[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [ 100.306632][ T26] audit: type=1400 audit(1579604793.351:37): avc: denied { watch } for pid=10525 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 105.418552][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 105.418568][ T26] audit: type=1400 audit(1579604798.471:41): avc: denied { map } for pid=10614 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.1.27' (ECDSA) to the list of known hosts. [ 112.195239][ T26] audit: type=1400 audit(1579604805.241:42): avc: denied { map } for pid=10626 comm="syz-executor896" path="/root/syz-executor896431754" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 112.287854][T10627] IPVS: ftp: loaded support on port[0] = 21 [ 112.327660][ T26] audit: type=1400 audit(1579604805.381:43): avc: denied { associate } for pid=10627 comm="syz-executor896" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 executing program [ 112.411185][ T26] audit: type=1400 audit(1579604805.461:44): avc: denied { create } for pid=10628 comm="syz-executor896" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 112.436347][ T26] audit: type=1400 audit(1579604805.471:45): avc: denied { map_create } for pid=10628 comm="syz-executor896" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 112.461630][ T26] audit: type=1400 audit(1579604805.471:46): avc: denied { map_read map_write } for pid=10628 comm="syz-executor896" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 112.486088][ T26] audit: type=1400 audit(1579604805.471:47): avc: denied { prog_load } for pid=10628 comm="syz-executor896" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 112.517130][ T26] audit: type=1400 audit(1579604805.561:48): avc: denied { write } for pid=10628 comm="syz-executor896" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 112.542807][T10629] netlink: 'syz-executor896': attribute type 1 has an invalid length. [ 112.551304][ T26] audit: type=1400 audit(1579604805.561:49): avc: denied { prog_run } for pid=10628 comm="syz-executor896" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 112.574789][T10629] netlink: 'syz-executor896': attribute type 1 has an invalid length. [ 112.583100][T10629] netlink: 'syz-executor896': attribute type 1 has an invalid length. [ 112.591516][T10629] netlink: 'syz-executor896': attribute type 1 has an invalid length. [ 112.591900][ T26] audit: type=1400 audit(1579604805.571:50): avc: denied { read } for pid=10628 comm="syz-executor896" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 112.599864][T10629] netlink: 'syz-executor896': attribute type 1 has an invalid length. [ 112.633804][T10629] netlink: 'syz-executor896': attribute type 1 has an invalid length. [ 112.642131][T10629] netlink: 'syz-executor896': attribute type 1 has an invalid length. [ 112.650339][T10629] netlink: 'syz-executor896': attribute type 1 has an invalid length. [ 112.658587][T10629] netlink: 'syz-executor896': attribute type 1 has an invalid length. [ 112.666826][T10629] netlink: 'syz-executor896': attribute type 1 has an invalid length. executing program [ 112.758594][T10633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.774407][T10633] BUG: unable to handle page fault for address: ffff887f947ac7ff [ 112.782255][T10633] #PF: supervisor read access in kernel mode [ 112.788337][T10633] #PF: error_code(0x0000) - not-present page [ 112.794431][T10633] PGD 0 P4D 0 [ 112.797801][T10633] Oops: 0000 [#1] PREEMPT SMP KASAN [ 112.803099][T10633] CPU: 1 PID: 10633 Comm: syz-executor896 Not tainted 5.5.0-rc7-syzkaller #0 [ 112.811858][T10633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 112.822456][T10633] RIP: 0010:do_xdp_generic.part.0+0x479/0x1790 [ 112.828608][T10633] Code: 03 48 89 85 f0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 a5 78 ff ff ff 80 3c 02 00 48 89 8d c8 fe ff ff 0f 85 9e 10 00 00 <49> 8b 04 24 49 8d 7c 24 0c 48 ba 00 00 00 00 00 fc ff df 48 89 85 [ 112.848440][T10633] RSP: 0018:ffffc900018f7770 EFLAGS: 00010246 [ 112.854507][T10633] RAX: dffffc0000000000 RBX: ffff88809479c800 RCX: ffffffff0000feff [ 112.862478][T10633] RDX: 1ffff10ff28f58ff RSI: ffff888095103730 RDI: 0000000000000005 [ 112.872673][T10633] RBP: ffffc900018f78b0 R08: ffff888096ce2100 R09: ffffed10128f395d [ 112.880739][T10633] R10: ffffed10128f395c R11: ffff88809479cae3 R12: ffff887f947ac7ff [ 112.888712][T10633] R13: 