[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 42.145633] kauditd_printk_skb: 9 callbacks suppressed [ 42.145649] audit: type=1400 audit(1538734827.771:35): avc: denied { map } for pid=5907 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.118' (ECDSA) to the list of known hosts. executing program [ 58.865570] audit: type=1400 audit(1538734844.491:36): avc: denied { map } for pid=5919 comm="syz-executor953" path="/root/syz-executor953306555" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 58.872818] ------------[ cut here ]------------ [ 58.896621] kernel BUG at security/keys/keyring.c:1214! [ 58.902191] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 58.907564] CPU: 1 PID: 5919 Comm: syz-executor953 Not tainted 4.19.0-rc6+ #47 [ 58.914917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.924329] RIP: 0010:__key_link_begin+0x23a/0x300 [ 58.929261] Code: fe 48 c7 c7 20 ae 67 89 e8 b3 36 23 fe eb ac e8 ec 64 42 fe 48 c7 c7 20 ae 67 89 e8 30 73 73 04 e9 e3 fe ff ff e8 d6 64 42 fe <0f> 0b e8 cf 64 42 fe 48 8d bb ce 00 00 00 48 b8 00 00 00 00 00 fc [ 58.948153] RSP: 0018:ffff8801c31b7b10 EFLAGS: 00010293 [ 58.953509] RAX: ffff8801c5c8a040 RBX: ffff8801d4e32080 RCX: ffffffff833c4ebf [ 58.960780] RDX: 0000000000000000 RSI: ffffffff833c50aa RDI: 0000000000000007 [ 58.968226] RBP: ffff8801c31b7b40 R08: ffff8801c5c8a040 R09: fffffbfff12cf4a4 [ 58.975489] R10: fffffbfff12cf4a4 R11: ffffffff8967a523 R12: ffff8801c31b7c48 [ 58.982757] R13: 0000000000000000 R14: ffff8801d4e32200 R15: ffff8801d4e32080 [ 58.990016] FS: 0000000001954880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 58.998299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.004178] CR2: 0000000020cab000 CR3: 00000001c7fbb000 CR4: 00000000001406e0 [ 59.011435] Call Trace: [ 59.014082] request_key_and_link+0x737/0x17a0 [ 59.018664] ? key_task_permission+0x1ba/0x390 [ 59.023251] ? call_sbin_request_key+0xf80/0xf80 [ 59.027995] ? keyring_alloc+0xc0/0xc0 [ 59.031868] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 59.037407] ? _copy_from_user+0xdf/0x150 [ 59.041548] __x64_sys_request_key+0x305/0x400 [ 59.046125] ? __ia32_sys_add_key+0x4f0/0x4f0 [ 59.050607] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.055969] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 59.061565] ? __sys_setresuid+0x6f3/0x820 [ 59.065869] do_syscall_64+0x1b9/0x820 [ 59.069759] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 59.075123] ? syscall_return_slowpath+0x5e0/0x5e0 [ 59.080035] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 59.084862] ? trace_hardirqs_on_caller+0x310/0x310 [ 59.089859] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 59.094866] ? prepare_exit_to_usermode+0x291/0x3b0 [ 59.099871] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 59.104709] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.110048] RIP: 0033:0x440169 [ 59.113269] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.132161] RSP: 002b:00007fff651a76c8 EFLAGS: 00000217 ORIG_RAX: 00000000000000f9 [ 59.139927] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440169 [ 59.147190] RDX: 00000000200001c0 RSI: 0000000020000180 RDI: 00000000200000c0 [ 59.154444] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 59.161699] R10: 0000000004e87c1a R11: 0000000000000217 R12: 00000000004019f0 [ 59.169053] R13: 0000000000401a80 R14: 0000000000000000 R15: 0000000000000000 [ 59.176310] Modules linked in: [ 59.180588] ---[ end trace f616935cee66aba3 ]--- [ 59.185390] RIP: 0010:__key_link_begin+0x23a/0x300 [ 59.190362] Code: fe 48 c7 c7 20 ae 67 89 e8 b3 36 23 fe eb ac e8 ec 64 42 fe 48 c7 c7 20 ae 67 89 e8 30 73 73 04 e9 e3 fe ff ff e8 d6 64 42 fe <0f> 0b e8 cf 64 42 fe 48 8d bb ce 00 00 00 48 b8 00 00 00 00 00 fc [ 59.209444] RSP: 0018:ffff8801c31b7b10 EFLAGS: 00010293 [ 59.214870] RAX: ffff8801c5c8a040 RBX: ffff8801d4e32080 RCX: ffffffff833c4ebf [ 59.222197] RDX: 0000000000000000 RSI: ffffffff833c50aa RDI: 0000000000000007 [ 59.229458] RBP: ffff8801c31b7b40 R08: ffff8801c5c8a040 R09: fffffbfff12cf4a4 [ 59.236784] R10: fffffbfff12cf4a4 R11: ffffffff8967a523 R12: ffff8801c31b7c48 [ 59.244164] R13: 0000000000000000 R14: ffff8801d4e32200 R15: ffff8801d4e32080 [ 59.251489] FS: 0000000001954880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 59.259757] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.265629] CR2: 0000000020cab000 CR3: 00000001c7fbb000 CR4: 00000000001406e0 [ 59.272949] Kernel panic - not syncing: Fatal exception [ 59.279226] Kernel Offset: disabled [ 59.282856] Rebooting in 86400 seconds..