[ 43.013451] audit: type=1800 audit(1578735484.045:32): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 48.815300] kauditd_printk_skb: 2 callbacks suppressed [ 48.815315] audit: type=1400 audit(1578735489.905:35): avc: denied { map } for pid=8037 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.1.0' (ECDSA) to the list of known hosts. executing program [ 55.493130] audit: type=1400 audit(1578735496.575:36): avc: denied { map } for pid=8049 comm="syz-executor898" path="/root/syz-executor898860883" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 55.496365] kasan: CONFIG_KASAN_INLINE enabled [ 55.525045] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 55.532414] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 55.538630] CPU: 0 PID: 8049 Comm: syz-executor898 Not tainted 4.19.94-syzkaller #0 [ 55.546400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.555746] RIP: 0010:xt_rateest_tg_checkentry+0x11d/0xb50 [ 55.561351] Code: 89 79 61 fb 45 84 f6 0f 84 0d 07 00 00 e8 3b 78 61 fb 49 8d bd 48 1b 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 f9 08 00 00 4d 8b ad 48 1b 00 00 e8 fd 88 4e fb [ 55.580232] RSP: 0018:ffff8880916c77d0 EFLAGS: 00010206 [ 55.585598] RAX: dffffc0000000000 RBX: ffff8880916c7b30 RCX: ffffffff8609a493 [ 55.592868] RDX: 0000000000000369 RSI: ffffffff86099d75 RDI: 0000000000001b48 [ 55.600123] RBP: ffff8880916c7890 R08: ffff88808ed18340 R09: ffffed1015d24733 [ 55.607373] R10: ffffed1015d24732 R11: ffff8880ae923993 R12: 000000000000002c [ 55.614637] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880916c7868 [ 55.621888] FS: 0000000001ba4880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 55.630092] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.635951] CR2: 000055e22ee96190 CR3: 000000009bf2f000 CR4: 00000000001406f0 [ 55.643222] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.650474] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.657720] Call Trace: [ 55.660295] ? xt_rateest_lookup+0x280/0x280 [ 55.664697] ? kasan_check_write+0x14/0x20 [ 55.668922] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 55.673747] ? mutex_trylock+0x1e0/0x1e0 [ 55.677790] ? xt_rateest_lookup+0x280/0x280 [ 55.682181] xt_check_target+0x283/0x6a0 [ 55.686226] ? textify_hooks.constprop.0+0x1a0/0x1a0 [ 55.691307] ? mutex_unlock+0xd/0x10 [ 55.695018] ? xt_find_target+0x73/0x280 [ 55.699077] ? xt_find_target+0x73/0x280 [ 55.703135] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 55.708659] translate_table+0x1005/0x1d70 [ 55.712879] ? arpt_alloc_initial_table+0x690/0x690 [ 55.717915] ? lock_downgrade+0x880/0x880 [ 55.722055] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 55.727574] ? _copy_from_user+0xdd/0x150 [ 55.731704] do_arpt_set_ctl+0x303/0x640 [ 55.735765] ? compat_do_arpt_get_ctl+0x850/0x850 [ 55.740589] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 55.745418] ? wait_for_completion+0x440/0x440 [ 55.749986] ? mutex_unlock+0xd/0x10 [ 55.753683] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 55.758942] nf_setsockopt+0x77/0xd0 [ 55.762643] ip_setsockopt+0xdf/0x100 [ 55.766427] udp_setsockopt+0x68/0xb0 [ 55.770213] sock_common_setsockopt+0x94/0xd0 [ 55.774702] __sys_setsockopt+0x17a/0x280 [ 55.778836] ? kernel_accept+0x310/0x310 [ 55.782891] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 55.787674] ? do_syscall_64+0x26/0x620 [ 55.791631] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.796983] ? do_syscall_64+0x26/0x620 [ 55.800940] __x64_sys_setsockopt+0xbe/0x150 [ 55.805331] do_syscall_64+0xfd/0x620 [ 55.809113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.814284] RIP: 0033:0x441699 [ 55.817458] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 55.836601] RSP: 002b:00007ffedf9b0b48 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 55.844293] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000441699 [ 55.851549] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000003 [ 55.858848] RBP: 00000000006cb018 R08: 0000000000000430 R09: 00000000004002c8 [ 55.866099] R10: 00000000200008c0 R11: 0000000000000246 R12: 0000000000402f20 [ 55.873350] R13: 0000000000402fb0 R14: 0000000000000000 R15: 0000000000000000 [ 55.880606] Modules linked in: [ 55.884257] ---[ end trace 60d1939d138c2853 ]--- [ 55.889038] RIP: 0010:xt_rateest_tg_checkentry+0x11d/0xb50 [ 55.894693] Code: 89 79 61 fb 45 84 f6 0f 84 0d 07 00 00 e8 3b 78 61 fb 49 8d bd 48 1b 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 f9 08 00 00 4d 8b ad 48 1b 00 00 e8 fd 88 4e fb [ 55.913649] RSP: 0018:ffff8880916c77d0 EFLAGS: 00010206 [ 55.919014] RAX: dffffc0000000000 RBX: ffff8880916c7b30 RCX: ffffffff8609a493 [ 55.926298] RDX: 0000000000000369 RSI: ffffffff86099d75 RDI: 0000000000001b48 [ 55.933584] RBP: ffff8880916c7890 R08: ffff88808ed18340 R09: ffffed1015d24733 [ 55.940837] R10: ffffed1015d24732 R11: ffff8880ae923993 R12: 000000000000002c [ 55.948118] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880916c7868 [ 55.955407] FS: 0000000001ba4880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 55.963643] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.969516] CR2: 000055e22ee96190 CR3: 000000009bf2f000 CR4: 00000000001406f0 [ 55.976820] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.984117] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.991381] Kernel panic - not syncing: Fatal exception [ 55.998084] Kernel Offset: disabled [ 56.001705] Rebooting in 86400 seconds..