SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket device gre0 entered promiscuous mode BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor2/9651 caller is __this_cpu_preempt_check+0x1c/0x20 lib/smp_processor_id.c:62 CPU: 0 PID: 9651 Comm: syz-executor2 Not tainted 4.4.113-g962d1f3 #2 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 0000000000000000 360aed4063e5bf9f ffff8800abf77800 ffffffff81d028ed 0000000000000000 ffffffff839fe3a0 ffffffff83cef6a0 ffff8801d6095f00 0000000000000003 ffff8800abf77840 ffffffff81d62834 ffffffff810002b8 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x124 lib/dump_stack.c:51 [] check_preemption_disabled+0x1d4/0x200 lib/smp_processor_id.c:46 [] ? 0xffffffff810002b8 [] __this_cpu_preempt_check+0x1c/0x20 lib/smp_processor_id.c:62 [] tcp_try_coalesce+0x249/0x4d0 net/ipv4/tcp_input.c:4278 [] tcp_queue_rcv+0x127/0x720 net/ipv4/tcp_input.c:4485 [] tcp_send_rcvq+0x39b/0x450 net/ipv4/tcp_input.c:4531 [] tcp_sendmsg+0x1e8f/0x2b10 net/ipv4/tcp.c:1134 [] inet_sendmsg+0x2bc/0x4c0 net/ipv4/af_inet.c:755 [] sock_sendmsg_nosec net/socket.c:625 [inline] [] sock_sendmsg+0xca/0x110 net/socket.c:635 [] SYSC_sendto+0x2c8/0x340 net/socket.c:1665 [] SyS_sendto+0x40/0x50 net/socket.c:1633 [] entry_SYSCALL_64_fastpath+0x1c/0x98 binder: BINDER_SET_CONTEXT_MGR already set binder: 9806:9828 ioctl 40046207 0 returned -16 binder_alloc: 9806: binder_alloc_buf, no vma binder: 9806:9829 transaction failed 29189/-3, size 0-0 line 3128 binder_alloc: 9806: binder_alloc_buf, no vma binder: 9806:9832 transaction failed 29189/-3, size 56-0 line 3128 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29189 binder: release 9806:9812 transaction 53 out, still active binder: undelivered TRANSACTION_COMPLETE binder: release 9806:9819 transaction 54 out, still active binder: undelivered TRANSACTION_COMPLETE binder: send failed reply for transaction 53, target dead binder: send failed reply for transaction 54, target dead binder: send failed reply for transaction 58 to 9975:9995 binder: BINDER_SET_CONTEXT_MGR already set binder_alloc: 9975: binder_alloc_buf, no vma binder: 9975:9981 transaction failed 29189/-3, size 0-0 line 3128 binder: 9975:10010 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_COMPLETE binder: undelivered TRANSACTION_ERROR: 29189 TCP: request_sock_TCP: Possible SYN flooding on port 20022. Sending cookies. Check SNMP counters. audit: type=1400 audit(1517384382.621:30): avc: denied { ioctl } for pid=10047 comm="syz-executor7" path="socket:[19742]" dev="sockfs" ino=19742 ioctlcmd=8903 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 FAULT_FLAG_ALLOW_RETRY missing 30 CPU: 0 PID: 10100 Comm: syz-executor2 Not tainted 4.4.113-g962d1f3 #2 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 0000000000000000 cb91d39ad2aae31f ffff8801d89d7830 ffffffff81d028ed ffff8800b405d500 1ffff1003b13af13 ffff8801d89d79b8 0000000000000000 0000000000000000 ffff8801d89d79e0 ffffffff81605ec5 ffffffff81236530 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x124 lib/dump_stack.c:51 [] handle_userfault+0x715/0xf50 fs/userfaultfd.c:316 [] do_anonymous_page mm/memory.c:2731 [inline] [] handle_pte_fault mm/memory.c:3295 [inline] [] __handle_mm_fault mm/memory.c:3426 [inline] [] handle_mm_fault+0x2938/0x3190 mm/memory.c:3455 [] __do_page_fault+0x35b/0xa00 arch/x86/mm/fault.c:1245 [] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1308 [] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1033 [] snd_seq_do_ioctl+0x171/0x1a0 sound/core/seq/seq_clientmgr.c:2212 [] snd_seq_ioctl+0x5d/0x80 sound/core/seq/seq_clientmgr.c:2227 