[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.888945] random: sshd: uninitialized urandom read (32 bytes read) [ 34.195882] kauditd_printk_skb: 9 callbacks suppressed [ 34.195891] audit: type=1400 audit(1567725511.589:35): avc: denied { map } for pid=6848 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 34.253082] random: sshd: uninitialized urandom read (32 bytes read) [ 34.816292] random: sshd: uninitialized urandom read (32 bytes read) [ 35.010330] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.1.34' (ECDSA) to the list of known hosts. [ 40.569671] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 40.680850] audit: type=1400 audit(1567725518.079:36): avc: denied { map } for pid=6862 comm="syz-executor041" path="/root/syz-executor041712434" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 40.683864] BUG: unable to handle kernel paging request at fffffffbb11e5804 [ 40.714447] IP: dummy_set_vf_rate+0x99/0x110 [ 40.718875] PGD 766d067 P4D 766d067 PUD 0 [ 40.723092] Oops: 0002 [#1] PREEMPT SMP KASAN [ 40.727561] Modules linked in: [ 40.730749] CPU: 1 PID: 6862 Comm: syz-executor041 Not tainted 4.14.141 #37 [ 40.737847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.747180] task: ffff88807ff36380 task.stack: ffff8880970e0000 [ 40.753235] RIP: 0010:dummy_set_vf_rate+0x99/0x110 [ 40.758152] RSP: 0018:ffff8880970e72a0 EFLAGS: 00010246 [ 40.763506] RAX: dffffc0000000000 RBX: fffffffbb11e57f8 RCX: 0000000000000000 [ 40.770766] RDX: 0000000000000000 RSI: 00000000d20bee55 RDI: fffffffbb11e5804 [ 40.778013] RBP: ffff8880970e72c8 R08: 1ffff11012e1ce99 R09: ffff8880970e74c8 [ 40.785258] R10: ffffed1012e1cea5 R11: ffff8880970e752f R12: ffff8880a1a5cb40 [ 40.792506] R13: 0000000000000000 R14: 000000007005f108 R15: fffffffbb11e57f8 [ 40.799757] FS: 00000000008df880(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 40.807962] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.813821] CR2: fffffffbb11e5804 CR3: 0000000083b36000 CR4: 00000000001406e0 [ 40.821093] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.828350] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.835610] Call Trace: [ 40.838181] do_setlink+0x1755/0x2d50 [ 40.841961] ? dummy_set_vf_vlan+0x180/0x180 [ 40.846359] ? rtnl_register+0x50/0x50 [ 40.850223] ? __lock_acquire+0x5f7/0x4620 [ 40.854435] ? trace_hardirqs_on+0x10/0x10 [ 40.858643] ? trace_hardirqs_on+0x10/0x10 [ 40.862872] ? save_trace+0x290/0x290 [ 40.866658] ? __lock_acquire+0x5f7/0x4620 [ 40.870882] ? find_held_lock+0x35/0x130 [ 40.874986] ? avc_has_perm_noaudit+0x28b/0x420 [ 40.879638] ? nla_parse+0x186/0x240 [ 40.883329] rtnl_setlink+0x225/0x320 [ 40.887106] ? do_setlink+0x2d50/0x2d50 [ 40.891081] ? lock_acquire+0x16f/0x430 [ 40.895032] ? rtnetlink_rcv_msg+0x33a/0xb70 [ 40.899424] ? do_setlink+0x2d50/0x2d50 [ 40.903392] rtnetlink_rcv_msg+0x3eb/0xb70 [ 40.907605] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 40.912166] ? netlink_deliver_tap+0x93/0x8f0 [ 40.916651] netlink_rcv_skb+0x14f/0x3c0 [ 40.920688] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 40.925279] ? lock_downgrade+0x6e0/0x6e0 [ 40.929402] ? netlink_ack+0x9a0/0x9a0 [ 40.933265] ? netlink_deliver_tap+0xba/0x8f0 [ 40.937736] rtnetlink_rcv+0x1d/0x30 [ 40.941429] netlink_unicast+0x45d/0x640 [ 40.945466] ? netlink_attachskb+0x6a0/0x6a0 [ 40.949851] ? security_netlink_send+0x81/0xb0 [ 40.954420] netlink_sendmsg+0x7c4/0xc60 [ 40.958546] ? netlink_unicast+0x640/0x640 [ 40.962763] ? security_socket_sendmsg+0x89/0xb0 [ 40.967495] ? netlink_unicast+0x640/0x640 [ 40.971724] sock_sendmsg+0xce/0x110 [ 40.975413] ___sys_sendmsg+0x70a/0x840 [ 40.979375] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 40.984110] ? dev_load+0x1b0/0x1b0 [ 40.987726] ? do_huge_pmd_anonymous_page+0x2fc/0x1470 [ 40.992983] ? sock_do_ioctl+0x93/0xb0 [ 40.996845] ? sock_do_ioctl+0x72/0xb0 [ 41.000728] ? sock_ioctl+0x178/0x470 [ 41.004525] ? __fget_light+0x172/0x1f0 [ 41.008474] ? __fdget+0x1b/0x20 [ 41.011815] ? sockfd_lookup_light+0xb4/0x160 [ 41.016300] __sys_sendmsg+0xb9/0x140 [ 41.020085] ? SyS_shutdown+0x170/0x170 [ 41.024048] ? security_file_ioctl+0x89/0xb0 [ 41.028436] SyS_sendmsg+0x2d/0x50 [ 41.031961] ? __sys_sendmsg+0x140/0x140 [ 41.036007] do_syscall_64+0x1e8/0x640 [ 41.040002] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 41.044835] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 41.050006] RIP: 0033:0x440239 [ 41.053179] RSP: 002b:00007ffd962d2be8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.060881] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440239 [ 41.068132] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 41.075380] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 41.082626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401ac0 [ 41.089873] R13: 0000000000401b50 R14: 0000000000000000 R15: 0000000000000000 [ 41.097125] Code: df 49 8d 7f 0c 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 04 84 d2 75 52 48 b8 00 00 00 00 00 fc ff df <66> 45 89 77 0c 49 03 9c 24 c0 0a 00 00 48 8d 7b 0e 48 89 fa 48 [ 41.116201] RIP: dummy_set_vf_rate+0x99/0x110 RSP: ffff8880970e72a0 [ 41.122579] CR2: fffffffbb11e5804 [ 41.126013] ---[ end trace 931eb1e77397f135 ]--- [ 41.130756] Kernel panic - not syncing: Fatal exception [ 41.137759] Kernel Offset: disabled [ 41.141404] Rebooting in 86400 seconds..