DRBG: could not allocate CTR cipher TFM handle: ctr(aes) ipt_CLUSTERIP: Please specify destination IP ============================= WARNING: suspicious RCU usage 4.15.0+ #222 Not tainted FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 ----------------------------- ./include/linux/rcupdate.h:302 Illegal context switch in RCU read-side critical section! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 1 lock held by syz-executor7/10704: #0: (rcu_read_lock){....}, at: [<00000000db78fcdc>] __rds_conn_create+0xe46/0x1b50 net/rds/connection.c:218 stack backtrace: CPU: 1 PID: 10708 Comm: syz-executor2 Not tainted 4.15.0+ #222 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 fail_dump lib/fault-inject.c:51 [inline] should_fail+0x8c0/0xa40 lib/fault-inject.c:149 should_failslab+0xec/0x120 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:422 [inline] slab_alloc mm/slab.c:3365 [inline] __do_kmalloc mm/slab.c:3703 [inline] __kmalloc+0x63/0x760 mm/slab.c:3714 kmalloc include/linux/slab.h:517 [inline] kzalloc include/linux/slab.h:701 [inline] crypto_create_tfm+0x82/0x2e0 crypto/api.c:455 crypto_alloc_tfm+0x114/0x2b0 crypto/api.c:540 crypto_alloc_skcipher+0x2c/0x40 crypto/skcipher.c:949 cryptd_alloc_skcipher+0x124/0x250 crypto/cryptd.c:1226 simd_skcipher_init+0x66/0x150 crypto/simd.c:119 crypto_skcipher_init_tfm+0x29a/0x8c0 crypto/skcipher.c:863 crypto_create_tfm+0xdf/0x2e0 crypto/api.c:462 crypto_alloc_tfm+0x114/0x2b0 crypto/api.c:540 crypto_alloc_skcipher+0x2c/0x40 crypto/skcipher.c:949 drbg_init_sym_kernel+0x225/0x777 crypto/drbg.c:1676 drbg_alloc_state crypto/drbg.c:1177 [inline] drbg_instantiate crypto/drbg.c:1481 [inline] drbg_kcapi_seed+0x4ea/0x1270 crypto/drbg.c:1880 crypto_rng_reset+0x7c/0x110 crypto/rng.c:52 rng_setkey+0x25/0x30 crypto/algif_rng.c:167 alg_setkey crypto/af_alg.c:223 [inline] alg_setsockopt+0x2a1/0x350 crypto/af_alg.c:256 SYSC_setsockopt net/socket.c:1849 [inline] SyS_setsockopt+0x189/0x360 net/socket.c:1828 do_syscall_64+0x282/0x940 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x26/0x9b RIP: 0033:0x453a59 RSP: 002b:00007ff3775c5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007ff3775c66d4 RCX: 0000000000453a59 RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 RBP: 000000000071bea0 R08: 0000000000000017 R09: 0000000000000000 R10: 0000000020e03000 R11: 0000000000000246 R12: 0000000000000014 R13: 00000000000004d2 R14: 00000000006f7450 R15: 0000000000000003 CPU: 0 PID: 10704 Comm: syz-executor7 Not tainted 4.15.0+ #222 DRBG: could not allocate CTR cipher TFM handle: ctr(aes) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 lockdep_rcu_suspicious+0x123/0x170 kernel/locking/lockdep.c:4592 ipt_CLUSTERIP: Please specify destination IP rcu_preempt_sleep_check include/linux/rcupdate.h:301 [inline] ___might_sleep+0x385/0x470 kernel/sched/core.c:6093 __might_sleep+0x95/0x190 kernel/sched/core.c:6081 slab_pre_alloc_hook mm/slab.h:420 [inline] slab_alloc mm/slab.c:3365 [inline] kmem_cache_alloc_trace+0x299/0x740 mm/slab.c:3605 kmalloc include/linux/slab.h:512 [inline] kzalloc include/linux/slab.h:701 [inline] rds_loop_conn_alloc+0xc8/0x380 net/rds/loop.c:126 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 __rds_conn_create+0x112f/0x1b50 net/rds/connection.c:227 rds_conn_create_outgoing+0x3f/0x50 net/rds/connection.c:309 rds_sendmsg+0xda3/0x2390 net/rds/send.c:1126 sock_sendmsg_nosec net/socket.c:630 [inline] sock_sendmsg+0xca/0x110 net/socket.c:640 ___sys_sendmsg+0x320/0x8b0 net/socket.c:2046 __sys_sendmmsg+0x1ee/0x620 net/socket.c:2136 SYSC_sendmmsg net/socket.c:2167 [inline] SyS_sendmmsg+0x35/0x60 net/socket.c:2162 do_syscall_64+0x282/0x940 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x26/0x9b RIP: 0033:0x453a59 RSP: 