[ 32.733498] audit: type=1800 audit(1571892517.174:33): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 32.755377] audit: type=1800 audit(1571892517.174:34): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.951688] random: sshd: uninitialized urandom read (32 bytes read) [ 37.175661] audit: type=1400 audit(1571892521.614:35): avc: denied { map } for pid=7131 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 37.213747] random: sshd: uninitialized urandom read (32 bytes read) [ 37.766841] random: sshd: uninitialized urandom read (32 bytes read) [ 56.687331] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.32' (ECDSA) to the list of known hosts. [ 62.177157] random: sshd: uninitialized urandom read (32 bytes read) executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 62.301123] audit: type=1400 audit(1571892546.744:36): avc: denied { map } for pid=7143 comm="syz-executor734" path="/root/syz-executor734617730" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 64.035541] kasan: CONFIG_KASAN_INLINE enabled [ 64.041127] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 64.048775] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 64.055035] Modules linked in: [ 64.058395] CPU: 1 PID: 7875 Comm: syz-executor734 Not tainted 4.14.150 #0 [ 64.065544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.074901] task: ffff8880a8c5c700 task.stack: ffff88809f4c0000 executing program executing program executing program [ 64.081187] RIP: 0010:rdma_resolve_route+0x11f/0x2bf0 [ 64.086366] RSP: 0018:ffff88809f4c7a20 EFLAGS: 00010202 [ 64.091725] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 64.098995] RDX: 0000000000000029 RSI: 0000000000000001 RDI: 0000000000000148 [ 64.106783] RBP: ffff88809f4c7bc0 R08: ffff8880a8c5c700 R09: 0000000000000000 [ 64.114966] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809113edc0 [ 64.122317] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88809113ef78 [ 64.129705] FS: 00007fd836486700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 64.138086] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.143977] CR2: 00007fd836485e78 CR3: 000000009be96000 CR4: 00000000001406e0 [ 64.151496] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.158983] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.166768] Call Trace: [ 64.169525] ? find_held_lock+0x35/0x130 [ 64.174549] ? rdma_join_multicast+0x2dc0/0x2dc0 executing program [ 64.182180] ? ucma_get_ctx+0x20/0x130 [ 64.188581] ? lock_downgrade+0x740/0x740 [ 64.194394] ? mutex_trylock+0x1c0/0x1c0 [ 64.199768] ? __mutex_unlock_slowpath+0x71/0x800 [ 64.206049] ? lock_downgrade+0x740/0x740 [ 64.212966] ? __radix_tree_lookup+0x1b3/0x2f0 [ 64.218182] ? wait_for_completion+0x420/0x420 [ 64.223611] ucma_resolve_route+0xab/0x100 [ 64.228449] ? ucma_resolve_route+0xab/0x100 executing program executing program [ 64.232979] ? ucma_connect+0x220/0x220 [ 64.237312] ? _copy_from_user+0x99/0x110 [ 64.242075] ucma_write+0x231/0x310 [ 64.246042] ? ucma_connect+0x220/0x220 [ 64.250025] ? ucma_open+0x290/0x290 [ 64.253745] __vfs_write+0x105/0x6b0 [ 64.257541] ? ucma_open+0x290/0x290 [ 64.261352] ? kernel_read+0x120/0x120 [ 64.265354] ? __inode_security_revalidate+0xd6/0x130 [ 64.271016] ? avc_policy_seqno+0x9/0x20 [ 64.275088] ? selinux_file_permission+0x85/0x480 [ 64.280041] ? security_file_permission+0x89/0x1f0 executing program [ 64.286399] ? rw_verify_area+0xea/0x2b0 [ 64.290827] vfs_write+0x198/0x500 [ 64.295758] SyS_write+0xfd/0x230 [ 64.299749] ? SyS_read+0x230/0x230 [ 64.304796] ? do_syscall_64+0x53/0x640 [ 64.308902] ? SyS_read+0x230/0x230 [ 64.312740] do_syscall_64+0x1e8/0x640 [ 64.316728] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 64.321761] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 64.327172] RIP: 0033:0x446a39 [ 64.330741] RSP: 002b:00007fd836485db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.340062] RAX: ffffffffffffffda RBX: 00000000006dbc48 RCX: 0000000000446a39 [ 64.348914] RDX: 0000000000000010 RSI: 0000000020000200 RDI: 0000000000000004 [ 64.359560] RBP: 00000000006dbc40 R08: 0000000000000000 R09: 0000000000000000 [ 64.369215] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc4c [ 64.377564] R13: 00007ffcfa867bbf R14: 00007fd8364869c0 R15: 000000000000002d executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 64.384846] Code: 00 48 c1 ea 03 80 3c 02 00 0f 85 ea 24 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 34 24 49 8d be 48 01 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d1 24 00 00 48 b8 00 00 00 00 00 fc ff df 41 [ 64.405766] RIP: rdma_resolve_route+0x11f/0x2bf0 RSP: ffff88809f4c7a20 [ 64.416712] ---[ end trace c376a8f023c97681 ]--- [ 64.421973] Kernel panic - not syncing: Fatal exception [ 64.431447] Kernel Offset: disabled [ 64.435610] Rebooting in 86400 seconds..