[ 11.388151] random: sshd: uninitialized urandom read (32 bytes read) [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 15.826867] random: sshd: uninitialized urandom read (32 bytes read) [ 15.989152] audit: type=1400 audit(1567589747.228:6): avc: denied { map } for pid=1762 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 16.034947] random: sshd: uninitialized urandom read (32 bytes read) [ 16.567346] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.159' (ECDSA) to the list of known hosts. [ 22.187607] urandom_read: 1 callbacks suppressed [ 22.187612] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/04 09:35:53 parsed 1 programs [ 22.294898] audit: type=1400 audit(1567589753.538:7): avc: denied { map } for pid=1780 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 22.360569] audit: type=1400 audit(1567589753.608:8): avc: denied { map } for pid=1780 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=5044 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 22.788243] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/04 09:35:55 executed programs: 0 [ 23.815792] audit: type=1400 audit(1567589755.058:9): avc: denied { map } for pid=1780 comm="syz-execprog" path="/root/syzkaller-shm117115368" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 26.570717] hrtimer: interrupt took 26329 ns 2019/09/04 09:36:00 executed programs: 31 [ 30.632019] kasan: CONFIG_KASAN_INLINE enabled [ 30.636755] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 30.647397] general protection fault: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 30.654284] Modules linked in: [ 30.657645] CPU: 1 PID: 2316 Comm: syz-executor.0 Not tainted 4.14.141+ #0 [ 30.665605] task: (ptrval) task.stack: (ptrval) [ 30.671773] RIP: 0010:loop_validate_file+0x1ef/0x2c0 [ 30.676862] RSP: 0018:ffff8881c7787b60 EFLAGS: 00010202 [ 30.682211] RAX: 0000000000000037 RBX: ffff8881d9abcc58 RCX: 0000000000000000 [ 30.689469] RDX: 0000000000000000 RSI: ffff8881d53f9cc0 RDI: 00000000000001b8 [ 30.697161] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 30.704677] R10: fffffbfff1705ba5 R11: ffffffff8b82dd2b R12: ffff8881d53f9cc0 [ 30.712092] R13: dffffc0000000000 R14: 00000000fffffff0 R15: ffff8881d53f9da0 [ 30.719626] FS: 00007f9a0d62e700(0000) GS:ffff8881db900000(0000) knlGS:0000000000000000 [ 30.727845] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.734175] CR2: 000000000075c000 CR3: 00000001c8ed8006 CR4: 00000000001606a0 [ 30.741452] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.748713] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.755979] Call Trace: [ 30.758664] lo_ioctl+0xa47/0x1a30 [ 30.762319] ? __lock_acquire+0x5d7/0x4320 [ 30.766555] ? loop_clr_fd+0xad0/0xad0 [ 30.770640] blkdev_ioctl+0x8d0/0x1870 [ 30.774528] ? blkpg_ioctl+0x910/0x910 [ 30.778586] ? trace_hardirqs_on+0x10/0x10 [ 30.782909] block_ioctl+0xd9/0x120 [ 30.786621] ? blkdev_fallocate+0x3b0/0x3b0 [ 30.791017] do_vfs_ioctl+0xabe/0x1040 [ 30.794907] ? selinux_file_ioctl+0x426/0x590 [ 30.799411] ? selinux_file_ioctl+0x116/0x590 [ 30.804203] ? ioctl_preallocate+0x1e0/0x1e0 [ 30.808605] ? selinux_socket_sock_rcv_skb+0x610/0x610 [ 30.813882] ? __fget+0x210/0x370 [ 30.817420] ? lock_downgrade+0x5d0/0x5d0 [ 30.821547] ? lock_acquire+0x12b/0x360 [ 30.825514] ? check_preemption_disabled+0x35/0x1f0 [ 30.830515] ? check_preemption_disabled+0x35/0x1f0 [ 30.835520] ? security_file_ioctl+0x7c/0xb0 [ 30.839926] SyS_ioctl+0x7f/0xb0 [ 30.843294] ? do_vfs_ioctl+0x1040/0x1040 [ 30.847523] do_syscall_64+0x19b/0x520 [ 30.851409] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 30.856587] RIP: 0033:0x459879 [ 30.859766] RSP: 002b:00007f9a0d62dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 30.867477] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 30.874744] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000004 [ 30.882345] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 30.889598] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a0d62e6d4 [ 30.896950] R13: 00000000004c2f80 R14: 00000000004d66b8 R15: 00000000ffffffff [ 30.904218] Code: f0 00 00 00 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 d1 00 00 00 48 8b ad f0 00 00 00 48 8d bd b8 01 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 a7 00 00 00 48 8b ad b8 01 00 00 48 89 e8 [ 30.923595] RIP: loop_validate_file+0x1ef/0x2c0 RSP: ffff8881c7787b60 [ 30.930738] ---[ end trace fcd2e8c3d6d60ae8 ]--- [ 30.935717] Kernel panic - not syncing: Fatal exception [ 30.941886] Kernel Offset: 0x8000000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 30.952849] Rebooting in 86400 seconds..