[ 33.796464] audit: type=1800 audit(1573651516.853:33): pid=6960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 33.818378] audit: type=1800 audit(1573651516.853:34): pid=6960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.867097] random: sshd: uninitialized urandom read (32 bytes read) [ 37.230601] audit: type=1400 audit(1573651520.293:35): avc: denied { map } for pid=7133 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 37.281011] random: sshd: uninitialized urandom read (32 bytes read) [ 37.813927] random: sshd: uninitialized urandom read (32 bytes read) [ 37.996918] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.210' (ECDSA) to the list of known hosts. [ 43.613164] random: sshd: uninitialized urandom read (32 bytes read) executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 43.729625] audit: type=1400 audit(1573651526.783:36): avc: denied { map } for pid=7145 comm="syz-executor088" path="/root/syz-executor088833851" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 43.849633] ------------[ cut here ]------------ [ 43.855689] kernel BUG at include/linux/scatterlist.h:124! [ 43.862217] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 43.867666] Modules linked in: [ 43.870959] CPU: 1 PID: 7171 Comm: syz-executor088 Not tainted 4.14.153 #0 [ 43.877948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.887642] task: ffff8880a1936240 task.stack: ffff888074840000 [ 43.894617] RIP: 0010:gcmaes_decrypt.constprop.0+0x910/0xd20 [ 43.900492] RSP: 0018:ffff8880748479b8 EFLAGS: 00010297 [ 43.905932] RAX: ffff8880a1936240 RBX: ffff8880a1ac7a48 RCX: 0000000087654321 [ 43.913329] RDX: 0000000000000000 RSI: 1ffff11014358eda RDI: ffff8880a1ac76e4 [ 43.921106] RBP: ffff888074847a90 R08: ffff8880a1aa0060 R09: ffffed100e908f5a [ 43.928372] R10: ffffed100e908f59 R11: ffff888074847acb R12: ffffea0001c304c2 [ 43.935641] R13: ffff8880a1ac7a7c R14: 0000000000000010 R15: ffff8880a061d080 [ 43.942914] FS: 0000000001cea880(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 43.952376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.958371] CR2: 0000000020c18000 CR3: 00000000961b8000 CR4: 00000000001406e0 [ 43.966944] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.974195] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.981446] Call Trace: [ 43.984033] ? aesni_gcm_enc_avx2+0x140/0x140 [ 43.988508] ? sock_kfree_s+0x36/0x50 [ 43.992391] generic_gcmaes_decrypt+0xf4/0x130 [ 43.996954] ? helper_rfc4106_decrypt+0x320/0x320 [ 44.001783] gcmaes_wrapper_decrypt+0x162/0x200 [ 44.006721] aead_recvmsg+0x821/0x1d70 [ 44.010593] ? aead_release+0x50/0x50 [ 44.014427] ? aead_check_key.isra.0+0x64/0x200 [ 44.019177] aead_recvmsg_nokey+0x5d/0x80 [ 44.023330] ? aead_sendpage_nokey+0xa0/0xa0 [ 44.027721] sock_recvmsg+0xc6/0x110 [ 44.031437] SYSC_recvfrom+0x1d2/0x300 [ 44.035316] ? kernel_recvmsg+0x140/0x140 [ 44.039751] ? _raw_spin_unlock_bh+0x31/0x40 [ 44.044149] ? release_sock+0x14a/0x1b0 [ 44.048271] ? alg_setsockopt+0xf6/0x350 [ 44.052678] ? SyS_recv+0x40/0x40 [ 44.056120] SyS_recvfrom+0x40/0x50 [ 44.059747] ? SyS_send+0x40/0x40 [ 44.063187] do_syscall_64+0x1e8/0x640 [ 44.067056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 44.071882] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 44.077051] RIP: 0033:0x4412b9 [ 44.080219] RSP: 002b:00007fffeaf20fc8 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 44.087909] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004412b9 [ 44.095158] RDX: 0000000100000205 RSI: 0000000020003240 RDI: 0000000000000004 [ 44.102419] RBP: 000000000000ab44 R08: 0000000000000000 R09: 0000000000000415 [ 44.109667] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004020e0 [ 44.117012] R13: 0000000000402170 R14: 0000000000000000 R15: 0000000000000000 [ 44.124267] Code: 0f 0b e8 74 16 2e 00 0f 0b e8 6d 16 2e 00 0f 0b e8 66 16 2e 00 0f 0b e8 5f 16 2e 00 e8 c6 64 d1 ff e9 63 ff ff ff e8 50 16 2e 00 <0f> 0b e8 49 16 2e 00 0f 0b 4c 89 85 58 ff ff ff e8 3b 16 2e 00 [ 44.143727] RIP: gcmaes_decrypt.constprop.0+0x910/0xd20 RSP: ffff8880748479b8 [ 44.151406] ---[ end trace 7a11f54f6fcfe709 ]--- [ 44.156172] Kernel panic - not syncing: Fatal exception [ 44.163596] Kernel Offset: disabled [ 44.167392] Rebooting in 86400 seconds..