[ 41.671548] audit: type=1800 audit(1578730695.614:31): pid=7702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 Starting mcstransd: [ 41.756496] audit: type=1800 audit(1578730695.694:32): pid=7702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.159' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 50.842866] kauditd_printk_skb: 3 callbacks suppressed [ 50.842883] audit: type=1400 audit(1578730704.784:36): avc: denied { map } for pid=7888 comm="syz-executor994" path="/root/syz-executor994051591" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 50.846122] kasan: CONFIG_KASAN_INLINE enabled [ 50.879384] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 50.886839] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 50.893100] CPU: 1 PID: 7888 Comm: syz-executor994 Not tainted 4.19.94-syzkaller #0 [ 50.900891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.910247] RIP: 0010:xt_rateest_tg_checkentry+0x11d/0xb50 [ 50.915867] Code: 89 79 61 fb 45 84 f6 0f 84 0d 07 00 00 e8 3b 78 61 fb 49 8d bd 48 1b 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 f9 08 00 00 4d 8b ad 48 1b 00 00 e8 fd 88 4e fb [ 50.935085] RSP: 0018:ffff888092c077d0 EFLAGS: 00010206 [ 50.940444] RAX: dffffc0000000000 RBX: ffff888092c07b30 RCX: ffffffff8609a493 [ 50.947700] RDX: 0000000000000369 RSI: ffffffff86099d75 RDI: 0000000000001b48 [ 50.955137] RBP: ffff888092c07890 R08: ffff8880894724c0 R09: ffffed1015d24733 [ 50.962400] R10: ffffed1015d24732 R11: ffff8880ae923993 R12: 000000000000002c [ 50.969667] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888092c07868 [ 50.976935] FS: 0000000000e21880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 50.985378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.991251] CR2: 00000000200008e0 CR3: 000000008e41c000 CR4: 00000000001406e0 [ 50.998595] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.005862] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.013114] Call Trace: [ 51.016232] ? xt_rateest_lookup+0x280/0x280 [ 51.020639] ? kasan_check_write+0x14/0x20 [ 51.024862] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 51.029710] ? mutex_trylock+0x1e0/0x1e0 [ 51.033765] ? xt_rateest_lookup+0x280/0x280 [ 51.038175] xt_check_target+0x283/0x6a0 [ 51.042241] ? textify_hooks.constprop.0+0x1a0/0x1a0 [ 51.047339] ? mutex_unlock+0xd/0x10 [ 51.051048] ? xt_find_target+0x73/0x280 [ 51.055102] ? xt_find_target+0x73/0x280 [ 51.059151] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 51.064701] translate_table+0x1005/0x1d70 [ 51.068931] ? arpt_alloc_initial_table+0x690/0x690 [ 51.073937] ? lock_downgrade+0x880/0x880 [ 51.078087] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 51.083617] ? _copy_from_user+0xdd/0x150 [ 51.087756] do_arpt_set_ctl+0x303/0x640 [ 51.091809] ? compat_do_arpt_get_ctl+0x850/0x850 [ 51.096639] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 51.101482] ? wait_for_completion+0x440/0x440 [ 51.106072] ? mutex_unlock+0xd/0x10 [ 51.109776] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 51.115061] nf_setsockopt+0x77/0xd0 [ 51.118763] ip_setsockopt+0xdf/0x100 [ 51.122551] udp_setsockopt+0x68/0xb0 [ 51.126342] sock_common_setsockopt+0x94/0xd0 [ 51.130941] __sys_setsockopt+0x17a/0x280 [ 51.135160] ? kernel_accept+0x310/0x310 [ 51.139350] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 51.144111] ? do_syscall_64+0x26/0x620 [ 51.148081] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.153447] ? do_syscall_64+0x26/0x620 [ 51.157429] __x64_sys_setsockopt+0xbe/0x150 [ 51.161840] do_syscall_64+0xfd/0x620 [ 51.165639] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.170825] RIP: 0033:0x441699 [ 51.174006] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 51.193005] RSP: 002b:00007ffc6e5a4c48 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 51.200847] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000441699 [ 51.208116] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000003 [ 51.215571] RBP: 00000000006cb018 R08: 0000000000000430 R09: 00000000004002c8 [ 51.222832] R10: 00000000200008c0 R11: 0000000000000246 R12: 0000000000402f20 [ 51.230100] R13: 0000000000402fb0 R14: 0000000000000000 R15: 0000000000000000 [ 51.237539] Modules linked in: [ 51.241155] ---[ end trace 54b90c419c21eaee ]--- [ 51.245943] RIP: 0010:xt_rateest_tg_checkentry+0x11d/0xb50 [ 51.251603] Code: 89 79 61 fb 45 84 f6 0f 84 0d 07 00 00 e8 3b 78 61 fb 49 8d bd 48 1b 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 f9 08 00 00 4d 8b ad 48 1b 00 00 e8 fd 88 4e fb [ 51.279738] RSP: 0018:ffff888092c077d0 EFLAGS: 00010206 [ 51.285527] RAX: dffffc0000000000 RBX: ffff888092c07b30 RCX: ffffffff8609a493 [ 51.292933] RDX: 0000000000000369 RSI: ffffffff86099d75 RDI: 0000000000001b48 [ 51.300219] RBP: ffff888092c07890 R08: ffff8880894724c0 R09: ffffed1015d24733 [ 51.307507] R10: ffffed1015d24732 R11: ffff8880ae923993 R12: 000000000000002c [ 51.314960] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888092c07868 [ 51.322413] FS: 0000000000e21880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 51.330758] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.336641] CR2: 00000000200008e0 CR3: 000000008e41c000 CR4: 00000000001406e0 [ 51.343950] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.351265] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.358533] Kernel panic - not syncing: Fatal exception [ 51.365315] Kernel Offset: disabled [ 51.368943] Rebooting in 86400 seconds..