002b:00007f820036ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 00007f820036b6d4 RCX: 0000000000453a59 RDX: 0000000000000001 RSI: 0000000020573000 RDI: 0000000000000014 RBP: 000000000071bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000004a1 R14: 00000000006f6fb8 R15: 0000000000000000 CPU: 1 PID: 10720 Comm: syz-executor2 Not tainted 4.15.0+ #222 BUG: sleeping function called from invalid context at mm/slab.h:420 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 in_atomic(): 1, irqs_disabled(): 0, pid: 10704, name: syz-executor7 fail_dump lib/fault-inject.c:51 [inline] should_fail+0x8c0/0xa40 lib/fault-inject.c:149 1 lock held by syz-executor7/10704: #0: ( rcu_read_lock should_failslab+0xec/0x120 mm/failslab.c:32 ){....} slab_pre_alloc_hook mm/slab.h:422 [inline] slab_alloc mm/slab.c:3365 [inline] __do_kmalloc mm/slab.c:3703 [inline] __kmalloc+0x63/0x760 mm/slab.c:3714 , at: [<00000000db78fcdc>] __rds_conn_create+0xe46/0x1b50 net/rds/connection.c:218 kmalloc include/linux/slab.h:517 [inline] kzalloc include/linux/slab.h:701 [inline] crypto_create_tfm+0x82/0x2e0 crypto/api.c:455 crypto_spawn_tfm2+0x4f/0x90 crypto/algapi.c:715 crypto_spawn_skcipher include/crypto/internal/skcipher.h:127 [inline] cryptd_skcipher_init_tfm+0x3e/0xe0 crypto/cryptd.c:567 crypto_skcipher_init_tfm+0x29a/0x8c0 crypto/skcipher.c:863 crypto_create_tfm+0xdf/0x2e0 crypto/api.c:462 crypto_alloc_tfm+0x114/0x2b0 crypto/api.c:540 crypto_alloc_skcipher+0x2c/0x40 crypto/skcipher.c:949 cryptd_alloc_skcipher+0x124/0x250 crypto/cryptd.c:1226 simd_skcipher_init+0x66/0x150 crypto/simd.c:119 crypto_skcipher_init_tfm+0x29a/0x8c0 crypto/skcipher.c:863 crypto_create_tfm+0xdf/0x2e0 crypto/api.c:462 crypto_alloc_tfm+0x114/0x2b0 crypto/api.c:540 crypto_alloc_skcipher+0x2c/0x40 crypto/skcipher.c:949 drbg_init_sym_kernel+0x225/0x777 crypto/drbg.c:1676 drbg_alloc_state crypto/drbg.c:1177 [inline] drbg_instantiate crypto/drbg.c:1481 [inline] drbg_kcapi_seed+0x4ea/0x1270 crypto/drbg.c:1880 crypto_rng_reset+0x7c/0x110 crypto/rng.c:52 rng_setkey+0x25/0x30 crypto/algif_rng.c:167 alg_setkey crypto/af_alg.c:223 [inline] alg_setsockopt+0x2a1/0x350 crypto/af_alg.c:256 SYSC_setsockopt net/socket.c:1849 [inline] SyS_setsockopt+0x189/0x360 net/socket.c:1828 do_syscall_64+0x282/0x940 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x26/0x9b RIP: 0033:0x453a59 RSP: 002b:00007ff3775c5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007ff3775c66d4 RCX: 0000000000453a59 RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000013 RBP: 000000000071bea0 R08: 0000000000000017 R09: 0000000000000000 R10: 0000000020e03000 R11: 0000000000000246 R12: 0000000000000014 R13: 00000000000004d2 R14: 00000000006f7450 R15: 0000000000000004 CPU: 0 PID: 10704 Comm: syz-executor7 Not tainted 4.15.0+ #222 DRBG: could not allocate CTR cipher TFM handle: ctr(aes) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 ___might_sleep+0x2b2/0x470 kernel/sched/core.c:6128 __might_sleep+0x95/0x190 kernel/sched/core.c:6081 slab_pre_alloc_hook mm/slab.h:420 [inline] slab_alloc mm/slab.c:3365 [inline] kmem_cache_alloc_trace+0x299/0x740 mm/slab.c:3605 kmalloc include/linux/slab.h:512 [inline] kzalloc include/linux/slab.h:701 [inline] rds_loop_conn_alloc+0xc8/0x380 net/rds/loop.c:126 __rds_conn_create+0x112f/0x1b50 net/rds/connection.c:227 rds_conn_create_outgoing+0x3f/0x50 net/rds/connection.c:309 rds_sendmsg+0xda3/0x2390 net/rds/send.c:1126 sock_sendmsg_nosec net/socket.c:630 [inline] sock_sendmsg+0xca/0x110 net/socket.c:640 ___sys_sendmsg+0x320/0x8b0 net/socket.c:2046 __sys_sendmmsg+0x1ee/0x620 net/socket.c:2136 SYSC_sendmmsg net/socket.c:2167 [inline] SyS_sendmmsg+0x35/0x60 net/socket.c:2162 do_syscall_64+0x282/0x940 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x26/0x9b RIP: 0033:0x453a59 RSP: 