[ 41.030768] audit: type=1800 audit(1578731840.046:31): pid=7818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [ 41.053557] audit: type=1800 audit(1578731840.056:32): pid=7818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.118' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 63.136257] kauditd_printk_skb: 3 callbacks suppressed [ 63.136274] audit: type=1400 audit(1578731862.216:36): avc: denied { map } for pid=8004 comm="syz-executor769" path="/root/syz-executor769537060" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 63.140103] kasan: CONFIG_KASAN_INLINE enabled [ 63.172886] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 63.180253] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 63.186677] CPU: 1 PID: 8004 Comm: syz-executor769 Not tainted 4.19.94-syzkaller #0 [ 63.194474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.203840] RIP: 0010:xt_rateest_tg_checkentry+0x11d/0xb50 [ 63.209471] Code: 89 79 61 fb 45 84 f6 0f 84 0d 07 00 00 e8 3b 78 61 fb 49 8d bd 48 1b 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 f9 08 00 00 4d 8b ad 48 1b 00 00 e8 fd 88 4e fb [ 63.228650] RSP: 0018:ffff8880941777d0 EFLAGS: 00010206 [ 63.234010] RAX: dffffc0000000000 RBX: ffff888094177b30 RCX: ffffffff8609a493 [ 63.241287] RDX: 0000000000000369 RSI: ffffffff86099d75 RDI: 0000000000001b48 [ 63.248546] RBP: ffff888094177890 R08: ffff8880a8b080c0 R09: ffffed1015d24733 [ 63.255804] R10: ffffed1015d24732 R11: ffff8880ae923993 R12: 000000000000002c [ 63.263593] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888094177868 [ 63.270958] FS: 0000000000c96880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 63.279196] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.285068] CR2: 00000000200008e0 CR3: 000000008f2dd000 CR4: 00000000001406e0 [ 63.292329] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.299586] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.306848] Call Trace: [ 63.309529] ? xt_rateest_lookup+0x280/0x280 [ 63.313943] ? kasan_check_write+0x14/0x20 [ 63.318172] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 63.323001] ? mutex_trylock+0x1e0/0x1e0 [ 63.327065] ? xt_rateest_lookup+0x280/0x280 [ 63.331483] xt_check_target+0x283/0x6a0 [ 63.335547] ? textify_hooks.constprop.0+0x1a0/0x1a0 [ 63.340654] ? mutex_unlock+0xd/0x10 [ 63.344364] ? xt_find_target+0x73/0x280 [ 63.348416] ? xt_find_target+0x73/0x280 [ 63.352481] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 63.358014] translate_table+0x1005/0x1d70 [ 63.362266] ? arpt_alloc_initial_table+0x690/0x690 [ 63.367291] ? lock_downgrade+0x880/0x880 [ 63.371438] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 63.376992] ? _copy_from_user+0xdd/0x150 [ 63.381143] do_arpt_set_ctl+0x303/0x640 [ 63.385205] ? compat_do_arpt_get_ctl+0x850/0x850 [ 63.390043] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 63.394909] ? wait_for_completion+0x440/0x440 [ 63.399487] ? mutex_unlock+0xd/0x10 [ 63.403192] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 63.408572] nf_setsockopt+0x77/0xd0 [ 63.412415] ip_setsockopt+0xdf/0x100 [ 63.416211] udp_setsockopt+0x68/0xb0 [ 63.420019] sock_common_setsockopt+0x94/0xd0 [ 63.424515] __sys_setsockopt+0x17a/0x280 [ 63.428652] ? kernel_accept+0x310/0x310 [ 63.432705] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 63.437460] ? do_syscall_64+0x26/0x620 [ 63.441457] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 63.446808] ? do_syscall_64+0x26/0x620 [ 63.450925] __x64_sys_setsockopt+0xbe/0x150 [ 63.455338] do_syscall_64+0xfd/0x620 [ 63.459141] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 63.464342] RIP: 0033:0x441699 [ 63.467595] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 63.486722] RSP: 002b:00007ffc2198b318 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 63.494425] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000441699 [ 63.504039] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000003 [ 63.511305] RBP: 00000000006cb018 R08: 0000000000000430 R09: 00000000004002c8 [ 63.518567] R10: 00000000200008c0 R11: 0000000000000246 R12: 0000000000402f20 [ 63.526006] R13: 0000000000402fb0 R14: 0000000000000000 R15: 0000000000000000 [ 63.533267] Modules linked in: [ 63.537211] ---[ end trace cf4cc98eefaa44e7 ]--- [ 63.542123] RIP: 0010:xt_rateest_tg_checkentry+0x11d/0xb50 [ 63.547754] Code: 89 79 61 fb 45 84 f6 0f 84 0d 07 00 00 e8 3b 78 61 fb 49 8d bd 48 1b 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 f9 08 00 00 4d 8b ad 48 1b 00 00 e8 fd 88 4e fb [ 63.566684] RSP: 0018:ffff8880941777d0 EFLAGS: 00010206 [ 63.572090] RAX: dffffc0000000000 RBX: ffff888094177b30 RCX: ffffffff8609a493 [ 63.579520] RDX: 0000000000000369 RSI: ffffffff86099d75 RDI: 0000000000001b48 [ 63.586857] RBP: ffff888094177890 R08: ffff8880a8b080c0 R09: ffffed1015d24733 [ 63.594157] R10: ffffed1015d24732 R11: ffff8880ae923993 R12: 000000000000002c [ 63.601457] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888094177868 [ 63.608732] FS: 0000000000c96880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 63.616983] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.622896] CR2: 00000000200008e0 CR3: 000000008f2dd000 CR4: 00000000001406e0 [ 63.630158] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.637449] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.644740] Kernel panic - not syncing: Fatal exception [ 63.651706] Kernel Offset: disabled [ 63.655335] Rebooting in 86400 seconds..