[   35.292758] audit: type=1800 audit(1564561360.938:33): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   40.515427] random: sshd: uninitialized urandom read (32 bytes read)
[   40.781825] kauditd_printk_skb: 1 callbacks suppressed
[   40.781834] audit: type=1400 audit(1564561366.428:35): avc:  denied  { map } for  pid=7173 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
[   40.840149] random: sshd: uninitialized urandom read (32 bytes read)
[   41.420579] random: sshd: uninitialized urandom read (32 bytes read)
[   43.027828] random: sshd: uninitialized urandom read (32 bytes read)
Warning: Permanently added '10.128.0.176' (ECDSA) to the list of known hosts.
[   48.556671] random: sshd: uninitialized urandom read (32 bytes read)
executing program
[   48.684787] audit: type=1400 audit(1564561374.328:36): avc:  denied  { map } for  pid=7185 comm="syz-executor200" path="/root/syz-executor200936004" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[   48.688050] kasan: CONFIG_KASAN_INLINE enabled
[   48.716239] kasan: GPF could be caused by NULL-ptr deref or user memory access
[   48.723993] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[   48.730216] Modules linked in:
[   48.733407] CPU: 0 PID: 7185 Comm: syz-executor200 Not tainted 4.14.135 #31
[   48.740497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   48.749846] task: ffff8880864d2600 task.stack: ffff888094fc8000
[   48.755948] RIP: 0010:vhost_chr_write_iter+0x4a9/0x1260
[   48.761295] RSP: 0018:ffff888094fcfb90 EFLAGS: 00010246
[   48.766677] RAX: 0000000000000002 RBX: dffffc0000000000 RCX: 0000000000000000
[   48.773931] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff888095ee0240
[   48.781187] RBP: ffff888094fcfcb0 R08: dffffc0000000000 R09: 0000000000000000
[   48.788636] R10: ffff888094fcfb80 R11: ffff8880864d2600 R12: ffff888095ee4948
[   48.796057] R13: 0000000000000000 R14: ffff888095ee0180 R15: 0000000000000000
[   48.803327] FS:  00000000006f0880(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000
[   48.811564] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   48.817491] CR2: 00000000200001c0 CR3: 000000009f418000 CR4: 00000000001406f0
[   48.824761] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   48.832156] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   48.839500] Call Trace:
[   48.842118]  ? putname+0xdb/0x120
[   48.845578]  ? do_sys_open+0x21c/0x430
[   48.849473]  ? SyS_openat+0x30/0x40
[   48.853109]  ? do_syscall_64+0x1e8/0x640
[   48.857182]  ? vhost_new_umem_range+0x6b0/0x6b0
[   48.861861]  vhost_net_chr_write_iter+0x59/0x70
[   48.866711]  __vfs_write+0x4a7/0x6b0
[   48.870442]  ? kernel_read+0x120/0x120
[   48.874316]  ? rw_verify_area+0xea/0x2b0
[   48.878364]  vfs_write+0x198/0x500
[   48.881902]  SyS_write+0xfd/0x230
[   48.885338]  ? SyS_read+0x230/0x230
[   48.888946]  ? do_syscall_64+0x53/0x640
[   48.892902]  ? SyS_read+0x230/0x230
[   48.896774]  do_syscall_64+0x1e8/0x640
[   48.900645]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[   48.905496]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[   48.910673] RIP: 0033:0x440209
[   48.913936] RSP: 002b:00007fff04fc69c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   48.921634] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440209
[   48.928909] RDX: 0000000000000068 RSI: 0000000020000580 RDI: 0000000000000003
[   48.936164] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8
[   48.943434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401a90
[   48.950710] R13: 0000000000401b20 R14: 0000000000000000 R15: 0000000000000000
[   48.957999] Code: ff ff 48 89 f9 48 c1 e9 03 80 3c 11 00 0f 85 9c 0c 00 00 49 8b 8e c0 00 00 00 48 ba 00 00 00 00 00 fc ff df 49 89 cf 48 c1 e9 03 <80> 3c 11 00 0f 85 61 0c 00 00 4d 8b 27 4d 85 e4 0f 84 27 09 00 
[   48.977247] RIP: vhost_chr_write_iter+0x4a9/0x1260 RSP: ffff888094fcfb90
[   48.984818] ---[ end trace e182bfeb64122d2c ]---
[   48.989588] Kernel panic - not syncing: Fatal exception
[   48.996386] Kernel Offset: disabled
[   49.000008] Rebooting in 86400 seconds..