[ 81.564319][ T26] audit: type=1400 audit(1576070604.945:37): avc: denied { watch } for pid=9890 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [ 81.608154][ T26] audit: type=1400 audit(1576070604.945:38): avc: denied { watch } for pid=9890 comm="restorecond" path="/etc/selinux/restorecond.conf" dev="sda1" ino=2232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 81.843066][ T26] audit: type=1800 audit(1576070605.225:39): pid=9795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 81.865428][ T26] audit: type=1800 audit(1576070605.225:40): pid=9795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 83.815071][ T26] audit: type=1400 audit(1576070607.195:41): avc: denied { map } for pid=9971 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.52' (ECDSA) to the list of known hosts. executing program [ 90.484508][ T26] audit: type=1400 audit(1576070613.865:42): avc: denied { map } for pid=9983 comm="syz-executor110" path="/root/syz-executor110465649" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 90.568491][ T9983] ================================================================== [ 90.568546][ T9983] BUG: KASAN: user-memory-access in insert_char+0x206/0x400 [ 90.568557][ T9983] Read of size 212 at addr 00000000ffffff3a by task syz-executor110/9983 [ 90.568561][ T9983] [ 90.568575][ T9983] CPU: 0 PID: 9983 Comm: syz-executor110 Not tainted 5.5.0-rc1-syzkaller #0 [ 90.568583][ T9983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.568588][ T9983] Call Trace: [ 90.568606][ T9983] dump_stack+0x197/0x210 [ 90.568621][ T9983] ? insert_char+0x206/0x400 [ 90.568635][ T9983] ? insert_char+0x206/0x400 [ 90.568651][ T9983] __kasan_report.cold+0x5/0x41 [ 90.568665][ T9983] ? insert_char+0x206/0x400 [ 90.568680][ T9983] kasan_report+0x12/0x20 [ 90.568694][ T9983] check_memory_region+0x134/0x1a0 [ 90.568707][ T9983] memmove+0x24/0x50 [ 90.568720][ T9983] insert_char+0x206/0x400 [ 90.568739][ T9983] do_con_trol+0x41a6/0x61b0 [ 90.568757][ T9983] ? reset_palette+0x190/0x190 [ 90.568772][ T9983] ? __kasan_check_read+0x11/0x20 [ 90.568791][ T9983] ? __atomic_notifier_call_chain+0xf8/0x1a0 [ 90.568810][ T9983] do_con_write.part.0+0xfd9/0x1ef0 [ 90.568839][ T9983] ? do_con_trol+0x61b0/0x61b0 [ 90.568854][ T9983] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 90.568865][ T9983] ? add_wait_queue+0x112/0x170 [ 90.568878][ T9983] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 90.568897][ T9983] ? trace_hardirqs_on+0x67/0x240 [ 90.568918][ T9983] con_write+0x46/0xd0 [ 90.568935][ T9983] n_tty_write+0x40e/0x1080 [ 90.568962][ T9983] ? n_tty_read+0x1bf0/0x1bf0 [ 90.568976][ T9983] ? prepare_to_wait_exclusive+0x320/0x320 [ 90.568996][ T9983] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 90.569011][ T9983] ? _copy_from_user+0x12c/0x1a0 [ 90.569028][ T9983] tty_write+0x496/0x7f0 [ 90.569046][ T9983] ? n_tty_read+0x1bf0/0x1bf0 [ 90.569065][ T9983] __vfs_write+0x8a/0x110 [ 90.569077][ T9983] ? put_tty_driver+0x20/0x20 [ 90.569094][ T9983] vfs_write+0x268/0x5d0 [ 90.569110][ T9983] ksys_write+0x14f/0x290 [ 90.569124][ T9983] ? __ia32_sys_read+0xb0/0xb0 [ 90.569149][ T9983] ? do_syscall_64+0x26/0x790 [ 90.569161][ T9983] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 90.569172][ T9983] ? do_syscall_64+0x26/0x790 [ 90.569187][ T9983] __x64_sys_write+0x73/0xb0 [ 90.569203][ T9983] do_syscall_64+0xfa/0x790 [ 90.569220][ T9983] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 90.569231][ T9983] RIP: 0033:0x4404f9 [ 90.569245][ T9983] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b 14 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 90.569253][ T9983] RSP: 002b:00007ffe20b7f268 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 90.569266][ T9983] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004404f9 [ 90.569275][ T9983] RDX: 0000000000000078 RSI: 0000000020000000 RDI: 0000000000000004 [ 90.569283][ T9983] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 90.569292][ T9983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401de0 [ 90.569300][ T9983] R13: 0000000000401e70 R14: 0000000000000000 R15: 0000000000000000 [ 90.569321][ T9983] ================================================================== [ 90.569325][ T9983] Disabling lock debugging due to kernel taint [ 90.572679][ T9983] Kernel panic - not syncing: panic_on_warn set ... [ 90.572695][ T9983] CPU: 0 PID: 9983 Comm: syz-executor110 Tainted: G B 5.5.0-rc1-syzkaller #0 [ 90.572702][ T9983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.572705][ T9983] Call Trace: [ 90.572725][ T9983] dump_stack+0x197/0x210 [ 90.572741][ T9983] panic+0x2e3/0x75c [ 90.572753][ T9983] ? add_taint.cold+0x16/0x16 [ 90.572768][ T9983] ? insert_char+0x206/0x400 [ 90.572781][ T9983] ? preempt_schedule+0x4b/0x60 [ 90.572795][ T9983] ? ___preempt_schedule+0x16/0x18 [ 90.572811][ T9983] ? trace_hardirqs_on+0x5e/0x240 [ 90.572824][ T9983] ? insert_char+0x206/0x400 [ 90.572834][ T9983] end_report+0x47/0x4f [ 90.572845][ T9983] ? insert_char+0x206/0x400 [ 90.572856][ T9983] __kasan_report.cold+0xe/0x41 [ 90.572869][ T9983] ? insert_char+0x206/0x400 [ 90.572882][ T9983] kasan_report+0x12/0x20 [ 90.572894][ T9983] check_memory_region+0x134/0x1a0 [ 90.572904][ T9983] memmove+0x24/0x50 [ 90.572917][ T9983] insert_char+0x206/0x400 [ 90.572934][ T9983] do_con_trol+0x41a6/0x61b0 [ 90.572949][ T9983] ? reset_palette+0x190/0x190 [ 90.572961][ T9983] ? __kasan_check_read+0x11/0x20 [ 90.572976][ T9983] ? __atomic_notifier_call_chain+0xf8/0x1a0 [ 90.572995][ T9983] do_con_write.part.0+0xfd9/0x1ef0 [ 90.573018][ T9983] ? do_con_trol+0x61b0/0x61b0 [ 90.573033][ T9983] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 90.573047][ T9983] ? add_wait_queue+0x112/0x170 [ 90.573061][ T9983] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 90.573076][ T9983] ? trace_hardirqs_on+0x67/0x240 [ 90.573091][ T9983] con_write+0x46/0xd0 [ 90.573107][ T9983] n_tty_write+0x40e/0x1080 [ 90.573129][ T9983] ? n_tty_read+0x1bf0/0x1bf0 [ 90.573150][ T9983] ? prepare_to_wait_exclusive+0x320/0x320 [ 90.573167][ T9983] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 90.573190][ T9983] ? _copy_from_user+0x12c/0x1a0 [ 90.573204][ T9983] tty_write+0x496/0x7f0 [ 90.573218][ T9983] ? n_tty_read+0x1bf0/0x1bf0 [ 90.573234][ T9983] __vfs_write+0x8a/0x110 [ 90.573247][ T9983] ? put_tty_driver+0x20/0x20 [ 90.573261][ T9983] vfs_write+0x268/0x5d0 [ 90.573275][ T9983] ksys_write+0x14f/0x290 [ 90.573288][ T9983] ? __ia32_sys_read+0xb0/0xb0 [ 90.573303][ T9983] ? do_syscall_64+0x26/0x790 [ 90.573317][ T9983] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 90.573331][ T9983] ? do_syscall_64+0x26/0x790 [ 90.573345][ T9983] __x64_sys_write+0x73/0xb0 [ 90.573360][ T9983] do_syscall_64+0xfa/0x790 [ 90.573375][ T9983] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 90.573386][ T9983] RIP: 0033:0x4404f9 [ 90.573402][ T9983] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b 14 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 90.573412][ T9983] RSP: 002b:00007ffe20b7f268 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 90.573432][ T9983] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004404f9 [ 90.573442][ T9983] RDX: 0000000000000078 RSI: 0000000020000000 RDI: 0000000000000004 [ 90.573453][ T9983] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 90.573463][ T9983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401de0 [ 90.573474][ T9983] R13: 0000000000401e70 R14: 0000000000000000 R15: 0000000000000000 [ 90.575027][ T9983] Kernel Offset: disabled [ 91.216049][ T9983] Rebooting in 86400 seconds..