audit: type=1400 audit(1552511511.277:9523): avc: denied { write } for pid=30038 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 1 PID: 30044 Comm: syz-executor.4 Not tainted 4.4.174+ #17 task: ffff8801d1cfdf00 task.stack: ffff8800abbd8000 RIP: 0010:[] [] __lock_acquire+0x5f3/0x4f50 kernel/locking/lockdep.c:3092 RSP: 0018:ffff8800abbdf460 EFLAGS: 00010006 RAX: dffffc0000000000 RBX: ffff8801d1cfdf00 RCX: 0000000000000001 RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000001 RBP: ffff8800abbdf5d8 R08: 0000000000000001 R09: 0000000000000000 R10: ffffffff82836880 R11: ffffffff831a5078 R12: ffff8801d1cfdf00 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8801db700000(0063) knlGS:00000000f54f8b40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 audit: type=1400 audit(1552511511.307:9524): avc: denied { create } for pid=30042 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 CR2: 0000000001bb6ff8 CR3: 0000000196f13000 CR4: 00000000001606b0 Stack: ffff8800abbdf520 0000000000000246 ffff8800abbdf480 ffff8801d1cfdf00 ffffffff82ea73a0 0000000000000000 ffff8801d1cfe808 ffff8801d1cfe7c0 ffff8801d1cfe810 0000000000000000 ffff880000000002 ffff880100000000 Call Trace: [] lock_acquire+0x15e/0x450 kernel/locking/lockdep.c:3592 [] __raw_spin_lock_bh include/linux/spinlock_api_smp.h:137 [inline] [] _raw_spin_lock_bh+0x3c/0x50 kernel/locking/spinlock.c:175 [] spin_lock_bh include/linux/spinlock.h:307 [inline] [] nfulnl_set_timeout net/netfilter/nfnetlink_log.c:299 [inline] [] nfulnl_recv_config+0x553/0x1120 net/netfilter/nfnetlink_log.c:916 audit: type=1400 audit(1552511511.307:9525): avc: denied { write } for pid=30042 comm="syz-executor.5" path="socket:[307953]" dev="sockfs" ino=307953 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 audit: type=1400 audit(1552511511.307:9526): avc: denied { write } for pid=30042 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 audit: type=1400 audit(1552511511.307:9527): avc: denied { write } for pid=30042 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 audit: type=1400 audit(1552511511.307:9528): avc: denied { write } for pid=30042 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 audit: type=1400 audit(1552511511.307:9529): avc: denied { write } for pid=30042 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [] nfnetlink_rcv_msg+0x9f9/0xc20 net/netfilter/nfnetlink.c:215 [] netlink_rcv_skb+0xd4/0x2e0 net/netlink/af_netlink.c:2361 [] nfnetlink_rcv+0x989/0x12b0 net/netfilter/nfnetlink.c:479 [] netlink_unicast_kernel net/netlink/af_netlink.c:1277 [inline] [] netlink_unicast+0x4d7/0x700 net/netlink/af_netlink.c:1303 [] netlink_sendmsg+0x6b6/0xc80 net/netlink/af_netlink.c:1859 [] sock_sendmsg_nosec net/socket.c:638 [inline] [] sock_sendmsg+0xbe/0x110 net/socket.c:648 [] ___sys_sendmsg+0x769/0x890 net/socket.c:1975 [] __sys_sendmsg+0xc5/0x160 net/socket.c:2009 [] C_SYSC_sendmsg net/compat.c:725 [inline] [] compat_SyS_sendmsg+0x2a/0x40 net/compat.c:723 [] do_syscall_32_irqs_on arch/x86/entry/common.c:330 [inline] [] do_fast_syscall_32+0x32d/0xa90 arch/x86/entry/common.c:397 [] sysenter_flags_fixed+0xd/0x1a Code: 0f 85 7f 32 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 8b 94 24 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 a7 33 00 00 48 8b 84 24 88 00 00 00 48 81 38 RIP [] __lock_acquire+0x5f3/0x4f50 kernel/locking/lockdep.c:3092 RSP ---[ end trace 5f93978b400da702 ]---