[ 102.388573][ T26] audit: type=1800 audit(1579595526.328:36): pid=10541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 103.132903][ T26] audit: type=1400 audit(1579595527.188:37): avc: denied { watch } for pid=10628 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.233' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 112.303709][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 112.303725][ T26] audit: type=1400 audit(1579595536.358:42): avc: denied { map } for pid=10729 comm="syz-executor156" path="/root/syz-executor156419527" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 112.321840][T10730] IPVS: ftp: loaded support on port[0] = 21 [ 112.379326][ T26] audit: type=1400 audit(1579595536.438:43): avc: denied { create } for pid=10730 comm="syz-executor156" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 112.405543][ T26] audit: type=1400 audit(1579595536.438:44): avc: denied { map_create } for pid=10730 comm="syz-executor156" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 112.430836][ T26] audit: type=1400 audit(1579595536.438:45): avc: denied { map_read map_write } for pid=10730 comm="syz-executor156" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 112.456165][ T26] audit: type=1400 audit(1579595536.438:46): avc: denied { prog_load } for pid=10730 comm="syz-executor156" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 112.485923][ T26] audit: type=1400 audit(1579595536.538:47): avc: denied { prog_run } for pid=10730 comm="syz-executor156" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 112.486121][T10730] netlink: 'syz-executor156': attribute type 1 has an invalid length. [ 112.518051][T10730] netlink: 'syz-executor156': attribute type 1 has an invalid length. [ 112.526605][T10730] netlink: 'syz-executor156': attribute type 1 has an invalid length. [ 112.534921][T10730] netlink: 'syz-executor156': attribute type 1 has an invalid length. [ 112.543471][T10730] netlink: 'syz-executor156': attribute type 1 has an invalid length. [ 112.551969][T10730] netlink: 'syz-executor156': attribute type 1 has an invalid length. [ 112.560768][T10730] netlink: 'syz-executor156': attribute type 1 has an invalid length. [ 112.569659][T10730] netlink: 'syz-executor156': attribute type 1 has an invalid length. [ 112.578101][T10730] netlink: 'syz-executor156': attribute type 1 has an invalid length. [ 112.586570][T10730] netlink: 'syz-executor156': attribute type 1 has an invalid length. [ 112.595383][T10730] BUG: unable to handle page fault for address: ffff887f9703c7ff [ 112.603365][T10730] #PF: supervisor read access in kernel mode [ 112.609514][T10730] #PF: error_code(0x0000) - not-present page [ 112.615525][T10730] PGD 0 P4D 0 [ 112.618907][T10730] Oops: 0000 [#1] PREEMPT SMP KASAN [ 112.624206][T10730] CPU: 0 PID: 10730 Comm: syz-executor156 Not tainted 5.5.0-rc7-syzkaller #0 [ 112.632958][T10730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 112.643191][T10730] RIP: 0010:do_xdp_generic.part.0+0x479/0x1790 [ 112.649446][T10730] Code: 03 48 89 85 f0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 a5 78 ff ff ff 80 3c 02 00 48 89 8d c8 fe ff ff 0f 85 9e 10 00 00 <49> 8b 04 24 49 8d 7c 24 0c 48 ba 00 00 00 00 00 fc ff df 48 89 85 [ 112.669854][T10730] RSP: 0018:ffffc90001fb7770 EFLAGS: 00010246 [ 112.675939][T10730] RAX: dffffc0000000000 RBX: ffff88809702c800 RCX: ffffffff0000feff [ 112.683909][T10730] RDX: 1ffff10ff2e078ff RSI: ffff888093c8f1f0 RDI: 0000000000000005 [ 112.692016][T10730] RBP: ffffc90001fb78b0 R08: ffff88808ff584c0 R09: ffffed1012e0595d [ 112.700133][T10730] R10: ffffed1012e0595c R11: ffff88809702cae3 R12: ffff887f9703c7ff [ 112.708199][T10730] R13: 0000000000000100 R14: ffff88809703c7ff R15: ffff888093c8f180 [ 112.716167][T10730] FS: 000000000073e880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 112.725324][T10730] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.731907][T10730] CR2: ffff887f9703c7ff CR3: 00000000a24d6000 CR4: 00000000001406f0 [ 112.739867][T10730] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 112.748091][T10730] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 112.756721][T10730] Call Trace: [ 