[ 94.399954][ T26] audit: type=1400 audit(1579673484.396:37): avc: denied { watch } for pid=9947 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [ 94.425336][ T26] audit: type=1400 audit(1579673484.426:38): avc: denied { watch } for pid=9947 comm="restorecond" path="/etc/selinux/restorecond.conf" dev="sda1" ino=2232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok [39;[ 94.671946][ T26] audit: type=1800 audit(1579673484.666:39): pid=9860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 49m8[?25h[?0c[ 94.694285][ T26] audit: type=1800 audit(1579673484.676:40): pid=9860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 . Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 98.968506][ T26] audit: type=1400 audit(1579673488.966:41): avc: denied { map } for pid=10036 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.127' (ECDSA) to the list of known hosts. [ 105.707322][ T26] audit: type=1400 audit(1579673495.706:42): avc: denied { map } for pid=10048 comm="syz-executor661" path="/root/syz-executor661892438" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 105.731171][T10056] IPVS: ftp: loaded support on port[0] = 21 [ 105.748749][T10057] IPVS: ftp: loaded support on port[0] = 21 [ 105.749129][T10059] IPVS: ftp: loaded support on port[0] = 21 [ 105.759705][T10055] IPVS: ftp: loaded support on port[0] = 21 [ 105.768049][T10058] IPVS: ftp: loaded support on port[0] = 21 [ 105.779339][T10060] IPVS: ftp: loaded support on port[0] = 21 executing program [ 105.908761][ T26] audit: type=1400 audit(1579673495.906:43): avc: denied { prog_load } for pid=10061 comm="syz-executor661" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 105.945791][T10061] netlink: 'syz-executor661': attribute type 1 has an invalid length. [ 105.954427][T10061] netlink: 'syz-executor661': attribute type 1 has an invalid length. [ 105.962579][T10061] netlink: 'syz-executor661': attribute type 1 has an invalid length. [ 105.963235][ T26] audit: type=1400 audit(1579673495.946:44): avc: denied { prog_run } for pid=10061 comm="syz-executor661" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 105.970798][T10061] netlink: 'syz-executor661': attribute type 1 has an invalid length. executing program executing program executing program [ 106.002283][T10061] netlink: 'syz-executor661': attribute type 1 has an invalid length. [ 106.010474][T10061] netlink: 'syz-executor661': attribute type 1 has an invalid length. [ 106.018676][T10061] netlink: 'syz-executor661': attribute type 1 has an invalid length. [ 106.026857][T10061] netlink: 'syz-executor661': attribute type 1 has an invalid length. [ 106.035070][T10061] netlink: 'syz-executor661': attribute type 1 has an invalid length. [ 106.043243][T10061] netlink: 'syz-executor661': attribute type 1 has an invalid length. executing program executing program [ 106.081198][T10064] BUG: unable to handle page fault for address: ffff887f9656dfff [ 106.088944][T10064] #PF: supervisor read access in kernel mode [ 106.094908][T10064] #PF: error_code(0x0000) - not-present page [ 106.100873][T10064] PGD 0 P4D 0 [ 106.104230][T10064] Oops: 0000 [#1] PREEMPT SMP KASAN [ 106.109409][T10064] CPU: 1 PID: 10064 Comm: syz-executor661 Not tainted 5.5.0-rc7-syzkaller #0 [ 106.118142][T10064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 106.128191][T10064] RIP: 0010:do_xdp_generic.part.0+0x479/0x1790 [ 106.134327][T10064] Code: 03 48 89 85 f0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 a5 78 ff ff ff 80 3c 02 00 48 89 8d c8 fe ff ff 0f 85 9e 10 00 00 <49> 8b 04 24 49 8d 7c 24 0c 48 ba 00 00 00 00 00 fc ff df 48 89 85 [ 106.153910][T10064] RSP: 0018:ffffc90001577770 EFLAGS: 00010246 [ 106.159954][T10064] RAX: dffffc0000000000 RBX: ffff88809655e000 RCX: ffffffff0000feff [ 106.167906][T10064] RDX: 1ffff10ff2cadbff RSI: ffff888098ec0130 RDI: 0000000000000005 [ 106.175857][T10064] RBP: ffffc900015778b0 R08: ffff888090d8a180 R09: ffffed1012cabc5d [ 106.183809][T10064] R10: ffffed1012cabc5c R11: ffff88809655e2e3 R12: ffff887f9656dfff [ 106.191772][T10064] R13: 0000000000000100 R14: ffff88809656dfff R15: ffff888098ec00c0 [ 106.199846][T10064] FS: 0000000001736880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 106.208774][T10064] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.215353][T10064] CR2: ffff887f9656dfff CR3: 0000000098f82000 CR4: 00000000001406e0 [ 106.223308][T10064] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 106.231264][T10064] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 106.239218][T10064] Call Trace: [ 106.242503][T10064] ? generic_xdp_tx+0x740/0x740 [ 106.247341][T10064] ? rcu_read_lock_held+0x9c/0xb0 [ 106.252353][T10064] do_xdp_generic+0x30/0x50 [ 106.256854][T10064] tun_get_user+0x2bcd/0x3fc0 [ 106.261512][T10064] ? __kasan_check_read+0x11/0x20 [ 106.266522][T10064] ? tun_build_skb.isra.0+0x1470/0x1470 [ 106.272052][T10064] ? rcu_read_lock_held+0x9c/0xb0 [ 106.277076][T10064] ? __kasan_check_read+0x11/0x20 [ 106.282087][T10064] tun_chr_write_iter+0xbd/0x156 [ 106.287009][T10064] do_iter_readv_writev+0x5f8/0x8f0 [ 106.292194][T10064] ? no_seek_end_llseek_size+0x70/0x70 [ 106.297638][T10064] ? rw_verify_area+0x126/0x360 [ 106.302477][T10064] do_iter_write+0x184/0x610 [ 106.307047][T10064] ? dup_iter+0x260/0x260 [ 106.311367][T10064] vfs_writev+0x1b3/0x2f0 [ 106.315674][T10064] ? vfs_iter_write+0xb0/0xb0 [ 106.320328][T10064] ? find_held_lock+0x35/0x130 [ 106.325073][T10064] ? __do_page_fault+0x56a/0xd80 [ 106.329994][T10064] ? lock_downgrade+0x920/0x920 [ 106.334862][T10064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 106.341093][T10064] ? debug_smp_processor_id+0x33/0x18a [ 106.346535][T10064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 106.352760][T10064] ? __fget_light+0x1a9/0x230 [ 106.357421][T10064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 106.363643][T10064] do_writev+0x15b/0x330 [ 106.367867][T10064] ? vfs_writev+0x2f0/0x2f0 [ 106.372365][T10064] ? do_syscall_64+0x26/0x790 [ 106.377037][T10064] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 106.383107][T10064] ? do_syscall_64+0x26/0x790 [ 106.387792][T10064] __x64_sys_writev+0x75/0xb0 [ 106.392456][T10064] do_syscall_64+0xfa/0x790 [ 106.396947][T10064] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 106.402822][T10064] RIP: 0033:0x442040 [ 106.406702][T10064] Code: 05 48 3d 01 f0 ff ff 0f 83 ad 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 3d d1 8f 29 00 00 75 14 b8 14 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 84 08 fc ff c3 48 83 ec 08 e8 ba 2b 00 00 [ 106.426287][T10064] RSP: 002b:00007ffdb5746c98 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 106.434678][T10064] RAX: ffffffffffffffda RBX: 00007ffdb5746cb0 RCX: 0000000000442040 [ 106.442631][T10064] RDX: 0000000000000001 RSI: 00007ffdb5746ce0 RDI: 00000000000000f0 [ 106.450587][T10064] RBP: 0000000000000000 R08: 00000000bb1414ac R09: 00000000bb1414ac [ 106.458633][T10064] R10: 00000000bb1414ac R11: 0000000000000246 R12: 0000000000019d94 [ 106.466589][T10064] R13: 0000000000402de0 R14: 0000000000000000 R15: 0000000000000000 [ 106.474544][T10064] Modules linked in: [ 106.478417][T10064] CR2: ffff887f9656dfff [ 106.482556][T10064] ---[ end trace 81942e65558aedfc ]--- [ 106.488005][T10064] RIP: 0010:do_xdp_generic.part.0+0x479/0x1790 [ 106.494136][T10064] Code: 03 48 89 85 f0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 a5 78 ff ff ff 80 3c 02 00 48 89 8d c8 fe ff ff 0f 85 9e 10 00 00 <49> 8b 04 24 49 8d 7c 24 0c 48 ba 00 00 00 00 00 fc ff df 48 89 85 [ 106.513718][T10064] RSP: 0018:ffffc90001577770 EFLAGS: 00010246 [ 106.519765][T10064] RAX: dffffc0000000000 RBX: ffff88809655e000 RCX: ffffffff0000feff [ 106.527720][T10064] RDX: 1ffff10ff2cadbff RSI: ffff888098ec0130 RDI: 0000000000000005 [ 106.535690][T10064] RBP: ffffc900015778b0 R08: ffff888090d8a180 R09: ffffed1012cabc5d [ 106.543639][T10064] R10: ffffed1012cabc5c R11: ffff88809655e2e3 R12: ffff887f9656dfff [ 106.551590][T10064] R13: 0000000000000100 R14: ffff88809656dfff R15: ffff888098ec00c0 [ 106.559541][T10064] FS: 0000000001736880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 106.568446][T10064] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.575008][T10064] CR2: ffff887f9656dfff CR3: 0000000098f82000 CR4: 00000000001406e0 [ 106.582960][T10064] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 106.590910][T10064] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 106.598861][T10064] Kernel panic - not syncing: Fatal exception in interrupt [ 106.607129][T10064] Kernel Offset: disabled [ 106.611484][T10064] Rebooting in 86400 seconds..