[   39.142163] audit: type=1800 audit(1563579926.486:31): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0
[   39.175308] audit: type=1800 audit(1563579926.496:32): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
Starting mcstransd: 
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.135' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [   49.914038] kauditd_printk_skb: 3 callbacks suppressed
[   49.914055] audit: type=1400 audit(1563579937.326:36): avc:  denied  { map } for  pid=7625 comm="syz-executor831" path="/root/syz-executor831049400" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[   49.917489] netlink: 4 bytes leftover after parsing attributes in process `syz-executor831'.
[   49.954621] kasan: CONFIG_KASAN_INLINE enabled
[   49.959291] kasan: GPF could be caused by NULL-ptr deref or user memory access
[   49.967363] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[   49.973618] CPU: 0 PID: 7625 Comm: syz-executor831 Not tainted 4.19.59 #32
[   49.980713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   49.990063] RIP: 0010:tcf_ife_init+0x221/0x17d0
[   49.994732] Code: fb 48 c7 c2 99 43 81 85 be 01 00 00 00 48 c7 c7 60 da 79 88 e8 c0 26 d1 fb 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 83
[   50.013637] RSP: 0018:ffff888085f86ee0 EFLAGS: 00010246
[   50.018985] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff11012de0dde
[   50.026596] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000282
[   50.033868] RBP: ffff888085f87068 R08: ffff888096f06680 R09: 0000000000000001
[   50.041121] R10: ffffed1015d04732 R11: ffff8880ae823993 R12: 0000000000000001
[   50.048387] R13: ffff88809a40b240 R14: ffff888085f87040 R15: 0000000000000001
[   50.055654] FS:  000000000207f880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[   50.064162] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   50.070033] CR2: 0000000020000180 CR3: 000000008fbe1000 CR4: 00000000001406f0
[   50.077290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   50.084543] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   50.091793] Call Trace:
[   50.094372]  ? __add_metainfo+0x480/0x480
[   50.098505]  ? lock_downgrade+0x810/0x810
[   50.102640]  ? kasan_check_write+0x14/0x20
[   50.106870]  ? do_raw_read_unlock+0x3f/0x70
[   50.111193]  tcf_action_init_1+0x804/0xc40
[   50.115424]  ? tcf_action_dump_old+0x80/0x80
[   50.119818]  ? __lock_acquire+0x6eb/0x48f0
[   50.124033]  ? __lock_acquire+0x6eb/0x48f0
[   50.128251]  ? memset+0x32/0x40
[   50.131532]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   50.137054]  tcf_action_init+0x23e/0x360
[   50.141104]  ? tcf_action_init_1+0xc40/0xc40
[   50.145504]  ? avc_has_extended_perms+0x10f0/0x10f0
[   50.150504]  ? lock_downgrade+0x810/0x810
[   50.154637]  tcf_action_add+0xe8/0x370
[   50.158514]  ? tca_action_gd+0x16b0/0x16b0
[   50.162755]  ? is_bpf_text_address+0xac/0x170
[   50.167240]  ? memset+0x32/0x40
[   50.170511]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   50.176031]  ? nla_parse+0x1fc/0x2f0
[   50.179763]  tc_ctl_action+0x37a/0x46f
[   50.183652]  ? tcf_action_add+0x370/0x370
[   50.187801]  ? __lock_is_held+0xb6/0x140
[   50.191868]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   50.197390]  ? tcf_action_add+0x370/0x370
[   50.201527]  rtnetlink_rcv_msg+0x463/0xb00
[   50.205761]  ? rtnetlink_put_metrics+0x570/0x570
[   50.210503]  ? netlink_deliver_tap+0x22d/0xc20
[   50.215101]  ? find_held_lock+0x35/0x130
[   50.219164]  netlink_rcv_skb+0x17d/0x460
[   50.223211]  ? rtnetlink_put_metrics+0x570/0x570
[   50.227952]  ? netlink_ack+0xb50/0xb50
[   50.231843]  ? kasan_check_read+0x11/0x20
[   50.235975]  ? netlink_deliver_tap+0x254/0xc20
[   50.240560]  rtnetlink_rcv+0x1d/0x30
[   50.244262]  netlink_unicast+0x537/0x720
[   50.248309]  ? netlink_attachskb+0x770/0x770
[   50.252735]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   50.258263]  netlink_sendmsg+0x8ae/0xd70
[   50.262328]  ? netlink_unicast+0x720/0x720
[   50.266569]  ? selinux_socket_sendmsg+0x36/0x40
[   50.271243]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   50.276767]  ? security_socket_sendmsg+0x8d/0xc0
[   50.281515]  ? netlink_unicast+0x720/0x720
[   50.285751]  sock_sendmsg+0xd7/0x130
[   50.289462]  ___sys_sendmsg+0x803/0x920
[   50.293519]  ? copy_msghdr_from_user+0x430/0x430
[   50.298286]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   50.303813]  ? __handle_mm_fault+0x7d1/0x3f80
[   50.308297]  ? vmf_insert_mixed_mkwrite+0x90/0x90
[   50.313126]  ? find_held_lock+0x35/0x130
[   50.317170]  ? __do_page_fault+0x676/0xe90
[   50.321391]  ? find_held_lock+0x35/0x130
[   50.325466]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   50.330990]  ? __fget_light+0x1a9/0x230
[   50.334950]  ? __fdget+0x1b/0x20
[   50.338321]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[   50.343849]  __sys_sendmsg+0x105/0x1d0
[   50.347722]  ? __ia32_sys_shutdown+0x80/0x80
[   50.352115]  ? up_read+0x1a/0x110
[   50.355553]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   50.360298]  ? do_syscall_64+0x26/0x620
[   50.364259]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   50.369608]  ? do_syscall_64+0x26/0x620
[   50.373576]  __x64_sys_sendmsg+0x78/0xb0
[   50.377626]  do_syscall_64+0xfd/0x620
[   50.381419]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   50.386593] RIP: 0033:0x4401d9
[   50.389784] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00
[   50.408687] RSP: 002b:00007ffebf925cd8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   50.416384] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004401d9
[   50.423643] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003
[   50.430901] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8
[   50.438163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401a60
[   50.445432] R13: 0000000000401af0 R14: 0000000000000000 R15: 0000000000000000
[   50.452694] Modules linked in:
[   50.456531] ---[ end trace 51cfa8873577f0c1 ]---
[   50.461358] RIP: 0010:tcf_ife_init+0x221/0x17d0
[   50.466020] Code: fb 48 c7 c2 99 43 81 85 be 01 00 00 00 48 c7 c7 60 da 79 88 e8 c0 26 d1 fb 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 83
[   50.485057] RSP: 0018:ffff888085f86ee0 EFLAGS: 00010246
[   50.490477] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff11012de0dde
[   50.497740] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000282
[   50.505098] RBP: ffff888085f87068 R08: ffff888096f06680 R09: 0000000000000001
[   50.512418] R10: ffffed1015d04732 R11: ffff8880ae823993 R12: 0000000000000001
[   50.519717] R13: ffff88809a40b240 R14: ffff888085f87040 R15: 0000000000000001
[   50.526997] FS:  000000000207f880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[   50.535270] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   50.541175] CR2: ffffffffff600400 CR3: 000000008fbe1000 CR4: 00000000001406f0
[   50.548540] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   50.555855] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   50.563300] Kernel panic - not syncing: Fatal exception
[   50.569723] Kernel Offset: disabled
[   50.573380] Rebooting in 86400 seconds..