Warning: Permanently added '10.128.1.55' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 49.423935] audit: type=1400 audit(1600789376.512:8): avc: denied { execmem } for pid=6344 comm="syz-executor874" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 49.429397] ip_tables: iptables: counters copy to user failed while replacing table [ 49.453870] ip_tables: iptables: counters copy to user failed while replacing table [ 49.466490] ip_tables: iptables: counters copy to user failed while replacing table [ 49.475472] ip_tables: iptables: counters copy to user failed while replacing table [ 49.487875] ip_tables: iptables: counters copy to user failed while replacing table [ 49.497467] ip_tables: iptables: counters copy to user failed while replacing table [ 49.511558] ip_tables: iptables: counters copy to user failed while replacing table [ 49.519817] [ 49.519839] ============================= [ 49.519841] WARNING: suspicious RCU usage [ 49.519845] 4.14.198-syzkaller #0 Not tainted [ 49.519847] ----------------------------- [ 49.519851] net/netfilter/nf_queue.c:227 suspicious rcu_dereference_check() usage! [ 49.519853] [ 49.519853] other info that might help us debug this: [ 49.519853] [ 49.519855] [ 49.519855] rcu_scheduler_active = 2, debug_locks = 1 [ 49.519858] 4 locks held by syz-executor874/6355: [ 49.519860] #0: (&xt[i].mutex){+.+.}, at: [] xt_find_table_lock+0x38/0x3d0 [ 49.519877] #1: (console_lock){+.+.}, at: [] vprintk_func+0x58/0x152 [ 49.519889] #2: (rcu_callback){....}, at: [] rcu_process_callbacks+0x84e/0x1180 [ 49.519900] #3: (&(&inst->lock)->rlock){+.-.}, at: [] nfqnl_flush+0x2f/0x2a0 [ 49.519912] [ 49.519912] stack backtrace: [ 49.519916] CPU: 0 PID: 6355 Comm: syz-executor874 Not tainted 4.14.198-syzkaller #0 [ 49.519920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.519922] Call Trace: [ 49.519924] [ 49.519931] dump_stack+0x1b2/0x283 [ 49.519937] nf_reinject+0x56e/0x700 [ 49.519944] nfqnl_flush+0x1ab/0x2a0 [ 49.519951] instance_destroy_rcu+0x19/0x30 [ 49.519955] ? nfqnl_rcv_nl_event+0x290/0x290 [ 49.519959] rcu_process_callbacks+0x780/0x1180 [ 49.519965] ? note_gp_changes+0x2f0/0x2f0 [ 49.519971] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 49.519983] __do_softirq+0x254/0xa1d [ 49.519991] ? check_preemption_disabled+0x35/0x240 [ 49.520000] irq_exit+0x193/0x240 [ 49.520004] smp_apic_timer_interrupt+0x141/0x5e0 [ 49.520010] apic_timer_interrupt+0x93/0xa0 [ 49.520012] [ 49.520017] RIP: 0010:console_unlock+0xbeb/0xf20 [ 49.520019] RSP: 0018:ffff8880987e7a90 EFLAGS: 00000297 ORIG_RAX: ffffffffffffff10 [ 49.520024] RAX: ffff888097edc500 RBX: 0000000000000200 RCX: 1ffff11012fdb9ba [ 49.520027] RDX: 0000000000000000 RSI: ffff888097edcdb0 RDI: 0000000000000297 [ 49.520030] RBP: 0000000000000000 R08: ffffffff8a094948 R09: 0000000000000000 [ 49.520032] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff83e32d80 [ 49.520035] R13: ffffffff883a0490 R14: dffffc0000000000 R15: 0000000000000057 [ 49.520041] ? netconsole_netdev_event+0x250/0x250 [ 49.520056] vprintk_emit+0x224/0x620 [ 49.520062] vprintk_func+0x58/0x152 [ 49.520066] printk+0x9e/0xbc [ 49.520071] ? log_store.cold+0x16/0x16 [ 49.520078] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 49.520085] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 49.520093] __do_replace.cold+0x11/0x1b [ 49.520100] ? ipt_unregister_table+0x60/0x60 [ 49.520106] do_ipt_set_ctl+0x256/0x39e [ 49.520112] ? compat_do_ipt_set_ctl+0x140/0x140 [ 49.520120] ? nf_sockopt_find.constprop.0+0x1ad/0x220 [ 49.520125] nf_setsockopt+0x5f/0xb0 [ 49.520132] ip_setsockopt+0x94/0xb0 [ 49.520139] raw_setsockopt+0xac/0xd0 [ 49.520145] SyS_setsockopt+0x110/0x1e0 [ 49.520149] ? SyS_recv+0x40/0x40 [ 49.520156] ? __do_page_fault+0x19a/0xb50 [ 49.520162] ? do_syscall_64+0x4c/0x640 [ 49.520166] ? SyS_recv+0x40/0x40 [ 49.520171] do_syscall_64+0x1d5/0x640 [ 49.520178] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 49.520181] RIP: 0033:0x448939 [ 49.520184] RSP: 002b:00007f1d434abcd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 49.520188] RAX: ffffffffffffffda RBX: 00000000006ddc28 RCX: 0000000000448939 [ 49.520191] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 49.520193] RBP: 00000000006ddc20 R08: 0000000000000a08 R09: 0000000000000000 [ 49.520196] R10: 0000000020000740 R11: 0000000000000246 R12: 00000000006ddc2c [ 49.520198] R13: 00007f1d434abd10 R14: 0000000000000000 R15: 0000000000000000 [ 49.878589] ip_tables: iptables: counters copy to user failed while replacing table [ 49.892988] ip_tables: iptables: counters copy to user failed while replacing table [ 49.903123] ip_tables: iptables: counters copy to user failed while replacing table [ 54.437529] net_ratelimit: 1528 callbacks suppressed [ 54.437532] ip_tables: iptables: counters copy to user failed while replacing table [ 54.451537] ip_tables: iptables: counters copy to user failed while replacing table [ 54.465252] ip_tables: iptables: counters copy to user failed while replacing table [ 54.474139] ip_tables: iptables: counters copy to user failed while replacing table [ 54.487435] ip_tables: iptables: counters copy to user failed while replacing table [ 54.496942] ip_tables: iptables: counters copy to user failed while replacing table [ 54.510105] ip_tables: iptables: counters copy to user failed while replacing table [ 54.519345] ip_tables: iptables: counters copy to user failed while replacing table [ 54.531698] ip_tables: iptables: counters copy to user failed while replacing table [ 54.540705] ip_tables: iptables: counters copy to user failed while replacing table [ 59.442777] net_ratelimit: 1656 callbacks suppressed [ 59.442780] ip_tables: iptables: counters copy to user failed while replacing table [ 59.457364] ip_tables: iptables: counters copy to user failed while replacing table [ 59.471503] ip_tables: iptables: counters copy to user failed while replacing table [ 59.481323] ip_tables: iptables: counters copy to user failed while replacing table [ 59.493745] ip_tables: iptables: counters copy to user failed while replacing table [ 59.503140] ip_tables: iptables: counters copy to user failed while replacing table [ 59.516943] ip_tables: iptables: counters copy to user failed while replacing table [ 59.526664] ip_tables: iptables: counters copy to user failed while replacing table