[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.028169] random: sshd: uninitialized urandom read (32 bytes read) [ 34.459382] kauditd_printk_skb: 9 callbacks suppressed [ 34.459391] audit: type=1400 audit(1575836808.965:35): avc: denied { map } for pid=6882 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 34.515451] random: sshd: uninitialized urandom read (32 bytes read) [ 35.079132] random: sshd: uninitialized urandom read (32 bytes read) [ 35.275155] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.125' (ECDSA) to the list of known hosts. [ 40.827249] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 40.942070] audit: type=1400 audit(1575836815.455:36): avc: denied { map } for pid=6895 comm="syz-executor973" path="/root/syz-executor973245589" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 40.946458] ================================================================== [ 40.976794] BUG: KASAN: null-ptr-deref in llcp_sock_getname+0x38f/0x4a0 [ 40.983539] Read of size 43 at addr (null) by task syz-executor973/6895 [ 40.991196] [ 40.992860] CPU: 1 PID: 6895 Comm: syz-executor973 Not tainted 4.14.158-syzkaller #0 [ 41.000716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.010168] Call Trace: [ 41.012768] dump_stack+0x142/0x197 [ 41.016422] ? llcp_sock_getname+0x38f/0x4a0 [ 41.020815] kasan_report.cold+0x127/0x2af [ 41.025034] check_memory_region+0x123/0x190 [ 41.029440] memcpy+0x24/0x50 [ 41.032541] llcp_sock_getname+0x38f/0x4a0 [ 41.037637] ? security_socket_getpeername+0x79/0xa0 [ 41.042745] SYSC_getpeername+0x120/0x270 [ 41.046878] ? SYSC_getsockname+0x1f0/0x1f0 [ 41.051193] ? SyS_socket+0x103/0x170 [ 41.054980] ? SyS_bind+0x30/0x30 [ 41.058428] SyS_getpeername+0x24/0x30 [ 41.062330] ? SyS_getsockname+0x30/0x30 [ 41.066387] do_syscall_64+0x1e8/0x640 [ 41.070332] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 41.075166] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 41.080345] RIP: 0033:0x440349 [ 41.083603] RSP: 002b:00007ffdb6b13ad8 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 41.091292] RAX: ffffffffffffffda RBX: fe7f62c7329d9aaa RCX: 0000000000440349 [ 41.098556] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 41.105869] RBP: 65e500001d7ef6cc R08: 00007ffdb6b13c48 R09: 00007ffdb6b13c48 [ 41.113126] R10: 00007ffdb6b13c48 R11: 0000000000000246 R12: 211e267fffffffff [ 41.120393] R13: ffff000000004d02 R14: aac8030fa4d62b9c R15: d303a55487e71188 [ 41.127653] ================================================================== [ 41.135944] Disabling lock debugging due to kernel taint [ 41.141904] Kernel panic - not syncing: panic_on_warn set ... [ 41.141904] [ 41.149268] CPU: 0 PID: 6895 Comm: syz-executor973 Tainted: G B 4.14.158-syzkaller #0 [ 41.158349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.167721] Call Trace: [ 41.170290] dump_stack+0x142/0x197 [ 41.173938] ? llcp_sock_getname+0x38f/0x4a0 [ 41.178421] panic+0x1f9/0x42d [ 41.181603] ? add_taint.cold+0x16/0x16 [ 41.185570] ? ___preempt_schedule+0x16/0x18 [ 41.189963] kasan_end_report+0x47/0x4f [ 41.193934] kasan_report.cold+0x130/0x2af [ 41.198150] check_memory_region+0x123/0x190 [ 41.202538] memcpy+0x24/0x50 [ 41.205626] llcp_sock_getname+0x38f/0x4a0 [ 41.209863] ? security_socket_getpeername+0x79/0xa0 [ 41.214948] SYSC_getpeername+0x120/0x270 [ 41.219072] ? SYSC_getsockname+0x1f0/0x1f0 [ 41.223374] ? SyS_socket+0x103/0x170 [ 41.227148] ? SyS_bind+0x30/0x30 [ 41.230577] SyS_getpeername+0x24/0x30 [ 41.234439] ? SyS_getsockname+0x30/0x30 [ 41.238474] do_syscall_64+0x1e8/0x640 [ 41.242337] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 41.247155] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 41.252320] RIP: 0033:0x440349 [ 41.255485] RSP: 002b:00007ffdb6b13ad8 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 41.263190] RAX: ffffffffffffffda RBX: fe7f62c7329d9aaa RCX: 0000000000440349 [ 41.270435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 41.277677] RBP: 65e500001d7ef6cc R08: 00007ffdb6b13c48 R09: 00007ffdb6b13c48 [ 41.284938] R10: 00007ffdb6b13c48 R11: 0000000000000246 R12: 211e267fffffffff [ 41.292270] R13: ffff000000004d02 R14: aac8030fa4d62b9c R15: d303a55487e71188 [ 41.300908] Kernel Offset: disabled [ 41.304531] Rebooting in 86400 seconds..