[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   34.383080] random: sshd: uninitialized urandom read (32 bytes read)
[   34.611876] kauditd_printk_skb: 9 callbacks suppressed
[   34.611884] audit: type=1400 audit(1569095632.585:35): avc:  denied  { map } for  pid=6781 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
[   34.665689] random: sshd: uninitialized urandom read (32 bytes read)
[   35.187819] random: sshd: uninitialized urandom read (32 bytes read)
Warning: Permanently added '10.128.1.6' (ECDSA) to the list of known hosts.
[   40.799774] urandom_read: 1 callbacks suppressed
[   40.799778] random: sshd: uninitialized urandom read (32 bytes read)
executing program
[   40.920157] audit: type=1400 audit(1569095638.885:36): avc:  denied  { map } for  pid=6794 comm="syz-executor143" path="/root/syz-executor143082082" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[   40.923074] kasan: CONFIG_KASAN_INLINE enabled
[   40.951180] kasan: GPF could be caused by NULL-ptr deref or user memory access
[   40.958541] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[   40.964753] Modules linked in:
[   40.967929] CPU: 1 PID: 6794 Comm: syz-executor143 Not tainted 4.14.146 #0
[   40.974920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   40.984256] task: ffff8880825825c0 task.stack: ffff8880841e0000
[   40.990305] RIP: 0010:rb_erase+0x29/0x1c10
[   40.994519] RSP: 0018:ffff8880841e79d0 EFLAGS: 00010282
[   40.999920] RAX: dffffc0000000000 RBX: ffff88809a054930 RCX: 1ffff1101083cf12
[   41.007174] RDX: 0000000000000001 RSI: ffffffff8924d940 RDI: 0000000000000008
[   41.014458] RBP: ffff8880841e7a18 R08: ffffffff88d17c7c R09: 0000000000001b62
[   41.021713] R10: ffff8880841e77d0 R11: ffff8880825825c0 R12: 0000000000000000
[   41.028966] R13: ffff8880959053b0 R14: 0000000000000000 R15: ffffffff867a3540
[   41.036218] FS:  00005555568ea880(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000
[   41.044459] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   41.050322] CR2: 0000000020000704 CR3: 00000000a82c6000 CR4: 00000000001406e0
[   41.057575] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   41.064825] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   41.072097] Call Trace:
[   41.074673]  integrity_inode_free+0x126/0x320
[   41.079148]  security_inode_free+0x19/0x90
[   41.083366]  __destroy_inode+0x1ef/0x4e0
[   41.087408]  destroy_inode+0x50/0x120
[   41.091187]  evict+0x3e6/0x630
[   41.094388]  iput+0x471/0x900
[   41.097477]  ? ext4_nfs_commit_metadata+0x2f0/0x2f0
[   41.102474]  ext4_ioctl+0x16b0/0x3920
[   41.106264]  ? avc_ss_reset+0x110/0x110
[   41.110219]  ? kasan_slab_free+0x75/0xc0
[   41.114269]  ? ext4_ioctl_check_immutable+0x1c0/0x1c0
[   41.119438]  ? find_held_lock+0x35/0x130
[   41.123483]  ? debug_check_no_obj_freed+0x2aa/0x7b7
[   41.128486]  ? __might_sleep+0x93/0xb0
[   41.132377]  ? ext4_ioctl_check_immutable+0x1c0/0x1c0
[   41.137550]  do_vfs_ioctl+0x7ae/0x1060
[   41.141422]  ? selinux_file_mprotect+0x5d0/0x5d0
[   41.146159]  ? ioctl_preallocate+0x1c0/0x1c0
[   41.150546]  ? putname+0xe0/0x120
[   41.153981]  ? do_sys_open+0x221/0x430
[   41.157849]  ? security_file_ioctl+0x7d/0xb0
[   41.162235]  ? security_file_ioctl+0x89/0xb0
[   41.166625]  SyS_ioctl+0x8f/0xc0
[   41.170062]  ? do_vfs_ioctl+0x1060/0x1060
[   41.174218]  do_syscall_64+0x1e8/0x640
[   41.178085]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[   41.182996]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[   41.188164] RIP: 0033:0x440169
[   41.191334] RSP: 002b:00007ffefa519628 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   41.199044] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440169
[   41.206294] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004
[   41.213552] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8
[   41.220857] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004019f0
[   41.228108] R13: 0000000000401a80 R14: 0000000000000000 R15: 0000000000000000
[   41.235367] Code: 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 41 57 41 56 49 89 fe 48 83 c7 08 48 89 fa 41 55 48 c1 ea 03 41 54 53 48 83 ec 20 <80> 3c 02 00 0f 85 0c 11 00 00 49 8d 7e 10 4d 8b 7e 08 48 b8 00 
[   41.254444] RIP: rb_erase+0x29/0x1c10 RSP: ffff8880841e79d0
[   41.260199] ---[ end trace e19171252bbaf90b ]---
[   41.264948] Kernel panic - not syncing: Fatal exception
[   41.271601] Kernel Offset: disabled
[   41.275215] Rebooting in 86400 seconds..