Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 30.756245] audit: type=1400 audit(1588977247.721:8): avc: denied { execmem } for pid=6299 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 31.052816] IPVS: ftp: loaded support on port[0] = 21 [ 32.253892] can: request_module (can-proto-0) failed. [ 32.264753] can: request_module (can-proto-0) failed. [ 32.274077] can: request_module (can-proto-0) failed. [ 32.304086] audit: type=1400 audit(1588977249.272:9): avc: denied { create } for pid=6278 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.1.45' (ECDSA) to the list of known hosts. 2020/05/08 22:34:16 parsed 1 programs 2020/05/08 22:34:17 executed programs: 0 [ 40.130638] audit: type=1400 audit(1588977257.096:10): avc: denied { execmem } for pid=6417 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 40.388297] IPVS: ftp: loaded support on port[0] = 21 [ 41.147673] IPVS: ftp: loaded support on port[0] = 21 [ 41.215285] chnl_net:caif_netlink_parms(): no params data found [ 41.259041] IPVS: ftp: loaded support on port[0] = 21 [ 41.269476] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.275882] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.284945] device bridge_slave_0 entered promiscuous mode [ 41.293113] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.300387] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.308686] device bridge_slave_1 entered promiscuous mode [ 41.329575] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.342535] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.366249] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.374092] team0: Port device team_slave_0 added [ 41.383708] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.391868] team0: Port device team_slave_1 added [ 41.401720] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.421827] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.484300] chnl_net:caif_netlink_parms(): no params data found [ 41.500455] IPVS: ftp: loaded support on port[0] = 21 [ 41.549926] device hsr_slave_0 entered promiscuous mode [ 41.587319] device hsr_slave_1 entered promiscuous mode [ 41.627841] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 41.635156] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.740699] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.747322] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.754343] device bridge_slave_0 entered promiscuous mode [ 41.762220] chnl_net:caif_netlink_parms(): no params data found [ 41.779394] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.785761] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.793737] device bridge_slave_1 entered promiscuous mode [ 41.806153] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.813671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.820939] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.827481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.850234] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.863534] IPVS: ftp: loaded support on port[0] = 21 [ 41.879129] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.903831] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.913460] team0: Port device team_slave_0 added [ 41.941204] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.948641] team0: Port device team_slave_1 added [ 41.954434] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.964879] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.971557] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.978946] device bridge_slave_0 entered promiscuous mode [ 41.987482] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.993888] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.001237] device bridge_slave_1 entered promiscuous mode [ 42.008012] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.035276] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.045584] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.076390] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.084188] team0: Port device team_slave_0 added [ 42.137178] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.144268] team0: Port device team_slave_1 added [ 42.150646] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.190243] device hsr_slave_0 entered promiscuous mode [ 42.237162] device hsr_slave_1 entered promiscuous mode [ 42.296247] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.304528] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.314190] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.327989] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.343877] chnl_net:caif_netlink_parms(): no params data found [ 42.365670] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.389835] IPVS: ftp: loaded support on port[0] = 21 [ 42.401102] device hsr_slave_0 entered promiscuous mode [ 42.457220] device hsr_slave_1 entered promiscuous mode [ 42.504301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.519110] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.529791] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.539392] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.575729] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.597162] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.606299] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 42.639729] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.647973] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.655324] device bridge_slave_0 entered promiscuous mode [ 42.678898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.688302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.698448] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 42.704542] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.732662] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.739203] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.746096] device bridge_slave_1 entered promiscuous mode [ 42.779690] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.794862] chnl_net:caif_netlink_parms(): no params data found [ 42.805353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 42.815791] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.841395] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.849602] team0: Port device team_slave_0 added [ 42.860177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.868895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.877109] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.883473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.894288] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 42.904515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.915211] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.923676] team0: Port device team_slave_1 added [ 