audit: type=1400 audit(1557339368.321:1681): avc: denied { create } for pid=15525 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 audit: type=1400 audit(1557339368.351:1682): avc: denied { write } for pid=15525 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 0 PID: 15529 Comm: syz-executor.1 Not tainted 4.4.174+ #17 task: ffff8801d070af80 task.stack: ffff8801d3c60000 RIP: 0010:[] [] __lock_acquire+0x5f3/0x4f50 kernel/locking/lockdep.c:3092 RSP: 0018:ffff8801d3c67460 EFLAGS: 00010006 RAX: dffffc0000000000 RBX: ffff8801d070af80 RCX: 0000000000000001 RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000001 RBP: ffff8801d3c675d8 R08: 0000000000000001 R09: 0000000000000000 R10: ffffffff82836880 R11: ffffffff831a5078 R12: ffff8801d070af80 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8801db600000(0063) knlGS:00000000f550db40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 00007fffc7928df0 CR3: 00000001d8ba9000 CR4: 00000000001606b0 Stack: ffff8801d3c67520 0000000000000246 ffff8801d3c67480 ffff8801d070af80 ffffffff82ea73a0 0000000000000000 ffff8801d070b888 ffff8801d070b840 ffff8801d070b890 0000000000000000 ffff880100000002 ffff880100000000 Call Trace: [] lock_acquire+0x15e/0x450 kernel/locking/lockdep.c:3592 [] __raw_spin_lock_bh include/linux/spinlock_api_smp.h:137 [inline] [] _raw_spin_lock_bh+0x3c/0x50 kernel/locking/spinlock.c:175 [] spin_lock_bh include/linux/spinlock.h:307 [inline] [] nfulnl_set_nlbufsiz net/netfilter/nfnetlink_log.c:282 [inline] [] nfulnl_recv_config+0x60d/0x1120 net/netfilter/nfnetlink_log.c:922 [] nfnetlink_rcv_msg+0x9f9/0xc20 net/netfilter/nfnetlink.c:215 [] netlink_rcv_skb+0xd4/0x2e0 net/netlink/af_netlink.c:2361 [] nfnetlink_rcv+0x989/0x12b0 net/netfilter/nfnetlink.c:479 [] netlink_unicast_kernel net/netlink/af_netlink.c:1277 [inline] [] netlink_unicast+0x4d7/0x700 net/netlink/af_netlink.c:1303 [] netlink_sendmsg+0x6b6/0xc80 net/netlink/af_netlink.c:1859 [] sock_sendmsg_nosec net/socket.c:638 [inline] [] sock_sendmsg+0xbe/0x110 net/socket.c:648 [] ___sys_sendmsg+0x769/0x890 net/socket.c:1975 [] __sys_sendmsg+0xc5/0x160 net/socket.c:2009 [] C_SYSC_sendmsg net/compat.c:725 [inline] [] compat_SyS_sendmsg+0x2a/0x40 net/compat.c:723 [] do_syscall_32_irqs_on arch/x86/entry/common.c:330 [inline] [] do_fast_syscall_32+0x32d/0xa90 arch/x86/entry/common.c:397 [] sysenter_flags_fixed+0xd/0x1a Code: 0f 85 7f 32 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 8b 94 24 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 a7 33 00 00 48 8b 84 24 88 00 00 00 48 81 38 RIP [] __lock_acquire+0x5f3/0x4f50 kernel/locking/lockdep.c:3092 RSP ---[ end trace 5afdb28e56317640 ]---