Warning: Permanently added '10.128.0.226' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 31.920631] audit: type=1400 audit(1601065937.924:8): avc: denied { execmem } for pid=6354 comm="syz-executor809" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 31.930280] netlink: 32 bytes leftover after parsing attributes in process `syz-executor809'. [ 31.953580] netlink: 32 bytes leftover after parsing attributes in process `syz-executor809'. [ 31.965282] netlink: 32 bytes leftover after parsing attributes in process `syz-executor809'. [ 31.974194] netlink: 32 bytes leftover after parsing attributes in process `syz-executor809'. [ 31.982960] netlink: 32 bytes leftover after parsing attributes in process `syz-executor809'. [ 31.991786] netlink: 32 bytes leftover after parsing attributes in process `syz-executor809'. [ 32.011462] kasan: CONFIG_KASAN_INLINE enabled [ 32.017363] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 32.028350] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 32.034584] Modules linked in: [ 32.037752] CPU: 1 PID: 6370 Comm: syz-executor809 Not tainted 4.14.198-syzkaller #0 [ 32.045641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.054974] task: ffff8880972e0480 task.stack: ffff888097a18000 [ 32.061013] RIP: 0010:__tcf_idr_release+0x17d/0x260 [ 32.066003] RSP: 0018:ffff888097a1f4f0 EFLAGS: 00010297 [ 32.071340] RAX: ffff8880972e0480 RBX: 0000000000000000 RCX: 0000000000000000 [ 32.078585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88808f8bf7a0 [ 32.085882] RBP: ffff88808f8bf7a0 R08: ffffffff8a096f08 R09: 0000000000000001 [ 32.093127] R10: 0000000000000000 R11: ffff8880972e0480 R12: e801000000beffff [ 32.100371] R13: 00000000850ca675 R14: ffffffff81856373 R15: 0000000000000000 [ 32.107616] FS: 00007f7675640700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 32.115816] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.121715] CR2: 00007ffc21661dac CR3: 000000009b735000 CR4: 00000000001406e0 [ 32.128959] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.136203] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.143448] Call Trace: [ 32.146021] ? kfree_skbmem+0x88/0x100 [ 32.149881] tcf_action_destroy+0xed/0x170 [ 32.154090] tcf_action_init+0x294/0x400 [ 32.158126] ? tcf_action_init_1+0x9e0/0x9e0 [ 32.162538] ? finish_task_switch+0x178/0x610 [ 32.167006] ? finish_task_switch+0x14d/0x610 [ 32.171589] ? memset+0x20/0x40 [ 32.174847] ? nla_parse+0x157/0x1f0 [ 32.178535] tc_ctl_action+0x2e3/0x50f [ 32.182400] ? tca_action_gd+0x790/0x790 [ 32.186433] ? rtnetlink_rcv_msg+0x2e8/0xb10 [ 32.190814] ? tca_action_gd+0x790/0x790 [ 32.194863] rtnetlink_rcv_msg+0x3be/0xb10 [ 32.199072] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 32.203552] ? __netlink_lookup+0x345/0x5d0 [ 32.207849] netlink_rcv_skb+0x125/0x390 [ 32.211881] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 32.216372] ? netlink_ack+0x9a0/0x9a0 [ 32.220240] netlink_unicast+0x437/0x610 [ 32.224289] ? netlink_sendskb+0xd0/0xd0 [ 32.228325] netlink_sendmsg+0x62e/0xb80 [ 32.232361] ? nlmsg_notify+0x170/0x170 [ 32.236307] ? kernel_recvmsg+0x210/0x210 [ 32.240447] ? security_socket_sendmsg+0x83/0xb0 [ 32.245215] ? nlmsg_notify+0x170/0x170 [ 32.249163] sock_sendmsg+0xb5/0x100 [ 32.252850] ___sys_sendmsg+0x6c8/0x800 [ 32.256816] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 32.261553] ? lock_downgrade+0x740/0x740 [ 32.265676] ? do_raw_spin_unlock+0x164/0x220 [ 32.270162] ? _raw_spin_unlock+0x29/0x40 [ 32.274283] ? do_huge_pmd_anonymous_page+0x732/0x1670 [ 32.279540] ? __fget+0x1fe/0x360 [ 32.282998] ? lock_acquire+0x170/0x3f0 [ 32.286947] ? lock_downgrade+0x740/0x740 [ 32.291068] ? __fget+0x225/0x360 [ 32.294495] ? __fdget+0x196/0x1f0 [ 32.298011] ? sockfd_lookup_light+0xb2/0x160 [ 32.302481] __sys_sendmsg+0xa3/0x120 [ 32.306255] ? SyS_shutdown+0x160/0x160 [ 32.310203] ? up_read+0x17/0x30 [ 32.313543] ? __do_page_fault+0x19a/0xb50 [ 32.317752] SyS_sendmsg+0x27/0x40 [ 32.321282] ? __sys_sendmsg+0x120/0x120 [ 32.325324] do_syscall_64+0x1d5/0x640 [ 32.329197] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 32.334359] RIP: 0033:0x446c19 [ 32.337547] RSP: 002b:00007f767563fd98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 32.346197] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446c19 [ 32.353442] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000003 [ 32.360686] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 32.367936] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 32.375184] R13: 0001008400000000 R14: 0000000000e60000 R15: 053b003000000098 [ 32.382432] Code: 49 8d 7c 24 48 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 4d 8b 64 24 48 4d 85 e4 74 0e e8 39 4e 38 fc 0f b6 f3 48 89 ef <41> ff d4 e8 2b 4e 38 fc 48 8d 7d 20 48 b8 00 00 00 00 00 fc ff [ 32.401597] RIP: __tcf_idr_release+0x17d/0x260 RSP: ffff888097a1f4f0 [ 32.408574] ---[ end trace 4816c45cc30af74c ]--- [ 32.413464] Kernel panic - not syncing: Fatal exception [ 32.420100] Kernel Offset: disabled [ 32.423784] Rebooting in 86400 seconds..