[ 41.568798] audit: type=1800 audit(1576533345.384:32): pid=7528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 45.864499] kauditd_printk_skb: 2 callbacks suppressed [ 45.864513] audit: type=1400 audit(1576533349.764:35): avc: denied { map } for pid=7702 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.90' (ECDSA) to the list of known hosts. executing program [ 52.573506] audit: type=1400 audit(1576533356.474:36): avc: denied { map } for pid=7714 comm="syz-executor137" path="/root/syz-executor137679926" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 52.658916] BUG: unable to handle kernel paging request at 000000010000000e [ 52.658922] PGD 93db6067 P4D 93db6067 PUD 0 [ 52.658939] Oops: 0002 [#1] PREEMPT SMP KASAN [ 52.658951] CPU: 0 PID: 7714 Comm: syz-executor137 Not tainted 4.19.89-syzkaller #0 [ 52.658958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.658975] RIP: 0010:insert_char+0x23d/0x450 [ 52.658986] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 01 0f 8e 32 01 00 00 d1 eb 41 0f b7 85 c8 03 00 00 4c 89 ff 89 d9 66 ab 49 8d bd 78 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 [ 52.658993] RSP: 0018:ffff888092647728 EFLAGS: 00010202 [ 52.659002] RAX: 0000000000000720 RBX: 0000000000000001 RCX: 0000000000000001 [ 52.659009] RDX: 1ffff11012078591 RSI: 000000010000000e RDI: 000000010000000e [ 52.659016] RBP: ffff888092647770 R08: ffff88807fda4700 R09: 0000000000000005 [ 52.659023] R10: ffffed1015d04732 R11: ffff8880ae823993 R12: 0000000000000000 [ 52.659030] R13: ffff8880903c28c0 R14: ffff8880903c2bf4 R15: 000000010000000e [ 52.659040] FS: 0000000002652880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 52.659048] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.659055] CR2: 000000010000000e CR3: 000000009177e000 CR4: 00000000001406f0 [ 52.659066] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.659072] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.659075] Call Trace: [ 52.659092] do_con_trol+0x3ca8/0x6070 [ 52.659107] ? reset_palette+0x190/0x190 [ 52.659122] ? kasan_check_read+0x11/0x20 [ 52.659140] ? __atomic_notifier_call_chain+0xfd/0x1a0 [ 52.659156] do_con_write.part.0+0xfd5/0x1eb0 [ 52.659177] ? do_con_trol+0x6070/0x6070 [ 52.659192] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 52.659206] ? add_wait_queue+0x112/0x170 [ 52.659216] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 52.659229] ? trace_hardirqs_on+0x67/0x220 [ 52.659242] con_write+0x46/0xd0 [ 52.659256] n_tty_write+0x3f9/0x1140 [ 52.659274] ? process_echoes+0x170/0x170 [ 52.659288] ? do_wait_intr_irq+0x2b0/0x2b0 [ 52.659304] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 52.659318] ? _copy_from_user+0xdd/0x150 [ 52.659334] tty_write+0x458/0x7a0 [ 52.659347] ? process_echoes+0x170/0x170 [ 52.659362] __vfs_write+0x114/0x810 [ 52.659375] ? tty_read+0x2a0/0x2a0 [ 52.659388] ? kernel_read+0x120/0x120 [ 52.659400] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 52.659412] ? __inode_security_revalidate+0xda/0x120 [ 52.659427] ? avc_policy_seqno+0xd/0x70 [ 52.659437] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 52.659449] ? selinux_file_permission+0x92/0x550 [ 52.659463] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 52.659474] ? security_file_permission+0x89/0x230 [ 52.659488] ? rw_verify_area+0x118/0x360 [ 52.659501] vfs_write+0x20c/0x560 [ 52.659515] ksys_write+0x14f/0x2d0 [ 52.659527] ? __ia32_sys_read+0xb0/0xb0 [ 52.659542] ? do_syscall_64+0x26/0x620 [ 52.659555] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.659566] ? do_syscall_64+0x26/0x620 [ 52.659580] __x64_sys_write+0x73/0xb0 [ 52.659593] do_syscall_64+0xfd/0x620 [ 52.659615] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.659624] RIP: 0033:0x4404f9 [ 52.659636] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b 14 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 52.659643] RSP: 002b:00007fff20248c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.659655] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004404f9 [ 52.659662] RDX: 0000000000000078 RSI: 0000000020000000 RDI: 0000000000000004 [ 52.659669] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 52.659676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401de0 [ 52.659681] R13: 0000000000401e70 R14: 0000000000000000 R15: 0000000000000000 [ 52.659692] Modules linked in: [ 52.659701] CR2: 000000010000000e [ 52.661385] ---[ end trace 83b6ec87c4d77f4a ]--- [ 52.661405] RIP: 0010:insert_char+0x23d/0x450 [ 52.661417] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 01 0f 8e 32 01 00 00 d1 eb 41 0f b7 85 c8 03 00 00 4c 89 ff 89 d9 66 ab 49 8d bd 78 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 [ 52.661423] RSP: 0018:ffff888092647728 EFLAGS: 00010202 [ 52.661432] RAX: 0000000000000720 RBX: 0000000000000001 RCX: 0000000000000001 [ 52.661440] RDX: 1ffff11012078591 RSI: 000000010000000e RDI: 000000010000000e [ 52.661448] RBP: ffff888092647770 R08: ffff88807fda4700 R09: 0000000000000005 [ 52.661455] R10: ffffed1015d04732 R11: ffff8880ae823993 R12: 0000000000000000 [ 52.661463] R13: ffff8880903c28c0 R14: ffff8880903c2bf4 R15: 000000010000000e [ 52.661473] FS: 0000000002652880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 52.661480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.661487] CR2: 0000000002118000 CR3: 000000009177e000 CR4: 00000000001406f0 [ 52.661499] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.661506] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.661512] Kernel panic - not syncing: Fatal exception [ 52.662691] Kernel Offset: disabled [ 53.150686] Rebooting in 86400 seconds..