[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 29.109734] random: sshd: uninitialized urandom read (32 bytes read) [ 29.423249] kauditd_printk_skb: 7 callbacks suppressed [ 29.423257] audit: type=1400 audit(1566699707.637:35): avc: denied { map } for pid=6584 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 29.456856] random: sshd: uninitialized urandom read (32 bytes read) [ 29.917851] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.10' (ECDSA) to the list of known hosts. [ 35.638470] urandom_read: 1 callbacks suppressed [ 35.638473] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 35.753263] audit: type=1400 audit(1566699713.967:36): avc: denied { map } for pid=6598 comm="syz-executor429" path="/root/syz-executor429636062" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 35.759993] FAULT_INJECTION: forcing a failure. [ 35.759993] name failslab, interval 1, probability 0, space 0, times 1 [ 35.790955] CPU: 0 PID: 6598 Comm: syz-executor429 Not tainted 4.14.139 #35 [ 35.798033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.807355] Call Trace: [ 35.809915] dump_stack+0x138/0x19c [ 35.813517] should_fail.cold+0x10f/0x159 [ 35.817640] should_failslab+0xdb/0x130 [ 35.821588] kmem_cache_alloc+0x2d7/0x780 [ 35.825707] ? check_preemption_disabled+0x3c/0x250 [ 35.830692] ? alloc_inode+0xa9/0x180 [ 35.834467] selinux_inode_alloc_security+0xb6/0x2a0 [ 35.839539] security_inode_alloc+0x94/0xd0 [ 35.843831] inode_init_always+0x552/0xaf0 [ 35.848034] alloc_inode+0x81/0x180 [ 35.851630] iget_locked+0x161/0x440 [ 35.855318] kernfs_get_inode+0x4c/0x550 [ 35.859351] kernfs_mount_ns+0x426/0x790 [ 35.863384] cgroup_do_mount+0x9e/0x270 [ 35.867327] ? init_cgroup_root+0x310/0x310 [ 35.871619] ? trace_hardirqs_on_caller+0x400/0x590 [ 35.876607] cgroup_mount+0x789/0x8b0 [ 35.880381] ? cgroup_attach_task+0x6c0/0x6c0 [ 35.884854] mount_fs+0x97/0x2a1 [ 35.888191] vfs_kern_mount.part.0+0x5e/0x3d0 [ 35.892657] do_mount+0x417/0x27d0 [ 35.896168] ? copy_mount_string+0x40/0x40 [ 35.900383] ? memdup_user+0x58/0xa0 [ 35.904069] ? copy_mount_options+0x1fe/0x2f0 [ 35.908544] SyS_mount+0xab/0x120 [ 35.911970] ? copy_mnt_ns+0x8c0/0x8c0 [ 35.915828] do_syscall_64+0x1e8/0x640 [ 35.919685] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 35.924499] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 35.929656] RIP: 0033:0x4405d9 [ 35.932815] RSP: 002b:00007ffc8c2075c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 35.940511] RAX: ffffffffffffffda RBX: 00007ffc8c2075d0 RCX: 00000000004405d9 [ 35.947750] RDX: 00000000200001c0 RSI: 0000000020000280 RDI: 0000000000000000 [ 35.954992] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007ffc8c003231 [ 35.962243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401ec0 [ 35.969481] R13: 0000000000401f50 R14: 0000000000000000 R15: 0000000000000000 [ 35.977176] kasan: CONFIG_KASAN_INLINE enabled [ 35.982032] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 35.989369] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 35.995569] Modules linked in: [ 35.998731] CPU: 0 PID: 6598 Comm: syz-executor429 Not tainted 4.14.139 #35 [ 36.005797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.015120] task: ffff88808a5044c0 task.stack: ffff8880a94e8000 [ 36.021150] RIP: 0010:__list_del_entry_valid+0x85/0xf5 [ 36.026392] RSP: 0018:ffff8880a94efae8 EFLAGS: 00010246 [ 36.031723] RAX: dffffc0000000000 RBX: ffffffff891b0220 RCX: 0000000000000000 [ 36.038961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88809915e8a0 [ 36.046200] RBP: ffff8880a94efb00 R08: dffffc0000000000 R09: ffffffff88c93088 [ 36.053442] R10: ffff8880a94efb00 R11: ffff88808a5044c0 R12: 0000000000000000 [ 36.060681] R13: 0000000000000000 R14: ffff88809915e898 R15: ffff88809915e8a0 [ 36.067923] FS: 000000000098c880(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 36.076117] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.081970] CR2: 00007ffc8c206f1c CR3: 00000000a7d83000 CR4: 00000000001406f0 [ 36.089211] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.096619] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.103862] Call Trace: [ 36.106420] kernfs_kill_sb+0x62/0x1e0 [ 36.110280] cgroup_kill_sb+0xfb/0x330 [ 36.114138] deactivate_locked_super+0x74/0xe0 [ 36.118689] kernfs_mount_ns+0x629/0x790 [ 36.122720] cgroup_do_mount+0x9e/0x270 [ 36.126678] ? init_cgroup_root+0x310/0x310 [ 36.130970] ? trace_hardirqs_on_caller+0x400/0x590 [ 36.135956] cgroup_mount+0x789/0x8b0 [ 36.139726] ? cgroup_attach_task+0x6c0/0x6c0 [ 36.144190] mount_fs+0x97/0x2a1 [ 36.147527] vfs_kern_mount.part.0+0x5e/0x3d0 [ 36.151996] do_mount+0x417/0x27d0 [ 36.155515] ? copy_mount_string+0x40/0x40 [ 36.159719] ? memdup_user+0x58/0xa0 [ 36.163401] ? copy_mount_options+0x1fe/0x2f0 [ 36.167862] SyS_mount+0xab/0x120 [ 36.171285] ? copy_mnt_ns+0x8c0/0x8c0 [ 36.175146] do_syscall_64+0x1e8/0x640 [ 36.179001] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 36.183813] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 36.188969] RIP: 0033:0x4405d9 [ 36.192127] RSP: 002b:00007ffc8c2075c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 36.199802] RAX: ffffffffffffffda RBX: 00007ffc8c2075d0 RCX: 00000000004405d9 [ 36.207042] RDX: 00000000200001c0 RSI: 0000000020000280 RDI: 0000000000000000 [ 36.214305] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007ffc8c003231 [ 36.221544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401ec0 [ 36.228789] R13: 0000000000401f50 R14: 0000000000000000 R15: 0000000000000000 [ 36.236028] Code: c5 0f 84 e1 00 00 00 48 b8 00 02 00 00 00 00 ad de 49 39 c4 0f 84 e2 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 75 53 49 8b 14 24 4c 39 f2 0f 85 99 00 00 00 49 8d [ 36.255070] RIP: __list_del_entry_valid+0x85/0xf5 RSP: ffff8880a94efae8 [ 36.261898] ---[ end trace fde0e96c903dc637 ]--- [ 36.266632] Kernel panic - not syncing: Fatal exception [ 36.273020] Kernel Offset: disabled [ 36.276640] Rebooting in 86400 seconds..