[ 115.575533][ T26] audit: type=1800 audit(1580336982.371:36): pid=11069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 116.279550][ T26] audit: type=1400 audit(1580336983.191:37): avc: denied { watch } for pid=11157 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.49' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 126.263994][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 126.264011][ T26] audit: type=1400 audit(1580336993.171:42): avc: denied { map } for pid=11257 comm="syz-executor518" path="/root/syz-executor518695239" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 126.297882][ T26] audit: type=1400 audit(1580336993.171:43): avc: denied { create } for pid=11257 comm="syz-executor518" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 126.323888][ T26] audit: type=1400 audit(1580336993.171:44): avc: denied { write } for pid=11257 comm="syz-executor518" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 127.164673][T11257] general protection fault, probably for non-canonical address 0xdffffc0000000062: 0000 [#1] PREEMPT SMP KASAN [ 127.176742][T11257] KASAN: null-ptr-deref in range [0x0000000000000310-0x0000000000000317] [ 127.185144][T11257] CPU: 1 PID: 11257 Comm: syz-executor518 Not tainted 5.5.0-syzkaller #0 [ 127.193560][T11257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 127.203629][T11257] RIP: 0010:strlen+0x1f/0xa0 [ 127.208229][T11257] Code: 00 66 2e 0f 1f 84 00 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 fa 48 89 e5 48 c1 ea 03 41 54 49 89 fc 53 48 83 ec 08 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 4d 41 80 3c 24 [ 127.228327][T11257] RSP: 0018:ffffc90001de6e90 EFLAGS: 00010286 [ 127.234571][T11257] RAX: dffffc0000000000 RBX: ffff888095b8c618 RCX: 1ffffffff150631e [ 127.242542][T11257] RDX: 0000000000000062 RSI: ffffffff867a3c51 RDI: 0000000000000314 [ 127.250521][T11257] RBP: ffffc90001de6ea8 R08: ffff8880a85f41c0 R09: ffffed1012b718c3 [ 127.258727][T11257] R10: ffffed1012b718c2 R11: ffff888095b8c617 R12: 0000000000000314 [ 127.266968][T11257] R13: 0000000000000304 R14: ffff8880a87d1900 R15: ffff888095b8c600 [ 127.274957][T11257] FS: 0000000001f79880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 127.284206][T11257] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.291708][T11257] CR2: ffffffffff600400 CR3: 00000000a3026000 CR4: 00000000001406e0 [ 127.299684][T11257] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.307647][T11257] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.315655][T11257] Call Trace: [ 127.318948][T11257] ip_set_comment_free+0x69/0xe0 [ 127.323894][T11257] hash_net4_add+0x1b9a/0x2200 [ 127.328673][T11257] hash_net4_uadt+0x596/0x940 [ 127.333351][T11257] ? hash_net4_head+0x730/0x730 [ 127.338212][T11257] ? hash_net6_uadt+0x880/0x880 [ 127.343068][T11257] call_ad+0x1a0/0x5a0 [ 127.347380][T11257] ? start_msg+0x220/0x220 [ 127.351810][T11257] ? nla_memcpy+0xb0/0xb0 [ 127.356237][T11257] ? __nla_parse+0x43/0x60 [ 127.360652][T11257] ip_set_ad.isra.0+0x572/0xb20 [ 127.365527][T11257] ? ip_set_nfnl_get_byindex+0x460/0x460 [ 127.371173][T11257] ? nla_memcpy+0xb0/0xb0 [ 127.375498][T11257] ? lock_downgrade+0x920/0x920 [ 127.380537][T11257] ip_set_uadd+0x37/0x50 [ 127.384774][T11257] ? ip_set_udel+0x50/0x50 [ 127.389311][T11257] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 127.394275][T11257] ? nfnetlink_bind+0x2c0/0x2c0 [ 127.399177][T11257] ? avc_has_extended_perms+0x10f0/0x10f0 [ 127.404889][T11257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 127.411350][T11257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 127.417704][T11257] ? cred_has_capability+0x199/0x320 [ 127.423019][T11257] ? selinux_sb_eat_lsm_opts+0x700/0x700 [ 127.428642][T11257] ? selinux_sb_eat_lsm_opts+0x700/0x700 [ 127.434275][T11257] ? __kasan_check_read+0x13/0x20 [ 127.439360][T11257] ? __lock_acquire+0x8a0/0x4a00 [ 127.444293][T11257] netlink_rcv_skb+0x177/0x450 [ 127.449081][T11257] ? nfnetlink_bind+0x2c0/0x2c0 [ 127.454111][T11257] ? netlink_ack+0xb50/0xb50 [ 127.458689][T11257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 127.465208][T11257] ? ns_capable_common+0x93/0x100 [ 127.470422][T11257] ? ns_capable+0x20/0x30 [ 127.474737][T11257] ? __netlink_ns_capable+0x104/0x140 [ 127.480116][T11257] nfnetlink_rcv+0x1ba/0x460 [ 