Warning: Permanently added '10.128.0.64' (ECDSA) to the list of known hosts. executing program [ 38.778750] audit: type=1400 audit(1591448495.231:8): avc: denied { execmem } for pid=6428 comm="syz-executor414" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 38.833394] netlink: 20 bytes leftover after parsing attributes in process `syz-executor414'. [ 38.842282] kasan: CONFIG_KASAN_INLINE enabled [ 38.848285] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 38.856326] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 38.862570] CPU: 1 PID: 6430 Comm: syz-executor414 Not tainted 4.19.126-syzkaller #0 [ 38.870536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.879880] RIP: 0010:nfnetlink_parse_nat_setup+0x21f/0x420 [ 38.885585] Code: c3 89 c6 e8 e3 a8 95 fb 85 db 0f 88 78 01 00 00 e8 66 a7 95 fb 49 8d 7e 38 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 db 01 00 00 48 8b 7c 24 08 4c 89 fe 41 ff 56 38 [ 38.904468] RSP: 0018:ffff8880860c7060 EFLAGS: 00010202 [ 38.909809] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff85d1e35d [ 38.917143] RDX: 0000000060000007 RSI: ffffffff85d1e36a RDI: 000000030000003b [ 38.924416] RBP: ffff88808f542040 R08: ffff8880a5c86640 R09: ffffed1015ce5081 [ 38.931837] R10: ffffed1015ce5080 R11: ffff8880ae728407 R12: 0000000000000000 [ 38.939272] R13: 0000000000000000 R14: 0000000300000003 R15: ffff8880860c7098 [ 38.946527] FS: 00007f27348e4700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 38.954730] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.960686] CR2: 00007f72dc714020 CR3: 00000000a0b86000 CR4: 00000000001406e0 [ 38.967946] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.975206] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.982452] Call Trace: [ 38.985025] ? nf_nat_inet_fn+0x8a0/0x8a0 [ 38.989163] ? check_preemption_disabled+0x41/0x280 [ 38.994162] ? check_preemption_disabled+0x41/0x280 [ 38.999157] ctnetlink_parse_nat_setup+0xb6/0x640 [ 39.003979] ctnetlink_create_conntrack+0x501/0x12b0 [ 39.009058] ? ctnetlink_glue_parse+0x520/0x520 [ 39.013702] ? __lock_acquire+0x6b9/0x4380 [ 39.017915] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 39.023098] ? hash_conntrack_raw.isra.0+0x2d9/0x470 [ 39.028179] ? nf_conntrack_double_lock.isra.0+0xf0/0xf0 [ 39.033616] ? nf_ct_gc_expired+0x310/0x310 [ 39.037918] ctnetlink_new_conntrack+0x4f5/0xdd1 [ 39.042667] ? ctnetlink_create_conntrack+0x12b0/0x12b0 [ 39.048018] ? __mutex_add_waiter+0x160/0x160 [ 39.052496] ? check_preemption_disabled+0x41/0x280 [ 39.057491] ? ctnetlink_create_conntrack+0x12b0/0x12b0 [ 39.062856] nfnetlink_rcv_msg+0xc6b/0xf50 [ 39.067159] ? nfnetlink_net_exit_batch+0x150/0x150 [ 39.072158] ? __lock_acquire+0x6b9/0x4380 [ 39.076373] ? cred_has_capability+0x162/0x2e0 [ 39.080952] ? cred_has_capability+0x1d9/0x2e0 [ 39.085607] ? selinux_inode_copy_up+0x180/0x180 [ 39.090338] ? selinux_inode_copy_up+0x180/0x180 [ 39.095085] netlink_rcv_skb+0x160/0x410 [ 39.099135] ? nfnetlink_net_exit_batch+0x150/0x150 [ 39.104129] ? netlink_ack+0xa50/0xa50 [ 39.108097] ? ns_capable_common+0xe2/0x100 [ 39.112396] nfnetlink_rcv+0x1b2/0x420 [ 39.116261] ? nfnetlink_rcv_batch+0x15e0/0x15e0 [ 39.120995] netlink_unicast+0x4d7/0x6a0 [ 39.125034] ? netlink_sendskb+0x70/0x70 [ 39.129095] netlink_sendmsg+0x6e3/0xcc0 [ 