[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [ 100.169896][ T23] audit: type=1400 audit(1579425778.543:37): avc: denied { watch } for pid=10627 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 104.738592][ T23] kauditd_printk_skb: 3 callbacks suppressed [ 104.738608][ T23] audit: type=1400 audit(1579425783.113:41): avc: denied { map } for pid=10712 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.194' (ECDSA) to the list of known hosts. executing program [ 111.539711][ T23] audit: type=1400 audit(1579425789.913:42): avc: denied { map } for pid=10724 comm="syz-executor726" path="/root/syz-executor726501031" dev="sda1" ino=2339 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 111.557297][T10725] IPVS: ftp: loaded support on port[0] = 21 [ 111.610401][ T23] audit: type=1400 audit(1579425789.983:43): avc: denied { create } for pid=10726 comm="syz-executor726" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 111.637124][ T23] audit: type=1400 audit(1579425789.983:44): avc: denied { map_create } for pid=10726 comm="syz-executor726" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 111.661340][ T23] audit: type=1400 audit(1579425789.983:45): avc: denied { map_read map_write } for pid=10726 comm="syz-executor726" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 111.687752][ T23] audit: type=1400 audit(1579425789.983:46): avc: denied { prog_load } for pid=10726 comm="syz-executor726" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 111.720350][ T23] audit: type=1400 audit(1579425790.093:47): avc: denied { prog_run } for pid=10726 comm="syz-executor726" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 111.720647][T10726] netlink: 'syz-executor726': attribute type 1 has an invalid length. [ 111.752937][T10726] netlink: 'syz-executor726': attribute type 1 has an invalid length. [ 111.761957][T10726] netlink: 'syz-executor726': attribute type 1 has an invalid length. [ 111.770487][T10726] netlink: 'syz-executor726': attribute type 1 has an invalid length. [ 111.779089][T10726] netlink: 'syz-executor726': attribute type 1 has an invalid length. [ 111.787617][T10726] netlink: 'syz-executor726': attribute type 1 has an invalid length. [ 111.796266][T10726] netlink: 'syz-executor726': attribute type 1 has an invalid length. [ 111.804597][T10726] netlink: 'syz-executor726': attribute type 1 has an invalid length. [ 111.813036][T10726] netlink: 'syz-executor726': attribute type 1 has an invalid length. [ 111.821807][T10726] netlink: 'syz-executor726': attribute type 1 has an invalid length. executing program [ 111.931858][T10727] BUG: unable to handle page fault for address: ffff887f987127ff [ 111.940275][T10727] #PF: supervisor read access in kernel mode [ 111.946389][T10727] #PF: error_code(0x0000) - not-present page [ 111.952388][T10727] PGD 0 P4D 0 [ 111.955770][T10727] Oops: 0000 [#1] PREEMPT SMP KASAN [ 111.960975][T10727] CPU: 0 PID: 10727 Comm: syz-executor726 Not tainted 5.5.0-rc6-syzkaller #0 [ 111.969817][T10727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 111.980000][T10727] RIP: 0010:do_xdp_generic.part.0+0x479/0x1790 [ 111.986302][T10727] Code: 03 48 89 85 f0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 a5 78 ff ff ff 80 3c 02 00 48 89 8d c8 fe ff ff 0f 85 9e 10 00 00 <49> 8b 04 24 49 8d 7c 24 0c 48 ba 00 00 00 00 00 fc ff df 48 89 85 [ 112.005896][T10727] RSP: 0018:ffffc90001477770 EFLAGS: 00010246 [ 112.012027][T10727] RAX: dffffc0000000000 RBX: ffff888098702800 RCX: ffffffff0000feff [ 112.020204][T10727] RDX: 1ffff10ff30e24ff RSI: ffff8880a4b26570 RDI: 0000000000000005 [ 112.028507][T10727] RBP: ffffc900014778b0 R08: ffff8880a4c744c0 R09: ffffed10130e055d [ 112.036507][T10727] R10: ffffed10130e055c R11: ffff888098702ae3 R12: ffff887f987127ff [ 112.044917][T10727] R13: 0000000000000100 R14: ffff8880987127ff R15: ffff8880a4b26500 [ 112.053146][T10727] FS: 0000000000f0c880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 112.062071][T10727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.068823][T10727] CR2: ffff887f987127ff CR3: 000000008165f000 CR4: 00000000001406f0 [ 112.077682][T10727] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 112.085859][T10727] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 112.093883][T10727] Call Trace: [ 112.097324][T10727] ? generic_xdp_tx+0x740/0x740 [ 112.102188][T10727] ? rcu_read_lock_held+0x9c/0xb0 [ 112.107247][T10727] do_xdp_generic+0x30/0x50 [ 112.111875][T10727] tun_get_user+0x2bcd/0x3fc0 [ 112.116671][T10727] ? __kasan_check_read+0x11/0x20 [ 112.121696][T10727] ? tun_build_skb.isra.0+0x1470/0x1470 [ 112.127439][T10727] ? rcu_read_lock_held+0x9c/0xb0 [ 112.132491][T10727] ? __kasan_check_read+0x11/0x20 [ 112.137724][T10727] tun_chr_write_iter+0xbd/0x156 [ 112.142802][T10727] do_iter_readv_writev+0x5f8/0x8f0 [ 112.148008][T10727] ? no_seek_end_llseek_size+0x70/0x70 [ 112.153474][T10727] ? rw_verify_area+0x126/0x360 [ 112.158433][T10727] do_iter_write+0x184/0x610 [ 112.163039][T10727] ? dup_iter+0x260/0x260 [ 112.167390][T10727] vfs_writev+0x1b3/0x2f0 [ 112.171789][T10727] ? vfs_iter_write+0xb0/0xb0 [ 112.176731][T10727] ? find_held_lock+0x35/0x130 [ 112.181501][T10727] ? __do_page_fault+0x56a/0xd80 [ 112.186773][T10727] ? lock_downgrade+0x920/0x920 [ 112.191964][T10727] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 112.198368][T10727] ? __fget_light+0x1a9/0x230 [ 112.203195][T10727] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 112.209782][T10727] do_writev+0x15b/0x330 [ 112.214043][T10727] ? vfs_writev+0x2f0/0x2f0 [ 112.218605][T10727] ? do_syscall_64+0x26/0x790 [ 112.223337][T10727] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 112.229504][T10727] ? do_syscall_64+0x26/0x790 [ 112.234357][T10727] __x64_sys_writev+0x75/0xb0 [ 112.239134][T10727] do_syscall_64+0xfa/0x790 [ 112.243836][T10727] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 112.249853][T10727] RIP: 0033:0x442390 [ 112.253753][T10727] Code: 05 48 3d 01 f0 ff ff 0f 83 5d 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 3d a1 8c 29 00 00 75 14 b8 14 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 34 09 fc ff c3 48 83 ec 08 e8 ba 2b 00 00 [ 112.273393][T10727] RSP: 002b:00007ffc375a09f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 112.281925][T10727] RAX: ffffffffffffffda RBX: 00007ffc375a0a10 RCX: 0000000000442390 [ 112.289894][T10727] RDX: 0000000000000001 RSI: 00007ffc375a0a40 RDI: 00000000000000f0 [ 112.297859][T10727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000004 [ 112.306164][T10727] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001b3cd [ 112.314370][T10727] R13: 00000000004031e0 R14: 0000000000000000 R15: 0000000000000000 [ 112.322530][T10727] Modules linked in: [ 112.326529][T10727] CR2: ffff887f987127ff [ 112.330855][T10727] ---[ end trace 1fa6d91564c65db7 ]--- [ 112.336316][T10727] RIP: 0010:do_xdp_generic.part.0+0x479/0x1790 [ 112.342650][T10727] Code: 03 48 89 85 f0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 a5 78 ff ff ff 80 3c 02 00 48 89 8d c8 fe ff ff 0f 85 9e 10 00 00 <49> 8b 04 24 49 8d 7c 24 0c 48 ba 00 00 00 00 00 fc ff df 48 89 85 [ 112.362507][T10727] RSP: 0018:ffffc90001477770 EFLAGS: 00010246 [ 112.368571][T10727] RAX: dffffc0000000000 RBX: ffff888098702800 RCX: ffffffff0000feff [ 112.376678][T10727] RDX: 1ffff10ff30e24ff RSI: ffff8880a4b26570 RDI: 0000000000000005 [ 112.384701][T10727] RBP: ffffc900014778b0 R08: ffff8880a4c744c0 R09: ffffed10130e055d [ 112.392859][T10727] R10: ffffed10130e055c R11: ffff888098702ae3 R12: ffff887f987127ff [ 112.401085][T10727] R13: 0000000000000100 R14: ffff8880987127ff R15: ffff8880a4b26500 [ 112.409215][T10727] FS: 0000000000f0c880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 112.418632][T10727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.425296][T10727] CR2: ffff887f987127ff CR3: 000000008165f000 CR4: 00000000001406f0 [ 112.433428][T10727] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 112.441561][T10727] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 112.449803][T10727] Kernel panic - not syncing: Fatal exception in interrupt [ 112.458951][T10727] Kernel Offset: disabled [ 112.463293][T10727] Rebooting in 86400 seconds..