[   41.445382] audit: type=1800 audit(1580020318.510:32): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
Starting mcstransd: 
[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   47.116228] kauditd_printk_skb: 2 callbacks suppressed
[   47.116244] audit: type=1400 audit(1580020324.210:35): avc:  denied  { map } for  pid=8073 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
Warning: Permanently added '10.128.0.156' (ECDSA) to the list of known hosts.
executing program
executing program
executing program
executing program
executing program
executing program
[   53.856923] audit: type=1400 audit(1580020330.950:36): avc:  denied  { map } for  pid=8085 comm="syz-executor118" path="/root/syz-executor118384691" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[   53.959096] kasan: CONFIG_KASAN_INLINE enabled
[   53.959113] kasan: GPF could be caused by NULL-ptr deref or user memory access
[   53.959128] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[   53.959142] CPU: 0 PID: 8093 Comm: syz-executor118 Not tainted 4.19.98-syzkaller #0
[   53.959149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   53.959169] RIP: 0010:do_con_write.part.0+0xa03/0x1eb0
[   53.959181] Code: 76 fe ff ff 41 01 dd e8 cb 74 b4 fd 48 8b 85 a8 fe ff ff 80 38 00 0f 85 fe 12 00 00 49 8b 9e a0 03 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 14 20 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85
[   53.959189] RSP: 0000:ffff888083cdf820 EFLAGS: 00010203
[   53.959199] RAX: 0000000020000001 RBX: 000000010000000e RCX: ffffffff83b6a058
[   53.959207] RDX: 0000000000000000 RSI: ffffffff83b6a0a5 RDI: 0000000000000003
[   53.959215] RBP: ffff888083cdf9b8 R08: ffff8880949b25c0 R09: 0000000000000005
[   53.959223] R10: ffffed1015d04732 R11: ffff8880ae823993 R12: dffffc0000000000
[   53.959231] R13: 0000000000000764 R14: ffff888093c629c0 R15: ffff888093c62d4c
[   53.959240] FS:  00000000025a3880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[   53.959246] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   53.959252] CR2: 000000000126bbe8 CR3: 00000000a0ccd000 CR4: 00000000001406f0
[   53.959268] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   53.959276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   53.959280] Call Trace:
[   53.959303]  ? do_con_trol+0x6070/0x6070
[   53.959315]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[   53.959328]  ? add_wait_queue+0x112/0x170
[   53.959339]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[   53.959354]  ? trace_hardirqs_on+0x67/0x220
[   53.959370]  con_write+0x46/0xd0
[   53.959385]  n_tty_write+0x3f9/0x1140
[   53.959404]  ? process_echoes+0x170/0x170
[   53.959419]  ? do_wait_intr_irq+0x2b0/0x2b0
[   53.959433]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[   53.959446]  ? _copy_from_user+0xdd/0x150
[   53.959459]  tty_write+0x458/0x7a0
[   53.959474]  ? process_echoes+0x170/0x170
[   53.959489]  do_iter_write+0x488/0x5f0
[   53.959511]  ? dup_iter+0x270/0x270
[   53.959527]  vfs_writev+0x1b3/0x2f0
[   53.959540]  ? vfs_iter_write+0xb0/0xb0
[   53.959551]  ? copy_page_range+0x2030/0x2030
[   53.959567]  ? __do_page_fault+0x676/0xe90
[   53.959584]  ? lock_downgrade+0x880/0x880
[   53.959594]  ? count_memcg_event_mm+0x2b1/0x4d0
[   53.959608]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   53.959621]  ? __fget_light+0x1a9/0x230
[   53.959634]  do_writev+0x15e/0x370
[   53.959648]  ? vfs_writev+0x2f0/0x2f0
[   53.959662]  ? do_syscall_64+0x26/0x620
[   53.959674]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   53.959687]  ? do_syscall_64+0x26/0x620
[   53.959701]  __x64_sys_writev+0x75/0xb0
[   53.959715]  do_syscall_64+0xfd/0x620
[   53.959729]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   53.959739] RIP: 0033:0x441509
[   53.959750] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00
[   53.959756] RSP: 002b:00007fff11e4edc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[   53.959766] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441509
[   53.959773] RDX: 0000000000000001 RSI: 0000000020001440 RDI: 0000000000000003
[   53.959780] RBP: 00000000006cc018 R08: 000000000000000e R09: 00000000004002c8
[   53.959792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402280
[   53.959799] R13: 0000000000402310 R14: 0000000000000000 R15: 0000000000000000
[   53.959808] Modules linked in:
[   53.959842] ---[ end trace 3c40737a6f2dd8a7 ]---
[   53.959857] RIP: 0010:do_con_write.part.0+0xa03/0x1eb0
[   53.959868] Code: 76 fe ff ff 41 01 dd e8 cb 74 b4 fd 48 8b 85 a8 fe ff ff 80 38 00 0f 85 fe 12 00 00 49 8b 9e a0 03 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 14 20 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85
[   53.959874] RSP: 0000:ffff888083cdf820 EFLAGS: 00010203
[   53.959883] RAX: 0000000020000001 RBX: 000000010000000e RCX: ffffffff83b6a058
[   53.959890] RDX: 0000000000000000 RSI: ffffffff83b6a0a5 RDI: 0000000000000003
[   53.959897] RBP: ffff888083cdf9b8 R08: ffff8880949b25c0 R09: 0000000000000005
[   53.959904] R10: ffffed1015d04732 R11: ffff8880ae823993 R12: dffffc0000000000
[   53.959911] R13: 0000000000000764 R14: ffff888093c629c0 R15: ffff888093c62d4c
[   53.959920] FS:  00000000025a3880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[   53.959928] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   53.959934] CR2: 000000000126bbe8 CR3: 00000000a0ccd000 CR4: 00000000001406f0
[   53.959946] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   53.959953] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   53.959958] Kernel panic - not syncing: Fatal exception
[   53.961529] Kernel Offset: disabled
[   54.416884] Rebooting in 86400 seconds..