Warning: Permanently added '10.128.10.8' (ECDSA) to the list of known hosts. [ 140.694135] random: sshd: uninitialized urandom read (32 bytes read) [ 140.792145] audit: type=1400 audit(1542177183.162:7): avc: denied { map } for pid=1824 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/11/14 06:33:03 parsed 1 programs [ 141.350888] audit: type=1400 audit(1542177183.722:8): avc: denied { map } for pid=1824 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=4999 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 142.101389] random: cc1: uninitialized urandom read (8 bytes read) 2018/11/14 06:33:05 executed programs: 0 [ 143.265255] audit: type=1400 audit(1542177185.632:9): avc: denied { map } for pid=1824 comm="syz-execprog" path="/root/syzkaller-shm942636015" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2018/11/14 06:33:12 executed programs: 6 2018/11/14 06:33:17 executed programs: 234 [ 156.401297] ================================================================== [ 156.408718] BUG: KASAN: user-memory-access in n_tty_set_termios+0xee/0xcb0 [ 156.415726] Write of size 512 at addr 0000000000001060 by task syz-executor4/6227 [ 156.423338] [ 156.424966] CPU: 1 PID: 6227 Comm: syz-executor4 Not tainted 4.14.80+ #5 [ 156.431794] Call Trace: [ 156.434404] dump_stack+0xb9/0x11b [ 156.437961] kasan_report.cold.6+0x6d/0x2dd [ 156.442284] ? n_tty_set_termios+0xee/0xcb0 [ 156.446611] memset+0x1f/0x40 [ 156.449719] n_tty_set_termios+0xee/0xcb0 [ 156.453870] ? process_echoes+0x140/0x140 [ 156.458019] tty_set_termios+0x5fd/0x860 [ 156.462091] ? tty_wait_until_sent+0x480/0x480 [ 156.466688] ? lock_downgrade+0x560/0x560 [ 156.470851] set_termios+0x2bf/0x440 [ 156.474579] ? __tty_perform_flush+0x200/0x200 [ 156.479180] tty_mode_ioctl+0x870/0x920 [ 156.483157] ? tty_perform_flush+0x70/0x70 [ 156.487394] ? __ldsem_down_read_nested+0xb6/0x5b0 [ 156.492326] ? __ldsem_down_read_nested+0xd4/0x5b0 [ 156.497271] ? hash_futex+0x12/0x200 [ 156.501040] ? __ldsem_wake+0x320/0x320 [ 156.505070] ? avc_has_extended_perms+0x406/0xd50 [ 156.509963] n_tty_ioctl_helper+0x3f/0x350 [ 156.514210] n_tty_ioctl+0x43/0x2e0 [ 156.517845] ? pty_write_room+0xc0/0xc0 [ 156.521828] tty_ioctl+0x551/0x13e0 [ 156.525472] ? n_tty_receive_buf+0x40/0x40 [ 156.529715] ? tty_vhangup+0x30/0x30 [ 156.533429] ? avc_ss_reset+0x100/0x100 [ 156.537415] ? __lock_acquire+0x619/0x4320 [ 156.541649] ? trace_hardirqs_on+0x10/0x10 [ 156.545886] ? trace_hardirqs_on+0x10/0x10 [ 156.550128] ? trace_hardirqs_on+0x10/0x10 [ 156.554360] ? kfree+0xf5/0x310 [ 156.557648] ? tty_vhangup+0x30/0x30 [ 156.561371] do_vfs_ioctl+0x1a0/0x1030 [ 156.565266] ? ioctl_preallocate+0x1d0/0x1d0 [ 156.569688] ? selinux_parse_skb.constprop.42+0x1a90/0x1a90 [ 156.575417] ? __lockdep_init_map+0x1c2/0x480 [ 156.579912] ? lock_acquire+0x10f/0x380 [ 156.583889] ? check_preemption_disabled+0x34/0x1e0 [ 156.588904] ? check_preemption_disabled+0x2b/0x1e0 [ 156.593927] ? __fget+0x22b/0x3a0 [ 156.597387] ? security_file_ioctl+0x7c/0xb0 [ 156.601801] SyS_ioctl+0x7e/0xb0 [ 156.605175] ? do_vfs_ioctl+0x1030/0x1030 [ 156.609332] do_syscall_64+0x19b/0x4b0 [ 156.613226] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 156.618413] RIP: 0033:0x457569 [ 156.621598] RSP: 002b:00007f166cb4ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.629309] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 