TITLE: WARNING: suspicious RCU usage in corrupted
TYPE: LOCKDEP
CORRUPTED: Y

[  184.760966] =============================
[  184.762756] FAULT_INJECTION: forcing a failure.
[  184.762756] name failslab, interval 1, probability 0, space 0, times 0
[  184.765150] WARNING: suspicious RCU usage
[  184.765161] 4.17.0-rc1+ #16 Not tainted
[  184.765175] -----------------------------
[  184.776387] CPU: 0 PID: 14047 Comm: syz-executor7 Not tainted 4.17.0-rc1+ #16
[  184.780529] net/ipv6/route.c:1550 suspicious rcu_dereference_protected() usage!
[  184.784467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  184.784473] Call Trace:
[  184.784494]  dump_stack+0x1b9/0x294
[  184.784511]  ? dump_stack_print_info.cold.2+0x52/0x52
[  184.784529]  ? is_bpf_text_address+0xd7/0x170
[  184.788664] 
[  184.788664] other info that might help us debug this:
[  184.788664] 
[  184.795910]  ? kernel_text_address+0x79/0xf0
[  184.795926]  ? __unwind_start+0x166/0x330
[  184.795946]  should_fail.cold.4+0xa/0x1a
[  184.803384] 
[  184.803384] rcu_scheduler_active = 2, debug_locks = 1
[  184.812718]  ? __save_stack_trace+0x7e/0xd0
[  184.812742]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  184.815312] 3 locks held by syz-executor5/14037:
[  184.818909]  ? graph_lock+0x170/0x170
[  184.818926]  ? save_stack+0x43/0xd0
[  184.824097]  #0: 
[  184.828558]  ? kasan_kmalloc+0xc4/0xe0
[  184.828570]  ? kasan_slab_alloc+0x12/0x20
[  184.828593]  ? find_held_lock+0x36/0x1c0
[  184.836718] 00000000c7be3319
[  184.841097]  ? __lock_is_held+0xb5/0x140
[  184.841122]  ? check_same_owner+0x320/0x320
[  184.845244]  (
[  184.849279]  ? rcu_note_context_switch+0x710/0x710
[  184.849301]  __should_failslab+0x124/0x180
[  184.855950] rcu_read_lock_bh
[  184.860240]  should_failslab+0x9/0x14
[  184.860254]  kmem_cache_alloc_node_trace+0x26f/0x770
[  184.860279]  __kmalloc_node_track_caller+0x33/0x70
[  184.865359] ){....}
[  184.870089]  __kmalloc_reserve.isra.38+0x3a/0xe0
[  184.870107]  __alloc_skb+0x14d/0x780
[  184.873903] , at: ip6_finish_output2+0x253/0x2800
[  184.877493]  ? skb_scrub_packet+0x580/0x580
[  184.877515]  ? debug_check_no_locks_freed+0x310/0x310
[  184.879558]  #1: 
[  184.883421]  ? ip_route_output_key_hash_rcu+0x13aa/0x3440
[  184.883443]  __ip_append_data.isra.47+0x2096/0x2940
[  184.887570] 00000000c7be3319
[  184.891606]  ? xfrm_policy_lookup+0x70/0x70
[  184.891621]  ? raw_destroy+0x30/0x30
[  184.894622]  (
[  184.898666]  ? __ip_flush_pending_frames.isra.43+0x2d0/0x2d0
[  184.898684]  ? ipv4_mtu+0x375/0x580
[  184.902993] rcu_read_lock_bh
[  184.904768]  ? __build_flow_key.constprop.55+0x5f0/0x5f0
[  184.904791]  ? lock_acquire+0x1dc/0x520
[  184.909703] ){....}
[  184.913907]  ? ip_setup_cork+0x44d/0x6d0
[  184.913928]  ip_append_data.part.48+0xf3/0x180
[  184.916939] , at: __dev_queue_xmit+0x30f/0x34c0
[  184.920702]  ? raw_destroy+0x30/0x30
[  184.920724]  ip_append_data+0x6d/0x90
[  184.925985]  #2: 
[  184.930882]  ? raw_destroy+0x30/0x30
