[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 17.806187] audit: type=1400 audit(1517986342.105:6): avc: denied { map } for pid=4155 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.61' (ECDSA) to the list of known hosts. net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz0.router_solicitations = 0 syzkaller login: [ 48.114618] audit: type=1400 audit(1517986372.414:7): avc: denied { map } for pid=4173 comm="syzkaller907987" path="/root/syzkaller907987931" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 48.371383] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument executing program executing program [ 48.681010] kasan: CONFIG_KASAN_INLINE enabled [ 48.685719] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 48.693083] general protection fault: 0000 [#1] SMP KASAN [ 48.698598] Dumping ftrace buffer: [ 48.702118] (ftrace buffer empty) [ 48.705798] Modules linked in: [ 48.708964] CPU: 0 PID: 4173 Comm: syzkaller907987 Not tainted 4.15.0+ #221 [ 48.716043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.725380] RIP: 0010:ip6t_do_table+0x132d/0x1a30 [ 48.730188] RSP: 0018:ffff8801b10be808 EFLAGS: 00010246 [ 48.735519] RAX: 0000000000000000 RBX: ffff8801db066940 RCX: ffffffff84db22a1 [ 48.742759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8801db066a9e [ 48.750000] RBP: ffff8801b10bea50 R08: 1ffff10036217cca R09: 0000000000000000 [ 48.757241] R10: 00000000000000d0 R11: 0000000000000000 R12: 0000000000000001 [ 48.764483] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8801db066a10 [ 48.771813] FS: 0000000000fde880(0000) GS:ffff8801db400000(0000) knlGS:0000000000000000 [ 48.780008] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.785878] CR2: 00000000200f8000 CR3: 00000001b1202004 CR4: 00000000001606f0 [ 48.793121] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.800360] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.807599] Call Trace: [ 48.810159] ? ip6t_error+0x60/0x60 [ 48.813757] ? print_irqtrace_events+0x270/0x270 [ 48.818494] ? ip6t_error+0x60/0x60 [ 48.822093] ? ip6table_mangle_hook+0x117/0x920 [ 48.826735] ? check_noncircular+0x20/0x20 [ 48.830940] ? lock_acquire+0x1d5/0x580 [ 48.834887] ? ip6table_mangle_net_exit+0xa0/0xa0 [ 48.839703] ? lock_release+0xa40/0xa40 [ 48.843650] ip6table_security_hook+0x65/0x80 [ 48.848121] nf_hook_slow+0xba/0x1a0 [ 48.852380] ip6_input+0x35c/0x560 [ 48.855892] ? ip6_input_finish+0x17a0/0x17a0 [ 48.860357] ? ipv6_chk_mcast_addr+0x2f2/0x810 [ 48.864913] ? ip6_make_skb+0x5e0/0x5e0 [ 48.868871] ip6_mc_input+0x3a8/0xb10 [ 48.872643] ? ipv6_rcv+0x1fa0/0x1fa0 [ 48.876423] ip6_rcv_finish+0x297/0x8c0 [ 48.880368] ? ip6_input+0x560/0x560 [ 48.884059] ? ip6table_nat_in+0x2c/0x40 [ 48.888093] ? nf_hook_slow+0xd3/0x1a0 [ 48.891953] ipv6_rcv+0xf37/0x1fa0 [ 48.895467] ? ip6_rcv_finish+0x8c0/0x8c0 [ 48.899586] ? check_noncircular+0x20/0x20 [ 48.903792] ? __lock_acquire+0x664/0x3e00 [ 48.908015] ? ip6_input+0x560/0x560 [ 48.911703] ? ip6_rcv_finish+0x8c0/0x8c0 [ 48.915822] __netif_receive_skb_core+0x1a41/0x3460 [ 48.920808] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 48.925971] ? nf_ingress+0x9f0/0x9f0 [ 48.929748] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 48.934909] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 48.940070] ? __free_insn_slot+0x5c0/0x5c0 [ 48.944361] ? print_irqtrace_events+0x270/0x270 [ 48.949090] ? check_noncircular+0x20/0x20 [ 48.953306] ? check_noncircular+0x20/0x20 [ 48.957510] ? check_noncircular+0x20/0x20 [ 48.961718] ? kernel_text_address+0x102/0x140 [ 48.966272] ? find_held_lock+0x35/0x1d0 [ 48.970306] ? print_irqtrace_events+0x270/0x270 [ 48.975038] ? lock_downgrade+0x980/0x980 [ 48.979163] ? pvclock_read_flags+0x160/0x160 [ 48.983626] ? mark_held_locks+0xaf/0x100 [ 48.987745] ? lock_acquire+0x1d5/0x580 [ 48.991688] ? lock_acquire+0x1d5/0x580 [ 48.995631] ? netif_receive_skb_internal+0xa2/0x670 [ 49.000721] ? ktime_get_with_offset+0x2c1/0x420 [ 49.005447] ? lock_release+0xa40/0xa40 [ 49.009391] ? do_gettimeofday+0x190/0x190 [ 49.013596] ? lock_release+0xa40/0xa40 [ 49.017543] __netif_receive_skb+0x2c/0x1b0 [ 49.021848] ? __netif_receive_skb+0x2c/0x1b0 [ 49.026316] netif_receive_skb_internal+0x10b/0x670 [ 49.031302] ? dev_cpu_dead+0xb00/0xb00 [ 49.035248] ? net_rx_action+0x1910/0x1910 [ 49.039453] ? eth_type_trans+0x2b2/0x710 [ 49.043572] ? eth_gro_receive+0x820/0x820 [ 49.047782] napi_gro_frags+0x58a/0xaf0 [ 49.051728] ? napi_gro_receive+0x500/0x500 [ 49.056030] ? tun_get_user+0x2737/0x3940 [ 49.060149] tun_get_user+0x2760/0x3940 [ 49.064108] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 49.069267] ? do_huge_pmd_anonymous_page+0xb1e/0x1b00 [ 49.074523] ? tun_build_skb.isra.50+0x1810/0x1810 [ 49.079426] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 49.084587] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 49.089746] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 49.094735] ? find_held_lock+0x35/0x1d0 [ 49.098770] ? tun_get+0x1ab/0x2e0 [ 49.102285] ? lock_release+0xa40/0xa40 [ 49.106233] ? __lock_is_held+0xb6/0x140 [ 49.110272] ? tun_get+0x1d4/0x2e0 [ 49.113797] ? tun_do_read+0x26c0/0x26c0 [ 49.117830] ? __check_object_size+0x8b/0x530 [ 49.122300] ? rcu_note_context_switch+0x710/0x710 [ 49.127204] tun_chr_write_iter+0xb9/0x160 [ 49.131412] do_iter_readv_writev+0x55c/0x830 [ 49.135891] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 49.140620] ? rw_verify_area+0xe5/0x2b0 [ 49.144738] do_iter_write+0x154/0x540 [ 49.148596] ? dup_iter+0x260/0x260 [ 49.152196] vfs_writev+0x18a/0x340 [ 49.155792] ? __fget_light+0x297/0x380 [ 49.159738] ? vfs_iter_write+0xb0/0xb0 [ 49.163681] ? up_read+0x1a/0x40 [ 49.167020] ? __do_page_fault+0x3d6/0xc90 [ 49.171226] ? mm_fault_error+0x2c0/0x2c0 [ 49.175349] ? __fdget_pos+0x130/0x190 [ 49.179206] ? __fdget_raw+0x20/0x20 [ 49.182890] ? __do_page_fault+0xc90/0xc90 [ 49.187099] do_writev+0xfc/0x2a0 [ 49.190520] ? do_writev+0xfc/0x2a0 [ 49.194117] ? vfs_writev+0x340/0x340 [ 49.197891] ? entry_SYSCALL_64_fastpath+0x5/0xa0 [ 49.202703] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 49.207704] SyS_writev+0x27/0x30 [ 49.211127] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 49.215851] RIP: 0033:0x446370 [ 49.219014] RSP: 002b:00007ffd4605d4d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 49.226691] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000446370 [ 49.234019] RDX: 0000000000000001 RSI: 00007ffd4605d4f0 RDI: 0000000000000003 [ 49.241259] RBP: 00007ffd4605d5e8 R08: 000000000000002f R09: 0000000000000000 [ 49.248497] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4605d5e8 [ 49.255745] R13: 0000000000403900 R14: 0000000000000000 R15: 0000000000000000 [ 49.263032] Code: 41 f6 87 83 00 00 00 04 75 37 e8 0f 83 95 fc 8b 85 14 fe ff ff 48 8b b5 50 fe ff ff 4c 8d 2c c6 44 8d 60 01 4c 89 e8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 26 03 00 00 4d 89 7d 00 44 89 a5 14 fe ff [ 49.282100] RIP: ip6t_do_table+0x132d/0x1a30 RSP: ffff8801b10be808 [ 49.288422] ---[ end trace e6108485b57067b3 ]--- [ 49.293156] Kernel panic - not syncing: Fatal exception in interrupt [ 49.300053] Dumping ftrace buffer: [ 49.303564] (ftrace buffer empty) [ 49.307245] Kernel Offset: disabled [ 49.310845] Rebooting in 86400 seconds..