002b:00007f820036ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 00007f820036b6d4 RCX: 0000000000453a59 RDX: 0000000000000001 RSI: 0000000020573000 RDI: 0000000000000014 RBP: 000000000071bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000004a1 R14: 00000000006f6fb8 R15: 0000000000000000 ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid interval x_tables: ip_tables: LED.0 target: invalid size 40 (kernel) != (user) 4 ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid interval audit: type=1400 audit(1518293145.223:40): avc: denied { connect } for pid=11078 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 ipt_CLUSTERIP: Please specify destination IP x_tables: ip_tables: LED.0 target: invalid size 40 (kernel) != (user) 4 ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP netlink: 7 bytes leftover after parsing attributes in process `syz-executor4'. ipt_CLUSTERIP: Please specify destination IP PF_BRIDGE: br_mdb_parse() with non-bridge ipt_CLUSTERIP: Please specify destination IP netlink: 7 bytes leftover after parsing attributes in process `syz-executor4'. PF_BRIDGE: br_mdb_parse() with non-bridge ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP netlink: 7 bytes leftover after parsing attributes in process `syz-executor0'. PF_BRIDGE: br_mdb_parse() with non-bridge xt_hashlimit: hashlimit invalid interval ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid interval ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid interval Cannot find set identified by id 5 to match ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP Cannot find set identified by id 5 to match ipt_CLUSTERIP: Please specify destination IP audit: type=1400 audit(1518293147.185:41): avc: denied { bind } for pid=11627 comm="syz-executor7" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid interval ipt_CLUSTERIP: Please specify destination IP audit: type=1400 audit(1518293147.314:42): avc: denied { map } for pid=11662 comm="syz-executor6" path="socket:[28383]" dev="sockfs" ino=28383 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=socket permissive=1 ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid interval x_tables: ip_tables: LED.0 target: invalid size 40 (kernel) != (user) 4 ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP x_tables: ip_tables: LED.0 target: invalid size 40 (kernel) != (user) 4 ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid interval xt_hashlimit: hashlimit invalid interval ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 11764 Comm: syz-executor3 Tainted: G W 4.15.0+ #222 x_tables: ip_tables: LED.0 target: invalid size 40 (kernel) != (user) 4 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 fail_dump lib/fault-inject.c:51 [inline] should_fail+0x8c0/0xa40 lib/fault-inject.c:149 ipt_CLUSTERIP: Please specify destination IP should_failslab+0xec/0x120 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:422 [inline] slab_alloc_node mm/slab.c:3286 [inline] kmem_cache_alloc_node_trace+0x5a/0x760 mm/slab.c:3648 __do_kmalloc_node mm/slab.c:3668 [inline] __kmalloc_node+0x33/0x70 mm/slab.c:3676 kmalloc_node include/linux/slab.h:554 [inline] kvmalloc_node+0x99/0xd0 mm/util.c:419 kvmalloc include/linux/mm.h:541 [inline] xt_alloc_table_info+0x63/0xe0 net/netfilter/x_tables.c:1016 do_replace net/ipv4/netfilter/ip_tables.c:1130 [inline] do_ipt_set_ctl+0x29b/0x5f0 net/ipv4/netfilter/ip_tables.c:1675 nf_sockopt net/netfilter/nf_sockopt.c:106 [inline] nf_setsockopt+0x67/0xc0 net/netfilter/nf_sockopt.c:115 ip_setsockopt+0x97/0xa0 net/ipv4/ip_sockglue.c:1259 ipt_CLUSTERIP: Please specify destination IP raw_setsockopt+0xb7/0xd0 net/ipv4/raw.c:870 sock_common_setsockopt+0x95/0xd0 net/core/sock.c:2975 SYSC_setsockopt net/socket.c:1849 [inline] SyS_setsockopt+0x189/0x360 