[....] Starting enhanced syslogd: rsyslogd[ 17.341959] audit: type=1400 audit(1519606580.830:5): avc: denied { syslog } for pid=4085 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.422853] audit: type=1400 audit(1519606585.911:6): avc: denied { map } for pid=4224 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.27' (ECDSA) to the list of known hosts. 2018/02/26 00:56:32 fuzzer started [ 28.706143] audit: type=1400 audit(1519606592.194:7): avc: denied { map } for pid=4235 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/26 00:56:32 dialing manager at 10.128.0.26:46051 [ 34.259771] can: request_module (can-proto-0) failed. [ 34.269547] can: request_module (can-proto-0) failed. 2018/02/26 00:56:38 kcov=true, comps=true [ 34.865215] audit: type=1400 audit(1519606598.353:8): avc: denied { map } for pid=4235 comm="syz-fuzzer" path="/sys/kernel/debug/kcov" dev="debugfs" ino=9451 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/02/26 00:56:42 executing program 7: seccomp(0x800000000001, 0x0, &(0x7f0000dd4000)={0x2, &(0x7f00000f7ff0)=[{0x28}, {0x6}]}) 2018/02/26 00:56:42 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000124ff3)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={@generic="26187aaa70ceec6617f1d7c6d75bc62c", @ifru_mtu=0xcf1a}) ioctl$TUNSETPERSIST(r0, 0x400454cb, &(0x7f0000000080)) ioctl$TUNDETACHFILTER(r0, 0x400454cb, 0x0) 2018/02/26 00:56:42 executing program 0: mkdir(&(0x7f0000afbff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000b75000)) chdir(&(0x7f0000f95000)='./file0\x00') r0 = open(&(0x7f00002bd93e)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 2018/02/26 00:56:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2000000000484, &(0x7f0000059fe8)=""/24, &(0x7f0000aed000)=0x45) 2018/02/26 00:56:42 executing program 2: mmap(&(0x7f0000000000/0xefa000)=nil, 0xefa000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000fe2)={0x0, {0x2, 0xffffffffffffffff, @rand_addr}, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2, 0xffffffffffffffff, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=@generic="68c791406f8c04f24fb2d8dd5a393408"}) 2018/02/26 00:56:42 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000080)={{}, 0x0, 0x0, "6964300000000000000f000000000000007700", 'timer1\x00'}) 2018/02/26 00:56:42 executing program 5: r0 = socket(0x1e, 0x80004, 0x0) io_setup(0x40, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]) 2018/02/26 00:56:42 executing program 6: syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x2c, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x8, 0x880b, 0x0, 0x0, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, []}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, []}}}}}}, 0x0) [ 39.053242] audit: type=1400 audit(1519606602.541:9): avc: denied { map } for pid=4235 comm="syz-fuzzer" path="/root/syzkaller-shm753307514" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 39.108375] audit: type=1400 audit(1519606602.597:10): avc: denied { sys_admin } for pid=4279 comm="syz-executor2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 39.114919] IPVS: ftp: loaded support on port[0] = 21 [ 39.229093] audit: type=1400 audit(1519606602.715:11): avc: denied { net_admin } for pid=4282 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 39.253819] IPVS: ftp: loaded support on port[0] = 21 [ 39.307227] IPVS: ftp: loaded support on port[0] = 21 [ 39.359668] IPVS: ftp: loaded support on port[0] = 21 [ 39.446752] IPVS: ftp: loaded support on port[0] = 21 [ 39.530919] IPVS: ftp: loaded support on port[0] = 21 [ 39.631461] IPVS: ftp: loaded support on port[0] = 21 [ 39.755266] IPVS: ftp: loaded support on port[0] = 21 [ 40.674447] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.029196] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.254179] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.276746] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.415323] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.470240] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.742622] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.781604] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.840458] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 43.846613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.051936] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 44.058097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.123688] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.303387] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 44.309767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.337313] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 44.343453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.402487] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.425413] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 44.431648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.458045] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.467650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.476376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.500097] audit: type=1400 audit(1519606607.988:12): avc: denied { sys_chroot } for pid=4282 comm="syz-executor2" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 00:56:48 executing program 2: r0 = socket(0x2, 0x3, 0x9) getsockopt(r0, 0xff, 0x0, &(0x7f0000b6c000), &(0x7f00003b7000)) [ 44.627988] audit: type=1400 audit(1519606608.116:13): avc: denied { net_raw } for pid=5461 comm="syz-executor2" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 