[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 24.915840] random: sshd: uninitialized urandom read (32 bytes read) [ 25.235294] audit: type=1400 audit(1562062843.991:6): avc: denied { map } for pid=1764 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 25.276388] random: sshd: uninitialized urandom read (32 bytes read) [ 25.781084] random: sshd: uninitialized urandom read (32 bytes read) [ 25.942116] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.221' (ECDSA) to the list of known hosts. [ 31.393180] random: sshd: uninitialized urandom read (32 bytes read) [ 31.481419] audit: type=1400 audit(1562062850.241:7): avc: denied { map } for pid=1782 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/07/02 10:20:51 parsed 1 programs [ 32.454274] audit: type=1400 audit(1562062851.211:8): avc: denied { map } for pid=1782 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=5023 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 33.193928] random: cc1: uninitialized urandom read (8 bytes read) 2019/07/02 10:20:53 executed programs: 0 [ 34.510218] audit: type=1400 audit(1562062853.261:9): avc: denied { map } for pid=1782 comm="syz-execprog" path="/root/syzkaller-shm061928958" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2019/07/02 10:20:58 executed programs: 48 [ 42.901012] kasan: CONFIG_KASAN_INLINE enabled [ 42.905683] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 42.916818] general protection fault: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 42.923584] Modules linked in: [ 42.926780] CPU: 1 PID: 1812 Comm: syz-executor.0 Not tainted 4.14.131+ #13 [ 42.933971] task: (ptrval) task.stack: (ptrval) [ 42.940015] RIP: 0010:kobject_uevent_env+0xa3/0xc60 [ 42.945043] RSP: 0018:ffff8881d1df7aa8 EFLAGS: 00010206 [ 42.950399] RAX: 0000000000000018 RBX: 0000000000000002 RCX: 1ffff11039f869d4 [ 42.957650] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000000000c0 [ 42.964900] RBP: ffff8881d656e1d0 R08: 0000000000000001 R09: 0000000000000001 [ 42.972170] R10: ffff8881cfc34ed8 R11: 0000000000000001 R12: 00000000000000a0 [ 42.979421] R13: dffffc0000000000 R14: ffff8881d656e0c8 R15: 00000000000000a0 [ 42.986691] FS: 0000000001f16940(0000) GS:ffff8881dbb00000(0000) knlGS:0000000000000000 [ 42.994918] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.000778] CR2: 00007f7971b98000 CR3: 00000001c4f18002 CR4: 00000000001606a0 [ 43.008032] Call Trace: [ 43.010624] loop_clr_fd+0x49e/0xac0 [ 43.014321] lo_ioctl+0x460/0x1a30 [ 43.017842] ? kasan_slab_free+0xb0/0x190 [ 43.021978] ? kmem_cache_free+0xc4/0x330 [ 43.026108] ? putname+0xcd/0x110 [ 43.029542] ? do_sys_open+0x250/0x590 [ 43.033444] ? do_syscall_64+0x19b/0x510 [ 43.037494] ? loop_clr_fd+0xac0/0xac0 [ 43.041365] ? blkdev_ioctl+0x8d0/0x1870 [ 43.045406] ? blkpg_ioctl+0x910/0x910 [ 43.049387] ? lock_downgrade+0x5d0/0x5d0 [ 43.053561] ? lock_acquire+0x10f/0x380 [ 43.057541] ? debug_check_no_obj_freed+0x148/0x5c0 [ 43.062558] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 43.067666] ? trace_hardirqs_on_caller+0x37b/0x540 [ 43.072688] ? block_ioctl+0xd9/0x120 [ 43.076475] ? blkdev_fallocate+0x3b0/0x3b0 [ 43.080788] ? do_vfs_ioctl+0xabe/0x1040 [ 43.084861] ? selinux_file_ioctl+0x426/0x590 [ 43.089336] ? selinux_file_ioctl+0x116/0x590 [ 43.093812] ? ioctl_preallocate+0x1e0/0x1e0 [ 43.098200] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0 [ 43.103907] ? rcu_read_lock_sched_held+0x10a/0x130 [ 43.108933] ? putname+0xcd/0x110 [ 43.112367] ? do_sys_open+0x255/0x590 [ 43.116234] ? filp_open+0x60/0x60 [ 43.119758] ? security_file_ioctl+0x7c/0xb0 [ 43.124172] ? SyS_ioctl+0x7f/0xb0 [ 43.127696] ? do_vfs_ioctl+0x1040/0x1040 [ 43.131836] ? do_syscall_64+0x19b/0x510 [ 43.135879] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 43.141220] Code: 03 42 80 3c 28 00 0f 85 44 0a 00 00 4d 8b 64 24 18 4d 85 e4 0f 84 22 02 00 00 e8 39 0f af fe 49 8d 7c 24 20 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 10 0a 00 00 49 8b 6c 24 20 48 85 ed 74 b0 [ 43.160665] RIP: kobject_uevent_env+0xa3/0xc60 RSP: ffff8881d1df7aa8 [ 43.167687] ---[ end trace bd0949983b2f8624 ]--- [ 43.172471] Kernel panic - not syncing: Fatal exception [ 43.178165] Kernel Offset: 0x1f400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 43.198087] Rebooting in 86400 seconds..