[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.558240] audit: type=1400 audit(1517951729.630:6): avc: denied { map } for pid=4154 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 111.858674] audit: type=1400 audit(1517951821.930:7): avc: denied { map } for pid=4167 comm="sh" path="/bin/dash" dev="sda1" ino=1473 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.61' (ECDSA) to the list of known hosts. executing program executing program [ 122.449154] audit: type=1400 audit(1517951832.520:8): avc: denied { map } for pid=4174 comm="syzkaller744388" path="/root/syzkaller744388854" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 122.479379] kasan: CONFIG_KASAN_INLINE enabled [ 122.484033] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 122.491418] general protection fault: 0000 [#1] SMP KASAN [ 122.496929] Dumping ftrace buffer: [ 122.500435] (ftrace buffer empty) [ 122.504125] Modules linked in: [ 122.507294] CPU: 0 PID: 4174 Comm: syzkaller744388 Not tainted 4.15.0+ #221 [ 122.514362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.523693] RIP: 0010:ip6t_do_table+0x132d/0x1a30 [ 122.528501] RSP: 0018:ffff8801db406c20 EFLAGS: 00010246 [ 122.533834] RAX: 0000000000000000 RBX: ffff8801b2179700 RCX: ffffffff84db22a1 [ 122.541082] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffff8801b217985e [ 122.548322] RBP: ffff8801db406e68 R08: ffff8801db406f60 R09: 0000000000000000 [ 122.555559] R10: 00000000000000d0 R11: 0000000000000000 R12: 0000000000000001 [ 122.562796] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8801b21797d0 [ 122.570036] FS: 0000000001646880(0000) GS:ffff8801db400000(0000) knlGS:0000000000000000 [ 122.578240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.584089] CR2: 0000000020809000 CR3: 00000001b1a83006 CR4: 00000000001606f0 [ 122.591329] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 122.598569] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 122.605810] Call Trace: [ 122.608367] [ 122.610505] ? ip6t_error+0x60/0x60 [ 122.614109] ? find_held_lock+0x35/0x1d0 [ 122.618143] ? ip6t_do_table+0xcca/0x1a30 [ 122.622274] ? ip6t_error+0x60/0x60 [ 122.625868] ? ip6table_mangle_hook+0x117/0x920 [ 122.630507] ? check_noncircular+0x20/0x20 [ 122.634710] ? lock_acquire+0x1d5/0x580 [ 122.638655] ? ip6table_mangle_net_exit+0xa0/0xa0 [ 122.643466] ? ip6_input+0x11f/0x560 [ 122.647150] ? lock_release+0xa40/0xa40 [ 122.651097] ip6table_security_hook+0x65/0x80 [ 122.655565] nf_hook_slow+0xba/0x1a0 [ 122.659250] ip6_input+0x35c/0x560 [ 122.662758] ? ip6_input_finish+0x17a0/0x17a0 [ 122.667221] ? find_held_lock+0x35/0x1d0 [ 122.671252] ? ip6_make_skb+0x5e0/0x5e0 [ 122.675193] ? ipv6_rcv+0x16cd/0x1fa0 [ 122.678962] ip6_rcv_finish+0x297/0x8c0 [ 122.682905] ? ip6_input+0x560/0x560 [ 122.686588] ? ip6table_nat_in+0x2c/0x40 [ 122.690619] ? nf_hook_slow+0xd3/0x1a0 [ 122.694476] ipv6_rcv+0xf37/0x1fa0 [ 122.697990] ? ip6_rcv_finish+0x8c0/0x8c0 [ 122.702110] ? print_irqtrace_events+0x270/0x270 [ 122.706835] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 122.712004] ? __lock_acquire+0x664/0x3e00 [ 122.716214] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 122.721377] ? ip6_input+0x560/0x560 [ 122.725058] ? ip6_rcv_finish+0x8c0/0x8c0 [ 122.729173] __netif_receive_skb_core+0x1a41/0x3460 [ 122.734161] ? nf_ingress+0x9f0/0x9f0 [ 122.737931] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 122.743093] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 122.748253] ? update_cfs_rq_load_avg.part.68+0x23d/0x2d0 [ 122.753756] ? attach_entity_load_avg+0x7a0/0x7a0 [ 122.758575] ? __update_load_avg_se.isra.27+0x56a/0x7c0 [ 122.763907] ? __update_load_avg_se.isra.27+0x56a/0x7c0 [ 122.769240] ? __lock_acquire+0x664/0x3e00 [ 122.773442] ? __lock_acquire+0x664/0x3e00 [ 122.777647] ? fastpath_timer_check+0x7f5/0xac0 [ 122.782283] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 122.787793] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 122.792962] ? print_irqtrace_events+0x270/0x270 [ 122.797694] ? check_noncircular+0x20/0x20 [ 122.801907] ? find_held_lock+0x35/0x1d0 [ 122.805945] ? lock_acquire+0x1d5/0x580 [ 122.809886] ? process_backlog+0x45f/0x740 [ 122.814087] ? lock_acquire+0x1d5/0x580 [ 122.818029] ? process_backlog+0x1ab/0x740 [ 122.822251] ? lock_release+0xa40/0xa40 [ 122.826193] ? check_noncircular+0x20/0x20 [ 122.830406] ? do_raw_spin_trylock+0x190/0x190 [ 122.834961] __netif_receive_skb+0x2c/0x1b0 [ 122.839252] ? __netif_receive_skb+0x2c/0x1b0 [ 122.843715] process_backlog+0x203/0x740 [ 122.847749] net_rx_action+0x792/0x1910 [ 122.851697] ? napi_complete_done+0x6c0/0x6c0 [ 122.856160] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 122.861143] ? trace_hardirqs_on+0xd/0x10 [ 122.865260] ? _raw_spin_unlock_irq+0x27/0x70 [ 122.869722] ? __run_timers+0x16f/0xb70 [ 122.873678] ? trigger_dyntick_cpu.isra.29+0x160/0x160 [ 122.878925] ? timerqueue_add+0x1e9/0x280 [ 122.883044] ? check_noncircular+0x20/0x20 [ 122.887246] ? enqueue_hrtimer+0x177/0x4b0 [ 122.891447] ? lock_release+0xa40/0xa40 [ 122.895387] ? retrigger_next_event+0x1e0/0x1e0 [ 122.900024] ? __lock_is_held+0xb6/0x140 [ 122.904057] ? print_irqtrace_events+0x270/0x270 [ 122.908778] ? check_noncircular+0x20/0x20 [ 122.912982] ? clockevents_program_event+0x163/0x2e0 [ 122.918063] ? lock_downgrade+0x980/0x980 [ 122.922181] ? __lock_is_held+0xb6/0x140 [ 122.926215] ? __local_bh_enable+0x10b/0x130 [ 122.930591] ? __do_softirq+0x7a0/0xb85 [ 122.934534] ? ktime_get+0x26f/0x3a0 [ 122.938220] ? __irqentry_text_end+0x1f8d44/0x1f8d44 [ 122.943294] ? check_noncircular+0x20/0x20 [ 122.947499] ? native_apic_msr_write+0x5c/0x80 [ 122.952060] ? rcu_pm_notify+0xc0/0xc0 [ 122.955921] __do_softirq+0x2d7/0xb85 [ 122.959694] ? task_prio+0x40/0x40 [ 122.963215] ? __irqentry_text_end+0x1f8d44/0x1f8d44 [ 122.968286] ? irq_exit+0xbb/0x200 [ 122.971794] ? smp_apic_timer_interrupt+0x16b/0x700 [ 122.976779] ? smp_call_function_single_interrupt+0x640/0x640 [ 122.982634] ? _raw_spin_lock+0x32/0x40 [ 122.986579] ? _raw_spin_unlock+0x22/0x30 [ 122.990696] ? handle_edge_irq+0x2b4/0x7c0 [ 122.994900] ? task_prio+0x40/0x40 [ 122.998419] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 123.003234] do_softirq_own_stack+0x2a/0x40 [ 123.007519] [ 123.009725] do_softirq.part.19+0x14d/0x190 [ 123.014014] ? ip6_finish_output2+0xb6d/0x23a0 [ 123.018568] __local_bh_enable_ip+0x1ee/0x230 [ 123.023036] ip6_finish_output2+0xba0/0x23a0 [ 123.027418] ? ip6_sk_dst_lookup_flow+0x7f0/0x7f0 [ 123.032232] ? ip6_mtu+0x369/0x4d0 [ 123.035740] ? lock_downgrade+0x980/0x980 [ 123.039859] ? __lock_is_held+0xb6/0x140 [ 123.043901] ? ip6_mtu+0x1c7/0x4d0 [ 