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x7aa/0xee0 fs/ioctl.c:607 [] SYSC_ioctl fs/ioctl.c:622 [inline] [] SyS_ioctl+0x8f/0xc0 fs/ioctl.c:613 [] entry_SYSCALL_64_fastpath+0x1c/0x98 TCP: request_sock_TCPv6: Possible SYN flooding on port 20030. Sending cookies. Check SNMP counters. binder_alloc: 10194: binder_alloc_buf, no vma binder: 10194:10200 transaction failed 29189/-3, size 0-8 line 3128 binder_alloc: 10194: binder_alloc_buf, no vma binder: BINDER_SET_CONTEXT_MGR already set binder: 10194:10208 transaction failed 29189/-3, size 0-8 line 3128 binder: 10194:10200 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29189 binder: binder_mmap: 10331 20381000-20384000 bad vm_flags failed -1 audit: type=1401 audit(1517384383.811:31): op=fscreate invalid_context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binder: binder_mmap: 10331 20381000-20384000 bad vm_flags failed -1 TCP: request_sock_TCP: Possible SYN flooding on port 20014. Sending cookies. Check SNMP counters. audit: type=1400 audit(1517384385.021:32): avc: denied { dyntransition } for pid=10647 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0,c1 tclass=process permissive=1 audit: type=1400 audit(1517384385.091:33): avc: denied { dyntransition } for pid=10647 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0,c1 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0,c1 tclass=process permissive=1 kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 0 PID: 10686 Comm: syz-executor7 Not tainted 4.4.113-g962d1f3 #2 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8801d475c740 task.stack: ffff8801d6aa0000 RIP: 0010:[] [] __xfrm_policy_check2 include/net/xfrm.h:1070 [inline] RIP: 0010:[] [] xfrm_policy_check include/net/xfrm.h:1076 [inline] RIP: 0010:[] [] xfrm4_policy_check include/net/xfrm.h:1081 [inline] RIP: 0010:[] [] udp_queue_rcv_skb+0x191/0x1560 net/ipv4/udp.c:1517 RSP: 0018:ffff8801d6aa7928 EFLAGS: 00010206 RAX: dffffc0000000000 RBX: ffff8801d73e8000 RCX: ffffffff831a7758 RDX: 000000000000000c RSI: ffffc90000e78000 RDI: 0000000000000060 RBP: ffff8801d6aa7968 R08: 0000000000000001 R09: 0000000000000002 R10: 0000000000000000 R11: 1ffff1003ad54ef6 R12: ffff8801d83ee280 R13: 0000000000000001 R14: 0000000000000000 R15: ffff8801d83ee2d8 FS: 00007f8b16aa8700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020f7a000 CR3: 00000001d98c0000 CR4: 0000000000160670 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: ffff8801d73e8088 ffff880100000001 ffff8801d73e8088 dffffc0000000000 ffff8801d73e8000 0000000000000000 ffffed003ae7d086 ffff8801d83ee280 ffff8801d6aa79d8 ffffffff82df7456 ffff8801d73e8188 ffff8801d73e8190 Call Trace: [] sk_backlog_rcv include/net/sock.h:871 [inline] [] __release_sock net/core/sock.c:2023 [inline] [] release_sock+0x176/0x510 net/core/sock.c:2473 [] udp_sendmsg+0x15c4/0x1c30 net/ipv4/udp.c:1105 [] inet_sendmsg+0x2bc/0x4c0 net/ipv4/af_inet.c:755 [] sock_sendmsg_nosec net/socket.c:625 [inline] [] sock_sendmsg+0xca/0x110 net/socket.c:635 [] SYSC_sendto+0x2c8/0x340 net/socket.c:1665 [] SyS_sendto+0x40/0x50 net/socket.c:1633 [] entry_SYSCALL_64_fastpath+0x1c/0x98 Code: 74 24 58 41 f6 c6 01 0f 85 7f 07 00 00 e8 38 86 1b fe 49 83 e6 fe 48 b8 00 00 00 00 00 fc ff df 49 8d 7e 60 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 01 0f 8e 9f 0b 00 00 41 f6 46 60 04 RIP [] __xfrm_policy_check2 include/net/xfrm.h:1070 [inline] RIP [] xfrm_policy_check include/net/xfrm.h:1076 [inline] RIP [] xfrm4_policy_check include/net/xfrm.h:1081 [inline] RIP [] udp_queue_rcv_skb+0x191/0x1560 net/ipv4/udp.c:1517 RSP ---[ end trace 25c662bdb7ddcd2b ]---