44.645513] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.665260] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 44.671427] 8021q: adding VLAN 0 to HW filter on device bond0 2018/02/26 00:56:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000bfdffc)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000049f48)={0x0, 0x3, 0x3ff, 0x4, 0x401, 0x7, 0x100000000, 0x4c8, {0x0, @in6={{0xa, 0x3, 0xfffffffffffffffb, @ipv4={[], [0xff, 0xff], @rand_addr}, 0x2}}, 0x3, 0xa757, 0xab, 0x9, 0x80}}, &(0x7f0000defffc)=0xb8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r1, 0x35}, &(0x7f0000e71000)=0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) close(r3) socketpair(0x1b, 0x7, 0x9, &(0x7f0000e6f000)) close(r2) [ 44.706623] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.756397] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.762942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.773761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.804411] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.829729] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 44.835967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.887913] IPv6: veth0: IPv6 duplicate address fe80::2:c used by aa:aa:aa:aa:02:0c detected! [ 44.888668] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 44.902822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.923225] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.973776] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.980121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.987565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.049543] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.055845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.072176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.099151] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.106331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.121615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.133425] IPv6: veth1: IPv6 duplicate address fe80::a8aa:aaff:feaa:50f used by aa:aa:aa:aa:05:0f detected! [ 45.141587] IPVS: length: 69 != 24 [ 45.148224] IPv6: veth0: IPv6 duplicate address fe80::a8aa:aaff:feaa:711 used by aa:aa:aa:aa:07:11 detected! [ 45.162963] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.169330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.181101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.191526] IPv6: veth0: IPv6 duplicate address fe80::a8aa:aaff:feaa:20c used by aa:aa:aa:aa:02:0c detected! [ 45.203128] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.210950] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.264349] IPv6: veth1: IPv6 duplicate address fe80::4:e used by aa:aa:aa:aa:04:0e detected! [ 45.294894] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.301212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.309233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.334871] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.341089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.348513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.355795] IPv6: veth1: IPv6 duplicate address fe80::a8aa:aaff:feaa:10b used by aa:aa:aa:aa:01:0b detected! [ 45.366283] IPv6: veth1: IPv6 duplicate address fe80::6:10 used by aa:aa:aa:aa:06:10 detected! [ 45.386405] audit: type=1400 audit(1519606608.875:14): avc: denied { map } for pid=5576 comm="syz-executor0" path="/0/file0/bus" dev="ramfs" ino=14767 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ramfs_t:s0 tclass=file permissive=1 [ 45.410786] audit: type=1400 audit(1519606608.879:15): avc: denied { dac_read_search } for pid=5576 comm="syz-executor0" capability=2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/02/26 00:56:48 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a)}, @ptr={0x77622a85, 0x0, &(0x7f0000007f72)}], &(0x7f000000afd0)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00001eafd0)={0x8, 0x0, &(0x7f000057e000)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, &(0x7f0000beffff)}) 2018/02/26 00:56:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000bfdffc)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000049f48)={0x0, 0x3, 0x3ff, 0x4, 0x401, 0x7, 0x100000000, 0x4c8, {0x0, @in6={{0xa, 0x3, 0xfffffffffffffffb, @ipv4={[], [0xff, 0xff], @rand_addr}, 0x2}}, 0x3, 0xa757, 0xab, 0x9, 0x80}}, &(0x7f0000defffc)=0xb8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r1, 0x35}, &(0x7f0000e71000)=0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) close(r3) socketpair(0x1b, 0x7, 0x9, &(0x7f0000e6f000)) close(r2) 2018/02/26 00:56:48 executing program 5: r0 = socket(0x1e, 0x80004, 0x0) io_setup(0x40, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]) 2018/02/26 00:56:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000002fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0xc0884123, &(0x7f0000000000)) 2018/02/26 00:56:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2000000000484, &(0x7f0000059fe8)=""/24, &(0x7f0000aed000)=0x45) 2018/02/26 00:56:48 executing program 3: r0 = gettid() r1 = semget$private(0x0, 0x5, 0x0) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x8001}], 0x1, &(0x7f0000000080)={0x77359400}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x15) 2018/02/26 00:56:48 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendto(r0, &(0x7f0000e2e000), 0x0, 0x0, &(0x7f0000000fa0)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "5c87728b7495ed7f7db2b79497910ddcba25828afe37ba971e57418267fdac7247fc2404fbbc1ed1df9a6cadf490eaf5b81192b4d998751c2bb58ee211ccbd"}, 