[ 38.608118] audit: type=1800 audit(1556259051.578:32): pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 39.369702] audit: type=1800 audit(1556259052.428:33): pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.182' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 49.407927] kauditd_printk_skb: 2 callbacks suppressed [ 49.407942] audit: type=1400 audit(1556259062.468:36): avc: denied { map } for pid=7702 comm="syz-executor051" path="/root/syz-executor051457885" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 49.420248] ------------[ cut here ]------------ [ 49.449108] memory commitment underflow [ 49.449247] WARNING: CPU: 0 PID: 7710 at mm/util.c:650 __vm_enough_memory+0x47f/0x5a0 [ 49.455660] audit: type=1400 audit(1556259062.478:37): avc: denied { map } for pid=7710 comm="syz-executor051" path="/dev/ashmem" dev="devtmpfs" ino=1521 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 49.461193] Kernel panic - not syncing: panic_on_warn set ... [ 49.461193] [ 49.461208] CPU: 0 PID: 7710 Comm: syz-executor051 Not tainted 4.19.36 #4 [ 49.461216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.461221] Call Trace: [ 49.461240] dump_stack+0x172/0x1f0 [ 49.461259] panic+0x263/0x51d [ 49.519042] ? __warn_printk+0xf3/0xf3 [ 49.522917] ? __vm_enough_memory+0x47f/0x5a0 [ 49.527398] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.532928] ? __warn.cold+0x5/0x54 [ 49.536546] ? __warn+0xe8/0x1d0 [ 49.539897] ? __vm_enough_memory+0x47f/0x5a0 [ 49.544375] __warn.cold+0x20/0x54 [ 49.547900] ? trace_hardirqs_on+0x67/0x230 [ 49.552206] ? __vm_enough_memory+0x47f/0x5a0 [ 49.556716] report_bug+0x263/0x2b0 [ 49.560354] do_error_trap+0x204/0x360 [ 49.564237] ? math_error+0x340/0x340 [ 49.568034] ? wake_up_klogd+0x99/0xd0 [ 49.571909] ? vprintk_emit+0x1ab/0x690 [ 49.575888] ? error_entry+0x76/0xd0 [ 49.579609] ? trace_hardirqs_off_caller+0x65/0x220 [ 49.584614] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.589444] do_invalid_op+0x1b/0x20 [ 49.593145] invalid_op+0x14/0x20 [ 49.596586] RIP: 0010:__vm_enough_memory+0x47f/0x5a0 [ 49.601681] Code: e8 16 97 db ff 0f b6 75 d0 40 84 f6 0f 85 4c fc ff ff e8 c4 95 db ff 48 c7 c7 60 b9 52 87 c6 05 bd 44 a6 07 01 e8 df 71 af ff <0f> 0b 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 0f b6 14 [ 49.620565] RSP: 0018:ffff888096f47a68 EFLAGS: 00010286 [ 49.625914] RAX: 0000000000000000 RBX: fff8000000000000 RCX: 0000000000000000 [ 49.633169] RDX: 0000000000000000 RSI: ffffffff8155df26 RDI: ffffed1012de8f3f [ 49.640510] RBP: ffff888096f47aa0 R08: ffff888091038580 R09: ffffed1015d03ee3 [ 49.647764] R10: ffffed1015d03ee2 R11: ffff8880ae81f717 R12: 0000000000000001 [ 49.655016] R13: ffff888099289180 R14: ffffffff88821580 R15: 0000000000000c68 [ 49.662296] ? vprintk_func+0x86/0x189 [ 49.666183] ? __vm_enough_memory+0x47f/0x5a0 [ 49.670668] security_vm_enough_memory_mm+0xa0/0xd0 [ 49.675675] __shmem_file_setup.part.0+0x194/0x2b0 [ 49.680587] shmem_file_setup+0x66/0x90 [ 49.684545] ashmem_mmap+0x35f/0x520 [ 49.688244] mmap_region+0xc34/0x1760 [ 49.692024] ? file_map_prot_check+0x1f7/0x390 [ 49.696597] ? __x64_sys_brk+0x6c0/0x6c0 [ 49.700658] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 49.706180] ? get_unmapped_area+0x295/0x3b0 [ 49.710574] do_mmap+0x8e2/0x1080 [ 49.714017] vm_mmap_pgoff+0x1c5/0x230 [ 49.717892] ? vma_is_stack_for_current+0xd0/0xd0 [ 49.722722] ? iterate_fd+0x360/0x360 [ 49.726516] ksys_mmap_pgoff+0x4aa/0x630 [ 49.730590] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 49.735511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.741049] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 49.745793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 49.750531] ? do_syscall_64+0x26/0x610 [ 49.754489] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.759850] __x64_sys_mmap+0xe9/0x1b0 [ 49.763732] do_syscall_64+0x103/0x610 [ 49.767625] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.772851] RIP: 0033:0x441289 [ 49.776026] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 49.794910] RSP: 002b:00007ffe2aa101b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 49.802606] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441289 [ 49.809894] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 49.817171] RBP: 00000000006cb018 R08: 0000000000000003 R09: 0000000000000000 [ 49.824425] R10: 0080000000000012 R11: 0000000000000246 R12: 0000000000402000 [ 49.831678] R13: 0000000000402090 R14: 0000000000000000 R15: 0000000000000000 [ 49.840084] Kernel Offset: disabled [ 49.843783] Rebooting in 86400 seconds..