[ 39.142163] audit: type=1800 audit(1563579926.486:31): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [ 39.175308] audit: type=1800 audit(1563579926.496:32): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.135' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 49.914038] kauditd_printk_skb: 3 callbacks suppressed [ 49.914055] audit: type=1400 audit(1563579937.326:36): avc: denied { map } for pid=7625 comm="syz-executor831" path="/root/syz-executor831049400" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 49.917489] netlink: 4 bytes leftover after parsing attributes in process `syz-executor831'. [ 49.954621] kasan: CONFIG_KASAN_INLINE enabled [ 49.959291] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 49.967363] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 49.973618] CPU: 0 PID: 7625 Comm: syz-executor831 Not tainted 4.19.59 #32 [ 49.980713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.990063] RIP: 0010:tcf_ife_init+0x221/0x17d0 [ 49.994732] Code: fb 48 c7 c2 99 43 81 85 be 01 00 00 00 48 c7 c7 60 da 79 88 e8 c0 26 d1 fb 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 83 [ 50.013637] RSP: 0018:ffff888085f86ee0 EFLAGS: 00010246 [ 50.018985] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff11012de0dde [ 50.026596] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000282 [ 50.033868] RBP: ffff888085f87068 R08: ffff888096f06680 R09: 0000000000000001 [ 50.041121] R10: ffffed1015d04732 R11: ffff8880ae823993 R12: 0000000000000001 [ 50.048387] R13: ffff88809a40b240 R14: ffff888085f87040 R15: 0000000000000001 [ 50.055654] FS: 000000000207f880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 50.064162] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.070033] CR2: 0000000020000180 CR3: 000000008fbe1000 CR4: 00000000001406f0 [ 50.077290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.084543] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.091793] Call Trace: [ 50.094372] ? __add_metainfo+0x480/0x480 [ 50.098505] ? lock_downgrade+0x810/0x810 [ 50.102640] ? kasan_check_write+0x14/0x20 [ 50.106870] ? do_raw_read_unlock+0x3f/0x70 [ 50.111193] tcf_action_init_1+0x804/0xc40 [ 50.115424] ? tcf_action_dump_old+0x80/0x80 [ 50.119818] ? __lock_acquire+0x6eb/0x48f0 [ 50.124033] ? __lock_acquire+0x6eb/0x48f0 [ 50.128251] ? memset+0x32/0x40 [ 50.131532] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 50.137054] tcf_action_init+0x23e/0x360 [ 50.141104] ? tcf_action_init_1+0xc40/0xc40 [ 50.145504] ? avc_has_extended_perms+0x10f0/0x10f0 [ 50.150504] ? lock_downgrade+0x810/0x810 [ 50.154637] tcf_action_add+0xe8/0x370 [ 50.158514] ? tca_action_gd+0x16b0/0x16b0 [ 50.162755] ? is_bpf_text_address+0xac/0x170 [ 50.167240] ? memset+0x32/0x40 [ 50.170511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 50.176031] ? nla_parse+0x1fc/0x2f0 [ 50.179763] tc_ctl_action+0x37a/0x46f [ 50.183652] ? tcf_action_add+0x370/0x370 [ 50.187801] ? __lock_is_held+0xb6/0x140 [ 50.191868] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 50.197390] ? tcf_action_add+0x370/0x370 [ 50.201527] rtnetlink_rcv_msg+0x463/0xb00 [ 50.205761] ? rtnetlink_put_metrics+0x570/0x570 [ 50.210503] ? netlink_deliver_tap+0x22d/0xc20 [ 50.215101] ? find_held_lock+0x35/0x130 [ 50.219164] netlink_rcv_skb+0x17d/0x460 [ 50.223211] ? rtnetlink_put_metrics+0x570/0x570 [ 50.227952] ? netlink_ack+0xb50/0xb50 [ 50.231843] ? kasan_check_read+0x11/0x20 [ 50.235975] ? netlink_deliver_tap+0x254/0xc20 [ 50.240560] rtnetlink_rcv+0x1d/0x30 [ 50.244262] netlink_unicast+0x537/0x720 [ 50.248309] ? netlink_attachskb+0x770/0x770 [ 50.252735] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 50.258263] netlink_sendmsg+0x8ae/0xd70 [ 50.262328] ? netlink_unicast+0x720/0x720 [ 50.266569] ? selinux_socket_sendmsg+0x36/0x40 [ 50.271243] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 50.276767] ? security_socket_sendmsg+0x8d/0xc0 [ 50.281515] ? netlink_unicast+0x720/0x720 [ 50.285751] sock_sendmsg+0xd7/0x130 [ 50.289462] ___sys_sendmsg+0x803/0x920 [ 50.293519] ? copy_msghdr_from_user+0x430/0x430 [ 50.298286] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 50.303813] ? __handle_mm_fault+0x7d1/0x3f80 [ 50.308297] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 50.313126] ? find_held_lock+0x35/0x130 [ 50.317170] ? __do_page_fault+0x676/0xe90 [ 50.321391] ? find_held_lock+0x35/0x130 [ 50.325466] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 50.330990] ? __fget_light+0x1a9/0x230 [ 50.334950] ? __fdget+0x1b/0x20 [ 50.338321] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 50.343849] __sys_sendmsg+0x105/0x1d0 [ 50.347722] ? __ia32_sys_shutdown+0x80/0x80 [ 50.352115] ? up_read+0x1a/0x110 [ 50.355553] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 50.360298] ? do_syscall_64+0x26/0x620 [ 50.364259] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 50.369608] ? do_syscall_64+0x26/0x620 [ 50.373576] __x64_sys_sendmsg+0x78/0xb0 [ 50.377626] do_syscall_64+0xfd/0x620 [ 50.381419] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 50.386593] RIP: 0033:0x4401d9 [ 50.389784] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 50.408687] RSP: 002b:00007ffebf925cd8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.416384] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004401d9 [ 50.423643] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 50.430901] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 50.438163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401a60 [ 50.445432] R13: 0000000000401af0 R14: 0000000000000000 R15: 0000000000000000 [ 50.452694] Modules linked in: [ 50.456531] ---[ end trace 51cfa8873577f0c1 ]--- [ 50.461358] RIP: 0010:tcf_ife_init+0x221/0x17d0 [ 50.466020] Code: fb 48 c7 c2 99 43 81 85 be 01 00 00 00 48 c7 c7 60 da 79 88 e8 c0 26 d1 fb 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 83 [ 50.485057] RSP: 0018:ffff888085f86ee0 EFLAGS: 00010246 [ 50.490477] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff11012de0dde [ 50.497740] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000282 [ 50.505098] RBP: ffff888085f87068 R08: ffff888096f06680 R09: 0000000000000001 [ 50.512418] R10: ffffed1015d04732 R11: ffff8880ae823993 R12: 0000000000000001 [ 50.519717] R13: ffff88809a40b240 R14: ffff888085f87040 R15: 0000000000000001 [ 50.526997] FS: 000000000207f880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 50.535270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.541175] CR2: ffffffffff600400 CR3: 000000008fbe1000 CR4: 00000000001406f0 [ 50.548540] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.555855] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.563300] Kernel panic - not syncing: Fatal exception [ 50.569723] Kernel Offset: disabled [ 50.573380] Rebooting in 86400 seconds..