[  184.930904]  raw_sendmsg+0x1dae/0x29b0
[  184.933126] 000000009ee61c36
[  184.937862]  ? raw_send_hdrinc.isra.20+0x19b0/0x19b0
[  184.937879]  ? debug_check_no_locks_freed+0x310/0x310
[  184.941574]  (
[  184.946390]  ? find_held_lock+0x36/0x1c0
[  184.946416]  ? lock_release+0xa10/0xa10
[  184.950712] rcu_read_lock
[  184.955874]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  184.955893]  ? rw_copy_check_uvector+0x2d3/0x3a0
[  184.957938] ){....}
[  184.963452]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  184.963470]  ? import_iovec+0x24b/0x420
[  184.968471] , at: ip6_link_failure+0xfe/0x790
[  184.971477]  ? dup_iter+0x270/0x270
[  184.971498]  inet_sendmsg+0x19f/0x690
[  184.975803] 
[  184.975803] stack backtrace:
[  184.979491]  ? copy_msghdr_from_user+0x3bc/0x560
[  184.979504]  ? ipip_gro_receive+0x100/0x100
[  184.979520]  ? move_addr_to_kernel.part.18+0x100/0x100
[  185.113836]  ? security_socket_sendmsg+0x94/0xc0
[  185.118585]  ? ipip_gro_receive+0x100/0x100
[  185.122903]  sock_sendmsg+0xd5/0x120
[  185.126612]  ___sys_sendmsg+0x805/0x940
[  185.130584]  ? copy_msghdr_from_user+0x560/0x560
[  185.135337]  ? lock_downgrade+0x8e0/0x8e0
[  185.139485]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  185.145013]  ? proc_fail_nth_write+0x96/0x1f0
[  185.149504]  ? __fget_light+0x2ef/0x430
[  185.153473]  ? fget_raw+0x20/0x20
[  185.156915]  ? find_held_lock+0x36/0x1c0
[  185.160979]  ? kasan_check_write+0x14/0x20
[  185.165218]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  185.170750]  ? sockfd_lookup_light+0xc5/0x160
[  185.175235]  __sys_sendmsg+0x115/0x270
[  185.179114]  ? __ia32_sys_shutdown+0x80/0x80
[  185.183515]  ? __sb_end_write+0xac/0xe0
[  185.187482]  ? fput+0x130/0x1a0
[  185.190753]  ? ksys_write+0x1a6/0x250
[  185.194554]  __x64_sys_sendmsg+0x78/0xb0
[  185.198612]  do_syscall_64+0x1b1/0x800
[  185.202492]  ? finish_task_switch+0x1ca/0x810
[  185.206979]  ? syscall_return_slowpath+0x5c0/0x5c0
[  185.211903]  ? syscall_return_slowpath+0x30f/0x5c0
[  185.216828]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  185.222183]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  185.227107]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  185.232282] RIP: 0033:0x455389
[  185.235465] RSP: 002b:00007f3a5526dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  185.243165] RAX: ffffffffffffffda RBX: 00007f3a5526e6d4 RCX: 0000000000455389
[  185.250424] RDX: 0000000000000000 RSI: 00000000200008c0 RDI: 0000000000000013
[  185.257686] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  185.264947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014
[  185.272206] R13: 00000000000004d5 R14: 00000000006fa498 R15: 0000000000000002
[  185.279488] CPU: 1 PID: 14037 Comm: syz-executor5 Not tainted 4.17.0-rc1+ #16
[  185.286758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  185.296106] Call Trace:
[  185.298703]  dump_stack+0x1b9/0x294
[  185.302339]  ? dump_stack_print_info.cold.2+0x52/0x52