0x60) 2018/02/26 00:56:48 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x100004000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000fafffc)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_settime(0x7, &(0x7f0000000000)={0x77359400}) readlinkat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xfffffffffffffffd, &(0x7f0000000080)=0x8f3, 0x4) dup3(r3, r2, 0x0) clock_gettime(0x0, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000168f90)={[{0x0, 0x0, 0x0, 0xb6fe, 0x0, 0xfffffffffffff801}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb23, 0x800000000000000}, {0x6}]}) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f0000000100), 0xffffffffffffff65) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f0000bfefbf)="0f20d835200000000f22d80f0118470f35f3ab77644ebe0f59128182818201bc8c6a000000674b0f015e9dc483996ba7d900f300004f4f21ae5ddc", 0x3b}], 0x1, 0x0, &(0x7f0000753ff0)=[], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 45.435574] audit: type=1400 audit(1519606608.882:16): avc: denied { dac_override } for pid=5576 comm="syz-executor0" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 45.436114] binder: BINDER_SET_CONTEXT_MGR already set [ 45.460110] audit: type=1400 audit(1519606608.916:17): avc: denied { ipc_owner } for pid=5583 comm="syz-executor3" capability=15 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 45.460129] audit: type=1400 audit(1519606608.918:18): avc: denied { map } for pid=5579 comm="syz-executor7" path="/dev/binder0" dev="devtmpfs" ino=9517 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 45.460143] audit: type=1400 audit(1519606608.921:19): avc: denied { set_context_mgr } for pid=5579 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 45.460158] audit: type=1400 audit(1519606608.922:20): avc: denied { call } for pid=5579 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 45.460174] audit: type=1400 audit(1519606608.922:21): avc: denied { transfer } for pid=5579 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 45.468968] IPVS: length: 69 != 24 2018/02/26 00:56:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2000000000484, &(0x7f0000059fe8)=""/24, &(0x7f0000aed000)=0x45) [ 45.490596] IPv6: veth0: IPv6 duplicate address fe80::a8aa:aaff:feaa:a used by aa:aa:aa:aa:00:0a detected! [ 45.583277] IPv6: veth1: IPv6 duplicate address fe80::5:f used by aa:aa:aa:aa:05:0f detected! [ 45.589173] binder_alloc: 5579: binder_alloc_buf, no vma [ 45.608734] IPv6: veth0: IPv6 duplicate address fe80::3:d used by aa:aa:aa:aa:03:0d detected! [ 45.610620] binder: 5579:5586 transaction failed 29189/-3, size 80-16 line 2963 [ 45.622734] binder: 5579:5587 ioctl 40046207 0 returned -16 2018/02/26 00:56:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000bfdffc)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000049f48)={0x0, 0x3, 0x3ff, 0x4, 0x401, 0x7, 0x100000000, 0x4c8, {0x0, @in6={{0xa, 0x3, 0xfffffffffffffffb, @ipv4={[], [0xff, 0xff], @rand_addr}, 0x2}}, 0x3, 0xa757, 0xab, 0x9, 0x80}}, &(0x7f0000defffc)=0xb8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r1, 0x35}, &(0x7f0000e71000)=0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) close(r3) socketpair(0x1b, 0x7, 0x9, &(0x7f0000e6f000)) close(r2) 2018/02/26 00:56:49 executing program 5: r0 = socket(0x1e, 0x80004, 0x0) io_setup(0x40, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]) 2018/02/26 00:56:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000062bfc8)={&(0x7f0000315ff5)={0x10}, 0xc, &(0x7f0000bea000)={&(0x7f00000e5ef0)=@getpolicy={0x5c, 0x15, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast2=0xe0000002, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}}, [@policy_type={0xc, 0x10, {0xffffffffffffffff}}]}, 0x5c}, 0x1}, 0x0) 2018/02/26 00:56:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2000000000484, &(0x7f0000059fe8)=""/24, &(0x7f0000aed000)=0x45) 2018/02/26 00:56:49 executing program 3: r0 = gettid() r1 = semget$private(0x0, 0x5, 0x0) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x8001}], 0x1, &(0x7f0000000080)={0x77359400}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x15) [ 45.627594] binder: 5579:5595 DecRefs 0 refcount change on invalid ref 2 ret -22 [ 45.638586] IPVS: length: 69 != 24 [ 45.676720] binder: undelivered TRANSACTION_ERROR: 29189 2018/02/26 00:56:49 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x100000000800) ioctl$KVM_GET_REG_LIST(r0, 0x4018920a, &(0x7f0000000080)={0x0, []}) [ 45.683301] binder: release 5579:5586 transaction 2 out, still active [ 45.690107] binder: unexpected work type, 4, not freed [ 45.695436] binder: undelivered TRANSACTION_COMPLETE [ 45.700869] binder: send failed reply for transaction 2, target dead [ 45.702423] IPVS: length: 69 != 24 2018/02/26 00:56:49 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x0, 0x0, 0x1e8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000000440), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={0x30, 'srh\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4a7) syz_emit_ethernet(0x4e, &(0x7f0000001e31)={@random="0d4ddefaf676", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x18, 0x2b, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x0, 0x2, 0x0, 0x0, 0x0, @loopback={0x0, 0x1}}}}}}}, 0x0) 2018/02/26 00:56:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000539000)={0x1, {{0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000100)={0x100000001, {{0x2, 