[ 106.302475][ T28] audit: type=1800 audit(1580396776.977:36): pid=10787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[ 107.428425][ T28] audit: type=1400 audit(1580396778.217:37): avc: denied { watch } for pid=10885 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.59' (ECDSA) to the list of known hosts. syzkaller login: [ 116.615679][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 116.615696][ T28] audit: type=1400 audit(1580396787.407:42): avc: denied { map } for pid=10978 comm="syz-executor642" path="/root/syz-executor642375360" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 116.632717][T10979] IPVS: ftp: loaded support on port[0] = 21 executing program [ 116.697747][ T28] audit: type=1400 audit(1580396787.487:43): avc: denied { prog_load } for pid=10980 comm="syz-executor642" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 116.732207][ T28] audit: type=1400 audit(1580396787.517:44): avc: denied { prog_run } for pid=10980 comm="syz-executor642" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 116.732272][T10980] BUG: unable to handle page fault for address: ffff887f82cdefff [ 116.763312][T10980] #PF: supervisor read access in kernel mode [ 116.769283][T10980] #PF: error_code(0x0000) - not-present page [ 116.775680][T10980] PGD 0 P4D 0 [ 116.779099][T10980] Oops: 0000 [#1] PREEMPT SMP KASAN [ 116.784774][T10980] CPU: 0 PID: 10980 Comm: syz-executor642 Not tainted 5.5.0-syzkaller #0 [ 116.793272][T10980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 116.803789][T10980] RIP: 0010:do_xdp_generic.part.0+0x479/0x17a0 [ 116.809943][T10980] Code: 03 48 89 85 f0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 a5 78 ff ff ff 80 3c 02 00 48 89 8d c8 fe ff ff 0f 85 ac 10 00 00 <49> 8b 04 24 49 8d 7c 24 0c 48 ba 00 00 00 00 00 fc ff df 48 89 85 [ 116.830278][T10980] RSP: 0018:ffffc900020f7770 EFLAGS: 00010246 [ 116.836550][T10980] RAX: dffffc0000000000 RBX: ffff888082ccf000 RCX: ffffffff0000feff [ 116.844555][T10980] RDX: 1ffff10ff059bdff RSI: ffff8880930582f0 RDI: 0000000000000005 [ 116.852795][T10980] RBP: ffffc900020f78b0 R08: ffff8880a9316180 R09: ffffed1010599e5d [ 116.860775][T10980] R10: ffffed1010599e5c R11: ffff888082ccf2e3 R12: ffff887f82cdefff [ 116.868884][T10980] R13: 0000000000000100 R14: ffff888082cdefff R15: ffff888093058280 [ 116.877004][T10980] FS: 00000000018e5880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 116.886053][T10980] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.892644][T10980] CR2: ffff887f82cdefff CR3: 0000000096c30000 CR4: 00000000001406f0 [ 116.901378][T10980] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.909342][T10980] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.917499][T10980] Call Trace: [ 116.920788][T10980] ? generic_xdp_tx+0x740/0x740 [ 116.926305][T10980] ? rcu_read_lock_held+0x9c/0xb0 [ 116.931424][T10980] do_xdp_generic+0x30/0x50 [ 116.936356][T10980] tun_get_user+0x2bcd/0x4020 [ 116.941065][T10980] ? __kasan_check_read+0x11/0x20 [ 116.946106][T10980] ? tun_build_skb.isra.0+0x1480/0x1480 [ 116.952316][T10980] ? rcu_read_lock_held+0x9c/0xb0 [ 116.957334][T10980] ? __kasan_check_read+0x11/0x20 [ 116.962360][T10980] tun_chr_write_iter+0xbd/0x156 [ 116.967299][T10980] do_iter_readv_writev+0x5f8/0x8f0 [ 116.972515][T10980] ? no_seek_end_llseek_size+0x70/0x70 [ 116.977979][T10980] ? rw_verify_area+0x126/0x360 [ 