[ 39.875920] audit: type=1800 audit(1577383867.365:32): pid=7585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 45.764575] kauditd_printk_skb: 2 callbacks suppressed [ 45.764591] audit: type=1400 audit(1577383873.345:35): avc: denied { map } for pid=7758 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.10' (ECDSA) to the list of known hosts. executing program [ 52.481706] audit: type=1400 audit(1577383880.065:36): avc: denied { map } for pid=7770 comm="syz-executor341" path="/root/syz-executor341373708" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 52.484934] kasan: CONFIG_KASAN_INLINE enabled [ 52.512937] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 52.520989] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 52.527281] CPU: 1 PID: 7770 Comm: syz-executor341 Not tainted 4.19.91-syzkaller #0 [ 52.535078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.544429] RIP: 0010:xt_rateest_tg_checkentry+0x11d/0xb50 [ 52.550039] Code: b9 5d 69 fb 45 84 f6 0f 84 0d 07 00 00 e8 6b 5c 69 fb 49 8d bd 48 1b 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 f9 08 00 00 4d 8b ad 48 1b 00 00 e8 fd 6d 56 fb [ 52.569008] RSP: 0018:ffff8880864577d0 EFLAGS: 00010206 [ 52.574371] RAX: dffffc0000000000 RBX: ffff888086457b30 RCX: ffffffff8601eef3 [ 52.581654] RDX: 0000000000000369 RSI: ffffffff8601e7d5 RDI: 0000000000001b48 [ 52.588915] RBP: ffff888086457890 R08: ffff88809dee63c0 R09: ffffed1015d24733 [ 52.596170] R10: ffffed1015d24732 R11: ffff8880ae923993 R12: 000000000000002c [ 52.604990] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888086457868 [ 52.612295] FS: 0000000000dc5880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 52.620549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.626426] CR2: 0000000020000820 CR3: 0000000094905000 CR4: 00000000001406e0 [ 52.633695] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.641019] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.648328] Call Trace: [ 52.650912] ? xt_rateest_lookup+0x280/0x280 [ 52.655426] ? kasan_check_write+0x14/0x20 [ 52.659670] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 52.664624] ? mutex_trylock+0x1e0/0x1e0 [ 52.668690] ? xt_rateest_lookup+0x280/0x280 [ 52.673088] xt_check_target+0x283/0x6a0 [ 52.677162] ? textify_hooks.constprop.0+0x1a0/0x1a0 [ 52.682253] ? mutex_unlock+0xd/0x10 [ 52.685962] ? xt_find_target+0x73/0x280 [ 52.690026] ? xt_find_target+0x73/0x280 [ 52.694088] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 52.699619] translate_table+0x1005/0x1d70 [ 52.703859] ? arpt_alloc_initial_table+0x690/0x690 [ 52.708867] ? lock_downgrade+0x880/0x880 [ 52.713005] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 52.718541] ? _copy_from_user+0xdd/0x150 [ 52.722690] do_arpt_set_ctl+0x303/0x640 [ 52.726814] ? compat_do_arpt_get_ctl+0x850/0x850 [ 52.731658] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 52.736498] ? wait_for_completion+0x440/0x440 [ 52.741125] ? mutex_unlock+0xd/0x10 [ 52.744850] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 52.750116] nf_setsockopt+0x77/0xd0 [ 52.753815] ip_setsockopt+0xdf/0x100 [ 52.757652] udp_setsockopt+0x68/0xb0 [ 52.761450] sock_common_setsockopt+0x94/0xd0 [ 52.765936] __sys_setsockopt+0x17a/0x280 [ 52.770074] ? kernel_accept+0x310/0x310 [ 52.774184] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 52.778927] ? do_syscall_64+0x26/0x620 [ 52.782888] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.788249] ? do_syscall_64+0x26/0x620 [ 52.792212] __x64_sys_setsockopt+0xbe/0x150 [ 52.796620] do_syscall_64+0xfd/0x620 [ 52.800409] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.805582] RIP: 0033:0x4414d9 [ 52.808806] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 52.828431] RSP: 002b:00007ffe4eeff168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 52.839534] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004414d9 [ 52.847621] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000003 [ 52.854880] RBP: 00000000006cb018 R08: 0000000000000530 R09: 00000000004002c8 [ 52.862661] R10: 0000000020000800 R11: 0000000000000246 R12: 0000000000402d60 [ 52.869941] R13: 0000000000402df0 R14: 0000000000000000 R15: 0000000000000000 [ 52.877200] Modules linked in: [ 52.880897] ---[ end trace e662b84fc81ed212 ]--- [ 52.885692] RIP: 0010:xt_rateest_tg_checkentry+0x11d/0xb50 [ 52.891443] Code: b9 5d 69 fb 45 84 f6 0f 84 0d 07 00 00 e8 6b 5c 69 fb 49 8d bd 48 1b 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 f9 08 00 00 4d 8b ad 48 1b 00 00 e8 fd 6d 56 fb [ 52.910413] RSP: 0018:ffff8880864577d0 EFLAGS: 00010206 [ 52.915772] RAX: dffffc0000000000 RBX: ffff888086457b30 RCX: ffffffff8601eef3 [ 52.923063] RDX: 0000000000000369 RSI: ffffffff8601e7d5 RDI: 0000000000001b48 [ 52.930361] RBP: ffff888086457890 R08: ffff88809dee63c0 R09: ffffed1015d24733 [ 52.938055] R10: ffffed1015d24732 R11: ffff8880ae923993 R12: 000000000000002c [ 52.945358] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888086457868 [ 52.952845] FS: 0000000000dc5880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 52.961250] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.967141] CR2: 0000558343ed2180 CR3: 0000000094905000 CR4: 00000000001406f0 [ 52.974449] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.981773] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.989032] Kernel panic - not syncing: Fatal exception [ 52.995692] Kernel Offset: disabled [ 52.999338] Rebooting in 86400 seconds..