0xffffffffffffffff, @multicast1=0xe0000001}}}, 0x90) 2018/02/26 00:56:49 executing program 7: r0 = syz_open_dev$sndpcmp(&(0x7f0000a4bfee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap$binder(&(0x7f0000320000/0x4000)=nil, 0x4000, 0x402, 0xa8012, r0, 0x0) 2018/02/26 00:56:49 executing program 5: r0 = socket(0x1e, 0x80004, 0x0) io_setup(0x40, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]) 2018/02/26 00:56:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000010000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000010c90)={0x14, 0x58, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {}, []}, 0x14}, 0x1}, 0x0) 2018/02/26 00:56:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000bfdffc)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000049f48)={0x0, 0x3, 0x3ff, 0x4, 0x401, 0x7, 0x100000000, 0x4c8, {0x0, @in6={{0xa, 0x3, 0xfffffffffffffffb, @ipv4={[], [0xff, 0xff], @rand_addr}, 0x2}}, 0x3, 0xa757, 0xab, 0x9, 0x80}}, &(0x7f0000defffc)=0xb8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r1, 0x35}, &(0x7f0000e71000)=0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) close(r3) socketpair(0x1b, 0x7, 0x9, &(0x7f0000e6f000)) close(r2) 2018/02/26 00:56:49 executing program 6: r0 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000ffb)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$user(&(0x7f0000176000)='user\x00', &(0x7f00009d5ffb)={0x73, 0x79, 0x7a}, &(0x7f0000829ffe)='\x00', 0x1, r0) r2 = add_key$user(&(0x7f0000893000)='user\x00', &(0x7f0000be6000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000f28000)="b33ab76079ebe0d94f729cd653e520c19ad7d97fe21769e7c4db44c249b544230ba287fb8bd6ed266ccf59ef70995bf2e8e0ecd3fff32853747eda22d2818d08ca27e0ec821620e365a0e6b9485f2d925493f62113e33e5f8c7eba67fc19a9497f5b07e5849d2e875b066cd640b336616fe0f3c3002801b4627ee7597689525e8e81f750a86eb580fb4690ea52246bd3d32b1a91f944edb74b1f50ae08c5387ed8fd0598b600579f3af3f864e1c324f6928f6672f98f7e149be31bd78b506e8b", 0xc0, r0) keyctl$dh_compute(0x17, &(0x7f0000712ff4)={r1, r2, r2}, &(0x7f0000bf7fbb)=""/69, 0x45, &(0x7f0000659fc8)={&(0x7f0000168fc0)={'crc32-generic\x00'}}) 2018/02/26 00:56:49 executing program 3: r0 = gettid() r1 = semget$private(0x0, 0x5, 0x0) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x8001}], 0x1, &(0x7f0000000080)={0x77359400}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x15) 2018/02/26 00:56:49 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f000000b000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000001ef8)={0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}}, [0x0, 0x0, 0xffffffff]}, &(0x7f000000cffc)=0x108) ioctl(r0, 0xc1004110, &(0x7f0000001f64)="ac7d34f6f2995a5fb9cae8959c") 2018/02/26 00:56:49 executing program 5: r0 = socket(0x1000000010, 0x802, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000359000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) sendmsg$nl_route(r0, &(0x7f0000f72fc8)={&(0x7f00008d4000)={0x10}, 0xc, &(0x7f0000f75ff0)={&(0x7f0000747000)=@newlink={0x28, 0x10, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa}]}, 0x28}, 0x1}, 0x0) 2018/02/26 00:56:49 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003000)={@syzn={0x73, 0x79, 0x7a, 0x0}, 0x0}) bind$packet(r0, &(0x7f0000094fec)={0x11, 0x4, r1, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) syz_emit_ethernet(0x1e, &(0x7f0000066fe2)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "060ac01a6bb6c881"}}}}, &(0x7f000008bff0)={0x0, 0x1}) 2018/02/26 00:56:49 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/02/26 00:56:49 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00005e1fa8)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f000064d000)=[{0x0, 0x0, &(0x7f00007b7000)=[]}], 0x1, 0x4008000) accept$alg(r1, 0x0, 0x0) 2018/02/26 00:56:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00002ec000)="00fcdf7f00200000000003ff9f3f000100014700008a19f5d46f79ae9d8670539dc75596f524d81ad9e301b37f37a87223") fcntl$notify(r0, 0x402, 0x2000000003) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 45.797286] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=88 sclass=netlink_tcpdiag_socket pig=5627 comm=syz-executor4 2018/02/26 00:56:49 executing program 2: r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r0, &(0x7f00007b3000)=[{{&(0x7f0000d19fe4)=@in6={0xa, 0xffffffffffffffff, 0x400000006, @local={0xfe, 0x80, [], 0xffffffffffffffff, 0xaa}}, 0x1c, &(0x7f00008cffe0)=[], 0x0, &(0x7f0000d2cde0)=[{0x10}], 0x7}}], 0x1, 0x0) 2018/02/26 00:56:49 executing program 3: r0 = gettid() r1 = semget$private(0x0, 0x5, 0x0) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x8001}], 0x1, &(0x7f0000000080)={0x77359400}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @tid}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x15) 2018/02/26 00:56:49 executing program 6: perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000e9cffc), &(0x7f0000cd6f68)) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000080)={@generic="699ef581442a4d719870bcd254d30619", @ifru_flags}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [], 0x0, 0xbb}}}, [0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x50]}, &(0x7f0000000080)=0x108) 2018/02/26 00:56:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000fd8000), 0x0, 0x20000004, &(0x7f0000cc7fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000001140)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, @common='bridge0\x00'}}, 0x1e, &(0x7f0000001080)=[{&(0x7f0000000080)="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", 