[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 31.592147] random: sshd: uninitialized urandom read (32 bytes read) [ 31.785420] kauditd_printk_skb: 10 callbacks suppressed [ 31.785429] audit: type=1400 audit(1571288528.110:35): avc: denied { map } for pid=6970 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 31.841943] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.397471] random: sshd: uninitialized urandom read (32 bytes read) [ 32.576138] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.217' (ECDSA) to the list of known hosts. [ 38.084993] random: sshd: uninitialized urandom read (32 bytes read) [ 38.198939] audit: type=1400 audit(1571288534.520:36): avc: denied { map } for pid=6984 comm="syz-executor401" path="/root/syz-executor401745791" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 38.210206] ================================================================== [ 38.229104] BUG: unable to handle kernel NULL pointer dereference [ 38.232618] BUG: KASAN: null-ptr-deref in llcp_sock_getname+0x38f/0x4a0 [ 38.232626] Read of size 1 at addr (null) by task syz-executor401/6992 [ 38.238860] at (null) [ 38.245598] [ 38.253117] IP: memcpy_erms+0x6/0x10 [ 38.256457] CPU: 0 PID: 6992 Comm: syz-executor401 Not tainted 4.14.149 #0 [ 38.258059] PGD a9900067 [ 38.261761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.268746] P4D a9900067 [ 38.271491] Call Trace: [ 38.280820] PUD 7d6fd067 [ 38.283573] dump_stack+0x138/0x197 [ 38.286126] PMD 0 [ 38.288864] ? llcp_sock_getname+0x38f/0x4a0 [ 38.294607] kasan_report.cold+0x127/0x2af [ 38.298987] Oops: 0000 [#1] PREEMPT SMP KASAN [ 38.303199] check_memory_region+0x123/0x190 [ 38.307693] Modules linked in: [ 38.312074] memcpy+0x24/0x50 [ 38.312082] CPU: 1 PID: 6995 Comm: syz-executor401 Not tainted 4.14.149 #0 [ 38.315310] llcp_sock_getname+0x38f/0x4a0 [ 38.318387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.325811] ? security_socket_getpeername+0x79/0xa0 [ 38.330028] task: ffff8880a9294440 task.stack: ffff888098d08000 [ 38.339377] SYSC_getpeername+0x120/0x270 [ 38.344454] RIP: 0010:memcpy_erms+0x6/0x10 [ 38.350507] ? SYSC_getsockname+0x1f0/0x1f0 [ 38.354626] RSP: 0018:ffff888098d0fd20 EFLAGS: 00010246 [ 38.358955] ? __do_page_fault+0x358/0xb80 [ 38.368585] SyS_getpeername+0x24/0x30 [ 38.372790] RAX: ffff888098d0fe0a RBX: ffff888098d0fdf8 RCX: 0000000000000001 [ 38.376651] ? SyS_getsockname+0x30/0x30 [ 38.383892] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888098d0fe0a [ 38.383898] RBP: ffff888098d0fd40 R08: 1ffff110131a1fc1 R09: ffffed10131a1fc2 [ 38.387950] do_syscall_64+0x1e8/0x640 [ 38.396320] R10: ffffed10131a1fc1 R11: ffff888098d0fe0a R12: 0000000000000001 [ 38.404104] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.407963] R13: ffff888098d0fe0a R14: 0000000000000000 R15: ffffffff87069c40 [ 38.415498] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 38.420330] FS: 0000000001403880(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 38.427575] RIP: 0033:0x441299 [ 38.432752] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.440953] RSP: 002b:00007ffd6613ba88 EFLAGS: 00000246 [ 38.444120] CR2: 0000000000000000 CR3: 000000009dc63000 CR4: 00000000001406e0 [ 38.449975] ORIG_RAX: 0000000000000034 [ 38.455400] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.462665] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441299 [ 38.466618] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.473865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 38.481109] Call Trace: [ 38.488358] RBP: 00000000006cb018 R08: 00000000004002c8 R09: 00000000004002c8 [ 38.495608] ? memcpy+0x46/0x50 [ 38.498166] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000402010 [ 38.505423] llcp_sock_getname+0x38f/0x4a0 [ 38.508671] R13: 00000000004020a0 R14: 0000000000000000 R15: 0000000000000000 [ 38.508679] ================================================================== [ 38.515927] ? security_socket_getpeername+0x79/0xa0 [ 38.540246] SYSC_getpeername+0x120/0x270 [ 38.544373] ? SYSC_getsockname+0x1f0/0x1f0 [ 38.548679] ? __do_page_fault+0x358/0xb80 [ 38.552897] SyS_getpeername+0x24/0x30 [ 38.556763] ? SyS_getsockname+0x30/0x30 [ 38.560803] do_syscall_64+0x1e8/0x640 [ 38.564671] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.569495] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 38.574678] RIP: 0033:0x441299 [ 38.577847] RSP: 002b:00007ffd6613ba88 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 38.585546] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441299 [ 38.592807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 38.600055] RBP: 00000000006cb018 R08: 00000000004002c8 R09: 00000000004002c8 [ 38.607303] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000402010 [ 38.614551] R13: 00000000004020a0 R14: 0000000000000000 R15: 0000000000000000 [ 38.621802] Code: 90 90 90 90 90 eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 [ 38.641422] RIP: memcpy_erms+0x6/0x10 RSP: ffff888098d0fd20 [ 38.647106] CR2: 0000000000000000 [ 38.650554] BUG: unable to handle kernel NULL pointer dereference at (null) [ 38.658538] IP: memcpy_erms+0x6/0x10 [ 38.662231] PGD 9762e067 P4D 9762e067 PUD a5f17067 PMD 0 [ 38.667844] Oops: 0000 [#2] PREEMPT SMP KASAN [ 38.672316] Modules linked in: [ 38.675493] CPU: 0 PID: 6993 Comm: syz-executor401 Tainted: G B D 4.14.149 #0 [ 38.683786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.693117] task: ffff88807c78c5c0 task.stack: ffff888099378000 [ 38.699163] RIP: 0010:memcpy_erms+0x6/0x10 [ 38.703372] RSP: 0018:ffff88809937fd20 EFLAGS: 00010246 [ 38.708715] RAX: ffff88809937fe0a RBX: ffff88809937fdf8 RCX: 0000000000000001 [ 38.715965] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88809937fe0a [ 38.723213] RBP: ffff88809937fd40 R08: 1ffff1101326ffc1 R09: ffffed101326ffc2 [ 38.730462] R10: ffffed101326ffc1 R11: ffff88809937fe0a R12: 0000000000000001 [ 38.737730] R13: ffff88809937fe0a R14: 0000000000000000 R15: ffffffff87069c40 [ 38.744981] FS: 0000000001403880(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 38.753201] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.759060] CR2: 0000000000000000 CR3: 0000000099702000 CR4: 00000000001406f0 [ 38.766310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.773648] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.780897] Call Trace: [ 38.783465] ? memcpy+0x46/0x50 [ 38.786725] llcp_sock_getname+0x38f/0x4a0 [ 38.790940] ? security_socket_getpeername+0x79/0xa0 [ 38.796021] SYSC_getpeername+0x120/0x270 [ 38.800152] ? SYSC_getsockname+0x1f0/0x1f0 [ 38.804458] ? __do_page_fault+0x358/0xb80 [ 38.808672] SyS_getpeername+0x24/0x30 [ 38.812556] ? SyS_getsockname+0x30/0x30 [ 38.816595] do_syscall_64+0x1e8/0x640 [ 38.820460] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.825310] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 38.830482] RIP: 0033:0x441299 [ 38.833649] RSP: 002b:00007ffd6613ba88 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 38.841345] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441299 [ 38.848596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 38.856018] RBP: 00000000006cb018 R08: 00000000004002c8 R09: 00000000004002c8 [ 38.863265] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000402010 [ 38.870514] R13: 00000000004020a0 R14: 0000000000000000 R15: 0000000000000000 [ 38.877764] Code: 90 90 90 90 90 eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 [ 38.896877] RIP: memcpy_erms+0x6/0x10 RSP: ffff88809937fd20 [ 38.902563] CR2: 0000000000000000 [ 38.906002] BUG: unable to handle kernel NULL pointer dereference at (null) [ 38.910984] Kernel panic - not syncing: panic_on_warn set ... [ 38.910984] [ 38.913985] IP: memcpy_erms+0x6/0x10 [ 38.925019] PGD 99f87067 P4D 99f87067 PUD 9c1f1067 PMD 0 [ 38.930549] Oops: 0000 [#3] PREEMPT SMP KASAN [ 38.935024] Modules linked in: [ 38.938199] CPU: 1 PID: 6996 Comm: syz-executor401 Tainted: G B D 4.14.149 #0 [ 38.946405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.955742] task: ffff8880a0318680 task.stack: ffff888098c60000 [ 38.961782] RIP: 0010:memcpy_erms+0x6/0x10 [ 38.965995] RSP: 0018:ffff888098c67d20 EFLAGS: 00010246 [ 38.971339] RAX: ffff888098c67e0a RBX: ffff888098c67df8 RCX: 0000000000000001 [ 38.978607] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888098c67e0a [ 38.985873] RBP: ffff888098c67d40 R08: 1ffff1101318cfc1 R09: ffffed101318cfc2 [ 38.993150] R10: ffffed101318cfc1 R11: ffff888098c67e0a R12: 0000000000000001 [ 39.000418] R13: ffff888098c67e0a R14: 0000000000000000 R15: ffffffff87069c40 [ 39.007681] FS: 0000000001403880(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 39.015984] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.021850] CR2: 0000000000000000 CR3: 0000000092007000 CR4: 00000000001406e0 [ 39.029120] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.036381] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.043635] Call Trace: [ 39.046207] ? memcpy+0x46/0x50 [ 39.049473] llcp_sock_getname+0x38f/0x4a0 [ 39.053691] ? security_socket_getpeername+0x79/0xa0 [ 39.058953] SYSC_getpeername+0x120/0x270 [ 39.063090] ? SYSC_getsockname+0x1f0/0x1f0 [ 39.067401] ? __do_page_fault+0x358/0xb80 [ 39.071635] SyS_getpeername+0x24/0x30 [ 39.075514] ? SyS_getsockname+0x30/0x30 [ 39.079569] do_syscall_64+0x1e8/0x640 [ 39.083438] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 39.088264] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 39.093445] RIP: 0033:0x441299 [ 39.096616] RSP: 002b:00007ffd6613ba88 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 39.104307] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441299 [ 39.111558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 39.118809] RBP: 00000000006cb018 R08: 00000000004002c8 R09: 00000000004002c8 [ 39.126060] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000402010 [ 39.133338] R13: 00000000004020a0 R14: 0000000000000000 R15: 0000000000000000 [ 39.140594] Code: 90 90 90 90 90 eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 [ 39.159736] RIP: memcpy_erms+0x6/0x10 RSP: ffff888098c67d20 [ 39.165429] CR2: 0000000000000000 [ 39.170171] Kernel Offset: disabled [ 39.173794] Rebooting in 86400 seconds..