[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 32.516742] random: sshd: uninitialized urandom read (32 bytes read) [ 32.780093] kauditd_printk_skb: 10 callbacks suppressed [ 32.780101] audit: type=1400 audit(1575977982.760:35): avc: denied { map } for pid=6990 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 32.870474] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.489575] random: sshd: uninitialized urandom read (32 bytes read) [ 35.103471] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.148' (ECDSA) to the list of known hosts. [ 40.745338] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 40.872745] audit: type=1400 audit(1575977990.860:36): avc: denied { map } for pid=7003 comm="syz-executor321" path="/root/syz-executor321844021" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 40.877075] BUG: unable to handle kernel NULL pointer dereference at 0000000000000003 [ 40.907344] IP: mem_serial_out+0x70/0x90 [ 40.911401] PGD 93226067 P4D 93226067 PUD a8688067 PMD 0 [ 40.917102] Oops: 0002 [#1] PREEMPT SMP KASAN [ 40.921589] Modules linked in: [ 40.924768] CPU: 0 PID: 7003 Comm: syz-executor321 Not tainted 4.14.158-syzkaller #0 [ 40.932723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.942056] task: ffff88809ff76680 task.stack: ffff888082ea8000 [ 40.948102] RIP: 0010:mem_serial_out+0x70/0x90 [ 40.952718] RSP: 0018:ffff888082eaf988 EFLAGS: 00010206 [ 40.958153] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 40.965416] RDX: 1ffffffff14911af RSI: 0000000000000003 RDI: ffffffff8a488d78 [ 40.972668] RBP: ffff888082eaf9a0 R08: ffff88809ff76680 R09: ffff88809ff76f48 [ 40.979924] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8a488d38 [ 40.987171] R13: 00000000000000bf R14: 000000000000000a R15: ffffffff8a488d88 [ 40.994422] FS: 000000000140c880(0000) GS:ffff8880aec00000(0000) knlGS:0000000000000000 [ 41.002721] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.008598] CR2: 0000000000000003 CR3: 0000000086acd000 CR4: 00000000001406f0 [ 41.015860] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.023111] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.030359] Call Trace: [ 41.032931] serial8250_do_startup+0x1120/0x1d80 [ 41.037661] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 41.042740] serial8250_startup+0x5c/0x80 [ 41.046866] uart_startup.part.0+0x2e9/0x720 [ 41.051256] uart_ioctl+0x12e9/0x2610 [ 41.055049] ? uart_port_activate+0x200/0x200 [ 41.059532] ? __might_fault+0x110/0x1d0 [ 41.063661] ? uart_port_activate+0x200/0x200 [ 41.068229] tty_ioctl+0x841/0x1320 [ 41.072057] ? tty_vhangup+0x30/0x30 [ 41.075752] ? __might_sleep+0x93/0xb0 [ 41.079614] ? tty_vhangup+0x30/0x30 [ 41.083305] do_vfs_ioctl+0x7ae/0x1060 [ 41.087187] ? selinux_file_mprotect+0x5d0/0x5d0 [ 41.091919] ? kmem_cache_free+0x244/0x2b0 [ 41.096130] ? ioctl_preallocate+0x1c0/0x1c0 [ 41.100514] ? putname+0xe0/0x120 [ 41.103943] ? do_sys_open+0x221/0x430 [ 41.107816] ? security_file_ioctl+0x7d/0xb0 [ 41.112200] ? security_file_ioctl+0x89/0xb0 [ 41.116583] SyS_ioctl+0x8f/0xc0 [ 41.119949] ? do_vfs_ioctl+0x1060/0x1060 [ 41.124075] do_syscall_64+0x1e8/0x640 [ 41.127951] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 41.132782] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 41.137974] RIP: 0033:0x440219 [ 41.141144] RSP: 002b:00007ffd1863b348 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.148900] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440219 [ 41.156151] RDX: 0000000020000080 RSI: 000000000000541f RDI: 0000000000000003 [ 41.163399] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 41.170649] R10: 0000000000401b30 R11: 0000000000000246 R12: 0000000000401aa0 [ 41.177907] R13: 0000000000401b30 R14: 0000000000000000 R15: 0000000000000000 [ 41.185163] Code: 24 d1 00 00 00 49 8d 7c 24 40 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 d3 e3 80 3c 02 00 75 19 48 63 db 49 03 5c 24 40 <44> 88 2b 5b 41 5c 41 5d 5d c3 e8 f1 65 37 fe eb c0 e8 4a 66 37 [ 41.204426] RIP: mem_serial_out+0x70/0x90 RSP: ffff888082eaf988 [ 41.210459] CR2: 0000000000000003 [ 41.214670] ---[ end trace cf06acb014bfcdbb ]--- [ 41.219431] Kernel panic - not syncing: Fatal exception [ 41.226337] Kernel Offset: disabled [ 41.229959] Rebooting in 86400 seconds..