156.636582] RDX: 0000000020000100 RSI: 0000000000005402 RDI: 0000000000000005 [ 156.643856] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 156.651120] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f166cb4b6d4 [ 156.658401] R13: 00000000004c0ffe R14: 00000000004d1d88 R15: 00000000ffffffff [ 156.665689] ================================================================== [ 156.673041] Disabling lock debugging due to kernel taint [ 156.684803] Kernel panic - not syncing: panic_on_warn set ... [ 156.684803] [ 156.692184] CPU: 1 PID: 6227 Comm: syz-executor4 Tainted: G B 4.14.80+ #5 [ 156.700242] Call Trace: [ 156.702850] dump_stack+0xb9/0x11b [ 156.706386] panic+0x1bf/0x3a4 [ 156.709581] ? add_taint.cold.4+0x16/0x16 [ 156.713728] ? ___preempt_schedule+0x16/0x18 [ 156.718140] kasan_end_report+0x43/0x49 [ 156.722115] kasan_report.cold.6+0x77/0x2dd [ 156.726436] ? n_tty_set_termios+0xee/0xcb0 [ 156.730754] memset+0x1f/0x40 [ 156.733856] n_tty_set_termios+0xee/0xcb0 [ 156.738002] ? process_echoes+0x140/0x140 [ 156.742148] tty_set_termios+0x5fd/0x860 [ 156.746211] ? tty_wait_until_sent+0x480/0x480 [ 156.750789] ? lock_downgrade+0x560/0x560 [ 156.754930] set_termios+0x2bf/0x440 [ 156.758643] ? __tty_perform_flush+0x200/0x200 [ 156.763219] tty_mode_ioctl+0x870/0x920 [ 156.767170] ? tty_perform_flush+0x70/0x70 [ 156.771383] ? __ldsem_down_read_nested+0xb6/0x5b0 [ 156.776292] ? __ldsem_down_read_nested+0xd4/0x5b0 [ 156.781199] ? hash_futex+0x12/0x200 [ 156.784895] ? __ldsem_wake+0x320/0x320 [ 156.788849] ? avc_has_extended_perms+0x406/0xd50 [ 156.793699] n_tty_ioctl_helper+0x3f/0x350 [ 156.797913] n_tty_ioctl+0x43/0x2e0 [ 156.801516] ? pty_write_room+0xc0/0xc0 [ 156.805473] tty_ioctl+0x551/0x13e0 [ 156.809105] ? n_tty_receive_buf+0x40/0x40 [ 156.813313] ? tty_vhangup+0x30/0x30 [ 156.817007] ? avc_ss_reset+0x100/0x100 [ 156.820971] ? __lock_acquire+0x619/0x4320 [ 156.825198] ? trace_hardirqs_on+0x10/0x10 [ 156.829410] ? trace_hardirqs_on+0x10/0x10 [ 156.833629] ? trace_hardirqs_on+0x10/0x10 [ 156.837840] ? kfree+0xf5/0x310 [ 156.841098] ? tty_vhangup+0x30/0x30 [ 156.844794] do_vfs_ioctl+0x1a0/0x1030 [ 156.848663] ? ioctl_preallocate+0x1d0/0x1d0 [ 156.853053] ? selinux_parse_skb.constprop.42+0x1a90/0x1a90 [ 156.858746] ? __lockdep_init_map+0x1c2/0x480 [ 156.863214] ? lock_acquire+0x10f/0x380 [ 156.867170] ? check_preemption_disabled+0x34/0x1e0 [ 156.872174] ? check_preemption_disabled+0x2b/0x1e0 [ 156.877176] ? __fget+0x22b/0x3a0 [ 156.880608] ? security_file_ioctl+0x7c/0xb0 [ 156.884996] SyS_ioctl+0x7e/0xb0 [ 156.888338] ? do_vfs_ioctl+0x1030/0x1030 [ 156.892464] do_syscall_64+0x19b/0x4b0 [ 156.896357] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 156.901538] RIP: 0033:0x457569 [ 156.904716] RSP: 002b:00007f166cb4ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.912398] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 156.919669] RDX: 0000000020000100 RSI: 0000000000005402 RDI: 0000000000000005 [ 156.926915] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 156.934158] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f166cb4b6d4 [ 156.941408] R13: 00000000004c0ffe R14: 00000000004d1d88 R15: 00000000ffffffff [ 156.948975] Kernel Offset: 0x17000000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 156.959877] Rebooting in 86400 seconds..