audit: type=1400 audit(1519316660.577:18): avc: denied { relabelto } for pid=5486 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:udev_var_run_t:s0 tclass=packet permissive=1 xt_connbytes: Forcing CT accounting to be enabled ------------[ cut here ]------------ kernel BUG at kernel/time/timer.c:958! invalid opcode: 0000 [#1] SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 1 PID: 5504 Comm: syz-executor6 Not tainted 4.16.0-rc2+ #237 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__mod_timer kernel/time/timer.c:958 [inline] RIP: 0010:mod_timer+0x7d6/0x13c0 kernel/time/timer.c:1102 RSP: 0018:ffff8801bdf162b8 EFLAGS: 00010216 RAX: 0000000000010000 RBX: ffff8801ccaed490 RCX: ffffffff8160b426 RDX: 0000000000000556 RSI: ffffc900040d0000 RDI: ffff8801ccaed4a8 RBP: ffff8801bdf16558 R08: 0000000000000000 R09: 1ffff10037be2c84 R10: ffff8801bdf163e8 R11: 0000000000000002 R12: dffffc0000000000 R13: ffff8801bdf16530 R14: 00000000fffbfb49 R15: ffff8801bcba4d88 FS: 00007fa0aa6db700(0000) GS:ffff8801db500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000072c000 CR3: 00000001d81be005 CR4: 00000000001606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: led_tg+0x1db/0x2e0 net/netfilter/xt_LED.c:75 ip6t_do_table+0xc2a/0x1a30 net/ipv6/netfilter/ip6_tables.c:365 ip6table_filter_hook+0x65/0x80 net/ipv6/netfilter/ip6table_filter.c:41 nf_hook_entry_hookfn include/linux/netfilter.h:120 [inline] nf_hook_slow+0xba/0x1a0 net/netfilter/core.c:483 nf_hook include/linux/netfilter.h:243 [inline] NF_HOOK include/linux/netfilter.h:286 [inline] ip6_input+0x35c/0x560 net/ipv6/ip6_input.c:327 ip6_mc_input+0x3a8/0xb10 net/ipv6/ip6_input.c:404 dst_input include/net/dst.h:449 [inline] ip6_rcv_finish+0x297/0x8c0 net/ipv6/ip6_input.c:71 NF_HOOK include/linux/netfilter.h:288 [inline] ipv6_rcv+0xf37/0x1fa0 net/ipv6/ip6_input.c:208 __netif_receive_skb_core+0x1a41/0x3460 net/core/dev.c:4554 __netif_receive_skb+0x2c/0x1b0 net/core/dev.c:4619 netif_receive_skb_internal+0x10b/0x670 net/core/dev.c:4693 netif_receive_skb+0xae/0x390 net/core/dev.c:4717 tun_rx_batched.isra.52+0x5ee/0x870 drivers/net/tun.c:1556 tun_get_user+0x25a5/0x3810 drivers/net/tun.c:1957 tun_chr_write_iter+0xbd/0x1c0 drivers/net/tun.c:1985 call_write_iter include/linux/fs.h:1781 [inline] do_iter_readv_writev+0x55c/0x830 fs/read_write.c:653 do_iter_write+0x154/0x540 fs/read_write.c:932 vfs_writev+0x18a/0x340 fs/read_write.c:977 do_writev+0xfc/0x2a0 fs/read_write.c:1012 SYSC_writev fs/read_write.c:1085 [inline] SyS_writev+0x27/0x30 fs/read_write.c:1082 do_syscall_64+0x280/0x940 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x453c81 RSP: 002b:00007fa0aa6daba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 RAX: ffffffffffffffda RBX: 000000000000004e RCX: 0000000000453c81 RDX: 0000000000000001 RSI: 00007fa0aa6dabf0 RDI: 0000000000000012 RBP: 0000000020d49000 R08: 0000000000000012 R09: 0000000000000000 R10: 000000000000004e R11: 0000000000000293 R12: 00000000ffffffff R13: 0000000000000610 R14: 00000000006f9220 R15: 0000000000000001 Code: 85 2a 0b 00 00 4d 8b 3c 24 4d 85 ff 75 9f 4c 8b bd 60 fd ff ff e8 bb 57 10 00 65 ff 0d 34 39 a1 7e e9 d9 fc ff ff e8 aa 57 10 00 <0f> 0b e8 a3 57 10 00 e9 14 fb ff ff e8 99 57 10 00 4c 89 bd 70 RIP: __mod_timer kernel/time/timer.c:958 [inline] RSP: ffff8801bdf162b8 RIP: mod_timer+0x7d6/0x13c0 kernel/time/timer.c:1102 RSP: ffff8801bdf162b8 ---[ end trace 872fef3bb71db0bc ]---