Warning: Permanently added '10.128.10.1' (ECDSA) to the list of known hosts. syzkaller login: [ 99.646405][ T26] audit: type=1400 audit(1579992705.234:42): avc: denied { map } for pid=10595 comm="syz-executor038" path="/root/syz-executor038153844" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 99.693050][T10604] IPVS: ftp: loaded support on port[0] = 21 [ 99.693057][T10602] IPVS: ftp: loaded support on port[0] = 21 [ 99.701889][T10603] IPVS: ftp: loaded support on port[0] = 21 [ 99.707379][T10607] IPVS: ftp: loaded support on port[0] = 21 [ 99.713221][T10605] IPVS: ftp: loaded support on port[0] = 21 [ 99.719214][T10606] IPVS: ftp: loaded support on port[0] = 21 executing program executing program executing program executing program executing program executing program [ 99.958298][T10610] kasan: CONFIG_KASAN_INLINE enabled [ 99.958325][T10610] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 99.958350][T10610] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 99.958365][T10610] CPU: 0 PID: 10610 Comm: syz-executor038 Not tainted 5.5.0-rc7-syzkaller #0 [ 99.958373][T10610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.958394][T10610] RIP: 0010:do_con_write.part.0+0xa01/0x1ef0 [ 99.958409][T10610] Code: 7e fe ff ff 45 01 ef e8 bd 71 87 fd 48 8b 85 c8 fe ff ff 80 38 00 0f 85 71 12 00 00 49 8b 9e a0 03 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 14 20 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 [ 99.958416][T10610] RSP: 0018:ffffc9000213f828 EFLAGS: 00010203 [ 99.958426][T10610] RAX: 0000000020000001 RBX: 000000010000000e RCX: ffffffff83ed8550 [ 99.958433][T10610] RDX: 0000000000000000 RSI: ffffffff83ed85a3 RDI: 0000000000000003 [ 99.958441][T10610] RBP: ffffc9000213f9b8 R08: ffff888096ada480 R09: ffff888096adad10 [ 99.958449][T10610] R10: fffffbfff14f69c0 R11: ffffffff8a7b4e07 R12: dffffc0000000000 [ 99.958456][T10610] R13: 0000000000000000 R14: ffff8880a7c5b000 R15: 0000000000000764 [ 99.958467][T10610] FS: 0000000000b7e880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 99.958475][T10610] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.958483][T10610] CR2: 00007f1f3e2d8000 CR3: 000000009e79b000 CR4: 00000000001406f0 [ 99.958494][T10610] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.958501][T10610] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.958505][T10610] Call Trace: [ 99.958530][T10610] ? do_con_trol+0x61b0/0x61b0 [ 99.958544][T10610] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 99.958556][T10610] ? add_wait_queue+0x112/0x170 [ 99.958570][T10610] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 99.958588][T10610] ? trace_hardirqs_on+0x67/0x240 [ 99.958605][T10610] con_write+0x46/0xd0 [ 99.958621][T10610] n_tty_write+0x40e/0x1080 [ 99.958642][T10610] ? n_tty_read+0x1bf0/0x1bf0 [ 99.958655][T10610] ? prepare_to_wait_exclusive+0x320/0x320 [ 99.958673][T10610] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 99.958689][T10610] ? _copy_from_user+0x12c/0x1a0 [ 99.958705][T10610] tty_write+0x496/0x7f0 [ 99.958723][T10610] ? n_tty_read+0x1bf0/0x1bf0 [ 99.958739][T10610] do_iter_write+0x4a0/0x610 [ 99.958751][T10610] ? dup_iter+0x260/0x260 [ 99.958769][T10610] vfs_writev+0x1b3/0x2f0 [ 99.958783][T10610] ? vfs_iter_write+0xb0/0xb0 [ 99.958794][T10610] ? find_held_lock+0x35/0x130 [ 99.958811][T10610] ? __do_page_fault+0x56a/0xd80 [ 99.958827][T10610] ? lock_downgrade+0x920/0x920 [ 99.958845][T10610] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 99.958860][T10610] ? debug_smp_processor_id+0x33/0x18a [ 99.958876][T10610] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 99.958889][T10610] ? __fget_light+0x1a9/0x230 [ 99.958905][T10610] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 99.958919][T10610] do_writev+0x15b/0x330 [ 99.958933][T10610] ? vfs_writev+0x2f0/0x2f0 [ 99.958954][T10610] ? do_syscall_64+0x26/0x790 [ 99.958968][T10610] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 99.958983][T10610] ? do_syscall_64+0x26/0x790 [ 99.958999][T10610] __x64_sys_writev+0x75/0xb0 [ 99.959015][T10610] do_syscall_64+0xfa/0x790 [ 99.959032][T10610] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 99.959041][T10610] RIP: 0033:0x4416b9 [ 99.959055][T10610] Code: e8 2c e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 99.959063][T10610] RSP: 002b:00007ffeb1753918 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 99.959075][T10610] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004416b9 [ 99.959083][T10610] RDX: 0000000000000001 RSI: 0000000020001440 RDI: 0000000000000003 [ 99.959091][T10610] RBP: 00000000004a2bf0 R08: 000000000000000e R09: 0000000120080522 [ 99.959099][T10610] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004024d0 [ 99.959107][T10610] R13: 0000000000402560 R14: 0000000000000000 R15: 0000000000000000 [ 99.959119][T10610] Modules linked in: [ 99.959136][T10610] ---[ end trace 4b4af6d5f8b716a9 ]--- [ 99.959153][T10610] RIP: 0010:do_con_write.part.0+0xa01/0x1ef0 [ 99.959167][T10610] Code: 7e fe ff ff 45 01 ef e8 bd 71 87 fd 48 8b 85 c8 fe ff ff 80 38 00 0f 85 71 12 00 00 49 8b 9e a0 03 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 14 20 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 [ 99.959174][T10610] RSP: 0018:ffffc9000213f828 EFLAGS: 00010203 [ 99.959185][T10610] RAX: 0000000020000001 RBX: 000000010000000e RCX: ffffffff83ed8550 [ 99.959194][T10610] RDX: 0000000000000000 RSI: ffffffff83ed85a3 RDI: 0000000000000003 [ 99.959202][T10610] RBP: ffffc9000213f9b8 R08: ffff888096ada480 R09: ffff888096adad10 [ 99.959211][T10610] R10: fffffbfff14f69c0 R11: ffffffff8a7b4e07 R12: dffffc0000000000 [ 99.959219][T10610] R13: 0000000000000000 R14: ffff8880a7c5b000 R15: 0000000000000764 [ 99.959230][T10610] FS: 0000000000b7e880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 99.959239][T10610] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.959248][T10610] CR2: 00007f1f3e2d8000 CR3: 000000009e79b000 CR4: 00000000001406f0 [ 99.959258][T10610] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.959266][T10610] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.959273][T10610] Kernel panic - not syncing: Fatal exception [ 99.960813][T10610] Kernel Offset: disabled