[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.331648] random: sshd: uninitialized urandom read (32 bytes read) [ 32.761618] audit: type=1400 audit(1548535181.641:6): avc: denied { map } for pid=1774 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 32.809339] random: sshd: uninitialized urandom read (32 bytes read) [ 33.295451] random: sshd: uninitialized urandom read (32 bytes read) [ 33.445283] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.238' (ECDSA) to the list of known hosts. [ 39.177904] random: sshd: uninitialized urandom read (32 bytes read) [ 39.267391] audit: type=1400 audit(1548535188.141:7): avc: denied { map } for pid=1786 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/01/26 20:39:48 parsed 1 programs [ 40.041699] audit: type=1400 audit(1548535188.921:8): avc: denied { map } for pid=1786 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=5005 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 40.728952] random: cc1: uninitialized urandom read (8 bytes read) 2019/01/26 20:39:50 executed programs: 0 [ 42.035994] audit: type=1400 audit(1548535190.911:9): avc: denied { map } for pid=1786 comm="syz-execprog" path="/root/syzkaller-shm756166050" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2019/01/26 20:39:55 executed programs: 19 [ 48.530464] kasan: CONFIG_KASAN_INLINE enabled [ 48.535183] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 48.542681] general protection fault: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 48.549417] Modules linked in: [ 48.552583] CPU: 1 PID: 1824 Comm: syz-executor0 Not tainted 4.14.96+ #19 [ 48.559480] task: ffff8881cff98000 task.stack: ffff8881cefe8000 [ 48.565573] RIP: 0010:kobject_uevent_env+0x62/0xc60 [ 48.570557] RSP: 0018:ffff8881cefefab0 EFLAGS: 00010206 [ 48.575905] RAX: 0000000000000018 RBX: 0000000000000002 RCX: 1ffff11039ff3104 [ 48.583202] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000000000c0 [ 48.590466] RBP: ffff8881d6082ed0 R08: 0000000000000001 R09: 0000000000000001 [ 48.597735] R10: ffff8881cff98858 R11: 0000000000000001 R12: 00000000000000a0 [ 48.604994] R13: dffffc0000000000 R14: ffff8881d6082e48 R15: 00000000000000a0 [ 48.612251] FS: 0000000000b9a940(0000) GS:ffff8881dbb00000(0000) knlGS:0000000000000000 [ 48.620449] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.626307] CR2: 00007f97b2e4da20 CR3: 00000001d66d4002 CR4: 00000000001606a0 [ 48.633552] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.640800] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.648064] Call Trace: [ 48.650640] loop_clr_fd+0x49e/0xac0 [ 48.654337] lo_ioctl+0x813/0x1970 [ 48.657864] ? kasan_slab_free+0xb0/0x190 [ 48.662002] ? kmem_cache_free+0xc4/0x330 [ 48.666131] ? putname+0xcd/0x110 [ 48.669562] ? do_sys_open+0x250/0x590 [ 48.673435] ? do_syscall_64+0x19b/0x4b0 [ 48.677473] ? loop_clr_fd+0xac0/0xac0 [ 48.681355] blkdev_ioctl+0x4d9/0x1810 [ 48.685248] ? blkpg_ioctl+0x910/0x910 [ 48.689110] ? lock_downgrade+0x5d0/0x5d0 [ 48.693246] ? lock_acquire+0x10f/0x380 [ 48.697202] ? debug_check_no_obj_freed+0x148/0x5c0 [ 48.702231] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 48.707308] ? trace_hardirqs_on_caller+0x37b/0x540 [ 48.712300] block_ioctl+0xd9/0x120 [ 48.715899] ? blkdev_fallocate+0x3b0/0x3b0 [ 48.720215] do_vfs_ioctl+0xabe/0x1040 [ 48.724077] ? selinux_file_ioctl+0x426/0x590 [ 48.728559] ? selinux_file_ioctl+0x116/0x590 [ 48.733046] ? ioctl_preallocate+0x1e0/0x1e0 [ 48.737444] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0 [ 48.743048] ? rcu_read_lock_sched_held+0x10a/0x130 [ 48.748050] ? putname+0xcd/0x110 [ 48.751477] ? do_sys_open+0x255/0x590 [ 48.755339] ? filp_open+0x60/0x60 [ 48.758857] ? security_file_ioctl+0x7c/0xb0 [ 48.763254] SyS_ioctl+0x7f/0xb0 [ 48.766593] ? do_vfs_ioctl+0x1040/0x1040 [ 48.770711] do_syscall_64+0x19b/0x4b0 [ 48.774572] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 48.779906] Code: 03 42 80 3c 28 00 0f 85 7c 0a 00 00 4d 8b 64 24 18 4d 85 e4 0f 84 4f 02 00 00 e8 0a 9f af fe 49 8d 7c 24 20 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 48 0a 00 00 49 8b 6c 24 20 48 85 ed 74 b0 [ 48.798978] RIP: kobject_uevent_env+0x62/0xc60 RSP: ffff8881cefefab0 [ 48.805700] ---[ end trace 9d23b53ed10629a2 ]--- [ 48.810524] Kernel panic - not syncing: Fatal exception [ 48.816199] Kernel Offset: 0x1e800000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 48.827097] Rebooting in 86400 seconds..