[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.15' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 38.803881] audit: type=1400 audit(1595942101.025:8): avc: denied { execmem } for pid=6446 comm="syz-executor157" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 38.808513] netlink: 8 bytes leftover after parsing attributes in process `syz-executor157'. [ 38.833620] kasan: CONFIG_KASAN_INLINE enabled [ 38.838348] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 38.846132] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 38.852507] CPU: 1 PID: 6446 Comm: syz-executor157 Not tainted 4.19.134-syzkaller #0 [ 38.860369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.869720] RIP: 0010:nfnetlink_parse_nat_setup+0x22d/0x640 [ 38.875411] Code: c3 89 c6 e8 85 d6 7d fb 85 db 0f 88 98 02 00 00 e8 08 d5 7d fb 49 8d 7e 38 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b1 03 00 00 48 8b 7c 24 08 4c 89 fe 41 ff 56 38 [ 38.894322] RSP: 0018:ffff8880a672f198 EFLAGS: 00010202 [ 38.899757] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff85ebda2b [ 38.907026] RDX: 0000000007a0c908 RSI: ffffffff85ebda38 RDI: 000000003d064840 [ 38.914295] RBP: ffff88809005ec40 R08: 0000000000000050 R09: 0000000000000000 [ 38.921566] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 38.928849] R13: 0000000000000000 R14: 000000003d064808 R15: ffff8880a672f210 [ 38.936104] FS: 0000000000d73880(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 38.944329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.950368] CR2: 00007fac976256c0 CR3: 0000000095898000 CR4: 00000000001406e0 [ 38.957836] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.965091] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.972550] Call Trace: [ 38.975138] ? nf_nat_inet_fn+0xb00/0xb00 [ 38.979308] ctnetlink_parse_nat_setup+0xb6/0x640 [ 38.984196] ctnetlink_create_conntrack+0x505/0x12c0 [ 38.989334] ? ctnetlink_change_synproxy.isra.0+0x380/0x380 [ 38.995031] ? hash_conntrack_raw+0x2d6/0x460 [ 39.000287] ? nf_ct_get_tuplepr+0x310/0x310 [ 39.004695] ? nf_ct_gc_expired+0x300/0x300 [ 39.009011] ? nfnetlink_rcv_msg+0x98d/0xf60 [ 39.013404] ctnetlink_new_conntrack+0x4f3/0xde0 [ 39.018161] ? ctnetlink_create_conntrack+0x12c0/0x12c0 [ 39.023601] ? nfnetlink_rcv_msg+0x98d/0xf60 [ 39.027995] ? nfnetlink_rcv_msg+0x95a/0xf60 [ 39.032472] ? ctnetlink_create_conntrack+0x12c0/0x12c0 [ 39.040159] nfnetlink_rcv_msg+0xc4f/0xf60 [ 39.044636] ? nfnetlink_net_exit_batch+0x150/0x150 [ 39.049635] ? __lock_acquire+0x6de/0x3ff0 [ 39.053863] ? cred_has_capability.isra.0+0x139/0x2b0 [ 39.059030] ? cred_has_capability.isra.0+0x1b0/0x2b0 [ 39.064200] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 39.069478] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 39.074401] netlink_rcv_skb+0x160/0x440 [ 39.078455] ? nfnetlink_net_exit_batch+0x150/0x150 [ 39.083508] ? netlink_ack+0xae0/0xae0 [ 39.087379] ? ns_capable+0xde/0x100 [ 39.091074] nfnetlink_rcv+0x1b2/0x41b [ 39.094941] ? nfnetlink_rcv_batch+0x1df0/0x1df0 [ 39.099691] netlink_unicast+0x4d5/0x690 [ 39.103907] ? netlink_sendskb+0x110/0x110 [ 39.108131] netlink_sendmsg+0x6bb/0xc40 [ 39.112173] ? nlmsg_notify+0x1a0/0x1a0 [ 39.116142] ? kernel_recvmsg+0x220/0x220 [ 39.120271] ? nlmsg_notify+0x1a0/0x1a0 [ 39.124317] sock_sendmsg+0xc3/0x120 [ 39.128027] ___sys_sendmsg+0x7bb/0x8e0 [ 39.131988] ? copy_msghdr_from_user+0x440/0x440 [ 39.136817] ? __lockdep_init_map+0x100/0x5a0 [ 39.141291] ? check_preemption_disabled+0x41/0x280 [ 39.146294] ? mark_held_locks+0xf0/0xf0 [ 39.150785] ? percpu_counter_add_batch+0x126/0x180 [ 39.155780] ? alloc_empty_file+0xd7/0x170 [ 39.160014] ? errseq_sample+0x56/0x70 [ 39.163977] ? alloc_file+0x326/0x4d0 [ 39.168056] ? __fd_install+0x1b4/0x610 [ 39.172182] ? __fdget+0x1a0/0x230 [ 39.175743] __x64_sys_sendmsg+0x132/0x220 [ 39.180015] ? __sys_sendmsg+0x1b0/0x1b0 [ 39.184066] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 39.188800] ? trace_hardirqs_off_caller+0x69/0x210 [ 39.193795] ? do_syscall_64+0x21/0x620 [ 39.197745] do_syscall_64+0xf9/0x620 [ 39.201787] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 39.206963] RIP: 0033:0x440309 [ 39.210133] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 39.229074] RSP: 002b:00007ffeac055bc8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.236898] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440309 [ 39.244159] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000003 [ 39.251407] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 39.258664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401b10 [ 39.266175] R13: 0000000000401ba0 R14: 0000000000000000 R15: 0000000000000000 [ 39.273564] Modules linked in: [ 39.277150] ---[ end trace 8c85e4300ee35c9c ]--- [ 39.281920] RIP: 0010:nfnetlink_parse_nat_setup+0x22d/0x640 [ 39.287704] Code: c3 89 c6 e8 85 d6 7d fb 85 db 0f 88 98 02 00 00 e8 08 d5 7d fb 49 8d 7e 38 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b1 03 00 00 48 8b 7c 24 08 4c 89 fe 41 ff 56 38 [ 39.308405] RSP: 0018:ffff8880a672f198 EFLAGS: 00010202 [ 39.313770] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff85ebda2b [ 39.321238] RDX: 0000000007a0c908 RSI: ffffffff85ebda38 RDI: 000000003d064840 [ 39.328562] RBP: ffff88809005ec40 R08: 0000000000000050 R09: 0000000000000000 [ 39.336124] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 39.347361] R13: 0000000000000000 R14: 000000003d064808 R15: ffff8880a672f210 [ 39.354679] FS: 0000000000d73880(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 39.362900] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.368828] CR2: 00007fac976256c0 CR3: 0000000095898000 CR4: 00000000001406e0 [ 39.376137] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.383579] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.390898] Kernel panic - not syncing: Fatal exception [ 39.396959] Kernel Offset: disabled [ 39.400577] Rebooting in 86400 seconds..