[ 42.569861] audit: type=1800 audit(1575318501.382:32): pid=7532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 46.203716] kauditd_printk_skb: 2 callbacks suppressed [ 46.203729] audit: type=1400 audit(1575318505.092:35): avc: denied { map } for pid=7709 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.120' (ECDSA) to the list of known hosts. executing program [ 52.850426] audit: type=1400 audit(1575318511.742:36): avc: denied { map } for pid=7721 comm="syz-executor178" path="/root/syz-executor178939741" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 52.940622] divide error: 0000 [#1] PREEMPT SMP KASAN [ 52.940634] CPU: 0 PID: 2678 Comm: kworker/0:2 Not tainted 4.19.87-syzkaller #0 [ 52.940640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.940655] Workqueue: events console_callback [ 52.940671] RIP: 0010:fbcon_switch+0x20d/0x1a40 [ 52.940682] Code: 47 e9 07 4c 89 3d 53 47 e9 07 38 d0 7c 08 84 d2 0f 85 3b 16 00 00 41 8b 9d 3c 03 00 00 31 d2 bf 05 00 00 00 8b 05 73 c1 bc 05 f3 41 89 c4 89 c6 e8 a7 84 e9 fd 41 83 fc 05 0f 8e a6 0d 00 00 [ 52.940689] RSP: 0018:ffff88809fa879d8 EFLAGS: 00010246 [ 52.940698] RAX: 0000000000008000 RBX: 0000000000000000 RCX: ffffffff83819094 [ 52.940705] RDX: 0000000000000000 RSI: ffffffff838190a2 RDI: 0000000000000005 [ 52.940712] RBP: ffff88809fa87b68 R08: ffff88809fa902c0 R09: fffffbfff139874c [ 52.940719] R10: fffffbfff139874b R11: ffffffff89cc3a5f R12: 0000000000000000 [ 52.940726] R13: ffff8880952ca900 R14: ffff88821976eec0 R15: ffff888219780040 [ 52.940736] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 52.940744] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.940751] CR2: 00007f899bd5c000 CR3: 00000000a4205000 CR4: 00000000001406f0 [ 52.940762] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.940769] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.940773] Call Trace: [ 52.940789] ? fbcon_set_def_font+0x360/0x360 [ 52.940803] ? mark_held_locks+0xb1/0x100 [ 52.940817] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 52.940830] ? kernfs_notify+0xb6/0x170 [ 52.940841] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 52.940855] ? lockdep_hardirqs_on+0x415/0x5d0 [ 52.940869] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 52.940879] ? kernfs_put+0x3c2/0x5d0 [ 52.940890] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 52.940901] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 52.940911] ? fbcon_set_origin+0x2b/0x50 [ 52.940920] ? fbcon_scrolldelta+0x1330/0x1330 [ 52.940931] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 52.940947] redraw_screen+0x37d/0x8e0 [ 52.940962] ? con_flush_chars+0xa0/0xa0 [ 52.940973] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 52.940983] ? get_color+0x225/0x430 [ 52.940997] complete_change_console+0x105/0x3a0 [ 52.941009] change_console+0x19b/0x2c0 [ 52.941020] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 52.941032] console_callback+0x3a1/0x400 [ 52.941042] ? poke_blanked_console+0x270/0x270 [ 52.941058] process_one_work+0x989/0x1750 [ 52.941075] ? pwq_dec_nr_in_flight+0x320/0x320 [ 52.941084] ? lock_acquire+0x16f/0x3f0 [ 52.941099] ? kasan_check_write+0x14/0x20 [ 52.941110] ? do_raw_spin_lock+0xc8/0x240 [ 52.941125] worker_thread+0x98/0xe40 [ 52.941137] ? trace_hardirqs_on+0x67/0x220 [ 52.941156] kthread+0x354/0x420 [ 52.941168] ? process_one_work+0x1750/0x1750 [ 52.941180] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 52.941189] ret_from_fork+0x24/0x30 [ 52.941200] Modules linked in: [ 52.941216] ---[ end trace c2aa70597b96deec ]--- [ 52.941229] RIP: 0010:fbcon_switch+0x20d/0x1a40 [ 52.941241] Code: 47 e9 07 4c 89 3d 53 47 e9 07 38 d0 7c 08 84 d2 0f 85 3b 16 00 00 41 8b 9d 3c 03 00 00 31 d2 bf 05 00 00 00 8b 05 73 c1 bc 05 f3 41 89 c4 89 c6 e8 a7 84 e9 fd 41 83 fc 05 0f 8e a6 0d 00 00 [ 52.941248] RSP: 0018:ffff88809fa879d8 EFLAGS: 00010246 [ 52.941258] RAX: 0000000000008000 RBX: 0000000000000000 RCX: ffffffff83819094 [ 52.941265] RDX: 0000000000000000 RSI: ffffffff838190a2 RDI: 0000000000000005 [ 52.941273] RBP: ffff88809fa87b68 R08: ffff88809fa902c0 R09: fffffbfff139874c [ 52.941280] R10: fffffbfff139874b R11: ffffffff89cc3a5f R12: 0000000000000000 [ 52.941288] R13: ffff8880952ca900 R14: ffff88821976eec0 R15: ffff888219780040 [ 52.941298] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 52.941306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.941314] CR2: 00007f899bd5c000 CR3: 00000000a4205000 CR4: 00000000001406f0 [ 52.941321] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.941328] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.941334] Kernel panic - not syncing: Fatal exception [ 52.942850] Kernel Offset: disabled [ 53.347087] Rebooting in 86400 seconds..