[  185.307537]  ? print_lock+0xd1/0xd6
[  185.311167]  ? vprintk_func+0x81/0xe7
[  185.314978]  lockdep_rcu_suspicious+0x14a/0x153
[  185.319656]  rt6_remove_exception_rt+0x416/0x4d0
[  185.324418]  ? __rt6_find_exception_spinlock+0x330/0x330
[  185.329873]  ? kasan_check_read+0x11/0x20
[  185.334031]  ? rcu_is_watching+0x85/0x140
[  185.338186]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  185.343379]  ? ip6_neigh_lookup+0x899/0xcb0
[  185.347710]  ip6_link_failure+0x484/0x790
[  185.351862]  ? rt6_do_update_pmtu+0x730/0x730
[  185.356362]  ? refcount_inc_not_zero+0x2d0/0x2d0
2018/04/24 05:50:50 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x6e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty=[0x0, 0x0, 0x6000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

2018/04/24 05:50:50 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f00000000c0)="0f000000220047019353ff07008a00000002006d200000ff1fc0e9ffff495180e507c7033500", 0x26)

2018/04/24 05:50:50 executing program 2:
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)="24b38b07d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764971ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed00002e", 0xce)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x4e20}, {0xa, 0x4e20, 0x0, @empty, 0x1}}, 0x5c)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)=ANY=[@ANYBLOB="0010000069d8fa2dd1a7ee5d555e0c317e4a4389bad06eb7e5aaf83f76f97cb93ed3f91a76f4895499ff3e32965ea7c386c4bc057c"], &(0x7f0000001180)=0x1)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x14)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4)

2018/04/24 05:50:50 executing program 7 (fault-call:2 fault-nth:3):
r0 = socket$inet(0x2, 0x80003, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='ip_vti0\x00', 0x10)
sendmsg(r0, &(0x7f00000008c0)={&(0x7f0000000080)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000140)}, 0x0)

[  185.361131]  ? rt6_do_update_pmtu+0x730/0x730
[  185.365632]  ip_tunnel_xmit+0x281b/0x3abc
[  185.369791]  ? ip_md_tunnel_xmit+0x1640/0x1640
[  185.374383]  ? __lock_acquire+0x7f5/0x5140
[  185.378636]  ? debug_check_no_locks_freed+0x310/0x310
[  185.383833]  ? rb_next+0x140/0x140
[  185.387385]  ? print_usage_bug+0xc0/0xc0
[  185.391458]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  185.397004]  __gre_xmit+0x5e1/0x980
[  185.400649]  gre_tap_xmit+0x2fd/0x570
[  185.404462]  ? __gre_xmit+0x980/0x980
[  185.408274]  dev_hard_start_xmit+0x264/0xc10
[  185.412691]  ? validate_xmit_skb_list+0x120/0x120
[  185.417538]  ? validate_xmit_xfrm+0x1ef/0xdc0
[  185.422048]  ? validate_xmit_skb+0x704/0xd90
[  185.426467]  ? netif_skb_features+0xb40/0xb40
[  185.430972]  ? trace_hardirqs_on_caller+0x19e/0x5c0
[  185.435990]  ? pfifo_fast_dequeue+0x505/0xbf0
[  185.440487]  ? trace_hardirqs_on+0xd/0x10
[  185.444641]  ? __local_bh_enable_ip+0x161/0x230
[  185.449320]  ? validate_xmit_skb_list+0xe2/0x120
[  185.454084]  sch_direct_xmit+0x4de/0x11e0
[  185.458027] FAULT_INJECTION: forcing a failure.
