[ 99.921613][ T27] audit: type=1800 audit(1580511218.223:36): pid=10461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [ 100.629123][ T27] audit: type=1400 audit(1580511219.083:37): avc: denied { watch } for pid=10548 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.3' (ECDSA) to the list of known hosts. syzkaller login: [ 108.313869][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 108.319099][T10650] general protection fault, probably for non-canonical address 0xdffffc00060e8d2f: 0000 [#1] PREEMPT SMP KASAN [ 108.320148][ T27] audit: type=1400 audit(1580511226.763:42): avc: denied { map } for pid=10650 comm="syz-executor040" path="/root/syz-executor040290586" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 108.331618][T10650] KASAN: probably user-memory-access in range [0x0000000030746978-0x000000003074697f] [ 108.331632][T10650] CPU: 1 PID: 10650 Comm: syz-executor040 Not tainted 5.5.0-syzkaller #0 [ 108.331640][T10650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 108.331661][T10650] RIP: 0010:nf_flow_table_offload_setup+0x4dc/0x6d0 [ 108.331679][T10650] Code: bc 24 50 ff ff ff 48 ba 00 00 00 00 00 fc ff df 4d 8b ae 00 02 00 00 4d 8b a4 24 58 ff ff ff 49 8d 7f 08 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 cd 01 00 00 4c 89 e2 49 89 47 08 48 b8 00 00 00 executing program [ 108.358746][ T27] audit: type=1400 audit(1580511226.773:43): avc: denied { create } for pid=10650 comm="syz-executor040" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 108.368161][T10650] RSP: 0018:ffffc90001e47228 EFLAGS: 00010202 [ 108.368172][T10650] RAX: ffff8880962b1a50 RBX: 1ffff920003c8e49 RCX: 00000000060e8d2f [ 108.368179][T10650] RDX: dffffc0000000000 RSI: ffffffff8682a1ce RDI: 000000003074697b [ 108.368187][T10650] RBP: ffffc90001e47370 R08: ffff8880a5bce040 R09: fffff520003c8e55 [ 108.368198][T10650] R10: fffff520003c8e54 R11: ffffc90001e472a6 R12: 0000000000000000 [ 108.368211][T10650] R13: ffff8880962b1a50 R14: ffff8880962b1850 R15: 0000000030746973 [ 108.376870][ T27] audit: type=1400 audit(1580511226.773:44): avc: denied { write } for pid=10650 comm="syz-executor040" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 108.386634][T10650] FS: 0000000001174880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 108.386643][T10650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.386650][T10650] CR2: 0000000020003e00 CR3: 000000008fe2d000 CR4: 00000000001406e0 [ 108.386660][T10650] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.386672][T10650] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.547860][T10650] Call Trace: [ 108.551134][T10650] ? flow_offload_queue_work+0x130/0x130 [ 108.556764][T10650] ? nft_netdev_hook_alloc+0xfb/0x170 [ 108.562114][T10650] ? nf_tables_init_net+0x1e0/0x1e0 [ 108.567306][T10650] ? nla_memcpy+0xb0/0xb0 [ 108.571616][T10650] ? wait_for_completion+0x440/0x440 [ 108.576926][T10650] ? trace_hardirqs_on+0x67/0x240 [ 108.581929][T10650] ? nf_tables_parse_netdev_hooks+0x70/0x660 [ 108.587911][T10650] nf_tables_newflowtable+0x1352/0x1d90 [ 108.593451][T10650] ? nf_tables_newrule+0x2400/0x2400 [ 108.598774][T10650] ? __nla_parse+0x43/0x60 [ 108.603179][T10650] nfnetlink_rcv_batch+0x8c8/0x1790 [ 108.608374][T10650] ? nf_tables_newrule+0x2400/0x2400 [ 108.613645][T10650] ? nfnetlink_subsys_register+0x2b0/0x2b0 [ 108.619454][T10650] ? selinux_sb_eat_lsm_opts+0x700/0x700 [ 108.625127][T10650] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 108.631397][T10650] ? __nla_validate_parse+0x2d0/0x1ee0 [ 108.636839][T10650] ? selinux_capable+0x36/0x40 [ 108.641590][T10650] ? nla_memcpy+0xb0/0xb0 [ 108.645901][T10650] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 108.652121][T10650] ? ns_capable_common+0x93/0x100 [ 108.657131][T10650] ? __nla_parse+0x43/0x60 [ 108.661526][T10650] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 108.667335][T10650] nfnetlink_rcv+0x3e7/0x460 [ 108.671921][T10650] ? nfnetlink_rcv_batch+0x1790/0x1790 [ 