[ 97.009395][ T27] audit: type=1800 audit(1579639272.223:36): pid=10361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [ 97.670894][ T27] audit: type=1400 audit(1579639273.023:37): avc: denied { watch } for pid=10451 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.114' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 107.353581][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 107.353597][ T27] audit: type=1400 audit(1579639282.703:42): avc: denied { map } for pid=10551 comm="syz-executor071" path="/root/syz-executor071152053" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 107.370485][T10552] IPVS: ftp: loaded support on port[0] = 21 [ 107.431112][ T27] audit: type=1400 audit(1579639282.783:43): avc: denied { create } for pid=10553 comm="syz-executor071" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 107.457294][ T27] audit: type=1400 audit(1579639282.783:44): avc: denied { map_create } for pid=10553 comm="syz-executor071" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 107.482931][ T27] audit: type=1400 audit(1579639282.783:45): avc: denied { map_read map_write } for pid=10553 comm="syz-executor071" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 107.509631][ T27] audit: type=1400 audit(1579639282.783:46): avc: denied { prog_load } for pid=10553 comm="syz-executor071" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 107.541662][ T27] audit: type=1400 audit(1579639282.893:47): avc: denied { prog_run } for pid=10553 comm="syz-executor071" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 107.541937][T10553] netlink: 'syz-executor071': attribute type 1 has an invalid length. [ 107.575123][T10553] netlink: 'syz-executor071': attribute type 1 has an invalid length. [ 107.583433][T10553] netlink: 'syz-executor071': attribute type 1 has an invalid length. [ 107.591669][T10553] netlink: 'syz-executor071': attribute type 1 has an invalid length. [ 107.599832][T10553] netlink: 'syz-executor071': attribute type 1 has an invalid length. [ 107.608869][T10553] netlink: 'syz-executor071': attribute type 1 has an invalid length. [ 107.617175][T10553] netlink: 'syz-executor071': attribute type 1 has an invalid length. [ 107.625495][T10553] netlink: 'syz-executor071': attribute type 1 has an invalid length. [ 107.634412][T10553] netlink: 'syz-executor071': attribute type 1 has an invalid length. [ 107.642677][T10553] netlink: 'syz-executor071': attribute type 1 has an invalid length. executing program [ 107.714823][T10554] BUG: unable to handle page fault for address: ffff887fa2ce77ff [ 107.722574][T10554] #PF: supervisor read access in kernel mode [ 107.728627][T10554] #PF: error_code(0x0000) - not-present page [ 107.734825][T10554] PGD 0 P4D 0 [ 107.738335][T10554] Oops: 0000 [#1] PREEMPT SMP KASAN [ 107.743595][T10554] CPU: 1 PID: 10554 Comm: syz-executor071 Not tainted 5.5.0-rc7-syzkaller #0 [ 107.752345][T10554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 107.762450][T10554] RIP: 0010:do_xdp_generic.part.0+0x479/0x1790 [ 107.768769][T10554] Code: 03 48 89 85 f0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 a5 78 ff ff ff 80 3c 02 00 48 89 8d c8 fe ff ff 0f 85 9e 10 00 00 <49> 8b 04 24 49 8d 7c 24 0c 48 ba 00 00 00 00 00 fc ff df 48 89 85 [ 107.788775][T10554] RSP: 0018:ffffc90000f77770 EFLAGS: 00010246 [ 107.794851][T10554] RAX: dffffc0000000000 RBX: ffff8880a2cd7800 RCX: ffffffff0000feff [ 107.802921][T10554] RDX: 1ffff10ff459ceff RSI: ffff888097d574b0 RDI: 0000000000000005 [ 107.811103][T10554] RBP: ffffc90000f778b0 R08: ffff888088150580 R09: ffffed101459af5d [ 107.819259][T10554] R10: ffffed101459af5c R11: ffff8880a2cd7ae3 R12: ffff887fa2ce77ff [ 107.827223][T10554] R13: 0000000000000100 R14: ffff8880a2ce77ff R15: ffff888097d57440 [ 107.835221][T10554] FS: 0000000000ac9880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 107.844148][T10554] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.850718][T10554] CR2: ffff887fa2ce77ff CR3: 0000000099563000 CR4: 00000000001406e0 [ 