[  185.458027] name failslab, interval 1, probability 0, space 0, times 0
[  185.458234]  ? noqueue_init+0x40/0x40
[  185.458252]  ? dev_watchdog+0xaf0/0xaf0
[  185.458279]  ? __lock_is_held+0xb5/0x140
[  185.458304]  __qdisc_run+0x741/0x1af0
[  185.485651]  ? kasan_check_read+0x11/0x20
[  185.489799]  ? sch_direct_xmit+0x11e0/0x11e0
[  185.494202]  ? kasan_check_write+0x14/0x20
[  185.498431]  ? do_raw_spin_lock+0xc1/0x200
[  185.502664]  ? _raw_spin_unlock+0x22/0x30
[  185.506805]  ? pfifo_fast_enqueue+0x395/0x5a0
[  185.511299]  ? mini_qdisc_pair_init+0x160/0x160
[  185.515980]  __dev_queue_xmit+0x28ea/0x34c0
[  185.520303]  ? netdev_pick_tx+0x2d0/0x2d0
[  185.524447]  ? debug_check_no_locks_freed+0x310/0x310
[  185.529649]  ? lock_downgrade+0x8e0/0x8e0
[  185.533792]  ? lock_release+0xa10/0xa10
[  185.537761]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  185.543295]  ? graph_lock+0x170/0x170
[  185.547087]  ? trace_hardirqs_on_caller+0x19e/0x5c0
[  185.552094]  ? __neigh_create+0x1447/0x2050
[  185.556408]  ? trace_hardirqs_on+0xd/0x10
[  185.560548]  ? __local_bh_enable_ip+0x161/0x230
[  185.565209]  ? _raw_write_unlock_bh+0x30/0x40
[  185.569694]  ? __neigh_create+0xd2c/0x2050
[  185.573927]  ? find_held_lock+0x36/0x1c0
[  185.577991]  ? lock_downgrade+0x8e0/0x8e0
[  185.582142]  ? lock_release+0xa10/0xa10
[  185.586111]  ? __local_bh_enable_ip+0x161/0x230
[  185.590771]  ? memcpy+0x45/0x50
[  185.594051]  dev_queue_xmit+0x17/0x20
[  185.597848]  ? dev_queue_xmit+0x17/0x20
[  185.601816]  neigh_resolve_output+0x679/0xad0
[  185.606312]  ? __neigh_event_send+0x1240/0x1240
[  185.610984]  ip6_finish_output2+0xc93/0x2800
[  185.615392]  ? ip6_flush_pending_frames+0xc0/0xc0
[  185.620234]  ? lock_downgrade+0x8e0/0x8e0
[  185.624380]  ? kasan_check_read+0x11/0x20
[  185.628521]  ? rcu_is_watching+0x85/0x140
[  185.632664]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  185.637856]  ? ip6_mtu+0x159/0x510
[  185.641387]  ? ip6_dst_ifdown+0x4c0/0x4c0
[  185.645528]  ? kasan_check_read+0x11/0x20
[  185.649676]  ? rcu_is_watching+0x85/0x140
[  185.653823]  ip6_finish_output+0x5fe/0xbc0
[  185.658051]  ? ip6_finish_output+0x5fe/0xbc0
[  185.662457]  ip6_output+0x227/0x9b0
[  185.666081]  ? ip6_finish_output+0xbc0/0xbc0
[  185.670486]  ? kasan_check_read+0x11/0x20
[  185.674625]  ? rcu_is_watching+0x85/0x140
[  185.678777]  ? ip6_fragment+0x3910/0x3910
[  185.682919]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  185.687932]  ? nf_hook_slow+0x11e/0x1c0
[  185.691905]  rawv6_sendmsg+0x2674/0x4590
[  185.695975]  ? rawv6_getsockopt+0x140/0x140
[  185.700286]  ? graph_lock+0x170/0x170
[  185.704087]  ? debug_check_no_locks_freed+0x310/0x310
[  185.709359]  ? find_held_lock+0x36/0x1c0
[  185.713428]  ? lock_release+0xa10/0xa10
[  185.717398]  ? __check_object_size+0x95/0x5d9
[  185.721892]  ? rawv6_recvmsg+0xe80/0xe80
[  185.725963]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  185.731489]  ? _copy_from_user+0xdf/0x150
[  185.735632]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  185.740649]  ? rw_copy_check_uvector+0x2d3/0x3a0
[  185.745413]  inet_sendmsg+0x19f/0x690
[  185.749206]  ? rawv6_getsockopt+0x140/0x140
[  185.753518]  ? inet_sendmsg+0x19f/0x690
[  185.757486]  ? copy_msghdr_from_user+0x3bc/0x560
[  185.762232]  ? ipip_gro_receive+0x100/0x100
[  185.766557]  ? move_addr_to_kernel.part.18+0x100/0x100
