[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.923109] random: sshd: uninitialized urandom read (32 bytes read) [ 33.149502] kauditd_printk_skb: 9 callbacks suppressed [ 33.149510] audit: type=1400 audit(1565451297.271:35): avc: denied { map } for pid=6852 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 33.190750] random: sshd: uninitialized urandom read (32 bytes read) [ 33.706716] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.217' (ECDSA) to the list of known hosts. [ 39.415740] urandom_read: 1 callbacks suppressed [ 39.415745] random: sshd: uninitialized urandom read (32 bytes read) [ 39.541110] audit: type=1400 audit(1565451303.671:36): avc: denied { map } for pid=6865 comm="syz-executor654" path="/root/syz-executor654759355" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 39.544764] ------------[ cut here ]------------ executing program [ 39.569017] audit: type=1400 audit(1565451303.671:37): avc: denied { map } for pid=6865 comm="syz-executor654" path="/root/file0/mem" dev="devtmpfs" ino=13687 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file permissive=1 [ 39.572233] WARNING: CPU: 1 PID: 6865 at arch/x86/kernel/cpu/mtrr/generic.c:216 mtrr_type_lookup_variable+0x4ca/0x670 [ 39.572238] Kernel panic - not syncing: panic_on_warn set ... [ 39.572238] [ 39.572245] CPU: 1 PID: 6865 Comm: syz-executor654 Not tainted 4.14.138 #34 [ 39.572249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.572253] Call Trace: [ 39.572263] dump_stack+0x138/0x19c [ 39.572273] panic+0x1f2/0x426 [ 39.572279] ? add_taint.cold+0x16/0x16 [ 39.572288] ? mtrr_type_lookup_variable+0x4ca/0x670 [ 39.572300] ? mtrr_type_lookup_variable+0x4ca/0x670 [ 39.572305] __warn.cold+0x2f/0x36 [ 39.572312] ? ist_end_non_atomic+0x10/0x10 [ 39.572318] ? mtrr_type_lookup_variable+0x4ca/0x670 [ 39.572324] report_bug+0x216/0x254 [ 39.572333] do_error_trap+0x1bb/0x310 [ 39.572340] ? math_error+0x360/0x360 [ 39.572347] ? __lock_acquire+0x5f7/0x4620 [ 39.572354] ? __lock_acquire+0x5f7/0x4620 [ 39.572361] ? depot_save_stack+0x1f1/0x410 [ 39.572374] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 39.572384] do_invalid_op+0x1b/0x20 [ 39.572392] invalid_op+0x1b/0x40 [ 39.572398] RIP: 0010:mtrr_type_lookup_variable+0x4ca/0x670 [ 39.572402] RSP: 0018:ffff8880a5c177b0 EFLAGS: 00010297 [ 39.572412] RAX: ffff8880a801e540 RBX: 00000000c0000000 RCX: ffffffff885be4a0 [ 39.598465] audit: type=1400 audit(1565451303.701:38): avc: denied { associate } for pid=6795 comm="restorecond" name="/" dev="devtmpfs" ino=3 scontext=unconfined_u:object_r:user_home_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 [ 39.609000] RDX: 0000000000000000 RSI: 02000000c0001000 RDI: ffffffff885be4ac [ 39.609005] RBP: ffff8880a5c17880 R08: ffff8880a5c178f8 R09: 0000000000000001 [ 39.609009] R10: 0000000000000000 R11: ffff8880a801e540 R12: 00003fffc0000000 [ 39.609013] R13: 0000000000000000 R14: 0000000040000000 R15: dffffc0000000000 [ 39.609043] ? check_type_overlap+0x150/0x150 [ 39.780155] ? _raw_read_unlock+0x2d/0x50 [ 39.784288] mtrr_type_lookup+0x10e/0x370 [ 39.788415] ? generic_get_mtrr+0x330/0x330 [ 39.792726] ? walk_system_ram_range+0x14a/0x180 [ 39.797467] ? walk_system_ram_res+0x130/0x130 [ 39.802032] reserve_memtype+0x2f4/0x640 [ 39.806088] ? pat_init+0x420/0x420 [ 39.809691] ? __init_cache_modes+0x240/0x240 [ 39.814164] reserve_pfn_range+0x11c/0x390 [ 39.818378] ? arch_io_reserve_memtype_wc+0x80/0x80 [ 39.823372] ? trace_hardirqs_on+0x10/0x10 [ 39.827586] ? save_trace+0x290/0x290 [ 39.831368] track_pfn_remap+0x15a/0x240 [ 39.835562] remap_pfn_range+0x1bc/0xaa0 [ 39.839612] ? apply_to_page_range+0x6a0/0x6a0 [ 39.844171] ? io_free_memtype+0x30/0x30 [ 39.848209] mmap_mem+0x1e1/0x281 [ 39.851641] mmap_region+0x852/0x1030 [ 39.855419] do_mmap+0x5b8/0xcd0 [ 39.858767] vm_mmap_pgoff+0x17a/0x1d0 [ 39.862632] ? vma_is_stack_for_current+0xa0/0xa0 [ 39.867469] ? __fget+0x237/0x370 [ 39.870974] SyS_mmap_pgoff+0x3ca/0x520 [ 39.874996] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 39.879989] ? do_syscall_64+0x53/0x640 [ 39.883966] ? align_vdso_addr+0x60/0x60 [ 39.888135] SyS_mmap+0x16/0x20 [ 39.891403] do_syscall_64+0x1e8/0x640 [ 39.895278] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 39.900124] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 39.905322] RIP: 0033:0x4401f9 [ 39.908492] RSP: 002b:00007fffa09254a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 39.916269] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004401f9 [ 39.923537] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 39.930928] RBP: 00000000006ca018 R08: 0000000000000003 R09: 02000000bfffd000 [ 39.938188] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000401a80 [ 39.945602] R13: 0000000000401b10 R14: 0000000000000000 R15: 0000000000000000 [ 39.954298] Kernel Offset: disabled [ 39.957997] Rebooting in 86400 seconds..