[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 72.414556][ T27] audit: type=1800 audit(1577960772.325:25): pid=8981 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 72.441271][ T27] audit: type=1800 audit(1577960772.325:26): pid=8981 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 72.489002][ T27] audit: type=1800 audit(1577960772.335:27): pid=8981 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.88' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 82.962101][ T9134] kasan: CONFIG_KASAN_INLINE enabled [ 82.967474][ T9134] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 82.975981][ T9134] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 82.982921][ T9134] CPU: 1 PID: 9134 Comm: syz-executor591 Not tainted 5.5.0-rc2-next-20191220-syzkaller #0 [ 82.992906][ T9134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.003050][ T9134] RIP: 0010:xt_rateest_tg_checkentry+0x11d/0xb40 [ 83.009422][ T9134] Code: 79 23 08 fb 45 84 f6 0f 84 08 07 00 00 e8 2b 22 08 fb 49 8d bd a8 13 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 f4 08 00 00 4d 8b ad a8 13 00 00 e8 3d 47 f4 fa [ 83.029017][ T9134] RSP: 0018:ffffc90001d67788 EFLAGS: 00010202 [ 83.035099][ T9134] RAX: dffffc0000000000 RBX: ffffc90001d67ae8 RCX: ffffffff866d3a7e [ 83.043059][ T9134] RDX: 0000000000000275 RSI: ffffffff866d3365 RDI: 00000000000013a8 [ 83.051023][ T9134] RBP: ffffc90001d67848 R08: ffff8880a056a600 R09: ffffed1015d27074 [ 83.058983][ T9134] R10: ffffed1015d27073 R11: ffff8880ae93839b R12: 000000000000002d [ 83.067078][ T9134] R13: 0000000000000000 R14: 0000000000000001 R15: ffffc90001d67820 [ 83.075041][ T9134] FS: 0000000001bc4880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 83.083951][ T9134] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.090519][ T9134] CR2: 0000000020000820 CR3: 00000000a36f9000 CR4: 00000000001406e0 [ 83.098478][ T9134] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.106473][ T9134] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.114467][ T9134] Call Trace: [ 83.117749][ T9134] ? xt_rateest_lookup+0x270/0x270 [ 83.122847][ T9134] ? __kasan_check_write+0x14/0x20 [ 83.128073][ T9134] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 83.133605][ T9134] ? xt_rateest_lookup+0x270/0x270 [ 83.138703][ T9134] xt_check_target+0x283/0x690 [ 83.143476][ T9134] ? textify_hooks.constprop.0+0x1a0/0x1a0 [ 83.149303][ T9134] ? mutex_unlock+0xd/0x10 [ 83.153734][ T9134] ? xt_find_target+0x73/0x280 [ 83.158482][ T9134] ? xt_find_target+0x73/0x280 [ 83.163327][ T9134] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 83.169597][ T9134] translate_table+0x1005/0x1d70 [ 83.174530][ T9134] ? arpt_alloc_initial_table+0x690/0x690 [ 83.180287][ T9134] ? lock_downgrade+0x920/0x920 [ 83.185141][ T9134] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 83.191370][ T9134] ? _copy_from_user+0x12c/0x1a0 [ 83.196337][ T9134] do_arpt_set_ctl+0x310/0x640 [ 83.201092][ T9134] ? __do_replace+0xa80/0xa80 [ 83.205757][ T9134] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 83.211303][ T9134] ? ___might_sleep+0x163/0x2c0 [ 83.216143][ T9134] ? wait_for_completion+0x440/0x440 [ 83.221417][ T9134] ? mutex_unlock+0xd/0x10 [ 83.225824][ T9134] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 83.231889][ T9134] nf_setsockopt+0x77/0xd0 [ 83.236290][ T9134] ip_setsockopt+0xdf/0x100 [ 83.240776][ T9134] udp_setsockopt+0x68/0xb0 [ 83.245307][ T9134] sock_common_setsockopt+0x94/0xd0 [ 83.250623][ T9134] __sys_setsockopt+0x261/0x4c0 [ 83.255577][ T9134] ? sock_create_kern+0x50/0x50 [ 83.260447][ T9134] ? down_read_non_owner+0x490/0x490 [ 83.265736][ T9134] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 83.272145][ T9134] ? handle_mm_fault+0x4ab/0xa50 [ 83.277084][ T9134] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 83.282534][ T9134] ? do_syscall_64+0x26/0x790 [ 83.287203][ T9134] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 83.293304][ T9134] ? do_syscall_64+0x26/0x790 [ 83.297972][ T9134] __x64_sys_setsockopt+0xbe/0x150 [ 83.303184][ T9134] do_syscall_64+0xfa/0x790 [ 83.307883][ T9134] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 83.313776][ T9134] RIP: 0033:0x4414d9 [ 83.317782][ T9134] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 83.337389][ T9134] RSP: 002b:00007ffebcede1a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 83.345799][ T9134] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004414d9 [ 83.353761][ T9134] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000003 [ 83.361817][ T9134] RBP: 00000000006cb018 R08: 0000000000000530 R09: 00000000004002c8 [ 83.369777][ T9134] R10: 0000000020000800 R11: 0000000000000246 R12: 0000000000402d60 [ 83.377731][ T9134] R13: 0000000000402df0 R14: 0000000000000000 R15: 0000000000000000 [ 83.385726][ T9134] Modules linked in: [ 83.390346][ T9134] ---[ end trace 17697c38bf238318 ]--- [ 83.395860][ T9134] RIP: 0010:xt_rateest_tg_checkentry+0x11d/0xb40 [ 83.402221][ T9134] Code: 79 23 08 fb 45 84 f6 0f 84 08 07 00 00 e8 2b 22 08 fb 49 8d bd a8 13 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 f4 08 00 00 4d 8b ad a8 13 00 00 e8 3d 47 f4 fa [ 83.421863][ T9134] RSP: 0018:ffffc90001d67788 EFLAGS: 00010202 [ 83.427920][ T9134] RAX: dffffc0000000000 RBX: ffffc90001d67ae8 RCX: ffffffff866d3a7e [ 83.435939][ T9134] RDX: 0000000000000275 RSI: ffffffff866d3365 RDI: 00000000000013a8 [ 83.443961][ T9134] RBP: ffffc90001d67848 R08: ffff8880a056a600 R09: ffffed1015d27074 [ 83.451978][ T9134] R10: ffffed1015d27073 R11: ffff8880ae93839b R12: 000000000000002d [ 83.459951][ T9134] R13: 0000000000000000 R14: 0000000000000001 R15: ffffc90001d67820 [ 83.468009][ T9134] FS: 0000000001bc4880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 83.477027][ T9134] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.483649][ T9134] CR2: 0000000020000820 CR3: 00000000a36f9000 CR4: 00000000001406e0 [ 83.491650][ T9134] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.499626][ T9134] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.507898][ T9134] Kernel panic - not syncing: Fatal exception [ 83.515467][ T9134] Kernel Offset: disabled [ 83.519822][ T9134] Rebooting in 86400 seconds..