0x219}], 0x1, &(0x7f00000010c0)=[]}, 0x8004) close(r0) 2018/02/26 00:56:49 executing program 0: r0 = socket$inet(0x2, 0x200000000000003, 0x9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1f0, 0x158, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000046fc0), {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@mcast1={0xff, 0x1, [], 0x1}, [], @ipv4=@dev={0xac, 0x14}, [], @ipv4=@multicast1=0xe0000001, [], @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, [], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffe, 0x2}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@empty, @empty, 0x0, 0x0, @common='ip6tnl0\x00', @common='vlan0\x00'}, 0x0, 0x70, 0x98, 0x0, {}, []}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x6}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x36e) sendmsg(r0, &(0x7f0000006000)={&(0x7f000000cff0)=@in={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x10, &(0x7f0000000380)=[], 0x0, &(0x7f0000001000)=[]}, 0x0) 2018/02/26 00:56:49 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/02/26 00:56:49 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x5, 0x0) io_setup(0x7, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)="10000000f0fffffffffffffff9855da0", 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff}]) 2018/02/26 00:56:49 executing program 2: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 2018/02/26 00:56:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00006befe8)={0x0}, &(0x7f00009e1ffc)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000f95ff0)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 2018/02/26 00:56:49 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/02/26 00:56:49 executing program 2: setrlimit(0x1000000000000007, &(0x7f000068d000)) bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) 2018/02/26 00:56:49 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000cf1ff4)={0x10}, 0xc, &(0x7f0000703000)={&(0x7f000023f000)={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0xffffffffffffffff}, []}, 0x14}, 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x20b) [ 45.960312] TCP: request_sock_TCPv6: Possible SYN flooding on port 20022. Sending cookies. Check SNMP counters. 2018/02/26 00:56:49 executing program 7: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/02/26 00:56:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f000028fff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000001274, &(0x7f0000d9b000)) 2018/02/26 00:56:49 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x400000000002c) connect$inet6(r0, &(0x7f0000017000)={0xa, 0xffffffffffffffff, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="ea", 0x1}, {&(0x7f0000000100)="ce1cce818718cbcfa00bba345c764f12f95d078cc3c8bc8d703c0b27f553839be4c04847eb78cd06916bb208b1a6e04b2d9211293ad14cc0c2fa02c510102e5b3b89e2bd6bc54d552311610d2c740a99da510c7296c070e89cc481981f7a121c0c85d42c09548ec1b65e896322fb0a4fa8607f665b2603a3d83165631d16d2f27dc635fd2a", 0x85}, {&(0x7f0000000200)="dddf9abc72868aeaa9f8e255f6d4b5e127e46d9cade4868819a53100aa048457cef04a359dad67774743b2e4a51ae68e49e821199928496e734f07ebd785fc4c550c3faf953b7e7f5e29441c3b21af07b1774a9bbe8bbf55978e5136a79eb182e32a091a70ef589a38e0c1ea01c48b884328c3dbf881f3575c3042ed87b23c3633de605b5bf890e5a05b0b377b3ad24de6cd8c83b273c10714c203a4bfe2c7f6b0dbd82c3fcab7b7dcef235172b7cf8a45c99cb87efd378faa8ee2811f110f885977b4f96a1d3fe3ed6e73e9d6c50a2e6a", 0xd1}, {&(0x7f0000000340)="43cbfbce2da9169668740cbd45509df198528e1b7e3b23257441ee25f9bc7eab3411e7faf5e0d6b94ca351b6be467044108b1257bb1a07698202b4a9d2de773ffa8dd0976d1f60c517c3780418ead3946c98fb781688d1f579f6bd153d0fb352f28c1fc6e6eea5a2c07dd6a854a5e33b3b8edba8051b55c1f6584abf9fbf9c0feb23342353933ad9cbc43f2fb15472a6ff02c9e436b3f5757526cc54bbe06c984a9d6003e29daf72241c75429005980953d5fe995b24bd2df5638a11169d1dea54ba7898659c7b", 0xc7}, {&(0x7f0000000540)="2eb72b41dcb8ee56dd10981d1c2ed14d60927db2b59fbaca1f9a57e6e413c584b5c1b9b44f9fce7ec4930955f5160ec06e1a7382c1ba423f3a9a8f233d410c6f833ef5e0ece7561823861f6d4c4bbf60ff35190af7ad8e9526b45ee348bdca6e06fa1bcc26d7e1f28f089f1347d3e5ad8555ca221aa27cbde9d8098d1b9849876ef1361dfc3877cfa771fddb955177f8054298dd81b11e087935c64bab431d43c97006ba7460f49f75c32475d73a23081b03d37b632626ea1e24a1b79315cd53fd5780a59b", 0xc5}], 0x5, &(0x7f0000006f48)=[]}, 0x24008040) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000007000)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, &(0x7f0000022fd0), {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {}, []}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast=0xffffffff, @common='erspan0\x00'}}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, [], [], @syzn={0x73, 0x79, 0x7a}, @syzn={0x73, 0x79, 0x7a}}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={0x30, 'ah\x00'}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x340) sendmsg(r0, &(0x7f000001f000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, &(0x7f0000004000)=[]}, 0x0) 2018/02/26 00:56:49 executing program 1: r0 = socket(0x10, 0x4000000002, 0x0) write(r0, &(0x7f0000805000)="260000001a0053eb910000f9ff090000000000000015e0f1ff609b000000ec5501000d8b017f", 0x26) recvfrom$ipx(r0, &(0x7f00007ef000)=""/4096, 0x11b2, 0x0, &(0x7f0000ff8000)={0x4, 0x0, 0x0, "933249611e5e"}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$llc(r0, &(0x7f0000000000)=""/103, 0x67, 0x0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000aa000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff, 0xbb}}, 