[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 31.783142] random: sshd: uninitialized urandom read (32 bytes read) [ 32.065881] kauditd_printk_skb: 10 callbacks suppressed [ 32.065890] audit: type=1400 audit(1565476452.450:35): avc: denied { map } for pid=6909 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 32.121669] random: sshd: uninitialized urandom read (32 bytes read) [ 32.709041] random: sshd: uninitialized urandom read (32 bytes read) [ 32.911195] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.238' (ECDSA) to the list of known hosts. [ 38.446445] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 38.562321] audit: type=1400 audit(1565476458.950:36): avc: denied { map } for pid=6922 comm="syz-executor929" path="/root/syz-executor929461843" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 38.565111] device dummy0 entered promiscuous mode [ 38.594487] BUG: unable to handle kernel paging request at fffffff850000006 [ 38.601589] IP: dummy_set_vf_vlan+0xb8/0x180 [ 38.605983] PGD 766d067 P4D 766d067 PUD 0 [ 38.610202] Oops: 0002 [#1] PREEMPT SMP KASAN [ 38.614670] Modules linked in: [ 38.617848] CPU: 1 PID: 6922 Comm: syz-executor929 Not tainted 4.14.138 #34 [ 38.624940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.634696] task: ffff8880a0a26700 task.stack: ffff888085e50000 [ 38.640745] RIP: 0010:dummy_set_vf_vlan+0xb8/0x180 [ 38.645661] RSP: 0018:ffff888085e57298 EFLAGS: 00010246 [ 38.651085] RAX: 0000000000000007 RBX: fffffff850000000 RCX: 0000000000000000 [ 38.658681] RDX: fffffff850000000 RSI: 00000000ae000000 RDI: fffffff850000006 [ 38.665952] RBP: ffff888085e572c8 R08: 0000000000000081 R09: ffff888085e574c8 [ 38.673203] R10: ffffed1010bcaea5 R11: ffff888085e5752f R12: 0000000000000000 [ 38.680801] R13: ffff8880a19d8a00 R14: 00000000000002fd R15: 0000000000000081 [ 38.688067] FS: 0000000000e7d880(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 38.696376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.702255] CR2: fffffff850000006 CR3: 000000008bca6000 CR4: 00000000001406e0 [ 38.709516] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.716767] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.724027] Call Trace: [ 38.726600] do_setlink+0x11ba/0x2d50 [ 38.730389] ? release_dummy_parent+0x10/0x10 [ 38.734869] ? rtnl_register+0x50/0x50 [ 38.738735] ? __lock_acquire+0x5f7/0x4620 [ 38.742947] ? trace_hardirqs_on+0x10/0x10 [ 38.747161] ? trace_hardirqs_on+0x10/0x10 [ 38.751373] ? save_trace+0x290/0x290 [ 38.755457] ? __lock_acquire+0x5f7/0x4620 [ 38.759689] ? find_held_lock+0x35/0x130 [ 38.763736] ? avc_has_perm_noaudit+0x28b/0x420 [ 38.768719] ? nla_parse+0x186/0x240 [ 38.772424] rtnl_setlink+0x225/0x320 [ 38.776208] ? do_setlink+0x2d50/0x2d50 [ 38.780185] ? lock_acquire+0x16f/0x430 [ 38.784151] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 38.788888] ? do_setlink+0x2d50/0x2d50 [ 38.792845] rtnetlink_rcv_msg+0x3eb/0xb70 [ 38.797062] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 38.801643] ? netlink_deliver_tap+0x93/0x8f0 [ 38.806161] netlink_rcv_skb+0x14f/0x3c0 [ 38.810218] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 38.814790] ? lock_downgrade+0x6e0/0x6e0 [ 38.819440] ? netlink_ack+0x9a0/0x9a0 [ 38.823577] ? netlink_deliver_tap+0xba/0x8f0 [ 38.828081] rtnetlink_rcv+0x1d/0x30 [ 38.831809] netlink_unicast+0x45d/0x640 [ 38.835868] ? netlink_attachskb+0x6a0/0x6a0 [ 38.840282] ? security_netlink_send+0x81/0xb0 [ 38.845064] netlink_sendmsg+0x7c4/0xc60 [ 38.849444] ? netlink_unicast+0x640/0x640 [ 38.854192] ? security_socket_sendmsg+0x89/0xb0 [ 38.858936] ? netlink_unicast+0x640/0x640 [ 38.863354] sock_sendmsg+0xce/0x110 [ 38.867167] ___sys_sendmsg+0x70a/0x840 [ 38.871252] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 38.876000] ? dev_load+0x1b0/0x1b0 [ 38.879629] ? do_huge_pmd_anonymous_page+0x2fc/0x1470 [ 38.884896] ? sock_do_ioctl+0x93/0xb0 [ 38.888759] ? sock_do_ioctl+0x72/0xb0 [ 38.892625] ? sock_ioctl+0x178/0x470 [ 38.896400] ? __fget_light+0x172/0x1f0 [ 38.900445] ? __fdget+0x1b/0x20 [ 38.903787] ? sockfd_lookup_light+0xb4/0x160 [ 38.908260] __sys_sendmsg+0xb9/0x140 [ 38.912040] ? SyS_shutdown+0x170/0x170 [ 38.915998] ? security_file_ioctl+0x89/0xb0 [ 38.920473] SyS_sendmsg+0x2d/0x50 [ 38.924017] ? __sys_sendmsg+0x140/0x140 [ 38.928279] do_syscall_64+0x1e8/0x640 [ 38.932566] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.937399] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 38.942667] RIP: 0033:0x440239 [ 38.945869] RSP: 002b:00007ffcacb452b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.953861] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440239 [ 38.961412] RDX: 0000000000000000 RSI: 000000002000a000 RDI: 0000000000000003 [ 38.969584] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 38.976851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401ac0 [ 38.984234] R13: 0000000000401b50 R14: 0000000000000000 R15: 0000000000000000 [ 38.991508] Code: 48 c1 e3 03 48 01 da 48 8d 7a 06 48 89 f9 48 c1 e9 03 0f b6 0c 01 48 89 f8 83 e0 07 83 c0 01 38 c8 7c 08 84 c9 0f 85 92 00 00 00 <66> 44 89 72 06 4d 8b b5 c0 0a 00 00 45 0f b6 e4 48 b8 00 00 00 [ 39.010613] RIP: dummy_set_vf_vlan+0xb8/0x180 RSP: ffff888085e57298 [ 39.017000] CR2: fffffff850000006 [ 39.020459] ---[ end trace d18da892bd3253f9 ]--- [ 39.025275] Kernel panic - not syncing: Fatal exception [ 39.031614] Kernel Offset: disabled [ 39.035255] Rebooting in 86400 seconds..