42.936162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.944771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.953079] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.959518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.969615] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 42.979962] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.987934] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.002469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.011145] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.021889] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.051427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.060138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.069354] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.085950] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.092636] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.114018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.127683] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.164154] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.170790] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.180946] device bridge_slave_0 entered promiscuous mode [ 43.230753] device hsr_slave_0 entered promiscuous mode [ 43.267165] device hsr_slave_1 entered promiscuous mode [ 43.329679] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.338605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.347789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.355570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.363674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.372013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.380109] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.388355] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.416117] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.422663] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.431300] device bridge_slave_1 entered promiscuous mode [ 43.442948] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.450401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.459873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.468442] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.474820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.482757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.497631] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.507402] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 43.525725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.532263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.541365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.550217] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.556808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.563740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.572182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.583830] chnl_net:caif_netlink_parms(): no params data found [ 43.609531] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.622056] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.632589] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.641299] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.651546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 43.661379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.670497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.678839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.689941] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 43.723242] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.730557] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.738972] device bridge_slave_0 entered promiscuous mode [ 43.747435] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 43.753558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.761780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.772387] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 43.780887] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.790273] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.796477] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.809904] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.817059] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.824224] device bridge_slave_1 entered promiscuous mode [ 43.846848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.854621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.862741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.870679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.879858] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 43.889778] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.899567] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.908433] team0: Port device team_slave_0 added [ 43.914944] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.927575] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.939634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.946966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.954800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.962807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.971083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.979530] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.986054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.995475] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.003538] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.012074] team0: Port device team_slave_1 added [ 44.018344] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.027141] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.042405] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.058148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.066982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.074037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.082630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.090786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.099211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.107135] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.113627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.123546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.133476] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 44.141422] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.161146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.168966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.177891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.184672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.194344] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.201375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.213696] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.221385] team0: Port device team_slave_0 added [ 44.258900] device hsr_slave_0 entered promiscuous mode [ 44.296536] device