[ 104.680966][ T27] audit: type=1800 audit(1582678700.880:36): pid=10485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 105.491826][ T27] audit: type=1400 audit(1582678701.740:37): avc: denied { watch } for pid=10580 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.49' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 115.269643][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 115.269658][ T27] audit: type=1400 audit(1582678711.520:42): avc: denied { map } for pid=10675 comm="syz-executor602" path="/root/syz-executor602298157" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 115.278744][T10675] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 115.303282][ T27] audit: type=1400 audit(1582678711.520:43): avc: denied { create } for pid=10675 comm="syz-executor602" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 [ 115.317767][T10675] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 115.335350][ T27] audit: type=1400 audit(1582678711.520:44): avc: denied { write } for pid=10675 comm="syz-executor602" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 [ 115.350985][T10675] netlink: 'syz-executor602': attribute type 1 has an invalid length. [ 115.387970][T10675] netlink: 21 bytes leftover after parsing attributes in process `syz-executor602'. [ 115.399197][T10675] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 115.410942][T10675] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 115.419355][T10675] CPU: 1 PID: 10675 Comm: syz-executor602 Not tainted 5.6.0-rc3-syzkaller #0 [ 115.428112][T10675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 115.438551][T10675] RIP: 0010:__list_del_entry_valid+0x22/0xf5 [ 115.444527][T10675] Code: 0d fe 48 8b 75 e8 eb b2 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 41 56 49 89 fe 48 83 c7 08 48 89 fa 41 55 48 c1 ea 03 41 54 <80> 3c 02 00 0f 85 a1 00 00 00 4c 89 f2 4d 8b 66 08 48 b8 00 00 00 [ 115.464213][T10675] RSP: 0018:ffffc90001ed7440 EFLAGS: 00010202 [ 115.470268][T10675] RAX: dffffc0000000000 RBX: ffffffff87b57410 RCX: ffffffff815c1ec9 [ 115.478237][T10675] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000008 [ 115.486209][T10675] RBP: ffffc90001ed7458 R08: 0000000000000004 R09: fffff520003dae7b [ 115.494304][T10675] R10: fffff520003dae7a R11: 0000000000000003 R12: 0000000000000000 [ 115.502493][T10675] R13: 0000000000000008 R14: 0000000000000000 R15: ffffffff8a98c200 [ 115.510594][T10675] FS: 0000000000fbe880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 115.519551][T10675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.526132][T10675] CR2: 00007f1b1d1bc000 CR3: 0000000084d71000 CR4: 00000000001406e0 [ 115.534324][T10675] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.542445][T10675] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.550516][T10675] Call Trace: [ 115.553802][T10675] smc_ib_remove_dev+0x52/0x2e0 [ 115.558746][T10675] ? smc_pnet_find_ism_resource+0x630/0x630 [ 115.564727][T10675] remove_client_context+0xc7/0x120 [ 115.570062][T10675] disable_device+0x14c/0x230 [ 115.574728][T10675] ? remove_client_context+0x120/0x120 [ 115.580312][T10675] __ib_unregister_device+0x9c/0x190 [ 115.585586][T10675] ib_unregister_device_and_put+0x5f/0x80 [ 115.591299][T10675] nldev_dellink+0x222/0x340 [ 115.595902][T10675] ? nldev_set_sys_set_doit+0x240/0x240 [ 115.601478][T10675] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 115.607725][T10675] ? ns_capable_common+0x93/0x100 [ 115.612740][T10675] ? ns_capable+0x20/0x30 [ 115.617056][T10675] ? __netlink_ns_capable+0x104/0x140 [ 115.622418][T10675] ? nldev_set_sys_set_doit+0x240/0x240 [ 115.627958][T10675] rdma_nl_rcv+0x5d9/0x980 [ 