[  185.771828]  ? security_socket_sendmsg+0x94/0xc0
[  185.776574]  ? ipip_gro_receive+0x100/0x100
[  185.780891]  sock_sendmsg+0xd5/0x120
[  185.784601]  ___sys_sendmsg+0x805/0x940
[  185.788573]  ? copy_msghdr_from_user+0x560/0x560
[  185.793324]  ? kasan_check_read+0x11/0x20
[  185.797468]  ? __local_bh_enable_ip+0x161/0x230
[  185.802132]  ? release_sock+0x1e2/0x2b0
[  185.806100]  ? trace_hardirqs_on+0xd/0x10
[  185.810240]  ? __local_bh_enable_ip+0x161/0x230
[  185.814907]  ? __fget_light+0x2ef/0x430
[  185.818874]  ? fget_raw+0x20/0x20
[  185.822324]  ? __local_bh_enable_ip+0x161/0x230
[  185.826994]  ? ip6_datagram_connect+0x3a/0x50
[  185.831487]  ? ip6_datagram_connect_v6_only+0x71/0x90
[  185.836677]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  185.842207]  ? sockfd_lookup_light+0xc5/0x160
[  185.846694]  __sys_sendmsg+0x115/0x270
[  185.850574]  ? __ia32_sys_shutdown+0x80/0x80
[  185.854980]  ? __x64_sys_futex+0x477/0x680
[  185.859221]  __x64_sys_sendmsg+0x78/0xb0
[  185.863277]  do_syscall_64+0x1b1/0x800
[  185.867165]  ? finish_task_switch+0x1ca/0x810
[  185.871654]  ? syscall_return_slowpath+0x5c0/0x5c0
[  185.876580]  ? syscall_return_slowpath+0x30f/0x5c0
[  185.881505]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  185.886864]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  185.891704]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  185.896880] RIP: 0033:0x455389
[  185.900059] RSP: 002b:00007f36aa7dec68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  185.907759] RAX: ffffffffffffffda RBX: 00007f36aa7df6d4 RCX: 0000000000455389
[  185.915019] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000013
[  185.922279] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  185.929537] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  185.936796] R13: 00000000000004f3 R14: 00000000006fa768 R15: 0000000000000000
[  185.944073] CPU: 0 PID: 14064 Comm: syz-executor7 Not tainted 4.17.0-rc1+ #16
[  185.951350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  185.960706] Call Trace:
[  185.963298]  dump_stack+0x1b9/0x294
[  185.966937]  ? dump_stack_print_info.cold.2+0x52/0x52
[  185.972228]  should_fail.cold.4+0xa/0x1a
[  185.976296]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  185.981409]  ? inet_getpeer+0x21f/0x1130
[  185.985485]  ? inet_getpeer+0x405/0x1130
[  185.989560]  ? inetpeer_invalidate_tree+0xb0/0xb0
[  185.994410]  ? rcu_is_watching+0x85/0x140
[  185.998570]  ? kasan_check_read+0x11/0x20
[  186.002722]  ? rcu_is_watching+0x85/0x140
[  186.006876]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  186.012073]  ? inet_addr_type_dev_table+0x3c3/0x570
[  186.017100]  ? ip_route_output_key_hash+0x293/0x390
[  186.022124]  __should_failslab+0x124/0x180
[  186.026365]  should_failslab+0x9/0x14
[  186.030170]  kmem_cache_alloc_trace+0x4b/0x780
[  186.034759]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  186.040304]  ? refcount_sub_and_test+0x212/0x330
[  186.045080]  ip_setup_cork+0x54b/0x6d0
[  186.048988]  ip_append_data.part.48+0x144/0x180
[  186.053659]  ? icmp_push_reply+0x500/0x500
[  186.057901]  ip_append_data+0x6d/0x90
[  186.061709]  ? icmp_push_reply+0x500/0x500
[  186.065953]  icmp_push_reply+0x169/0x500
[  186.070029]  icmp_send+0x1587/0x1c30
[  186.073763]  ? icmp_route_lookup.constprop.24+0x1870/0x1870
[  186.079477]  ? graph_lock+0x170/0x170