123.047408] ? ip6_dst_ifdown+0x3d0/0x3d0 [ 123.051525] ? nf_nat_ipv6_out+0x262/0x570 [ 123.055733] ip6_finish_output+0x698/0xaf0 [ 123.059945] ? ip6_finish_output+0x698/0xaf0 [ 123.064324] ip6_output+0x1eb/0x840 [ 123.067922] ? ip6_finish_output+0xaf0/0xaf0 [ 123.072299] ? ip6_dst_hoplimit+0x26c/0x420 [ 123.076590] ? lock_downgrade+0x980/0x980 [ 123.080708] ? ip6_fragment+0x3470/0x3470 [ 123.084825] ? __lock_is_held+0xb6/0x140 [ 123.088857] ip6_local_out+0x95/0x160 [ 123.092629] ip6_send_skb+0xa1/0x330 [ 123.096309] ? csum_ipv6_magic+0x20/0x80 [ 123.100341] udp_v6_send_skb+0x33a/0xf70 [ 123.104372] udpv6_sendmsg+0x2835/0x3400 [ 123.108423] ? ip_reply_glue_bits+0xb0/0xb0 [ 123.112730] ? udpv6_setsockopt+0x80/0x80 [ 123.116854] ? reacquire_held_locks+0x1f9/0x3e0 [ 123.121496] ? reacquire_held_locks+0x1f9/0x3e0 [ 123.126142] ? find_held_lock+0x35/0x1d0 [ 123.130178] ? release_sock+0x1d4/0x2a0 [ 123.134124] ? lock_downgrade+0x980/0x980 [ 123.138243] ? lock_downgrade+0x980/0x980 [ 123.142365] ? __local_bh_enable_ip+0x121/0x230 [ 123.147002] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 123.151986] ? release_sock+0x1d4/0x2a0 [ 123.155926] ? trace_hardirqs_on+0xd/0x10 [ 123.160054] ? __local_bh_enable_ip+0x121/0x230 [ 123.164695] ? _raw_spin_unlock_bh+0x30/0x40 [ 123.169075] ? release_sock+0x1d4/0x2a0 [ 123.173028] inet_sendmsg+0x11f/0x5e0 [ 123.176799] ? inet_sendmsg+0x11f/0x5e0 [ 123.180741] ? __might_sleep+0x95/0x190 [ 123.184698] ? inet_create+0xf50/0xf50 [ 123.188558] ? selinux_socket_sendmsg+0x36/0x40 [ 123.193198] ? security_socket_sendmsg+0x89/0xb0 [ 123.197920] ? inet_create+0xf50/0xf50 [ 123.201775] sock_sendmsg+0xca/0x110 [ 123.205461] SYSC_sendto+0x361/0x5c0 [ 123.209153] ? SYSC_connect+0x4a0/0x4a0 [ 123.213098] ? up_read+0x1a/0x40 [ 123.216433] ? __do_page_fault+0x3d6/0xc90 [ 123.220635] ? get_unused_fd_flags+0x190/0x190 [ 123.225189] ? sock_alloc_file+0x2a6/0x560 [ 123.229396] ? __alloc_fd+0x750/0x750 [ 123.233164] ? __do_page_fault+0xc90/0xc90 [ 123.237368] ? fd_install+0x4d/0x60 [ 123.240962] ? sock_map_fd+0x53/0x90 [ 123.244643] ? SyS_socket+0x12d/0x1d0 [ 123.248411] ? entry_SYSCALL_64_fastpath+0x5/0xa0 [ 123.253224] SyS_sendto+0x40/0x50 [ 123.256648] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 123.261459] RIP: 0033:0x441329 [ 123.264617] RSP: 002b:00007ffd355d2df8 EFLAGS: 00000203 ORIG_RAX: 000000000000002c [ 123.272294] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000441329 [ 123.279532] RDX: 0000000000000000 RSI: 0000000020adb000 RDI: 0000000000000005 [ 123.286772] RBP: 0100000000000000 R08: 0000000020809000 R09: 000000000000001c [ 123.294010] R10: 0000000000000000 R11: 0000000000000203 R12: 0000000000402c50 [ 123.301248] R13: 0000000000402ce0 R14: 0000000000000000 R15: 0000000000000000 [ 123.308496] Code: 41 f6 87 83 00 00 00 04 75 37 e8 0f 83 95 fc 8b 85 14 fe ff ff 48 8b b5 50 fe ff ff 4c 8d 2c c6 44 8d 60 01 4c 89 e8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 26 03 00 00 4d 89 7d 00 44 89 a5 14 fe ff [ 123.327570] RIP: ip6t_do_table+0x132d/0x1a30 RSP: ffff8801db406c20 [ 123.333914] ---[ end trace f50ca32291371161 ]--- [ 123.338893] Kernel panic - not syncing: Fatal exception in interrupt [ 123.345891] Dumping ftrace buffer: [ 123.349407] (ftrace buffer empty) [ 123.353089] Kernel Offset: disabled [ 123.356684] Rebooting in 86400 seconds..