0xb0 [ 44.786215] [] SyS_readv+0xd9/0x240 [ 44.786221] [] ? rw_copy_check_uvector+0x2d0/0x2d0 [ 44.786228] [] ? trace_hardirqs_on_thunk+0x17/0x19 [ 44.786234] [] entry_SYSCALL_64_fastpath+0x16/0x92 [ 44.786319] Code: 96 a4 0c 00 e9 78 fd ff ff 90 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 53 48 89 fb 48 83 c7 1c 48 89 fa 48 83 ec 08 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 49 [ 44.786325] RIP [] __free_pages+0x21/0x90 [ 44.786327] RSP [ 44.786333] ---[ end trace f0a276ae3b236a50 ]--- [ 44.786336] Kernel panic - not syncing: Fatal exception [ 45.155705] Dumping ftrace buffer: [ 45.159228] (ftrace buffer empty) [ 45.162913] Kernel Offset: disabled [ 45.166518] Rebooting in 86400 seconds..