[  186.083286]  ? find_held_lock+0x36/0x1c0
[  186.087365]  ? kasan_check_read+0x11/0x20
[  186.091518]  ? rcu_is_watching+0x85/0x140
[  186.095676]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  186.100881]  ? security_xfrm_decode_session+0x8d/0xb0
[  186.106076]  ? ip_del_fnhe.isra.41+0x5d0/0x5d0
[  186.110664]  ipv4_link_failure+0x2c/0x220
2018/04/24 05:50:51 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f00000000c0)="28000000220047019353ff07008a00000002006d200000ff1fc0e9ffff495180e507c7033500", 0x26)

2018/04/24 05:50:51 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x6e20, 0x0, @loopback={0x0, 0x1}}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty=[0x0, 0x0, 0x4000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  186.114812]  ? ip_del_fnhe.isra.41+0x5d0/0x5d0
[  186.119395]  vti_tunnel_xmit+0xaa0/0x15a0
[  186.123556]  ? vti_rcv+0x140/0x140
[  186.127122]  dev_hard_start_xmit+0x264/0xc10
[  186.131564]  ? validate_xmit_skb_list+0x120/0x120
[  186.136411]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  186.141952]  ? netif_skb_features+0x696/0xb40
[  186.146461]  ? validate_xmit_xfrm+0x1ef/0xdc0
[  186.150963]  ? lock_acquire+0x1dc/0x520
[  186.154947]  ? validate_xmit_skb+0x704/0xd90
[  186.159365]  ? netif_skb_features+0xb40/0xb40
[  186.163870]  __dev_queue_xmit+0x2724/0x34c0
[  186.168199]  ? kasan_check_read+0x11/0x20
[  186.172351]  ? rcu_is_watching+0x85/0x140
[  186.176509]  ? netdev_pick_tx+0x2d0/0x2d0
[  186.180662]  ? is_bpf_text_address+0xd7/0x170
[  186.185169]  ? debug_check_no_locks_freed+0x310/0x310
[  186.190363]  ? __save_stack_trace+0x7e/0xd0
[  186.194712]  ? save_stack+0xa9/0xd0
[  186.198334]  ? save_stack+0x43/0xd0
[  186.201943]  ? kasan_kmalloc+0xc4/0xe0
[  186.205813]  ? __kmalloc_node_track_caller+0x47/0x70
[  186.210903]  ? __kmalloc_reserve.isra.38+0x3a/0xe0
[  186.215825]  ? __alloc_skb+0x14d/0x780
[  186.219694]  ? __ip_append_data.isra.47+0x2096/0x2940
[  186.224869]  ? ip_append_data.part.48+0xf3/0x180
[  186.229608]  ? print_usage_bug+0xc0/0xc0
[  186.233656]  ? print_usage_bug+0xc0/0xc0
[  186.237707]  ? __sys_sendmsg+0x115/0x270
[  186.241750]  ? __x64_sys_sendmsg+0x78/0xb0
[  186.245965]  ? do_syscall_64+0x1b1/0x800
[  186.250011]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  186.255370]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  186.260888]  ? ip_vs_fill_iph_skb_off+0x3be/0x9a0
[  186.265713]  ? ip_vs_sched_persist+0x19c0/0x19c0
[  186.270454]  ? __lock_acquire+0x7f5/0x5140
[  186.274678]  ? ip_vs_sched_persist+0x19c0/0x19c0
[  186.279410]  ? __lock_acquire+0x7f5/0x5140
[  186.283642]  ? print_usage_bug+0xc0/0xc0
[  186.287686]  ? print_usage_bug+0xc0/0xc0
[  186.291737]  ? lock_acquire+0x1dc/0x520
[  186.295692]  ? ip_finish_output2+0x30b/0x1840
[  186.300172]  ? kasan_check_read+0x11/0x20
[  186.304309]  ? rcu_is_watching+0x85/0x140
[  186.308448]  ? rcu_pm_notify+0xc0/0xc0
[  186.312320]  dev_queue_xmit+0x17/0x20
[  186.316107]  ? dev_queue_xmit+0x17/0x20
[  186.320072]  neigh_direct_output+0x15/0x20
[  186.324287]  ip_finish_output2+0xa5f/0x1840
[  186.328592]  ? ipt_do_table+0xf85/0x1b20
[  186.332638]  ? ip_copy_metadata+0xa90/0xa90
[  186.336943]  ? graph_lock+0x170/0x170
[  186.340724]  ? graph_lock+0x170/0x170
[  186.344513]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  186.350039]  ? ipv4_mtu+0x375/0x580
