[ 32.059568] audit: type=1800 audit(1555570437.792:33): pid=6877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 32.086485] audit: type=1800 audit(1555570437.802:34): pid=6877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 48.995991] random: sshd: uninitialized urandom read (32 bytes read) [ 49.310628] audit: type=1400 audit(1555570455.052:35): avc: denied { map } for pid=7050 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 49.362269] random: sshd: uninitialized urandom read (32 bytes read) [ 49.808155] random: sshd: uninitialized urandom read (32 bytes read) [ 58.394914] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.47' (ECDSA) to the list of known hosts. [ 63.954230] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 64.074298] audit: type=1400 audit(1555570469.812:36): avc: denied { map } for pid=7062 comm="syz-executor621" path="/root/syz-executor621417486" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 64.081193] FAULT_INJECTION: forcing a failure. [ 64.081193] name failslab, interval 1, probability 0, space 0, times 1 [ 64.113127] CPU: 0 PID: 7062 Comm: syz-executor621 Not tainted 4.14.112 #2 [ 64.120139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.129540] Call Trace: [ 64.132120] dump_stack+0x138/0x19c [ 64.135730] should_fail.cold+0x10f/0x159 [ 64.139867] should_failslab+0xdb/0x130 [ 64.143881] kmem_cache_alloc+0x2d9/0x780 [ 64.148033] ? check_preemption_disabled+0x3c/0x250 [ 64.153038] ? alloc_inode+0xab/0x190 [ 64.156828] selinux_inode_alloc_security+0xb6/0x2a0 [ 64.161922] security_inode_alloc+0x9a/0xe0 [ 64.166234] inode_init_always+0x552/0xaf0 [ 64.170532] alloc_inode+0x83/0x190 [ 64.174158] iget_locked+0x161/0x440 [ 64.177880] kernfs_get_inode+0x4c/0x550 [ 64.181934] kernfs_mount_ns+0x426/0x790 [ 64.185995] cgroup_do_mount+0x9e/0x420 [ 64.190018] ? init_cgroup_root+0x310/0x310 [ 64.194346] ? trace_hardirqs_on_caller+0x400/0x590 [ 64.199390] cgroup_mount+0x789/0x8b0 [ 64.203195] ? cgroup_attach_task+0x6d0/0x6d0 [ 64.207686] mount_fs+0x9d/0x2a7 [ 64.211042] vfs_kern_mount.part.0+0x5e/0x3d0 [ 64.215525] do_mount+0x417/0x27d0 [ 64.219116] ? copy_mount_string+0x40/0x40 [ 64.223364] ? memdup_user+0x58/0xa0 [ 64.227084] ? copy_mount_options+0x1fe/0x2f0 [ 64.231632] SyS_mount+0xab/0x120 [ 64.235078] ? copy_mnt_ns+0x8c0/0x8c0 [ 64.239037] do_syscall_64+0x1eb/0x630 [ 64.242910] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 64.247743] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 64.252934] RIP: 0033:0x4404b9 [ 64.256104] RSP: 002b:00007ffda6104b48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 64.263842] RAX: ffffffffffffffda RBX: 00007ffda6104b50 RCX: 00000000004404b9 [ 64.271144] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 64.278443] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffda6003331 [ 64.285701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401da0 [ 64.292959] R13: 0000000000401e30 R14: 0000000000000000 R15: 0000000000000000 [ 64.301601] kasan: CONFIG_KASAN_INLINE enabled [ 64.306295] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 64.313757] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 64.319985] Modules linked in: [ 64.323171] CPU: 0 PID: 7062 Comm: syz-executor621 Not tainted 4.14.112 #2 [ 64.330164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.339503] task: ffff888089780200 task.stack: ffff888098758000 [ 64.345549] RIP: 0010:__list_del_entry_valid+0x85/0xf5 [ 64.350805] RSP: 0018:ffff88809875fae8 EFLAGS: 00010246 [ 64.356147] RAX: dffffc0000000000 RBX: ffffffff891a91a0 RCX: 0000000000000000 [ 64.363441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88809208d820 [ 64.370706] RBP: ffff88809875fb00 R08: dffffc0000000000 R09: ffffffff88c7a240 [ 64.377959] R10: ffff88809875fb00 R11: ffff888089780200 R12: 0000000000000000 [ 64.385223] R13: 0000000000000000 R14: ffff88809208d818 R15: ffff88809208d820 [ 64.392849] FS: 00000000017dd880(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 64.401061] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.406924] CR2: 0000558b9a9fb190 CR3: 0000000092d8d000 CR4: 00000000001406f0 [ 64.414177] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.421426] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.428866] Call Trace: [ 64.431516] kernfs_kill_sb+0x62/0x1e0 [ 64.435437] cgroup_kill_sb+0xfb/0x330 [ 64.439523] deactivate_locked_super+0x79/0xe0 [ 64.444134] kernfs_mount_ns+0x629/0x790 [ 64.448186] cgroup_do_mount+0x9e/0x420 [ 64.452175] ? init_cgroup_root+0x310/0x310 [ 64.456487] ? trace_hardirqs_on_caller+0x400/0x590 [ 64.461485] cgroup_mount+0x789/0x8b0 [ 64.465273] ? cgroup_attach_task+0x6d0/0x6d0 [ 64.469759] mount_fs+0x9d/0x2a7 [ 64.473110] vfs_kern_mount.part.0+0x5e/0x3d0 [ 64.477582] do_mount+0x417/0x27d0 [ 64.481102] ? copy_mount_string+0x40/0x40 [ 64.485314] ? memdup_user+0x58/0xa0 [ 64.489061] ? copy_mount_options+0x1fe/0x2f0 [ 64.493547] SyS_mount+0xab/0x120 [ 64.496980] ? copy_mnt_ns+0x8c0/0x8c0 [ 64.500850] do_syscall_64+0x1eb/0x630 [ 64.504723] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 64.509557] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 64.514728] RIP: 0033:0x4404b9 [ 64.517900] RSP: 002b:00007ffda6104b48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 64.525593] RAX: ffffffffffffffda RBX: 00007ffda6104b50 RCX: 00000000004404b9 [ 64.532844] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 64.540098] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffda6003331 [ 64.547420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401da0 [ 64.554874] R13: 0000000000401e30 R14: 0000000000000000 R15: 0000000000000000 [ 64.562137] Code: c5 0f 84 e1 00 00 00 48 b8 00 02 00 00 00 00 ad de 49 39 c4 0f 84 e2 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 75 53 49 8b 14 24 4c 39 f2 0f 85 99 00 00 00 49 8d [ 64.581448] RIP: __list_del_entry_valid+0x85/0xf5 RSP: ffff88809875fae8 [ 64.588687] ---[ end trace 367b5fb0e9c10504 ]--- [ 64.593483] Kernel panic - not syncing: Fatal exception [ 64.599626] Kernel Offset: disabled [ 64.603423] Rebooting in 86400 seconds..