net/socket.c:1828 do_syscall_64+0x282/0x940 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x26/0x9b RIP: 0033:0x453a59 RSP: 002b:00007fdd96ae0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007fdd96ae16d4 RCX: 0000000000453a59 RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000013 RBP: 000000000071bea0 R08: 0000000000000398 R09: 0000000000000000 ipt_CLUSTERIP: unknown mode 256 R10: 0000000020003c68 R11: 0000000000000246 R12: 0000000000000014 R13: 00000000000004d5 R14: 00000000006f7498 R15: 0000000000000000 x_tables: ip_tables: LED.0 target: invalid size 40 (kernel) != (user) 4 xt_hashlimit: hashlimit invalid interval x_tables: ip_tables: LED.0 target: invalid size 40 (kernel) != (user) 4 ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP x_tables: ip_tables: LED.0 target: invalid size 40 (kernel) != (user) 4 ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP x_tables: ip_tables: LED.0 target: invalid size 40 (kernel) != (user) 4 ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP x_tables: ip_tables: LED.0 target: invalid size 40 (kernel) != (user) 4 ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP x_tables: ip_tables: LED.0 target: invalid size 40 (kernel) != (user) 4 ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP x_tables: ip_tables: LED.0 target: invalid size 40 (kernel) != (user) 4 ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP x_tables: ip_tables: LED.0 target: invalid size 40 (kernel) != (user) 18 ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP x_tables: ip_tables: LED.0 target: invalid size 40 (kernel) != (user) 18 cannot load conntrack support for proto=3 ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP sctp: [Deprecated]: syz-executor5 (pid 12291) Use of int in maxseg socket option. Use struct sctp_assoc_value instead can: request_module (can-proto-3) failed. sctp: [Deprecated]: syz-executor5 (pid 12311) Use of int in maxseg socket option. Use struct sctp_assoc_value instead ipt_CLUSTERIP: Please specify destination IP can: request_module (can-proto-3) failed. ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid rate ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid rate ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid rate ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid interval ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: overflow, try lower: 257/0 ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: overflow, try lower: 257/0 ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: overflow, try lower: 257/0 ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid interval ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid interval x_tables: ip_tables: LED.0 target: invalid size 40 (kernel) != (user) 4 ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP x_tables: ip_tables: LED.0 target: invalid size 40 (kernel) != (user) 4 ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP x_tables: ip_tables: LED.0 target: invalid size 40 (kernel) != (user) 4 ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid interval ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid interval ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid interval ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP audit: type=1400 audit(1518293150.786:43): avc: denied { create } for pid=12645 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_scsitransport_socket permissive=1 ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid interval ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: overflow, try lower: 257/0 ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid interval ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid interval ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid rate ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid interval ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid rate ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid rate xt_hashlimit: hashlimit invalid interval ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid interval xt_hashlimit: hashlimit invalid rate ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid interval xt_hashlimit: hashlimit invalid interval ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid interval ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP ipt_CLUSTERIP: Please specify destination IP xt_hashlimit: hashlimit invalid interval xt_hashlimit: hashlimit invalid interval xt_hashlimit: hashlimit invalid interval FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 ipt_CLUSTERIP: Please specify destination IP CPU: 1 PID: 12960 Comm: syz-executor1 Tainted: G W 4.15.0+ #222 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 x_tables: ip_tables: icmp match: only valid for protocol 1 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 fail_dump lib/fault-inject.c:51 [inline] should_fail+0x8c0/0xa40 lib/fault-inject.c:149 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 should_failslab+0xec/0x120 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:422 [inline] slab_alloc_node mm/slab.c:3286 [inline] kmem_cache_alloc_node_trace+0x5a/0x760 mm/slab.c:3648 __do_kmalloc_node mm/slab.c:3668 [inline] __kmalloc_node+0x33/0x70 mm/slab.c:3676 kmalloc_node include/linux/slab.h:554 [inline] kvmalloc_node+0x99/0xd0 mm/util.c:419 kvmalloc include/linux/mm.h:541 [inline] xt_alloc_table_info+0x63/0xe0 net/netfilter/x_tables.c:1016 do_replace net/ipv4/netfilter/ip_tables.c:1130 [inline] do_ipt_set_ctl+0x29b/0x5f0 net/ipv4/netfilter/ip_tables.c:1675 nf_sockopt net/netfilter/nf_sockopt.c:106 [inline] nf_setsockopt+0x67/0xc0 net/netfilter/nf_sockopt.c:115 ip_setsockopt+0x97/0xa0 net/ipv4/ip_sockglue.c:1259 raw_setsockopt+0xb7/0xd0 net/ipv4/raw.c:870 sock_common_setsockopt+0x95/0xd0 net/core/sock.c:2975 SYSC_setsockopt net/socket.c:1849 [inline] SyS_setsockopt+0x189/0x360 net/socket.c:1828 do_syscall_64+0x282/0x940 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x26/0x9b RIP: 0033:0x453a59 RSP: 002b:00007f952bf38c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007f952bf396d4 RCX: 0000000000453a59 RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000013 RBP: 000000000071bea0 R08: 0000000000000398 R09: 0000000000000000 R10: 0000000020003c68 R11: 0000000000000246 R12: 0000000000000014 R13: 00000000000004d5 R14: 00000000006f7498 R15: 0000000000000000 CPU: 0 PID: 12968 Comm: syz-executor4 Tainted: G W 4.15.0+ #222 ipt_CLUSTERIP: Please specify destination IP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 fail_dump lib/fault-inject.c:51 [inline] should_fail+0x8c0/0xa40 lib/fault-inject.c:149 ipt_CLUSTERIP: Please specify destination IP should_failslab+0xec/0x120 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:422 [inline] slab_alloc mm/slab.c:3365 [inline] __do_kmalloc mm/slab.c:3703 [inline] __kmalloc+0x63/0x760 mm/slab.c:3714 ipt_CLUSTERIP: Please specify destination IP kmalloc include/linux/slab.h:517 [inline] kzalloc include/linux/slab.h:701 [inline] crypto_create_tfm+0x82/0x2e0 crypto/api.c:455 crypto_alloc_tfm+0x114/0x2b0 crypto/api.c:540 crypto_alloc_ahash+0x2c/0x40 crypto/ahash.c:552 hash_bind+0x25/0x30 crypto/algif_hash.c:410 alg_bind+0x224/0x4f0 crypto/af_alg.c:183 ipt_CLUSTERIP: Please specify destination IP SYSC_bind+0x1c3/0x410 net/socket.c:1474 SyS_bind+0x24/0x30 net/socket.c:1460 do_syscall_64+0x282/0x940 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x26/0x9b RIP: 0033:0x453a59 RSP: 002b:00007f97b3fa8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000031