[ 86.407070][ T27] audit: type=1400 audit(1581081416.874:38): avc: denied { watch } for pid=10685 comm="restorecond" path="/etc/selinux/restorecond.conf" dev="sda1" ino=2232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 86.609198][ T27] audit: type=1800 audit(1581081417.124:39): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 86.631134][ T27] audit: type=1800 audit(1581081417.124:40): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 89.630228][ T27] audit: type=1400 audit(1581081420.144:41): avc: denied { map } for pid=10765 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 90.930086][ T27] audit: type=1400 audit(1581081421.444:42): avc: denied { map } for pid=10776 comm="sh" path="/bin/dash" dev="sda1" ino=1473 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.194' (ECDSA) to the list of known hosts. executing program [ 96.561525][ T27] audit: type=1400 audit(1581081427.074:43): avc: denied { map } for pid=10780 comm="syz-executor098" path="/root/syz-executor098299294" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 96.577437][T10781] IPVS: ftp: loaded support on port[0] = 21 [ 96.631370][ T27] audit: type=1400 audit(1581081427.144:44): avc: denied { prog_load } for pid=10781 comm="syz-executor098" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 96.662279][ T27] audit: type=1400 audit(1581081427.174:45): avc: denied { prog_run } for pid=10781 comm="syz-executor098" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 96.686722][T10781] BUG: unable to handle page fault for address: ffff887f9a74a7ff [ 96.694444][T10781] #PF: supervisor read access in kernel mode [ 96.700409][T10781] #PF: error_code(0x0000) - not-present page [ 96.706365][T10781] PGD 0 P4D 0 [ 96.709814][T10781] Oops: 0000 [#1] PREEMPT SMP KASAN [ 96.714996][T10781] CPU: 0 PID: 10781 Comm: syz-executor098 Not tainted 5.5.0-syzkaller #0 [ 96.723409][T10781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 96.733466][T10781] RIP: 0010:do_xdp_generic.part.0+0x479/0x17a0 [ 96.739604][T10781] Code: 03 48 89 85 f0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 a5 78 ff ff ff 80 3c 02 00 48 89 8d c8 fe ff ff 0f 85 ac 10 00 00 <49> 8b 04 24 49 8d 7c 24 0c 48 ba 00 00 00 00 00 fc ff df 48 89 85 [ 96.759196][T10781] RSP: 0018:ffffc90005757770 EFLAGS: 00010246 [ 96.765516][T10781] RAX: dffffc0000000000 RBX: ffff88809a73a800 RCX: ffffffff0000feff [ 96.773481][T10781] RDX: 1ffff10ff34e94ff RSI: ffff8880982ae470 RDI: 0000000000000005 [ 96.781495][T10781] RBP: ffffc900057578b0 R08: ffff88809defe140 R09: ffffed10134e755d [ 96.789552][T10781] R10: ffffed10134e755c R11: ffff88809a73aae3 R12: ffff887f9a74a7ff [ 96.797544][T10781] R13: 0000000000000100 R14: ffff88809a74a7ff R15: ffff8880982ae400 [ 96.805681][T10781] FS: 0000000001ea0880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 96.814691][T10781] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.821465][T10781] CR2: ffff887f9a74a7ff CR3: 00000000a4a55000 CR4: 00000000001406f0 [ 96.829615][T10781] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.837598][T10781] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.845595][T10781] Call Trace: [ 96.848922][T10781] ? generic_xdp_tx+0x740/0x740 [ 96.857333][T10781] ? rcu_read_lock_held+0x9c/0xb0 [ 96.862366][T10781] do_xdp_generic+0x30/0x50 [ 96.866868][T10781] tun_get_user+0x2bcd/0x4020 [ 96.871561][T10781] ? __kasan_check_read+0x11/0x20 [ 96.876711][T10781] ? tun_build_skb.isra.0+0x1480/0x1480 [ 96.882255][T10781] ? rcu_read_lock_held+0x9c/0xb0 [ 96.887378][T10781] ? __kasan_check_read+0x11/0x20 [ 