[  186.353663]  ? __build_flow_key.constprop.55+0x5f0/0x5f0
[  186.359096]  ? find_held_lock+0x36/0x1c0
[  186.363141]  ip_finish_output+0x828/0xf80
[  186.367278]  ? ip_finish_output+0x828/0xf80
[  186.371592]  ? ip_fragment.constprop.49+0x240/0x240
[  186.376590]  ? kasan_check_read+0x11/0x20
[  186.380715]  ? rcu_is_watching+0x85/0x140
[  186.384847]  ? rcu_bh_force_quiescent_state+0x20/0x20
[  186.390032]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  186.395040]  ? nf_hook_slow+0x11e/0x1c0
[  186.399012]  ip_output+0x21b/0x850
[  186.402543]  ? __ip_local_out+0x5cf/0xb20
[  186.406688]  ? ip_mc_output+0x15a0/0x15a0
[  186.410826]  ? __ip_make_skb+0x1133/0x1ac0
[  186.415045]  ? ip_fragment.constprop.49+0x240/0x240
[  186.420054]  ip_local_out+0xc5/0x1b0
[  186.423749]  ip_send_skb+0x40/0xe0
[  186.427274]  ip_push_pending_frames+0x64/0x80
[  186.431761]  raw_sendmsg+0x22fd/0x29b0
[  186.435639]  ? raw_send_hdrinc.isra.20+0x19b0/0x19b0
[  186.440723]  ? debug_check_no_locks_freed+0x310/0x310
[  186.446225]  ? find_held_lock+0x36/0x1c0
[  186.450284]  ? lock_release+0xa10/0xa10
[  186.454351]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  186.459872]  ? rw_copy_check_uvector+0x2d3/0x3a0
[  186.464612]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  186.470130]  ? import_iovec+0x24b/0x420
[  186.474087]  ? dup_iter+0x270/0x270
[  186.477702]  inet_sendmsg+0x19f/0x690
[  186.481481]  ? copy_msghdr_from_user+0x3bc/0x560
[  186.486215]  ? ipip_gro_receive+0x100/0x100
[  186.490515]  ? move_addr_to_kernel.part.18+0x100/0x100
[  186.495772]  ? security_socket_sendmsg+0x94/0xc0
[  186.500510]  ? ipip_gro_receive+0x100/0x100
[  186.504812]  sock_sendmsg+0xd5/0x120
[  186.508508]  ___sys_sendmsg+0x805/0x940
[  186.512468]  ? copy_msghdr_from_user+0x560/0x560
[  186.517209]  ? lock_downgrade+0x8e0/0x8e0
[  186.521349]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  186.526867]  ? proc_fail_nth_write+0x96/0x1f0
[  186.531345]  ? __fget_light+0x2ef/0x430
[  186.535309]  ? fget_raw+0x20/0x20
[  186.538742]  ? find_held_lock+0x36/0x1c0
[  186.542787]  ? kasan_check_write+0x14/0x20
[  186.547029]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  186.552561]  ? sockfd_lookup_light+0xc5/0x160
[  186.557044]  __sys_sendmsg+0x115/0x270
[  186.560925]  ? __ia32_sys_shutdown+0x80/0x80
[  186.565326]  ? __sb_end_write+0xac/0xe0
[  186.569283]  ? fput+0x130/0x1a0
[  186.572543]  ? ksys_write+0x1a6/0x250
[  186.576334]  __x64_sys_sendmsg+0x78/0xb0
[  186.580385]  do_syscall_64+0x1b1/0x800
[  186.584256]  ? finish_task_switch+0x1ca/0x810
[  186.588734]  ? syscall_return_slowpath+0x5c0/0x5c0
[  186.593642]  ? syscall_return_slowpath+0x30f/0x5c0
[  186.598556]  ? entry_SYSCALL_64_after_hwframe+0x59/0xbe
[  186.603902]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  186.608727]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  186.613896] RIP: 0033:0x455389
[  186.617066] RSP: 002b:00007f3a5526dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  186.624753] RAX: ffffffffffffffda RBX: 00007f3a5526e6d4 RCX: 0000000000455389
[  186.632000] RDX: 0000000000000000 RSI: 00000000200008c0 RDI: 0000000000000013
[  186.639256] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  186.646506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014
[  186.653758] R13: 00000000000004d5 R14: 00000000006fa498 R15: 0000000000000003