116.982900][T10980] do_iter_write+0x184/0x610 [ 116.987602][T10980] ? dup_iter+0x260/0x260 [ 116.992164][T10980] ? sendmsg_copy_msghdr+0x70/0x70 [ 116.997339][T10980] vfs_writev+0x1b3/0x2f0 [ 117.001674][T10980] ? vfs_iter_write+0xb0/0xb0 [ 117.007579][T10980] ? __do_sys_bpf+0x938/0x41e0 [ 117.012352][T10980] ? __fget_light+0x1ad/0x270 [ 117.017113][T10980] ? __fdget+0x1b/0x20 [ 117.021175][T10980] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 117.027565][T10980] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 117.034081][T10980] ? __fget_light+0x1ad/0x270 [ 117.038846][T10980] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 117.045231][T10980] do_writev+0x15b/0x330 [ 117.050019][T10980] ? vfs_writev+0x2f0/0x2f0 [ 117.054524][T10980] ? do_syscall_64+0x26/0x790 [ 117.059403][T10980] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 117.065692][T10980] ? do_syscall_64+0x26/0x790 [ 117.070623][T10980] __x64_sys_writev+0x75/0xb0 [ 117.075422][T10980] do_syscall_64+0xfa/0x790 [ 117.079942][T10980] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 117.085918][T10980] RIP: 0033:0x4421c0 [ 117.089810][T10980] Code: 05 48 3d 01 f0 ff ff 0f 83 5d 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 3d 51 8e 29 00 00 75 14 b8 14 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 34 09 fc ff c3 48 83 ec 08 e8 ba 2b 00 00 [ 117.109826][T10980] RSP: 002b:00007fffd2745f58 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 117.118490][T10980] RAX: ffffffffffffffda RBX: 00007fffd2745f70 RCX: 00000000004421c0 [ 117.126482][T10980] RDX: 0000000000000001 RSI: 00007fffd2745fa0 RDI: 00000000000000f0 [ 117.134505][T10980] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000bb1414ac [ 117.142588][T10980] R10: 00000000bb1414ac R11: 0000000000000246 R12: 0000000000000000 [ 117.150647][T10980] R13: 0000000000403010 R14: 0000000000000000 R15: 0000000000000000 [ 117.158615][T10980] Modules linked in: [ 117.162517][T10980] CR2: ffff887f82cdefff [ 117.166688][T10980] ---[ end trace e27dc6998a477a6c ]--- [ 117.172146][T10980] RIP: 0010:do_xdp_generic.part.0+0x479/0x17a0 [ 117.178288][T10980] Code: 03 48 89 85 f0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 a5 78 ff ff ff 80 3c 02 00 48 89 8d c8 fe ff ff 0f 85 ac 10 00 00 <49> 8b 04 24 49 8d 7c 24 0c 48 ba 00 00 00 00 00 fc ff df 48 89 85 [ 117.198323][T10980] RSP: 0018:ffffc900020f7770 EFLAGS: 00010246 [ 117.206341][T10980] RAX: dffffc0000000000 RBX: ffff888082ccf000 RCX: ffffffff0000feff [ 117.214472][T10980] RDX: 1ffff10ff059bdff RSI: ffff8880930582f0 RDI: 0000000000000005 [ 117.222434][T10980] RBP: ffffc900020f78b0 R08: ffff8880a9316180 R09: ffffed1010599e5d [ 117.230620][T10980] R10: ffffed1010599e5c R11: ffff888082ccf2e3 R12: ffff887f82cdefff [ 117.238807][T10980] R13: 0000000000000100 R14: ffff888082cdefff R15: ffff888093058280 [ 117.247026][T10980] FS: 00000000018e5880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 117.256041][T10980] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.262716][T10980] CR2: ffff887f82cdefff CR3: 0000000096c30000 CR4: 00000000001406f0 [ 117.270792][T10980] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.278983][T10980] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.287177][T10980] Kernel panic - not syncing: Fatal exception in interrupt [ 117.295846][T10980] Kernel Offset: disabled [ 117.300220][T10980] Rebooting in 86400 seconds..