[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.588719] random: sshd: uninitialized urandom read (32 bytes read) [ 32.801139] kauditd_printk_skb: 9 callbacks suppressed [ 32.801148] audit: type=1400 audit(1555586065.042:35): avc: denied { map } for pid=6818 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 32.860465] random: sshd: uninitialized urandom read (32 bytes read) [ 33.383557] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.192' (ECDSA) to the list of known hosts. [ 39.208689] urandom_read: 1 callbacks suppressed [ 39.208694] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 39.330969] audit: type=1400 audit(1555586071.572:36): avc: denied { map } for pid=6831 comm="syz-executor265" path="/root/syz-executor265486647" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 39.362841] ------------[ cut here ]------------ [ 39.367687] WARNING: CPU: 0 PID: 1401 at drivers/tty/tty_ioctl.c:318 tty_set_termios+0x74a/0x870 [ 39.376592] Kernel panic - not syncing: panic_on_warn set ... [ 39.376592] [ 39.383934] CPU: 0 PID: 1401 Comm: kworker/u5:0 Not tainted 4.14.112 #2 [ 39.390664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.400039] Workqueue: hci0 hci_power_on [ 39.404088] Call Trace: [ 39.406693] dump_stack+0x138/0x19c [ 39.410302] panic+0x1f2/0x438 [ 39.413474] ? add_taint.cold+0x16/0x16 [ 39.417431] ? tty_set_termios+0x74a/0x870 [ 39.421646] ? tty_set_termios+0x74a/0x870 [ 39.425857] __warn.cold+0x2f/0x34 [ 39.429377] ? ist_end_non_atomic+0x10/0x10 [ 39.433675] ? tty_set_termios+0x74a/0x870 [ 39.437905] report_bug+0x216/0x254 [ 39.441510] do_error_trap+0x1bb/0x310 [ 39.445375] ? math_error+0x360/0x360 [ 39.449159] ? trace_hardirqs_on+0x10/0x10 [ 39.453375] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 39.458198] do_invalid_op+0x1b/0x20 [ 39.461898] invalid_op+0x1b/0x40 [ 39.465335] RIP: 0010:tty_set_termios+0x74a/0x870 [ 39.470158] RSP: 0018:ffff8880a6927ad8 EFLAGS: 00010297 [ 39.475499] RAX: ffff8880a691e580 RBX: ffff8880a6927b80 RCX: 0000000000000000 [ 39.482746] RDX: 0000000000000000 RSI: ffff8880a6927be8 RDI: ffff88821910e038 [ 39.489993] RBP: ffff8880a6927ba8 R08: dffffc0000000000 R09: ffff8880a6927858 [ 39.497246] R10: ffff8880a6927ca0 R11: ffff8880a691e580 R12: 1ffff11014d24f60 [ 39.504494] R13: ffff8880a6927be8 R14: ffff88821910e000 R15: ffff88808864cc00 [ 39.511754] ? tty_set_termios+0x74a/0x870 [ 39.515991] ? hci_dev_do_open+0x33/0xf90 [ 39.520132] ? tty_wait_until_sent+0x4c0/0x4c0 [ 39.524697] ? __mutex_lock+0x36a/0x1470 [ 39.528752] ? tty_termios_encode_baud_rate+0x2f5/0x3f0 [ 39.534095] hci_uart_set_baudrate+0x145/0x190 [ 39.538670] ? hci_uart_set_speeds+0x90/0x90 [ 39.543071] ? save_trace+0x290/0x290 [ 39.546848] ? process_one_work+0x787/0x1610 [ 39.551236] hci_uart_setup+0x98/0x430 [ 39.555099] ? hci_uart_set_baudrate+0x190/0x190 [ 39.559844] hci_dev_do_open+0x57f/0xf90 [ 39.563888] ? check_preemption_disabled+0x3c/0x250 [ 39.568889] hci_power_on+0x8d/0x3d0 [ 39.572589] process_one_work+0x868/0x1610 [ 39.576804] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 39.581454] worker_thread+0x5d9/0x1050 [ 39.585412] kthread+0x31c/0x430 [ 39.588755] ? process_one_work+0x1610/0x1610 [ 39.593228] ? kthread_create_on_node+0xd0/0xd0 [ 39.597880] ret_from_fork+0x3a/0x50 [ 39.602638] Kernel Offset: disabled [ 39.606335] Rebooting in 86400 seconds..