0x20) readv(r0, &(0x7f00008fafb8)=[{&(0x7f0000eadf70)=""/144, 0x90}], 0x1) 2018/02/26 00:56:49 executing program 2: setrlimit(0x1000000000000007, &(0x7f000068d000)) bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) 2018/02/26 00:56:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000ed6000), 0x0) connect$inet(r0, &(0x7f0000561000)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}}, 0x25) sendto$inet(r0, &(0x7f0000c95ffd), 0x0, 0x8000, &(0x7f000057bff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) dup2(r1, r0) 2018/02/26 00:56:49 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)=@common='bridge0\x00') 2018/02/26 00:56:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380)=[], 0x0, &(0x7f00000003c0)=[]}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680)=[], 0x0, &(0x7f0000000240)=[{0x10, 0x29, 0xb}], 0x10}}], 0x2, 0x0) [ 46.087061] [ 46.088732] ============================================ [ 46.094164] WARNING: possible recursive locking detected [ 46.099588] 4.16.0-rc2+ #329 Not tainted [ 46.103615] -------------------------------------------- [ 46.109035] syz-executor6/5707 is trying to acquire lock: [ 46.114541] (_xmit_ETHER#2){+.-.}, at: [<0000000018729887>] sch_direct_xmit+0x361/0x1140 [ 46.122849] [ 46.122849] but task is already holding lock: [ 46.128788] (_xmit_ETHER#2){+.-.}, at: [<0000000018729887>] sch_direct_xmit+0x361/0x1140 [ 46.137086] [ 46.137086] other info that might help us debug this: [ 46.143719] Possible unsafe locking scenario: [ 46.143719] [ 46.149746] CPU0 [ 46.152299] ---- [ 46.154853] lock(_xmit_ETHER#2); [ 46.158367] lock(_xmit_ETHER#2); [ 46.161878] [ 46.161878] *** DEADLOCK *** [ 46.161878] [ 46.167907] May be due to missing lock nesting notation [ 46.167907] [ 46.174803] 12 locks held by syz-executor6/5707: [ 46.179527] #0: (sk_lock-AF_INET6){+.+.}, at: [<0000000058d4c216>] rawv6_sendmsg+0x1d86/0x40c0 [ 46.188434] #1: (rcu_read_lock){....}, at: [<00000000ea8864b3>] __ip6_local_out+0x2f1/0xaa0 [ 46.197075] #2: (rcu_read_lock_bh){....}, at: [<0000000046c2ff3f>] ip6_finish_output2+0x23d/0x23a0 [ 46.206328] #3: (rcu_read_lock_bh){....}, at: [<000000002b7ed872>] __dev_queue_xmit+0x2f6/0x2f30 [ 46.215404] #4: (_xmit_ETHER#2){+.-.}, at: [<0000000018729887>] sch_direct_xmit+0x361/0x1140 [ 46.224133] #5: (rcu_read_lock){....}, at: [<0000000034e5bcf3>] icmpv6_send+0x0/0x280 [ 46.232253] #6: (k-slock-AF_INET6){+...}, at: [<00000000a958a8c5>] icmp6_send+0x1250/0x2bb0 [ 46.240891] #7: (rcu_read_lock){....}, at: [<00000000eb21ad4f>] icmp6_send+0x1d37/0x2bb0 [ 46.249266] #8: (rcu_read_lock_bh){....}, at: [<0000000046c2ff3f>] ip6_finish_output2+0x23d/0x23a0 [ 46.258513] #9: (rcu_read_lock){....}, at: [<00000000dd29f12f>] ndisc_send_skb+0x826/0x1370 [ 46.267157] #10: (rcu_read_lock_bh){....}, at: [<0000000046c2ff3f>] ip6_finish_output2+0x23d/0x23a0 [ 46.276497] #11: (rcu_read_lock_bh){....}, at: [<000000002b7ed872>] __dev_queue_xmit+0x2f6/0x2f30 [ 46.285664] [ 46.285664] stack backtrace: [ 46.290139] CPU: 1 PID: 5707 Comm: syz-executor6 Not tainted 4.16.0-rc2+ #329 [ 46.297381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.306706] Call Trace: [ 46.309279] dump_stack+0x194/0x24d [ 46.312882] ? arch_local_irq_restore+0x53/0x53 [ 46.317533] __lock_acquire+0xe8f/0x3e00 [ 46.321573] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 46.326736] ? lockdep_on+0x50/0x50 [ 46.330336] ? trace_hardirqs_off+0x10/0x10 [ 46.334632] ? __save_stack_trace+0x7e/0xd0 [ 46.338929] ? print_lockdep_cache.isra.32+0x109/0x109 [ 46.344179] ? save_stack_trace+0x1a/0x20 [ 46.348302] ? __lock_acquire+0x36c0/0x3e00 [ 46.352596] ? check_noncircular+0x20/0x20 [ 46.356811] ? skb_network_protocol+0xef/0x4b0 [ 46.361368] ? netif_skb_features+0x5ff/0x9b0 [ 46.365834] ? __skb_gso_segment+0x810/0x810 [ 46.370216] lock_acquire+0x1d5/0x580 [ 46.373987] ? lock_acquire+0x1d5/0x580 [ 46.377934] ? sch_direct_xmit+0x361/0x1140 [ 46.382227] ? validate_xmit_skb+0x50d/0xaf0 [ 46.386609] ? lock_release+0xa40/0xa40 [ 46.390555] ? netif_skb_features+0x9b0/0x9b0 [ 46.395022] ? pfifo_fast_dequeue+0x39a/0xb00 [ 46.399490] ? trace_hardirqs_on+0xd/0x10 [ 46.403610] ? __local_bh_enable_ip+0x121/0x230 [ 46.408257] _raw_spin_lock+0x2a/0x40 [ 46.412034] ? sch_direct_xmit+0x361/0x1140 [ 46.416329] sch_direct_xmit+0x361/0x1140 [ 46.420450] ? pfifo_fast_peek+0x1c0/0x1c0 [ 46.424656] ? pfifo_fast_change_tx_queue_len+0xb80/0xb80 [ 46.430163] ? __lock_is_held+0xb6/0x140 [ 46.434200] __qdisc_run+0x57d/0x19c0 [ 46.438149] ? sch_direct_xmit+0x1140/0x1140 [ 46.442528] ? _raw_spin_unlock+0x22/0x30 [ 46.446646] ? pfifo_fast_enqueue+0x376/0x5e0 [ 46.451113] ? pfifo_fast_dequeue+0xb00/0xb00 [ 46.455585] __dev_queue_xmit+0xd5e/0x2f30 [ 46.459794] ? __lock_acquire+0x2bfd/0x3e00 [ 46.464086] ? __lock_acquire+0x2bfd/0x3e00 [ 46.468382] ? is_bpf_text_address+0x7b/0x120 [ 46.472854] ? netdev_pick_tx+0x2c0/0x2c0 [ 46.476976] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 46.482137] ? print_irqtrace_events+0x270/0x270 [ 46.486867] ? print_irqtrace_events+0x270/0x270 [ 46.491597] ? print_irqtrace_events+0x270/0x270 [ 46.496328] ? __lock_acquire+0x664/0x3e00 [ 46.500536] ? __lock_acquire+0x664/0x3e00 [ 46.504744] ? print_irqtrace_events+0x270/0x270 [ 46.509477] ? check_noncircular+0x20/0x20 [ 46.513689] ? ip_vs_out+0x24a/0x1b30 [ 46.517467] ? print_irqtrace_events+0x270/0x270 [ 46.522199] ? ip6_finish_output+0x69b/0xaf0 [ 46.526583] ? lock_downgrade+0x980/0x980 [ 46.530709] ? __local_bh_enable_ip+0x121/0x230 [ 46.535355] ? lock_release+0xa40/0xa40 [ 46.539302] ? mark_held_locks+0xaf/0x100 [ 46.543428] dev_queue_xmit+0x17/0x20 [ 46.547209] ? dev_queue_xmit+0x17/0x20 [ 46.551158] ip6_finish_output2+0x1492/0x23a0 [ 46.555632] ? ip6_sk_dst_lookup_flow+0x7f0/0x7f0 [ 46.560449] ? ip6_mtu+0x369/0x4d0 [ 46.563961] ? lock_downgrade+0x980/0x980 [ 46.568080] ? lock_release+0xa40/0xa40 [ 46.572033] ? ip6_mtu+0x1c7/0x4d0 [ 46.575545] ? ip6_dst_ifdown+0x3d0/0x3d0 [ 46.579665] ? nf_nat_ipv6_out+0x262/0x570 [ 46.583871] ip6_finish_output+0x69b/0xaf0 [ 46.588076] ? ip6_finish_output+0x69b/0xaf0 [ 46.592459] ip6_output+0x1eb/0x840 [ 46.596060] ? ip6_finish_output+0xaf0/0xaf0 [ 46.600438] ? lock_release+0xa40/0xa40 [ 46.604385] ? ip6_fragment+0x3470/0x3470 [ 46.608507] ndisc_send_skb+0xac4/0x1370 [ 46.612542] ? nf_hook.constprop.27+0x830/0x830 [ 46.617184] ? refcount_add_not_zero+0x133/0x200 [ 46.621909] ? refcount_dec_if_one+0x20/0x20 [ 46.626290] ? ip6_finish_output+0x69b/0xaf0 [ 46.630669] ? ip6_local_out+0x95/0x160 [ 46.634618] ? check_noncircular+0x20/0x20 [ 46.638827] ndisc_send_ns+0x38a/0x870 [ 46.642687] ? ndisc_netdev_event+0x4a0/0x4a0 [ 46.647153] ? find_held_lock+0x35/0x1d0 [ 46.651186] ndisc_solicit+0x383/0x5c0 [ 46.655042] ? ndisc_solicit+0x383/0x5c0 [ 46.659075] ? ndisc_send_ns+0x870/0x870 [ 46.663105] ? lock_release+0xa40/0xa40 [ 46.667403] ? do_raw_write_trylock+0x190/0x190 [ 46.673952] ? refcount_add+0x60/0x60 [ 46.677722] ? print_irqtrace_events+0x270/0x270 [ 46.682455] ? ndisc_send_ns+0x870/0x870 [ 46.686491] neigh_probe+0xc3/0x100 [ 46.690090] ? neigh_probe+0xc3/0x100 [ 46.693860] __neigh_event_send+0x927/0x1040 [ 46.698241] ? neightbl_dump_info+0x950/0x950 [ 46.702707] ? neigh_dump_info+0xc80/0xc80 [ 46.706916] ? __local_bh_enable_ip+0x121/0x230 [ 46.711559] ? lock_acquire+0x1d5/0x580 [ 46.715506] neigh_resolve_output+0x62b/0xa00 [ 46.719975] ? lock_release+0xa40/0xa40 [ 46.723922] ? __neigh_event_send+0x1040/0x1040 [ 46.728564] ? check_noncircular+0x20/0x20 [ 46.732774] ip6_finish_output2+0xb4a/0x23a0 [ 46.737168] ? ip6_sk_dst_lookup_flow+0x7f0/0x7f0 [ 46.741981] ? ip6_mtu+0x369/0x4d0 [ 46.745495] ? lock_downgrade+0x980/0x980 [ 46.749615] ? lock_release+0xa40/0xa40 [ 46.753565] ? ip6_mtu+0x1c7/0x4d0 [ 46.757081] ? ip6_dst_ifdown+0x3d0/0x3d0 [ 46.761200] ? nf_nat_ipv6_out+0x262/0x570 [ 46.765408] ip6_finish_output+0x69b/0xaf0 [ 46.769617] ? ip6_finish_output+0x69b/0xaf0 [ 46.773995] ip6_output+0x1eb/0x840 [ 46.777597] ? ip6_finish_output+0xaf0/0xaf0 [ 46.781997] ? ip6_setup_cork+0xeb8/0x1740 [ 46.786215] ? ip6_fragment+0x3470/0x3470 [ 46.790335] ? check_noncircular+0x20/0x20 [ 46.794543] ip6_local_out+0x95/0x160 [ 46.798316] ip6_send_skb+0xa1/0x330 [ 46.802001] ip6_push_pending_frames+0xb3/0xe0 [ 46.806561] icmpv6_push_pending_frames+0x338/0x520 [ 46.811551] icmp6_send+0x2244/0x2bb0 [ 46.815325] ? icmpv6_push_pending_frames+0x520/0x520 [ 46.820488] ? __local_bh_enable_ip+0x121/0x230 [ 46.825129] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 46.830115] ? __neigh_create+0x165e/0x1d90 [ 46.834408] ? trace_hardirqs_on+0xd/0x10 [ 46.838526] ? __local_bh_enable_ip+0x121/0x230 [ 46.843170] ? _raw_write_unlock_bh+0x30/0x40 [ 46.847637] ? __neigh_create+0xc0d/0x1d90 [ 46.851851] ? neightbl_dump_info+0x950/0x950 [ 46.856319] ? __lock_acquire+0x2bfd/0x3e00 [ 46.860617] ? check_noncircular+0x20/0x20 [ 46.864823] ? lock_acquire+0x1d5/0x580 [ 46.868768] ? inet6_unregister_icmp_sender+0x40/0x40 [ 46.873931] ? lock_release+0xa40/0xa40 [ 46.877879] ? icmpv6_push_pending_frames+0x520/0x520 [ 46.883042] icmpv6_send+0x142/0x280 [ 46.886730] ? icmpv6_send+0x142/0x280 [ 46.890592] ? inet6_unregister_icmp_sender+0x40/0x40 [ 46.895753] ? ip6_neigh_lookup+0x79b/0xba0 [ 46.900047] ? icmpv6_push_pending_frames+0x520/0x520 [ 46.905211] ip6_link_failure+0x94/0x570 [ 46.909244] ? ip6_del_rt+0x1a0/0x1a0 [ 46.913023] ? refcount_sub_and_test+0x115/0x1b0 [ 46.917761] ? refcount_inc+0x50/0x50 [ 46.921536] ? rcutorture_record_progress+0x10/0x10 [ 46.926525] ? ip6_del_rt+0x1a0/0x1a0 [ 46.930306] ip_tunnel_xmit+0x2ada/0x37d0 [ 46.934427] ? print_irqtrace_events+0x270/0x270 [ 46.939157] ? ip_md_tunnel_xmit+0x14d0/0x14d0 [ 46.943709] ? mark_held_locks+0xaf/0x100 [ 46.947828] ? retint_kernel+0x10/0x10 [ 46.951688] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 46.956679] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 46.961408] ? retint_kernel+0x10/0x10 [ 46.965270] __gre_xmit+0x546/0x8b0 [ 46.968871] erspan_xmit+0x779/0x22b0 [ 46.972644] ? print_lockdep_cache.isra.32+0x109/0x109 [ 46.977891] ? gretap_fb_dev_create+0x250/0x250 [ 46.982537] ? __lock_is_held+0xb6/0x140 [ 46.986572] dev_hard_start_xmit+0x24e/0xac0 [ 46.990953] ? validate_xmit_skb_list+0x120/0x120 [ 46.995769] ? __skb_gso_segment+0x810/0x810 [ 47.000149] ? lock_acquire+0x1d5/0x580 [ 47.004093] ? lock_acquire+0x1d5/0x580 [ 47.008037] ? sch_direct_xmit+0x361/0x1140 [ 47.012332] ? validate_xmit_skb+0x50d/0xaf0 [ 47.016712] ? lock_release+0xa40/0xa40 [ 47.020659] ? netif_skb_features+0x9b0/0x9b0 [ 47.025123] ? pfifo_fast_dequeue+0x39a/0xb00 [ 47.029588] ? trace_hardirqs_on+0xd/0x10 [ 47.033708] ? __local_bh_enable_ip+0x121/0x230 [ 47.038351] sch_direct_xmit+0x40d/0x1140 [ 47.042468] ? pfifo_fast_peek+0x1c0/0x1c0 [ 47.046675] ? pfifo_fast_change_tx_queue_len+0xb80/0xb80 [ 47.052190] ? __lock_is_held+0xb6/0x140 [ 47.056225] __qdisc_run+0x57d/0x19c0 [ 47.059998] ? lock_release+0xa40/0xa40 [ 47.063948] ? sch_direct_xmit+0x1140/0x1140 [ 47.068332] ? __dev_queue_xmit+0x2f6/0x2f30 [ 47.072713] ? _raw_spin_unlock+0x22/0x30 [ 47.076833] ? pfifo_fast_enqueue+0x376/0x5e0 [ 47.081300] ? pfifo_fast_dequeue+0xb00/0xb00 [ 47.085770] __dev_queue_xmit+0xd5e/0x2f30 [ 47.089975] ? __lock_acquire+0x664/0x3e00 [ 47.094184] ? netdev_pick_tx+0x2c0/0x2c0 [ 47.098306] ? find_held_lock+0x35/0x1d0 [ 47.102348] ? find_held_lock+0x35/0x1d0 [ 47.106400] ? __neigh_create+0x165e/0x1d90 [ 47.110696] ? lock_downgrade+0x980/0x980 [ 47.115607] ? mark_held_locks+0xaf/0x100 [ 47.119737] ? __local_bh_enable_ip+0x121/0x230 [ 47.124381] ? check_noncircular+0x20/0x20 [ 47.128589] ? __neigh_create+0x165e/0x1d90 [ 47.132879] ? trace_hardirqs_on+0xd/0x10 [ 47.137000] ? __local_bh_enable_ip+0x121/0x230 [ 47.141652] ? _raw_write_unlock_bh+0x30/0x40 [ 47.146120] ? __neigh_create+0xc0d/0x1d90 [ 47.150329] ? print_irqtrace_events+0x270/0x270 [ 47.155062] ? ip6_finish_output2+0xb4a/0x23a0 [ 47.159617] ? lock_downgrade+0x980/0x980 [ 47.163735] ? lock_release+0xa40/0xa40 [ 47.167682] ? mark_held_locks+0xaf/0x100 [ 47.171801] ? __local_bh_enable_ip+0x121/0x230 [ 47.176443] ? memcpy+0x45/0x50 [ 47.179698] dev_queue_xmit+0x17/0x20 [ 47.183474] ? dev_queue_xmit+0x17/0x20 [ 47.187421] neigh_resolve_output+0x5e2/0xa00 [ 47.191889] ? ether_setup+0x2d0/0x2d0 [ 47.195751] ? __neigh_event_send+0x1040/0x1040 [ 47.200394] ip6_finish_output2+0xb4a/0x23a0 [ 47.204779] ? ip6_sk_dst_lookup_flow+0x7f0/0x7f0 [ 47.209595] ? ip6_mtu+0x369/0x4d0 [ 47.213107] ? lock_downgrade+0x980/0x980 [ 47.217231] ? __lock_is_held+0xb6/0x140 [ 47.221269] ? ip6_mtu+0x1c7/0x4d0 [ 47.224781] ? ip6_dst_ifdown+0x3d0/0x3d0 [ 47.228902] ? nf_nat_ipv6_out+0x262/0x570 [ 47.233112] ip6_finish_output+0x69b/0xaf0 [ 47.237319] ? ip6_finish_output+0x69b/0xaf0 [ 47.241709] ? nf_hook_slow+0xd3/0x1a0 [ 47.245567] ip6_output+0x1eb/0x840 [ 47.249169] ? ip6_finish_output+0xaf0/0xaf0 [ 47.253550] ? fib6_rules_seq_read+0x20/0x20 [ 47.257932] ? ip6_fragment+0x3470/0x3470 [ 47.262054] ip6_local_out+0x95/0x160 [ 47.265825] nf_dup_ipv6+0x66d/0x8c0 [ 47.269514] ? nf_send_reset6+0xf10/0xf10 [ 47.273639] tee_tg6+0x10e/0x170 [ 47.276981] ip6t_do_table+0xc2a/0x1aa0 [ 47.280952] ? raw6_getfrag+0x140/0x210 [ 47.284899] ? __ip6_append_data.isra.44+0x19a2/0x3390 [ 47.290154] ? ip6t_error+0x60/0x60 [ 47.293756] ? check_noncircular+0x20/0x20 [ 47.297967] ? lock_acquire+0x1d5/0x580 [ 47.301915] ? lock_acquire+0x1d5/0x580 [ 47.305863] ? __ip6_local_out+0x2f1/0xaa0 [ 47.310073] ? lock_release+0xa40/0xa40 [ 47.314022] ip6table_raw_hook+0x65/0x80 [ 47.318066] nf_hook_slow+0xba/0x1a0 [ 47.321760] __ip6_local_out+0x517/0xaa0 [ 47.325797] ? dst_output+0x140/0x140 [ 47.329579] ? lock_acquire+0x1d5/0x580 [ 47.333529] ? rawv6_sendmsg+0x1d86/0x40c0 [ 47.337743] ? ipv6_select_ident+0x120/0x120 [ 47.342134] ip6_local_out+0x2d/0x160 [ 47.345914] ip6_send_skb+0xa1/0x330 [ 47.349603] ip6_push_pending_frames+0xb3/0xe0 [ 47.354159] rawv6_sendmsg+0x2f96/0x40c0 [ 47.358195] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 47.363360] ? rawv6_bind+0x8c0/0x8c0 [ 47.367138] ? avc_has_perm+0x35e/0x680 [ 47.371083] ? lock_downgrade+0x980/0x980 [ 47.375201] ? lock_release+0xa40/0xa40 [ 47.379147] ? find_held_lock+0x35/0x1d0 [ 47.383182] ? avc_has_perm+0x43e/0x680 [ 47.387128] ? avc_has_perm_noaudit+0x520/0x520 [ 47.391773] ? __might_sleep+0x95/0x190 [ 47.395724] ? kasan_check_write+0x14/0x20 [ 47.399932] ? _copy_from_user+0x99/0x110 [ 47.404054] ? rw_copy_check_uvector+0x1be/0x280 [ 47.408789] inet_sendmsg+0x11f/0x5e0 [ 47.412563] ? inet_sendmsg+0x11f/0x5e0 [ 47.416513] ? copy_msghdr_from_user+0x3a6/0x590 [ 47.421238] ? __lock_is_held+0xb6/0x140 [ 47.425270] ? inet_create+0xf50/0xf50 [ 47.429129] ? selinux_socket_sendmsg+0x36/0x40 [ 47.433774] ? security_socket_sendmsg+0x89/0xb0 [ 47.438502] ? inet_create+0xf50/0xf50 [ 47.442361] sock_sendmsg+0xca/0x110 [ 47.446046] ___sys_sendmsg+0x767/0x8b0 [ 47.449997] ? copy_msghdr_from_user+0x590/0x590 [ 47.454729] ? __schedule+0x90d/0x2070 [ 47.458590] ? __sched_text_start+0x8/0x8 [ 47.462715] ? kasan_check_write+0x14/0x20 [ 47.466925] ? __fget_light+0x2b2/0x3c0 [ 47.470872] ? fget_raw+0x20/0x20 [ 47.474298] ? translate_compat_table+0x1c50/0x1c50 [ 47.479293] ? mutex_unlock+0xd/0x10 [ 47.482982] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 47.488244] __sys_sendmsg+0xe5/0x210 [ 47.492453] ? __sys_sendmsg+0xe5/0x210 [ 47.496400] ? SyS_shutdown+0x290/0x290 [ 47.500355] ? exit_to_usermode_loop+0x8c/0x2f0 [ 47.505004] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 47.510519] ? __sys_sendmsg+0x210/0x210 [ 47.514552] SyS_sendmsg+0x2d/0x50 [ 47.518066] do_syscall_64+0x280/0x940 [ 47.521929] ? __do_page_fault+0xc90/0xc90 [ 47.526143] ? _raw_spin_unlock_irq+0x27/0x70 [ 47.530618] ? finish_task_switch+0x1c1/0x7e0 [ 47.535107] ? syscall_return_slowpath+0x550/0x550 [ 47.540022] ? syscall_return_slowpath+0x2ac/0x550 [ 47.544933] ? prepare_exit_to_usermode+0x350/0x350 [ 47.549932] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 47.555279] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 47.560102] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 47.565266] RIP: 0033:0x453de9 [ 47.568428] RSP: 002b:00007f8cb2a40c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.576108] RAX: ffffffffffffffda RBX: 00007f8cb2a416d4 RCX: 0000000000453de9 [ 47.583349] RDX: 0000000000000000 RSI: 000000002001f000 RDI: 0000000000000013 [ 47.590688] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 47.597930] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 47.605206] R13: 00000000000004a6 R14: 00000000006f7030 R15: 0000000000000000