107.858943][T10554] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.866980][T10554] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.876028][T10554] Call Trace: [ 107.879399][T10554] ? generic_xdp_tx+0x740/0x740 [ 107.884272][T10554] ? rcu_read_lock_held+0x9c/0xb0 [ 107.889356][T10554] do_xdp_generic+0x30/0x50 [ 107.893877][T10554] tun_get_user+0x2bcd/0x3fc0 [ 107.898560][T10554] ? __kasan_check_read+0x11/0x20 [ 107.903594][T10554] ? tun_build_skb.isra.0+0x1470/0x1470 [ 107.909142][T10554] ? rcu_read_lock_held+0x9c/0xb0 [ 107.914166][T10554] ? __kasan_check_read+0x11/0x20 [ 107.919187][T10554] tun_chr_write_iter+0xbd/0x156 [ 107.924108][T10554] do_iter_readv_writev+0x5f8/0x8f0 [ 107.929350][T10554] ? no_seek_end_llseek_size+0x70/0x70 [ 107.934793][T10554] ? rw_verify_area+0x126/0x360 [ 107.939634][T10554] do_iter_write+0x184/0x610 [ 107.944210][T10554] ? dup_iter+0x260/0x260 [ 107.948665][T10554] vfs_writev+0x1b3/0x2f0 [ 107.952976][T10554] ? vfs_iter_write+0xb0/0xb0 [ 107.957628][T10554] ? find_held_lock+0x35/0x130 [ 107.962495][T10554] ? __do_page_fault+0x56a/0xd80 [ 107.967427][T10554] ? lock_downgrade+0x920/0x920 [ 107.972301][T10554] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 107.978630][T10554] ? __fget_light+0x1a9/0x230 [ 107.983300][T10554] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 107.989583][T10554] do_writev+0x15b/0x330 [ 107.993812][T10554] ? vfs_writev+0x2f0/0x2f0 [ 107.998312][T10554] ? do_syscall_64+0x26/0x790 [ 108.002978][T10554] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 108.009037][T10554] ? do_syscall_64+0x26/0x790 [ 108.013710][T10554] __x64_sys_writev+0x75/0xb0 [ 108.018380][T10554] do_syscall_64+0xfa/0x790 [ 108.022869][T10554] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 108.028807][T10554] RIP: 0033:0x442540 [ 108.032774][T10554] Code: 05 48 3d 01 f0 ff ff 0f 83 5d 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 3d f1 8a 29 00 00 75 14 b8 14 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 34 09 fc ff c3 48 83 ec 08 e8 ba 2b 00 00 [ 108.052568][T10554] RSP: 002b:00007ffef09ae3d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 108.060964][T10554] RAX: ffffffffffffffda RBX: 00007ffef09ae3f0 RCX: 0000000000442540 [ 108.069023][T10554] RDX: 0000000000000001 RSI: 00007ffef09ae420 RDI: 00000000000000f0 [ 108.077117][T10554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000004 [ 108.085076][T10554] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001a383 [ 108.093119][T10554] R13: 0000000000403390 R14: 0000000000000000 R15: 0000000000000000 [ 108.101356][T10554] Modules linked in: [ 108.105250][T10554] CR2: ffff887fa2ce77ff [ 108.109400][T10554] ---[ end trace 62b41f93065df315 ]--- [ 108.114850][T10554] RIP: 0010:do_xdp_generic.part.0+0x479/0x1790 [ 108.120995][T10554] Code: 03 48 89 85 f0 fe ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 a5 78 ff ff ff 80 3c 02 00 48 89 8d c8 fe ff ff 0f 85 9e 10 00 00 <49> 8b 04 24 49 8d 7c 24 0c 48 ba 00 00 00 00 00 fc ff df 48 89 85 [ 108.140595][T10554] RSP: 0018:ffffc90000f77770 EFLAGS: 00010246 [ 108.146643][T10554] RAX: dffffc0000000000 RBX: ffff8880a2cd7800 RCX: ffffffff0000feff [ 108.154776][T10554] RDX: 1ffff10ff459ceff RSI: ffff888097d574b0 RDI: 0000000000000005 [ 108.162731][T10554] RBP: ffffc90000f778b0 R08: ffff888088150580 R09: ffffed101459af5d [ 108.170690][T10554] R10: ffffed101459af5c R11: ffff8880a2cd7ae3 R12: ffff887fa2ce77ff [ 108.178650][T10554] R13: 0000000000000100 R14: ffff8880a2ce77ff R15: ffff888097d57440 [ 108.186631][T10554] FS: 0000000000ac9880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 108.195546][T10554] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.202116][T10554] CR2: ffff887fa2ce77ff CR3: 0000000099563000 CR4: 00000000001406e0 [ 108.210091][T10554] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.218051][T10554] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.226010][T10554] Kernel panic - not syncing: Fatal exception in interrupt [ 108.234591][T10554] Kernel Offset: disabled [ 108.238931][T10554] Rebooting in 86400 seconds..