0000000000000100 R14: ffff8880947ac7ff R15: ffff8880951036c0 [ 112.897109][T10633] FS: 00007f0307a67700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 112.906045][T10633] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.912818][T10633] CR2: ffff887f947ac7ff CR3: 0000000093911000 CR4: 00000000001406e0 [ 112.920791][T10633] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 112.929312][T10633] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 112.937656][T10633] Call Trace: [ 112.941045][T10633] ? generic_xdp_tx+0x740/0x740 [ 112.945910][T10633] ? rcu_read_lock_held+0x9c/0xb0 [ 112.950961][T10633] do_xdp_generic+0x30/0x50 [ 112.955702][T10633] tun_get_user+0x2bcd/0x3fc0 [ 112.960378][T10633] ? __kasan_check_read+0x11/0x20 [ 112.965425][T10633] ? tun_build_skb.isra.0+0x1470/0x1470 [ 112.970979][T10633] ? rcu_read_lock_held+0x9c/0xb0 [ 112.975998][T10633] ? __kasan_check_read+0x11/0x20 [ 112.981064][T10633] tun_chr_write_iter+0xbd/0x156 [ 112.986037][T10633] do_iter_readv_writev+0x5f8/0x8f0 [ 112.991255][T10633] ? no_seek_end_llseek_size+0x70/0x70 [ 112.996738][T10633] ? rw_verify_area+0x126/0x360 [ 113.001680][T10633] do_iter_write+0x184/0x610 [ 113.006273][T10633] ? dup_iter+0x260/0x260 [ 113.010606][T10633] vfs_writev+0x1b3/0x2f0 [ 113.014935][T10633] ? vfs_iter_write+0xb0/0xb0 [ 113.019614][T10633] ? __kasan_check_read+0x11/0x20 [ 113.024734][T10633] ? ksys_dup3+0x3e0/0x3e0 [ 113.029558][T10633] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 113.036149][T10633] ? __fget_light+0x1a9/0x230 [ 113.040922][T10633] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 113.047358][T10633] do_writev+0x15b/0x330 [ 113.051605][T10633] ? vfs_writev+0x2f0/0x2f0 [ 113.056105][T10633] ? do_syscall_64+0x26/0x790 [ 113.060883][T10633] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 113.067031][T10633] ? do_syscall_64+0x26/0x790 [ 113.071727][T10633] __x64_sys_writev+0x75/0xb0 [ 113.076682][T10633] do_syscall_64+0xfa/0x790 [ 113.081310][T10633] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 113.087217][T10633] RIP: 0033:0x44dbe1 [ 113.091114][T10633] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 ca fb ff c3 48 83 ec 08 e8 3a 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 83 2c 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 113.113593][T10633] RSP: 002b:00007f0307a66c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 113.122113][T10633] RAX: ffffffffffffffda RBX: 00000000006e0c68 RCX: 000000000044dbe1 [ 113.130173][T10633] RDX: 0000000000000001 RSI: 00007f0307a66c80 RDI: 00000000000000f0 [ 113.138286][T10633] RBP: 00000000006e0c60 R08: 0000000000000000 R09: 0000000000000000 [ 113.148432][T10633] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000006e0c6c [ 113.156535][T10633] R13: 00007ffe257e5f9f R14: 00007f0307a679c0 R15: 20c49ba5e353f7cf [ 113.164625][T10633] Modules linked in: [ 113.168589][T10633] CR2: ffff887f947ac7ff [ 113.173533][T10633] ---[ end trace 1c25dac2df4d71dd ]--- [ 113.179135][T10633] RIP: 0010:do_xdp_generic.part.0+0x479/0x1790 [ 113.185482][T10633] Code: 03 48 89 85 f0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 a5 78 ff ff ff 80 3c 02 00 48 89 8d c8 fe ff ff 0f 85 9e 10 00 00 <49> 8b 04 24 49 8d 7c 24 0c 48 ba 00 00 00 00 00 fc ff df 48 89 85 [ 113.205176][T10633] RSP: 0018:ffffc900018f7770 EFLAGS: 00010246 [ 113.211244][T10633] RAX: dffffc0000000000 RBX: ffff88809479c800 RCX: ffffffff0000feff [ 113.219500][T10633] RDX: 1ffff10ff28f58ff RSI: ffff888095103730 RDI: 0000000000000005 [ 113.227655][T10633] RBP: ffffc900018f78b0 R08: ffff888096ce2100 R09: ffffed10128f395d [ 113.235635][T10633] R10: ffffed10128f395c R11: ffff88809479cae3 R12: ffff887f947ac7ff [ 113.243696][T10633] R13: 0000000000000100 R14: ffff8880947ac7ff R15: ffff8880951036c0 [ 113.251683][T10633] FS: 00007f0307a67700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 113.260714][T10633] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.267513][T10633] CR2: ffff887f947ac7ff CR3: 0000000093911000 CR4: 00000000001406e0 [ 113.275939][T10633] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 113.283998][T10633] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 113.291965][T10633] Kernel panic - not syncing: Fatal exception in interrupt [ 113.300549][T10633] Kernel Offset: disabled [ 113.304881][T10633] Rebooting in 86400 seconds..