[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 18.494670] audit: type=1400 audit(1520528824.398:6): avc: denied { map } for pid=4227 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.19' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 25.066413] audit: type=1400 audit(1520528830.970:7): avc: denied { map } for pid=4241 comm="syzkaller705653" path="/root/syzkaller705653856" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 25.070114] BUG: unable to handle kernel paging request at ffffc900017f35c5 [ 25.099398] IP: ebt_among_mt_check+0x1f8/0x390 [ 25.103951] PGD 1dad2f067 P4D 1dad2f067 PUD 1dad30067 PMD 1c444d067 PTE 0 [ 25.110854] Oops: 0000 [#1] SMP KASAN [ 25.114627] Dumping ftrace buffer: [ 25.118132] (ftrace buffer empty) [ 25.121824] Modules linked in: [ 25.125011] CPU: 0 PID: 4241 Comm: syzkaller705653 Not tainted 4.16.0-rc4+ #257 [ 25.132437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 25.141770] RIP: 0010:ebt_among_mt_check+0x1f8/0x390 [ 25.146839] RSP: 0018:ffff8801d2f3f198 EFLAGS: 00010246 [ 25.152215] RAX: 0000000000000008 RBX: ffffc900017eb1c0 RCX: ffffffff851bf726 [ 25.159452] RDX: 0000000000000000 RSI: 00000000000008f8 RDI: ffffc900017f35c5 [ 25.166693] RBP: ffff8801d2f3f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 25.173931] R10: ffffffff88614380 R11: 0000000000000000 R12: ffffc900017f31c1 [ 25.181170] R13: ffffffff851bf560 R14: 00000000000008f8 R15: ffffffff877028e0 [ 25.188409] FS: 00000000023a2940(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 25.196604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.202454] CR2: ffffc900017f35c5 CR3: 00000001b101e006 CR4: 00000000001606f0 [ 25.209695] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.216937] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.224175] Call Trace: [ 25.226736] ? module_unload_free+0x5b0/0x5b0 [ 25.231206] ? ebt_mac_wormhash_check_integrity+0x1e0/0x1e0 [ 25.236896] xt_check_match+0x235/0x9c0 [ 25.240839] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 25.246000] ? xt_check_target+0x990/0x990 [ 25.250211] ? mutex_unlock+0xd/0x10 [ 25.253898] ? mutex_unlock+0xd/0x10 [ 25.257580] ? xt_find_match+0x17b/0x1e0 [ 25.261620] ebt_check_entry+0xbc3/0x1e00 [ 25.265747] ? ebt_standard_compat_to_user+0x180/0x180 [ 25.270998] ? __is_insn_slot_addr+0x1fc/0x330 [ 25.275556] ? print_irqtrace_events+0x270/0x270 [ 25.280285] ? trace_hardirqs_off+0x10/0x10 [ 25.284576] ? find_held_lock+0x35/0x1d0 [ 25.288617] ? __lock_acquire+0x664/0x3e00 [ 25.292830] translate_table+0xcf5/0x2290 [ 25.296957] ? ebt_do_table+0x1f40/0x1f40 [ 25.301080] ? check_same_owner+0x320/0x320 [ 25.305458] ? rcu_pm_notify+0xc0/0xc0 [ 25.309322] ? rcu_read_lock_sched_held+0x108/0x120 [ 25.314308] do_replace_finish+0x79a/0x2620 [ 25.318609] ? ebt_register_table+0xe60/0xe60 [ 25.323074] ? find_held_lock+0x35/0x1d0 [ 25.327108] ? __might_fault+0x110/0x1d0 [ 25.331139] ? lock_downgrade+0x980/0x980 [ 25.335255] ? lock_release+0xa40/0xa40 [ 25.339198] ? check_same_owner+0x320/0x320 [ 25.343488] ? __check_object_size+0x8b/0x530 [ 25.347960] ? __might_sleep+0x95/0x190 [ 25.351904] ? kasan_check_write+0x14/0x20 [ 25.356111] ? _copy_from_user+0x99/0x110 [ 25.360228] do_replace+0x333/0x4b0 [ 25.363828] ? compat_copy_everything_to_user+0x1470/0x1470 [ 25.369517] ? ns_capable_common+0xcf/0x160 [ 25.373810] do_ebt_set_ctl+0xd4/0x110 [ 25.377670] nf_setsockopt+0x67/0xc0 [ 25.381356] ip_setsockopt+0x97/0xa0 [ 25.385045] udp_setsockopt+0x45/0x80 [ 25.388819] ipv6_setsockopt+0xa0/0x130 [ 25.392766] dccp_setsockopt+0x85/0xd0 [ 25.396628] sock_common_setsockopt+0x95/0xd0 [ 25.401098] SyS_setsockopt+0x189/0x360 [ 25.405049] ? SyS_recv+0x40/0x40 [ 25.408476] ? mm_fault_error+0x2c0/0x2c0 [ 25.412595] ? move_addr_to_kernel+0x60/0x60 [ 25.416980] ? do_syscall_64+0xb7/0x940 [ 25.420925] ? SyS_recv+0x40/0x40 [ 25.424350] do_syscall_64+0x281/0x940 [ 25.428207] ? __do_page_fault+0xc90/0xc90 [ 25.432495] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 25.437229] ? syscall_return_slowpath+0x550/0x550 [ 25.442128] ? syscall_return_slowpath+0x2ac/0x550 [ 25.447030] ? prepare_exit_to_usermode+0x350/0x350 [ 25.452022] ? retint_user+0x18/0x18 [ 25.455712] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 25.460526] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 25.465683] RIP: 0033:0x449bf9 [ 25.468845] RSP: 002b:00007fffb224f8d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 25.476523] RAX: ffffffffffffffda RBX: 00007fffb224f900 RCX: 0000000000449bf9 [ 25.483761] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 25.490999] RBP: 0000000000000000 R08: 0000000000000c10 R09: 00007fffb224f950 [ 25.498242] R10: 0000000020000140 R11: 0000000000000246 R12: 000000000040b520 [ 25.505482] R13: 000000000040b5b0 R14: 0000000000000000 R15: 0000000000000000 [ 25.512728] Code: 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 69 01 00 00 <45> 8b ac 24 04 04 00 00 41 81 fd a9 aa aa 0a 77 8f e8 72 12 55 [ 25.531807] RIP: ebt_among_mt_check+0x1f8/0x390 RSP: ffff8801d2f3f198 [ 25.538352] CR2: ffffc900017f35c5 [ 25.541777] ---[ end trace d5498f225a546a7d ]--- [ 25.546497] Kernel panic - not syncing: Fatal exception [ 25.552270] Dumping ftrace buffer: [ 25.555783] (ftrace buffer empty) [ 25.559465] Kernel Offset: disabled [ 25.563063] Rebooting in 86400 seconds..