96.892397][T10781] tun_chr_write_iter+0xbd/0x156 [ 96.897328][T10781] do_iter_readv_writev+0x5f8/0x8f0 [ 96.902508][T10781] ? no_seek_end_llseek_size+0x70/0x70 [ 96.907964][T10781] ? rw_verify_area+0x126/0x360 [ 96.912812][T10781] do_iter_write+0x184/0x610 [ 96.917395][T10781] ? dup_iter+0x260/0x260 [ 96.921755][T10781] ? sendmsg_copy_msghdr+0x70/0x70 [ 96.926858][T10781] vfs_writev+0x1b3/0x2f0 [ 96.931291][T10781] ? vfs_iter_write+0xb0/0xb0 [ 96.936002][T10781] ? __do_sys_bpf+0x938/0x41e0 [ 96.940774][T10781] ? __fget_light+0x1ad/0x270 [ 96.945493][T10781] ? __fdget+0x1b/0x20 [ 96.949559][T10781] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 96.955806][T10781] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 96.962043][T10781] ? __fget_light+0x1ad/0x270 [ 96.966705][T10781] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 96.972945][T10781] do_writev+0x15b/0x330 [ 96.977179][T10781] ? vfs_writev+0x2f0/0x2f0 [ 96.981696][T10781] ? do_syscall_64+0x26/0x790 [ 96.986397][T10781] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 96.992503][T10781] ? do_syscall_64+0x26/0x790 [ 96.997176][T10781] __x64_sys_writev+0x75/0xb0 [ 97.001979][T10781] do_syscall_64+0xfa/0x790 [ 97.006542][T10781] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 97.015980][T10781] RIP: 0033:0x441660 [ 97.019872][T10781] Code: 05 48 3d 01 f0 ff ff 0f 83 fd 0e fc ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 3d b1 99 29 00 00 75 14 b8 14 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 d4 0e fc ff c3 48 83 ec 08 e8 7a 2b 00 00 [ 97.039622][T10781] RSP: 002b:00007ffe2c40c648 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 97.048051][T10781] RAX: ffffffffffffffda RBX: 00007ffe2c40c660 RCX: 0000000000441660 [ 97.056758][T10781] RDX: 0000000000000001 RSI: 00007ffe2c40c690 RDI: 00000000000000f0 [ 97.064716][T10781] RBP: 0000000000000003 R08: 00000000bb1414ac R09: 00000000bb1414ac [ 97.072673][T10781] R10: 00000000bb1414ac R11: 0000000000000246 R12: 0000000000000000 [ 97.080626][T10781] R13: 0000000000402a50 R14: 0000000000000000 R15: 0000000000000000 [ 97.088595][T10781] Modules linked in: [ 97.092477][T10781] CR2: ffff887f9a74a7ff [ 97.096613][T10781] ---[ end trace ef1c1541cbe45e8a ]--- [ 97.102071][T10781] RIP: 0010:do_xdp_generic.part.0+0x479/0x17a0 [ 97.108210][T10781] Code: 03 48 89 85 f0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 a5 78 ff ff ff 80 3c 02 00 48 89 8d c8 fe ff ff 0f 85 ac 10 00 00 <49> 8b 04 24 49 8d 7c 24 0c 48 ba 00 00 00 00 00 fc ff df 48 89 85 [ 97.128136][T10781] RSP: 0018:ffffc90005757770 EFLAGS: 00010246 [ 97.134269][T10781] RAX: dffffc0000000000 RBX: ffff88809a73a800 RCX: ffffffff0000feff [ 97.142227][T10781] RDX: 1ffff10ff34e94ff RSI: ffff8880982ae470 RDI: 0000000000000005 [ 97.150188][T10781] RBP: ffffc900057578b0 R08: ffff88809defe140 R09: ffffed10134e755d [ 97.158146][T10781] R10: ffffed10134e755c R11: ffff88809a73aae3 R12: ffff887f9a74a7ff [ 97.166214][T10781] R13: 0000000000000100 R14: ffff88809a74a7ff R15: ffff8880982ae400 [ 97.174276][T10781] FS: 0000000001ea0880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 97.183193][T10781] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.189967][T10781] CR2: ffff887f9a74a7ff CR3: 00000000a4a55000 CR4: 00000000001406f0 [ 97.199121][T10781] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 97.209309][T10781] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 97.217462][T10781] Kernel panic - not syncing: Fatal exception in interrupt [ 97.226164][T10781] Kernel Offset: disabled [ 97.230496][T10781] Rebooting in 86400 seconds..