[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [ 106.123565][ T27] audit: type=1400 audit(1581246098.526:37): avc: denied { watch } for pid=10903 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 109.857537][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 109.857553][ T27] audit: type=1400 audit(1581246102.256:41): avc: denied { map } for pid=10992 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.209' (ECDSA) to the list of known hosts. executing program [ 116.717738][ T27] audit: type=1400 audit(1581246109.116:42): avc: denied { map } for pid=11004 comm="syz-executor377" path="/root/syz-executor377568940" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 116.735103][T11005] IPVS: ftp: loaded support on port[0] = 21 [ 116.790926][ T27] audit: type=1400 audit(1581246109.196:43): avc: denied { prog_load } for pid=11006 comm="syz-executor377" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 executing program [ 116.824488][ T27] audit: type=1400 audit(1581246109.226:44): avc: denied { prog_run } for pid=11006 comm="syz-executor377" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 116.854811][T11007] BUG: unable to handle page fault for address: ffff887f881d57ff [ 116.863138][T11007] #PF: supervisor read access in kernel mode [ 116.870636][T11007] #PF: error_code(0x0000) - not-present page [ 116.876783][T11007] PGD 0 P4D 0 [ 116.880166][T11007] Oops: 0000 [#1] PREEMPT SMP KASAN [ 116.885360][T11007] CPU: 0 PID: 11007 Comm: syz-executor377 Not tainted 5.5.0-syzkaller #0 [ 116.893766][T11007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 116.904359][T11007] RIP: 0010:do_xdp_generic.part.0+0x479/0x17a0 [ 116.910934][T11007] Code: 03 48 89 85 f0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 a5 78 ff ff ff 80 3c 02 00 48 89 8d c8 fe ff ff 0f 85 ac 10 00 00 <49> 8b 04 24 49 8d 7c 24 0c 48 ba 00 00 00 00 00 fc ff df 48 89 85 [ 116.932271][T11007] RSP: 0018:ffffc90000f77770 EFLAGS: 00010246 [ 116.938332][T11007] RAX: dffffc0000000000 RBX: ffff8880881c5800 RCX: ffffffff0000feff [ 116.946320][T11007] RDX: 1ffff10ff103aaff RSI: ffff888092b55ab0 RDI: 0000000000000005 [ 116.954391][T11007] RBP: ffffc90000f778b0 R08: ffff888091ee2040 R09: ffffed1011038b5d [ 116.963028][T11007] R10: ffffed1011038b5c R11: ffff8880881c5ae3 R12: ffff887f881d57ff [ 116.971128][T11007] R13: 0000000000000100 R14: ffff8880881d57ff R15: ffff888092b55a40 [ 116.979189][T11007] FS: 00000000009cb880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 116.988344][T11007] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.995014][T11007] CR2: ffff887f881d57ff CR3: 0000000097fb5000 CR4: 00000000001406f0 [ 117.002999][T11007] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.011140][T11007] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.020156][T11007] Call Trace: [ 117.023457][T11007] ? generic_xdp_tx+0x740/0x740 [ 117.028325][T11007] ? rcu_read_lock_held+0x9c/0xb0 [ 117.033356][T11007] do_xdp_generic+0x30/0x50 [ 117.038030][T11007] tun_get_user+0x2bcd/0x4020 [ 117.043047][T11007] ? __kasan_check_read+0x11/0x20 [ 117.048080][T11007] ? tun_build_skb.isra.0+0x1480/0x1480 [ 117.053638][T11007] ? rcu_read_lock_held+0x9c/0xb0 [ 117.058820][T11007] ? __kasan_check_read+0x11/0x20 [ 117.063848][T11007] tun_chr_write_iter+0xbd/0x156 [ 117.068851][T11007] do_iter_readv_writev+0x5f8/0x8f0 [ 117.074039][T11007] ? no_seek_end_llseek_size+0x70/0x70 [ 117.079534][T11007] ? rw_verify_area+0x126/0x360 [ 117.084563][T11007] do_iter_write+0x184/0x610 [ 117.089416][T11007] ? dup_iter+0x260/0x260 [ 117.094609][T11007] ? mark_lock+0xc2/0x1220 [ 117.099032][T11007] vfs_writev+0x1b3/0x2f0 [ 117.103358][T11007] ? vfs_iter_write+0xb0/0xb0 [ 117.108052][T11007] ? lock_downgrade+0x920/0x920 [ 117.113075][T11007] ? handle_mm_fault+0x292/0xa50 [ 117.118168][T11007] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 117.124605][T11007] ? debug_smp_processor_id+0x33/0x18a [ 117.130341][T11007] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 117.136606][T11007] ? __fget_light+0x1ad/0x270 [ 117.141416][T11007] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 117.147800][T11007] do_writev+0x15b/0x330 [ 117.152044][T11007] ? vfs_writev+0x2f0/0x2f0 [ 117.157469][T11007] ? do_syscall_64+0x26/0x790 [ 117.162255][T11007] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 117.168364][T11007] ? do_syscall_64+0x26/0x790 [ 117.173048][T11007] __x64_sys_writev+0x75/0xb0 [ 117.177730][T11007] do_syscall_64+0xfa/0x790 [ 117.182237][T11007] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 117.188300][T11007] RIP: 0033:0x4420c0 [ 117.192366][T11007] Code: 05 48 3d 01 f0 ff ff 0f 83 5d 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 3d 51 8f 29 00 00 75 14 b8 14 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 34 09 fc ff c3 48 83 ec 08 e8 ba 2b 00 00 [ 117.212052][T11007] RSP: 002b:00007ffebafce438 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 117.220508][T11007] RAX: ffffffffffffffda RBX: 00007ffebafce450 RCX: 00000000004420c0 [ 117.228490][T11007] RDX: 0000000000000001 RSI: 00007ffebafce480 RDI: 00000000000000f0 [ 117.236596][T11007] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000004 [ 117.244575][T11007] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001c815 [ 117.252557][T11007] R13: 0000000000402f10 R14: 0000000000000000 R15: 0000000000000000 [ 117.260544][T11007] Modules linked in: [ 117.264537][T11007] CR2: ffff887f881d57ff [ 117.268687][T11007] ---[ end trace e5ee3ca19ece0c5c ]--- [ 117.274145][T11007] RIP: 0010:do_xdp_generic.part.0+0x479/0x17a0 [ 117.280281][T11007] Code: 03 48 89 85 f0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 a5 78 ff ff ff 80 3c 02 00 48 89 8d c8 fe ff ff 0f 85 ac 10 00 00 <49> 8b 04 24 49 8d 7c 24 0c 48 ba 00 00 00 00 00 fc ff df 48 89 85 [ 117.300150][T11007] RSP: 0018:ffffc90000f77770 EFLAGS: 00010246 [ 117.306212][T11007] RAX: dffffc0000000000 RBX: ffff8880881c5800 RCX: ffffffff0000feff [ 117.315184][T11007] RDX: 1ffff10ff103aaff RSI: ffff888092b55ab0 RDI: 0000000000000005 [ 117.323150][T11007] RBP: ffffc90000f778b0 R08: ffff888091ee2040 R09: ffffed1011038b5d [ 117.331162][T11007] R10: ffffed1011038b5c R11: ffff8880881c5ae3 R12: ffff887f881d57ff [ 117.339231][T11007] R13: 0000000000000100 R14: ffff8880881d57ff R15: ffff888092b55a40 [ 117.347249][T11007] FS: 00000000009cb880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 117.356179][T11007] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.362897][T11007] CR2: ffff887f881d57ff CR3: 0000000097fb5000 CR4: 00000000001406f0 [ 117.370854][T11007] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.378898][T11007] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.386979][T11007] Kernel panic - not syncing: Fatal exception in interrupt [ 117.395893][T11007] Kernel Offset: disabled [ 117.400278][T11007] Rebooting in 86400 seconds..