[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.252047] random: sshd: uninitialized urandom read (32 bytes read) [ 36.657547] audit: type=1400 audit(1554424579.579:6): avc: denied { map } for pid=1768 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 36.724293] random: sshd: uninitialized urandom read (32 bytes read) [ 37.221681] random: sshd: uninitialized urandom read (32 bytes read) [ 48.863502] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.15' (ECDSA) to the list of known hosts. [ 54.412658] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 54.499558] audit: type=1400 audit(1554424597.419:7): avc: denied { map } for pid=1792 comm="syz-executor471" path="/root/syz-executor471282242" dev="sda1" ino=16461 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 executing program [ 54.954918] ------------[ cut here ]------------ [ 54.959703] WARNING: CPU: 1 PID: 1797 at fs/attr.c:213 notify_change2+0xab8/0xd70 [ 54.967388] Kernel panic - not syncing: panic_on_warn set ... [ 54.967388] [ 54.974773] CPU: 1 PID: 1797 Comm: syz-executor471 Not tainted 4.14.110+ #49 [ 54.981942] Call Trace: [ 54.984515] dump_stack+0xb9/0x10e [ 54.988041] panic+0x1d9/0x3c2 [ 54.991211] ? add_taint.cold+0x16/0x16 [ 54.995168] ? notify_change2+0xab8/0xd70 [ 54.999296] ? __probe_kernel_read+0x163/0x1c0 [ 55.003868] ? notify_change2+0xab8/0xd70 [ 55.007999] __warn.cold+0x2f/0x3b [ 55.011526] ? notify_change2+0xab8/0xd70 [ 55.015658] ? report_bug+0x20a/0x248 [ 55.019443] ? do_error_trap+0x1bf/0x2d0 [ 55.023481] ? math_error+0x2d0/0x2d0 [ 55.027271] ? simple_xattr_get+0xe5/0x160 [ 55.031572] ? lock_downgrade+0x5d0/0x5d0 [ 55.035701] ? lock_acquire+0x10f/0x380 [ 55.039657] ? simple_xattr_get+0x2c/0x160 [ 55.043914] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 55.048748] ? invalid_op+0x18/0x40 [ 55.052357] ? notify_change2+0xab8/0xd70 [ 55.056502] ? file_remove_privs+0x263/0x410 [ 55.060903] ? dentry_needs_remove_privs.part.0+0x60/0x60 [ 55.066430] ? unwind_next_frame+0x4dd/0x17e0 [ 55.070915] ? deref_stack_reg+0xe0/0xe0 [ 55.074961] ? trace_hardirqs_on+0x10/0x10 [ 55.079176] ? trace_hardirqs_on_caller+0x37b/0x540 [ 55.084180] ? __generic_file_write_iter+0x152/0x550 [ 55.089273] ? blkdev_write_iter+0x1fb/0x3d0 [ 55.093666] ? check_disk_change+0x120/0x120 [ 55.098051] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 55.102538] ? do_splice_direct+0x177/0x240 [ 55.106955] ? do_sendfile+0x493/0xb20 [ 55.110827] ? do_iter_readv_writev+0x379/0x580 [ 55.115480] ? clone_verify_area+0x1e0/0x1e0 [ 55.119872] ? avc_policy_seqno+0x5/0x10 [ 55.124120] ? security_file_permission+0x88/0x1e0 [ 55.129035] ? do_iter_write+0x152/0x550 [ 55.133120] ? kasan_unpoison_shadow+0x30/0x40 [ 55.137695] ? kasan_kmalloc+0x76/0xc0 [ 55.141574] ? vfs_iter_write+0x70/0xa0 [ 55.145540] ? iter_file_splice_write+0x560/0xa50 [ 55.150377] ? generic_file_splice_read+0x377/0x540 [ 55.155386] ? vmsplice_to_user+0x1e0/0x1e0 [ 55.159689] ? add_to_pipe+0x350/0x350 [ 55.163562] ? __inode_security_revalidate+0xcf/0x120 [ 55.168734] ? security_file_permission+0x88/0x1e0 [ 55.173642] ? vmsplice_to_user+0x1e0/0x1e0 [ 55.177943] ? direct_splice_actor+0x118/0x160 [ 55.182503] ? splice_direct_to_actor+0x292/0x760 [ 55.187322] ? generic_pipe_buf_nosteal+0x10/0x10 [ 55.192153] ? do_splice_to+0x150/0x150 [ 55.196107] ? security_file_permission+0x88/0x1e0 [ 55.201148] ? do_splice_direct+0x177/0x240 [ 55.205451] ? splice_direct_to_actor+0x760/0x760 [ 55.210281] ? security_file_permission+0x88/0x1e0 [ 55.215196] ? do_sendfile+0x493/0xb20 [ 55.219067] ? do_compat_pwritev64+0x170/0x170 [ 55.223628] ? lock_release+0xb/0x730 [ 55.227479] ? SyS_sendfile64+0x11f/0x140 [ 55.231699] ? SyS_sendfile+0x150/0x150 [ 55.235659] ? do_syscall_64+0x43/0x4b0 [ 55.239616] ? SyS_sendfile+0x150/0x150 [ 55.243581] ? do_syscall_64+0x19b/0x4b0 [ 55.247627] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 55.253311] Kernel Offset: 0x16800000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 55.264215] Rebooting in 86400 seconds..