[ 104.051961][ T26] audit: type=1800 audit(1579613087.021:36): pid=10268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [ 104.886419][ T26] audit: type=1400 audit(1579613087.971:37): avc: denied { watch } for pid=10358 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.131' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 113.214894][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 113.214910][ T26] audit: type=1400 audit(1579613096.301:42): avc: denied { map } for pid=10456 comm="syz-executor001" path="/root/syz-executor001666077" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 113.230975][T10457] IPVS: ftp: loaded support on port[0] = 21 [ 113.288903][ T26] audit: type=1400 audit(1579613096.381:43): avc: denied { prog_load } for pid=10458 comm="syz-executor001" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 113.320266][ T26] audit: type=1400 audit(1579613096.411:44): avc: denied { prog_run } for pid=10458 comm="syz-executor001" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 113.326821][T10459] netlink: 'syz-executor001': attribute type 1 has an invalid length. [ 113.352030][T10459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.448862][T10460] netlink: 'syz-executor001': attribute type 1 has an invalid length. [ 113.457180][T10460] netlink: 'syz-executor001': attribute type 1 has an invalid length. [ 113.465328][T10460] netlink: 'syz-executor001': attribute type 1 has an invalid length. [ 113.473569][T10460] netlink: 'syz-executor001': attribute type 1 has an invalid length. [ 113.481765][T10460] netlink: 'syz-executor001': attribute type 1 has an invalid length. [ 113.489967][T10460] netlink: 'syz-executor001': attribute type 1 has an invalid length. [ 113.498273][T10460] netlink: 'syz-executor001': attribute type 1 has an invalid length. [ 113.506602][T10460] netlink: 'syz-executor001': attribute type 1 has an invalid length. [ 113.514766][T10460] netlink: 'syz-executor001': attribute type 1 has an invalid length. executing program [ 113.602562][T10462] BUG: unable to handle page fault for address: ffff887f868887ff [ 113.610303][T10462] #PF: supervisor read access in kernel mode [ 113.616260][T10462] #PF: error_code(0x0000) - not-present page [ 113.622210][T10462] PGD 0 P4D 0 [ 113.625568][T10462] Oops: 0000 [#1] PREEMPT SMP KASAN [ 113.630750][T10462] CPU: 1 PID: 10462 Comm: syz-executor001 Not tainted 5.5.0-rc7-syzkaller #0 [ 113.639579][T10462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 113.649761][T10462] RIP: 0010:do_xdp_generic.part.0+0x479/0x1790 [ 113.649779][T10462] Code: 03 48 89 85 f0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 a5 78 ff ff ff 80 3c 02 00 48 89 8d c8 fe ff ff 0f 85 9e 10 00 00 <49> 8b 04 24 49 8d 7c 24 0c 48 ba 00 00 00 00 00 fc ff df 48 89 85 [ 113.675631][T10462] RSP: 0018:ffffc90002747770 EFLAGS: 00010246 [ 113.681682][T10462] RAX: dffffc0000000000 RBX: ffff888086878800 RCX: ffffffff0000feff [ 113.689634][T10462] RDX: 1ffff10ff0d110ff RSI: ffff8880a86609b0 RDI: 0000000000000005 [ 113.697585][T10462] RBP: ffffc900027478b0 R08: ffff888094022180 R09: ffffed1010d0f15d [ 113.705539][T10462] R10: ffffed1010d0f15c R11: ffff888086878ae3 R12: ffff887f868887ff [ 113.713492][T10462] R13: 0000000000000100 R14: ffff8880868887ff R15: ffff8880a8660940 [ 113.721448][T10462] FS: 00007f18fcdd5700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 113.730369][T10462] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.736936][T10462] CR2: ffff887f868887ff CR3: 00000000943af000 CR4: 00000000001406e0 [ 113.744890][T10462] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 113.752842][T10462] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 113.760789][T10462] Call Trace: [ 113.764072][T10462] ? generic_xdp_tx+0x740/0x740 [ 113.768904][T10462] ? rcu_read_lock_held+0x9c/0xb0 [ 113.773912][T10462] do_xdp_generic+0x30/0x50 [ 113.778399][T10462] tun_get_user+0x2bcd/0x3fc0 [ 113.783055][T10462] ? __kasan_check_read+0x11/0x20 [ 113.788069][T10462] ? tun_build_skb.isra.0+0x1470/0x1470 [ 113.793598][T10462] ? rcu_read_lock_held+0x9c/0xb0 [ 113.798607][T10462] ? __kasan_check_read+0x11/0x20 [ 113.803615][T10462] tun_chr_write_iter+0xbd/0x156 [ 113.808535][T10462] do_iter_readv_writev+0x5f8/0x8f0 [ 113.813711][T10462] ? no_seek_end_llseek_size+0x70/0x70 [ 113.819153][T10462] ? rw_verify_area+0x126/0x360 [ 113.823982][T10462] do_iter_write+0x184/0x610 [ 113.828550][T10462] ? dup_iter+0x260/0x260 [ 113.832864][T10462] vfs_writev+0x1b3/0x2f0 [ 113.837174][T10462] ? vfs_iter_write+0xb0/0xb0 [ 113.841829][T10462] ? __kasan_check_read+0x11/0x20 [ 113.846835][T10462] ? ksys_dup3+0x3e0/0x3e0 [ 113.851237][T10462] ? __fget_light+0x1a9/0x230 [ 113.855929][T10462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 113.862147][T10462] do_writev+0x15b/0x330 [ 113.866368][T10462] ? vfs_writev+0x2f0/0x2f0 [ 113.870852][T10462] ? do_syscall_64+0x26/0x790 [ 113.875508][T10462] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 113.881562][T10462] ? do_syscall_64+0x26/0x790 [ 113.886221][T10462] __x64_sys_writev+0x75/0xb0 [ 113.890881][T10462] do_syscall_64+0xfa/0x790 [ 113.895367][T10462] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 113.901238][T10462] RIP: 0033:0x44d661 [ 113.905114][T10462] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 c4 cb fb ff c3 48 83 ec 08 e8 fa 2b 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2c 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 113.924713][T10462] RSP: 002b:00007f18fcdd4c50 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 113.933125][T10462] RAX: ffffffffffffffda RBX: 00000000006dfc28 RCX: 000000000044d661 [ 113.941087][T10462] RDX: 0000000000000001 RSI: 00007f18fcdd4c60 RDI: 00000000000000f0 [ 113.949053][T10462] RBP: 00000000006dfc20 R08: 0000000000000000 R09: 0000000000000013 [ 113.957014][T10462] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000006dfc2c [ 113.964971][T10462] R13: 00007ffda31c8d2f R14: 00007f18fcdd59c0 R15: 0000000000000000 [ 113.972930][T10462] Modules linked in: [ 113.976801][T10462] CR2: ffff887f868887ff [ 113.980939][T10462] ---[ end trace f4492bf67e65b414 ]--- [ 113.986385][T10462] RIP: 0010:do_xdp_generic.part.0+0x479/0x1790 [ 113.992524][T10462] Code: 03 48 89 85 f0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 a5 78 ff ff ff 80 3c 02 00 48 89 8d c8 fe ff ff 0f 85 9e 10 00 00 <49> 8b 04 24 49 8d 7c 24 0c 48 ba 00 00 00 00 00 fc ff df 48 89 85 [ 114.012111][T10462] RSP: 0018:ffffc90002747770 EFLAGS: 00010246 [ 114.018155][T10462] RAX: dffffc0000000000 RBX: ffff888086878800 RCX: ffffffff0000feff [ 114.026104][T10462] RDX: 1ffff10ff0d110ff RSI: ffff8880a86609b0 RDI: 0000000000000005 [ 114.034054][T10462] RBP: ffffc900027478b0 R08: ffff888094022180 R09: ffffed1010d0f15d [ 114.042008][T10462] R10: ffffed1010d0f15c R11: ffff888086878ae3 R12: ffff887f868887ff [ 114.049974][T10462] R13: 0000000000000100 R14: ffff8880868887ff R15: ffff8880a8660940 [ 114.057943][T10462] FS: 00007f18fcdd5700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 114.066865][T10462] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.073433][T10462] CR2: ffff887f868887ff CR3: 00000000943af000 CR4: 00000000001406e0 [ 114.081389][T10462] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 114.089356][T10462] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 114.097313][T10462] Kernel panic - not syncing: Fatal exception in interrupt [ 114.105667][T10462] Kernel Offset: disabled [ 114.109989][T10462] Rebooting in 86400 seconds..