115.632363][T10675] ? rdma_nl_multicast+0x330/0x330 [ 115.637462][T10675] ? __kasan_check_read+0x11/0x20 [ 115.642475][T10675] ? netlink_deliver_tap+0x248/0xbf0 [ 115.647752][T10675] ? __kasan_check_write+0x14/0x20 [ 115.652863][T10675] netlink_unicast+0x59e/0x7e0 [ 115.657625][T10675] ? netlink_attachskb+0x870/0x870 [ 115.662786][T10675] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 115.669042][T10675] netlink_sendmsg+0x91c/0xea0 [ 115.673825][T10675] ? netlink_unicast+0x7e0/0x7e0 [ 115.678782][T10675] ? tomoyo_socket_sendmsg+0x26/0x30 [ 115.684072][T10675] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 115.690312][T10675] ? security_socket_sendmsg+0x8d/0xc0 [ 115.695896][T10675] ? netlink_unicast+0x7e0/0x7e0 [ 115.700848][T10675] sock_sendmsg+0xd7/0x130 [ 115.705290][T10675] __sys_sendto+0x262/0x380 [ 115.709797][T10675] ? __ia32_sys_getpeername+0xb0/0xb0 [ 115.715292][T10675] ? lock_downgrade+0x920/0x920 [ 115.720174][T10675] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 115.726543][T10675] ? __fd_install+0x1fb/0x640 [ 115.731210][T10675] ? fd_install+0x4d/0x60 [ 115.735617][T10675] ? __sys_socket+0x180/0x220 [ 115.740528][T10675] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 115.745980][T10675] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 115.751544][T10675] ? do_syscall_64+0x26/0x790 [ 115.756355][T10675] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 115.762414][T10675] __x64_sys_sendto+0xe1/0x1a0 [ 115.767171][T10675] do_syscall_64+0xfa/0x790 [ 115.771683][T10675] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 115.777571][T10675] RIP: 0033:0x4404d9 [ 115.781456][T10675] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 115.801055][T10675] RSP: 002b:00007ffccc96bb88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 115.809599][T10675] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004404d9 [ 115.817570][T10675] RDX: 0000000000010a73 RSI: 0000000020000000 RDI: 0000000000000004 [ 115.825675][T10675] RBP: 00000000006ca018 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 115.834233][T10675] R10: 00000000000008c0 R11: 0000000000000246 R12: 0000000000401d60 [ 115.842337][T10675] R13: 0000000000401df0 R14: 0000000000000000 R15: 0000000000000000 [ 115.850466][T10675] Modules linked in: [ 115.854587][T10675] ---[ end trace 27e8637736c8f56f ]--- [ 115.860204][T10675] RIP: 0010:__list_del_entry_valid+0x22/0xf5 [ 115.866297][T10675] Code: 0d fe 48 8b 75 e8 eb b2 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 41 56 49 89 fe 48 83 c7 08 48 89 fa 41 55 48 c1 ea 03 41 54 <80> 3c 02 00 0f 85 a1 00 00 00 4c 89 f2 4d 8b 66 08 48 b8 00 00 00 [ 115.885934][T10675] RSP: 0018:ffffc90001ed7440 EFLAGS: 00010202 [ 115.892031][T10675] RAX: dffffc0000000000 RBX: ffffffff87b57410 RCX: ffffffff815c1ec9 [ 115.900152][T10675] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000008 [ 115.908157][T10675] RBP: ffffc90001ed7458 R08: 0000000000000004 R09: fffff520003dae7b [ 115.916153][T10675] R10: fffff520003dae7a R11: 0000000000000003 R12: 0000000000000000 [ 115.924134][T10675] R13: 0000000000000008 R14: 0000000000000000 R15: ffffffff8a98c200 [ 115.932162][T10675] FS: 0000000000fbe880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 115.941148][T10675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.947760][T10675] CR2: 00007f1b1d1bc000 CR3: 0000000084d71000 CR4: 00000000001406e0 [ 115.956156][T10675] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.964134][T10675] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.972254][T10675] Kernel panic - not syncing: Fatal exception [ 115.980881][T10675] Kernel Offset: disabled [ 115.985359][T10675] Rebooting in 86400 seconds..