hsr_slave_1 entered promiscuous mode [ 44.337250] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.348388] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.355475] team0: Port device team_slave_1 added [ 44.361765] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.371350] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 44.380633] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 44.388996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.399713] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.408530] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.423068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.435246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.451497] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 44.464857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.492633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.502263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.513389] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.569555] device hsr_slave_0 entered promiscuous mode [ 44.608079] device hsr_slave_1 entered promiscuous mode [ 44.624985] ================================================================== [ 44.625014] BUG: KASAN: user-memory-access in insert_char+0xc3/0x280 [ 44.625019] Read of size 212 at addr 00000000ffffff3a by task syz-executor.2/7307 [ 44.625021] [ 44.625035] CPU: 1 PID: 7307 Comm: syz-executor.2 Not tainted 4.14.179-syzkaller #0 [ 44.625038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.625042] Call Trace: [ 44.625054] dump_stack+0xf7/0x13b [ 44.625059] ? insert_char+0xc3/0x280 [ 44.625068] kasan_report.cold.8+0x6d/0x2d3 [ 44.625076] check_memory_region+0x13e/0x1b0 [ 44.625080] memmove+0x23/0x50 [ 44.625085] insert_char+0xc3/0x280 [ 44.625091] do_con_trol+0x1f3c/0x61a0 [ 44.625097] ? reset_palette+0x200/0x200 [ 44.625106] ? lock_downgrade+0x7f0/0x7f0 [ 44.625120] ? __atomic_notifier_call_chain+0x9e/0x110 [ 44.625128] do_con_write.part.22+0x9bc/0x19c0 [ 44.625136] ? n_tty_write+0x2fe/0x1040 [ 44.625143] ? __mutex_lock+0x541/0x14c0 [ 44.625148] ? trace_hardirqs_off+0x10/0x10 [ 44.625153] ? n_tty_write+0x2fe/0x1040 [ 44.625165] ? do_con_trol+0x61a0/0x61a0 [ 44.625172] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 44.625177] ? trace_hardirqs_on_caller+0x40c/0x580 [ 44.625183] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 44.625190] con_write+0x1f/0x80 [ 44.625194] n_tty_write+0x498/0x1040 [ 44.625206] ? process_echoes+0x130/0x130 [ 44.625210] ? do_wait_intr_irq+0x300/0x300 [ 44.625216] ? kasan_check_write+0x14/0x20 [ 44.625222] tty_write+0x346/0x770 [ 44.625228] ? process_echoes+0x130/0x130 [ 44.625241] __vfs_write+0xdb/0x840 [ 44.625246] ? kernel_read+0x130/0x130 [ 44.625252] ? __might_sleep+0x93/0xb0 [ 44.625262] ? __inode_security_revalidate+0xd3/0x100 [ 44.625269] ? selinux_file_permission+0x31f/0x3e0 [ 44.625278] ? security_file_permission+0x6e/0x1c0 [ 44.625288] ? rw_verify_area+0xb8/0x2b0 [ 44.625295] vfs_write+0x150/0x4f0 [ 44.625302] SyS_write+0x100/0x250 [ 44.625308] ? SyS_read+0x250/0x250 [ 44.625312] ? security_file_ioctl+0x6a/0xa0 [ 44.625322] ? do_syscall_64+0x4c/0x5b0 [ 44.625328] ? SyS_read+0x250/0x250 [ 44.625333] do_syscall_64+0x1c7/0x5b0 [ 44.625338] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 44.625347] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 44.625352] RIP: 0033:0x45a6f9 [ 44.625356] RSP: 002b:00007fd603153c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 44.625363] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a6f9 [ 44.625366] RDX: 0000000000000078 RSI: 0000000020000000 RDI: 0000000000000004 [ 44.625369] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 44.625372] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd6031546d4 [ 44.625376] R13: 00000000004cbbaf R14: 00000000004e5858 R15: 00000000ffffffff [ 44.625388] ================================================================== [ 44.625391] Disabling lock debugging due to kernel taint [ 44.625394] Kernel panic - not syncing: panic_on_warn set ... [ 44.625394] [ 44.625398] CPU: 1 PID: 7307 Comm: syz-executor.2 Tainted: G B 4.14.179-syzkaller #0 [ 44.625400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.625402] Call Trace: [ 44.625406] dump_stack+0xf7/0x13b [ 44.625410] ? insert_char+0xc3/0x280 [ 44.625415] panic+0x1b0/0x358 [ 44.625418] ? add_taint.cold.5+0x11/0x11 [ 44.625422] ? lock_downgrade+0x7f0/0x7f0 [ 44.625428] ? insert_char+0xc3/0x280 [ 44.625432] kasan_end_report+0x47/0x4f [ 44.625436] kasan_report.cold.8+0x76/0x2d3 [ 44.625441] check_memory_region+0x13e/0x1b0 [ 44.625445] memmove+0x23/0x50 [ 44.625450] insert_char+0xc3/0x280 [ 44.625455] do_con_trol+0x1f3c/0x61a0 [ 44.625460] ? reset_palette+0x200/0x200 [ 44.625464] ? lock_downgrade+0x7f0/0x7f0 [ 44.625470] ? __atomic_notifier_call_chain+0x9e/0x110 [ 44.625475] do_con_write.part.22+0x9bc/0x19c0 [ 44.625478] ? n_tty_write+0x2fe/0x1040 [ 44.625482] ? __mutex_lock+0x541/0x14c0 [ 44.625486] ? trace_hardirqs_off+0x10/0x10 [ 44.625489] ? n_tty_write+0x2fe/0x1040 [ 44.625496] ? do_con_trol+0x61a0/0x61a0 [ 44.625500] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 44.625505] ? trace_hardirqs_on_caller+0x40c/0x580 [ 44.625509] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 44.625514] con_write+0x1f/0x80 [ 44.625517] n_tty_write+0x498/0x1040 [ 44.625526] ? process_echoes+0x130/0x130 [ 44.625529] ? do_wait_intr_irq+0x300/0x300 [ 44.625534] ? kasan_check_write+0x14/0x20 [ 44.625538] tty_write+0x346/0x770 [ 44.625543] ? process_echoes+0x130/0x130 [ 44.625547] __vfs_write+0xdb/0x840 [ 44.625551] ? kernel_read+0x130/0x130 [ 44.625554] ? __might_sleep+0x93/0xb0 [ 44.625558] ? __inode_security_revalidate+0xd3/0x100 [ 44.625563] ? selinux_file_permission+0x31f/0x3e0 [ 44.625568] ? security_file_permission+0x6e/0x1c0 [ 44.625573] ? rw_verify_area+0xb8/0x2b0 [ 44.625577] vfs_write+0x150/0x4f0 [ 44.625582] SyS_write+0x100/0x250 [ 44.625586] ? SyS_read+0x250/0x250 [ 44.625589] ? security_file_ioctl+0x6a/0xa0 [ 44.625593] ? do_syscall_64+0x4c/0x5b0 [ 44.625597] ? SyS_read+0x250/0x250 [ 44.625601] do_syscall_64+0x1c7/0x5b0 [ 44.625605] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 44.625611] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 44.625614] RIP: 0033:0x45a6f9 [ 44.625616] RSP: 002b:00007fd603153c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 44.625621] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a6f9 [ 44.625623] RDX: 0000000000000078 RSI: 0000000020000000 RDI: 0000000000000004 [ 44.625625] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 44.625628] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd6031546d4 [ 44.625630] R13: 00000000004cbbaf R14: 00000000004e5858 R15: 00000000ffffffff [ 44.627228] Kernel Offset: disabled [ 45.185650] Rebooting in 86400 seconds..