112.760021][T10730] ? generic_xdp_tx+0x740/0x740 [ 112.764928][T10730] ? rcu_read_lock_held+0x9c/0xb0 [ 112.769948][T10730] do_xdp_generic+0x30/0x50 [ 112.774453][T10730] tun_get_user+0x2bcd/0x3fc0 [ 112.779127][T10730] ? __kasan_check_read+0x11/0x20 [ 112.784156][T10730] ? tun_build_skb.isra.0+0x1470/0x1470 [ 112.789705][T10730] ? rcu_read_lock_held+0x9c/0xb0 [ 112.794856][T10730] ? __kasan_check_read+0x11/0x20 [ 112.799871][T10730] tun_chr_write_iter+0xbd/0x156 [ 112.804807][T10730] do_iter_readv_writev+0x5f8/0x8f0 [ 112.809988][T10730] ? no_seek_end_llseek_size+0x70/0x70 [ 112.815457][T10730] ? rw_verify_area+0x126/0x360 [ 112.820452][T10730] do_iter_write+0x184/0x610 [ 112.825109][T10730] ? dup_iter+0x260/0x260 [ 112.829452][T10730] ? sendmsg_copy_msghdr+0x70/0x70 [ 112.834553][T10730] vfs_writev+0x1b3/0x2f0 [ 112.838885][T10730] ? vfs_iter_write+0xb0/0xb0 [ 112.843575][T10730] ? bpf_prog_new_fd+0x51/0x60 [ 112.848398][T10730] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 112.854669][T10730] ? __do_sys_bpf+0x751/0x3810 [ 112.859427][T10730] ? __fget_light+0x1a9/0x230 [ 112.864292][T10730] ? __fdget+0x1b/0x20 [ 112.868497][T10730] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 112.874778][T10730] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 112.881012][T10730] ? __fget_light+0x1a9/0x230 [ 112.885923][T10730] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 112.892158][T10730] do_writev+0x15b/0x330 [ 112.896399][T10730] ? vfs_writev+0x2f0/0x2f0 [ 112.900965][T10730] ? do_syscall_64+0x26/0x790 [ 112.905830][T10730] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 112.912034][T10730] ? do_syscall_64+0x26/0x790 [ 112.916839][T10730] __x64_sys_writev+0x75/0xb0 [ 112.921525][T10730] do_syscall_64+0xfa/0x790 [ 112.926177][T10730] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 112.932066][T10730] RIP: 0033:0x441b80 [ 112.935991][T10730] Code: 05 48 3d 01 f0 ff ff 0f 83 fd 0e fc ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 3d b1 94 29 00 00 75 14 b8 14 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 d4 0e fc ff c3 48 83 ec 08 e8 7a 2b 00 00 [ 112.955591][T10730] RSP: 002b:00007ffdbbe949c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 112.964279][T10730] RAX: ffffffffffffffda RBX: 00007ffdbbe949e0 RCX: 0000000000441b80 [ 112.972477][T10730] RDX: 0000000000000001 RSI: 00007ffdbbe94a10 RDI: 00000000000000f0 [ 112.980437][T10730] RBP: 0000000000000003 R08: 00000000bb1414ac R09: 00000000bb1414ac [ 112.988762][T10730] R10: 00000000bb1414ac R11: 0000000000000246 R12: 0000000000000000 [ 112.996731][T10730] R13: 0000000000402f70 R14: 0000000000000000 R15: 0000000000000000 [ 113.004851][T10730] Modules linked in: [ 113.008732][T10730] CR2: ffff887f9703c7ff [ 113.013042][T10730] ---[ end trace 521e18b8f1cf9a59 ]--- [ 113.018574][T10730] RIP: 0010:do_xdp_generic.part.0+0x479/0x1790 [ 113.025763][T10730] Code: 03 48 89 85 f0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 a5 78 ff ff ff 80 3c 02 00 48 89 8d c8 fe ff ff 0f 85 9e 10 00 00 <49> 8b 04 24 49 8d 7c 24 0c 48 ba 00 00 00 00 00 fc ff df 48 89 85 [ 113.045843][T10730] RSP: 0018:ffffc90001fb7770 EFLAGS: 00010246 [ 113.051901][T10730] RAX: dffffc0000000000 RBX: ffff88809702c800 RCX: ffffffff0000feff [ 113.059867][T10730] RDX: 1ffff10ff2e078ff RSI: ffff888093c8f1f0 RDI: 0000000000000005 [ 113.068941][T10730] RBP: ffffc90001fb78b0 R08: ffff88808ff584c0 R09: ffffed1012e0595d [ 113.077217][T10730] R10: ffffed1012e0595c R11: ffff88809702cae3 R12: ffff887f9703c7ff [ 113.085179][T10730] R13: 0000000000000100 R14: ffff88809703c7ff R15: ffff888093c8f180 [ 113.093556][T10730] FS: 000000000073e880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 113.102636][T10730] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.109348][T10730] CR2: ffff887f9703c7ff CR3: 00000000a24d6000 CR4: 00000000001406f0 [ 113.117318][T10730] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 113.125486][T10730] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 113.133663][T10730] Kernel panic - not syncing: Fatal exception in interrupt [ 113.142686][T10730] Kernel Offset: disabled [ 113.147068][T10730] Rebooting in 86400 seconds..