127.484692][T11257] ? nfnetlink_rcv_batch+0x1790/0x1790 [ 127.490135][T11257] ? netlink_deliver_tap+0x248/0xbf0 [ 127.495414][T11257] ? __kasan_check_write+0x14/0x20 [ 127.500714][T11257] netlink_unicast+0x59e/0x7e0 [ 127.505480][T11257] ? netlink_attachskb+0x870/0x870 [ 127.510585][T11257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 127.516833][T11257] netlink_sendmsg+0x91c/0xea0 [ 127.521688][T11257] ? netlink_unicast+0x7e0/0x7e0 [ 127.526624][T11257] ? tomoyo_socket_sendmsg+0x26/0x30 [ 127.531913][T11257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 127.538592][T11257] ? security_socket_sendmsg+0x8d/0xc0 [ 127.544068][T11257] ? netlink_unicast+0x7e0/0x7e0 [ 127.549003][T11257] sock_sendmsg+0xd7/0x130 [ 127.553419][T11257] ____sys_sendmsg+0x753/0x880 [ 127.558403][T11257] ? kernel_sendmsg+0x50/0x50 [ 127.563114][T11257] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 127.569322][T11257] ___sys_sendmsg+0x100/0x170 [ 127.574210][T11257] ? sendmsg_copy_msghdr+0x70/0x70 [ 127.579412][T11257] ? __kasan_check_read+0x11/0x20 [ 127.584688][T11257] ? __lock_acquire+0x8a0/0x4a00 [ 127.589900][T11257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 127.596243][T11257] ? __this_cpu_preempt_check+0x35/0x190 [ 127.601925][T11257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 127.608294][T11257] ? percpu_counter_add_batch+0x13c/0x190 [ 127.614153][T11257] ? __fd_install+0x1bc/0x640 [ 127.618828][T11257] ? find_held_lock+0x35/0x130 [ 127.623644][T11257] ? __fd_install+0x1bc/0x640 [ 127.628640][T11257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 127.634872][T11257] ? __fget_light+0x1a9/0x230 [ 127.639636][T11257] ? __fdget+0x1b/0x20 [ 127.643890][T11257] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 127.650131][T11257] __sys_sendmsg+0x105/0x1d0 [ 127.654722][T11257] ? __sys_sendmsg_sock+0xc0/0xc0 [ 127.659781][T11257] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 127.665248][T11257] ? do_syscall_64+0x26/0x790 [ 127.669920][T11257] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 127.676125][T11257] ? do_syscall_64+0x26/0x790 [ 127.680797][T11257] __x64_sys_sendmsg+0x78/0xb0 [ 127.685552][T11257] do_syscall_64+0xfa/0x790 [ 127.690125][T11257] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 127.696323][T11257] RIP: 0033:0x4405c9 [ 127.700213][T11257] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 127.719902][T11257] RSP: 002b:00007fff0b87e918 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.728302][T11257] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004405c9 [ 127.736281][T11257] RDX: 0000000000000000 RSI: 0000000020000d00 RDI: 0000000000000004 [ 127.745205][T11257] RBP: 00000000006ca018 R08: 0000000000000008 R09: 00000000004002c8 [ 127.753177][T11257] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000401e50 [ 127.761515][T11257] R13: 0000000000401ee0 R14: 0000000000000000 R15: 0000000000000000 [ 127.769482][T11257] Modules linked in: [ 127.773521][T11257] ---[ end trace a3429c59ab3c6dbc ]--- [ 127.779026][T11257] RIP: 0010:strlen+0x1f/0xa0 [ 127.783629][T11257] Code: 00 66 2e 0f 1f 84 00 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 fa 48 89 e5 48 c1 ea 03 41 54 49 89 fc 53 48 83 ec 08 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 4d 41 80 3c 24 [ 127.803413][T11257] RSP: 0018:ffffc90001de6e90 EFLAGS: 00010286 [ 127.809524][T11257] RAX: dffffc0000000000 RBX: ffff888095b8c618 RCX: 1ffffffff150631e [ 127.817542][T11257] RDX: 0000000000000062 RSI: ffffffff867a3c51 RDI: 0000000000000314 [ 127.825628][T11257] RBP: ffffc90001de6ea8 R08: ffff8880a85f41c0 R09: ffffed1012b718c3 [ 127.833766][T11257] R10: ffffed1012b718c2 R11: ffff888095b8c617 R12: 0000000000000314 [ 127.841779][T11257] R13: 0000000000000304 R14: ffff8880a87d1900 R15: ffff888095b8c600 [ 127.849811][T11257] FS: 0000000001f79880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 127.858799][T11257] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.865388][T11257] CR2: ffffffffff600400 CR3: 00000000a3026000 CR4: 00000000001406e0 [ 127.873566][T11257] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.881590][T11257] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.889602][T11257] Kernel panic - not syncing: Fatal exception in interrupt [ 127.898632][T11257] Kernel Offset: disabled [ 127.902972][T11257] Rebooting in 86400 seconds..