39.133145] ? nlmsg_notify+0x190/0x190 [ 39.137100] ? nlmsg_notify+0x190/0x190 [ 39.141148] sock_sendmsg+0xc3/0x120 [ 39.144851] sock_no_sendpage+0xf8/0x140 [ 39.148898] ? sk_clear_memalloc+0x130/0x130 [ 39.153310] ? lock_downgrade+0x740/0x740 [ 39.157438] ? lock_acquire+0x170/0x3c0 [ 39.161401] ? lock_acquire+0x170/0x3c0 [ 39.165356] ? pipe_lock+0x63/0x80 [ 39.168882] ? sk_clear_memalloc+0x130/0x130 [ 39.173278] kernel_sendpage+0x82/0xd0 [ 39.177405] sock_sendpage+0x84/0xa0 [ 39.181107] pipe_to_sendpage+0x263/0x320 [ 39.185578] ? kernel_sendpage+0xd0/0xd0 [ 39.193435] ? direct_splice_actor+0x160/0x160 [ 39.197999] ? splice_from_pipe_next.part.0+0x24f/0x2f0 [ 39.203340] __splice_from_pipe+0x38f/0x7a0 [ 39.207645] ? direct_splice_actor+0x160/0x160 [ 39.212212] ? direct_splice_actor+0x160/0x160 [ 39.216773] splice_from_pipe+0xd9/0x140 [ 39.220825] ? splice_shrink_spd+0xc0/0xc0 [ 39.225040] ? security_file_permission+0x84/0x220 [ 39.230219] ? splice_from_pipe+0x140/0x140 [ 39.234545] __se_sys_splice+0xf18/0x1560 [ 39.238676] ? lock_downgrade+0x740/0x740 [ 39.242801] ? ret_from_fork+0x8/0x30 [ 39.246579] ? opipe_prep.part.0+0x2c0/0x2c0 [ 39.250973] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 39.255710] ? trace_hardirqs_off_caller+0x69/0x210 [ 39.260718] ? do_syscall_64+0x21/0x620 [ 39.265278] do_syscall_64+0xf9/0x620 [ 39.269068] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 39.274246] RIP: 0033:0x445959 [ 39.277426] Code: e8 bc b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b 12 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 39.296305] RSP: 002b:00007f27348e3d88 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 39.304001] RAX: ffffffffffffffda RBX: 00000000006dac58 RCX: 0000000000445959 [ 39.311256] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 39.318502] RBP: 00000000006dac50 R08: 000000000004ffe0 R09: 0000000000000000 [ 39.325749] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dac5c [ 39.332994] R13: 00000000004ade28 R14: 0000000000000006 R15: 0000000000000018 [ 39.340944] Modules linked in: [ 39.353596] ---[ end trace 8373eabd710aff70 ]--- [ 39.358396] RIP: 0010:nfnetlink_parse_nat_setup+0x21f/0x420 [ 39.364159] Code: c3 89 c6 e8 e3 a8 95 fb 85 db 0f 88 78 01 00 00 e8 66 a7 95 fb 49 8d 7e 38 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 db 01 00 00 48 8b 7c 24 08 4c 89 fe 41 ff 56 38 [ 39.383126] RSP: 0018:ffff8880860c7060 EFLAGS: 00010202 [ 39.388520] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff85d1e35d [ 39.395826] RDX: 0000000060000007 RSI: ffffffff85d1e36a RDI: 000000030000003b [ 39.403088] RBP: ffff88808f542040 R08: ffff8880a5c86640 R09: ffffed1015ce5081 [ 39.410382] R10: ffffed1015ce5080 R11: ffff8880ae728407 R12: 0000000000000000 [ 39.417774] R13: 0000000000000000 R14: 0000000300000003 R15: ffff8880860c7098 [ 39.425087] FS: 00007f27348e4700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 39.433327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.439226] CR2: 00007f72dc718000 CR3: 00000000a0b86000 CR4: 00000000001406e0 [ 39.446541] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.453834] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.461095] Kernel panic - not syncing: Fatal exception [ 39.467831] Kernel Offset: disabled [ 39.471881] Rebooting in 86400 seconds..