108.677356][T10650] ? netlink_deliver_tap+0x248/0xbf0 [ 108.682620][T10650] ? __kasan_check_write+0x14/0x20 [ 108.687729][T10650] netlink_unicast+0x59e/0x7e0 [ 108.692471][T10650] ? netlink_attachskb+0x870/0x870 [ 108.697567][T10650] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 108.703789][T10650] netlink_sendmsg+0x91c/0xea0 [ 108.708534][T10650] ? netlink_unicast+0x7e0/0x7e0 [ 108.713450][T10650] ? tomoyo_socket_sendmsg+0x26/0x30 [ 108.718713][T10650] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 108.724934][T10650] ? security_socket_sendmsg+0x8d/0xc0 [ 108.730382][T10650] ? netlink_unicast+0x7e0/0x7e0 [ 108.735296][T10650] sock_sendmsg+0xd7/0x130 [ 108.739779][T10650] ____sys_sendmsg+0x753/0x880 [ 108.744530][T10650] ? kernel_sendmsg+0x50/0x50 [ 108.749254][T10650] ___sys_sendmsg+0x100/0x170 [ 108.753933][T10650] ? sendmsg_copy_msghdr+0x70/0x70 [ 108.759190][T10650] ? do_huge_pmd_anonymous_page+0xceb/0x1a50 [ 108.765168][T10650] ? prep_transhuge_page+0xa0/0xa0 [ 108.770266][T10650] ? do_page_fault+0x579/0x12e1 [ 108.775102][T10650] ? find_held_lock+0x35/0x130 [ 108.779845][T10650] ? do_page_fault+0x579/0x12e1 [ 108.784688][T10650] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 108.790916][T10650] ? __fget_light+0x1ad/0x270 [ 108.795585][T10650] ? __fdget+0x1b/0x20 [ 108.799636][T10650] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 108.805864][T10650] __sys_sendmsg+0x105/0x1d0 [ 108.810432][T10650] ? __sys_sendmsg_sock+0xc0/0xc0 [ 108.815439][T10650] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 108.820876][T10650] ? do_syscall_64+0x26/0x790 [ 108.825536][T10650] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 108.831579][T10650] ? do_syscall_64+0x26/0x790 [ 108.836281][T10650] __x64_sys_sendmsg+0x78/0xb0 [ 108.841044][T10650] do_syscall_64+0xfa/0x790 [ 108.845539][T10650] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 108.851405][T10650] RIP: 0033:0x4401b9 [ 108.855321][T10650] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 108.875163][T10650] RSP: 002b:00007ffe95c3a818 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.883625][T10650] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004401b9 [ 108.891585][T10650] RDX: 0000000000000000 RSI: 0000000020003e00 RDI: 0000000000000003 [ 108.899628][T10650] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 108.907642][T10650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401a40 [ 108.915607][T10650] R13: 0000000000401ad0 R14: 0000000000000000 R15: 0000000000000000 [ 108.923575][T10650] Modules linked in: [ 108.928784][T10650] ---[ end trace ff43c8d5f2fa7599 ]--- [ 108.934509][T10650] RIP: 0010:nf_flow_table_offload_setup+0x4dc/0x6d0 [ 108.941080][T10650] Code: bc 24 50 ff ff ff 48 ba 00 00 00 00 00 fc ff df 4d 8b ae 00 02 00 00 4d 8b a4 24 58 ff ff ff 49 8d 7f 08 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 cd 01 00 00 4c 89 e2 49 89 47 08 48 b8 00 00 00 [ 108.960845][T10650] RSP: 0018:ffffc90001e47228 EFLAGS: 00010202 [ 108.966948][T10650] RAX: ffff8880962b1a50 RBX: 1ffff920003c8e49 RCX: 00000000060e8d2f [ 108.974958][T10650] RDX: dffffc0000000000 RSI: ffffffff8682a1ce RDI: 000000003074697b [ 108.982922][T10650] RBP: ffffc90001e47370 R08: ffff8880a5bce040 R09: fffff520003c8e55 [ 108.990915][T10650] R10: fffff520003c8e54 R11: ffffc90001e472a6 R12: 0000000000000000 [ 108.998913][T10650] R13: ffff8880962b1a50 R14: ffff8880962b1850 R15: 0000000030746973 [ 109.006916][T10650] FS: 0000000001174880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 109.015881][T10650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.022455][T10650] CR2: 000055cab44ed150 CR3: 000000008fe2d000 CR4: 00000000001406f0 [ 109.030458][T10650] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.038468][T10650] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 109.046478][T10650] Kernel panic - not syncing: Fatal exception [ 109.053723][T10650] Kernel Offset: disabled [ 109.058116][T10650] Rebooting in 86400 seconds..