)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000080)=0x81, 0x209) bind$packet(r1, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x1e) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f00000000c0)={0x8, 0x1}) sendmmsg(r2, &(0x7f0000000040), 0x47, 0x0) 2018/05/31 14:41:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x40000, 0x0) getpeername$inet(r2, &(0x7f00000000c0), &(0x7f0000000140)=0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) signalfd(r0, &(0x7f0000000000)={0x9}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:10 executing program 4: capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) r0 = socket$netlink(0x10, 0x3, 0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) recvmsg$kcm(0xffffffffffffff9c, &(0x7f00000008c0)={&(0x7f0000000240)=@can={0x0, 0x0}, 0x80, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/241, 0xf1}, {&(0x7f00000003c0)=""/27, 0x1b}, {&(0x7f0000000400)=""/201, 0xc9}, {&(0x7f0000000500)=""/176, 0xb0}, {&(0x7f00000005c0)=""/157, 0x9d}, {&(0x7f0000000680)=""/252, 0xfc}, {&(0x7f0000000780)=""/191, 0xbf}], 0x7, 0x0, 0x0, 0x1}, 0x123) sendmsg$nl_route(r0, &(0x7f00000009c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)=@bridge_newneigh={0x4c, 0x1c, 0x300, 0x70bd28, 0x25dfdbfc, {0x1c, 0x0, 0x0, r1, 0x0, 0x4}, [@NDA_IFINDEX={0x8, 0x8, r2}, @NDA_DST_IPV6={0x14, 0x1, @dev={0xfe, 0x80, [], 0x18}}, @NDA_PORT={0x8, 0x6, 0x4e23}, @NDA_DST_MAC={0xc, 0x1, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000ec3abf55b47e447871e6750d18010000000000000059d65a6200000000000000"], 0x1c}, 0x1}, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f00000000c0)={0x0, 0xffff, 0x401}) 2018/05/31 14:41:10 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x0) 2018/05/31 14:41:10 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='self/.em0x:-eth1$\x00', 0x2) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x3, &(0x7f0000000000)="0047fc2f07d82c99240970") r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) capget(&(0x7f0000000080)={0x200f1526, r1}, &(0x7f00000000c0)={0x101, 0x7, 0x40, 0x7fffffff, 0x8000, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:10 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/66) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x628002, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000001c0)=0x20, 0x4) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x2000) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6) 2018/05/31 14:41:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000000000)="dcf1fdc562da0000e9f9a0047d0000008e145902a581cc2db64f00000000") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000020}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x94, r2, 0x300, 0x70bd25, 0x25dfdbfd, {0x3}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2e}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x31e}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fffffff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1f}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r3, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000)={0x10}, 0xfffffffffffffecf, &(0x7f000000b000)={&(0x7f0000001640)=@mpls_getnetconf={0x14, 0x52, 0x1, 0x0, 0x0, {0x1c}}, 0x2c5}, 0x1}, 0x0) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000080)="60f3a90b143647afa8e510bc4ab780410356a38d831662592f941de245ec7d351c53d7e4c978a59f0cff2644e39f55a09d278289674cba4a16f11a807d55ad1762e1a438797bfa25031f64f8da3865003e0cc714a9332bfaa1ccb316174a208a4f3faa557c199bdc679ccbced2c0", 0x6e) 2018/05/31 14:41:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x7, 0x2) sendmmsg(r2, &(0x7f0000000040), 0x47, 0x0) 2018/05/31 14:41:11 executing program 7: r0 = socket$inet6(0xa, 0x1001000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) lseek(r0, 0x0, 0x3) 2018/05/31 14:41:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x5, 0x9, 0x1}) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x40011}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket(0xa, 0x1, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000440)=0x2) mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='/', r4, &(0x7f0000d06ff8)='./file0\x00') r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") renameat(r4, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000100)='./file1\x00') ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvfrom$packet(r1, &(0x7f0000000140)=""/13, 0xd, 0x0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="afc10d259206"}, 0x6f3000) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) accept(r1, &(0x7f0000000300)=@can={0x0, 0x0}, &(0x7f0000000400)=0x64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ifb0\x00', r6}) request_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)='eth0wlan1\x00', 0xfffffffffffffffe) 2018/05/31 14:41:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x18, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000040), 0x47, 0x0) 2018/05/31 14:41:12 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x100000000000) ioctl$int_in(r0, 0x80000080044d76, &(0x7f0000005000)) 2018/05/31 14:41:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000080)={0x4, 0x7, 0xfffffffffffffeff, 0x1ff, 0x20}) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB='\x00\x00\x00'], 0x14}, 0x1}, 0x0) 2018/05/31 14:41:12 executing program 4: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1, 0xffffffffffff577b, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@mcast1={0xff, 0x1, [], 0x1}, 0x40, 0x0, 0xff, 0x3, 0x7, 0x7c00000000}, 0x20) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x420040, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000001380)='fd\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x400000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) exit(0x0) utimensat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{}, {0x77359400}}, 0x0) 2018/05/31 14:41:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/2, &(0x7f0000000080)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:12 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) [ 264.090424] FAULT_INJECTION: forcing a failure. [ 264.090424] name failslab, interval 1, probability 0, space 0, times 0 [ 264.101868] CPU: 1 PID: 16550 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 264.109271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.118659] Call Trace: [ 264.121296] dump_stack+0x185/0x1d0 [ 264.124969] should_fail+0x87b/0xab0 [ 264.128726] __should_failslab+0x278/0x2a0 [ 264.133005] should_failslab+0x29/0x70 [ 264.136929] kmem_cache_alloc+0x12e/0xb90 [ 264.141125] ? sctp_get_port_local+0xd34/0x1be0 [ 264.145833] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 264.151341] sctp_get_port_local+0xd34/0x1be0 [ 264.155880] sctp_get_port+0x132/0x1c0 [ 264.159837] ? sctp_unhash+0x10/0x10 [ 264.163592] inet_dgram_connect+0x4f1/0x670 [ 264.167945] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 264.173344] ? __inet_bind+0xff0/0xff0 [ 264.177272] __sys_connect+0x41a/0x510 [ 264.181216] ? syscall_return_slowpath+0xe9/0x700 [ 264.186111] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 264.191544] __x64_sys_connect+0xd8/0x120 [ 264.195731] do_syscall_64+0x152/0x230 [ 264.199662] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 264.204880] RIP: 0033:0x455a09 [ 264.208092] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 264.215839] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 264.223134] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 264.230429] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/31 14:41:12 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) ioprio_get$uid(0x3, r1) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x200000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000380), &(0x7f00000003c0)=0x30) perf_event_open(&(0x7f0000000140)={0x4, 0x1b0, 0xfff, 0x1000, 0x100, 0x401, 0x0, 0x6, 0x2000, 0x3, 0x7, 0x10000, 0x2, 0x7ff, 0x80, 0x2f, 0xfff, 0x401, 0x800, 0x8, 0x1000, 0x2, 0xfffffffffffffffc, 0x7, 0xe4, 0x5b, 0x6, 0x8000, 0x6, 0xcac8, 0x2ae2705d, 0x6, 0x5, 0x7, 0x3ff, 0x1f, 0x7, 0x2, 0x0, 0x20000000001, 0x0, @perf_bp, 0x1a0, 0x80000000, 0x5, 0x7, 0x1, 0x55, 0x8}, r3, 0x8, r4, 0xa) 2018/05/31 14:41:12 executing program 1: r0 = socket$kcm(0x29, 0x1000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x8000000000000009, 0x101, 0x20}, 0x2c) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)="8f01753f88c9db34676e582dd9a539110f3bb42f274f9730d4a57fa72c801b99797dfa92f27b0f404083fdf8781c3d20b4c661a11df42877da40b3eeb23b27adb0ca474d23d320846caf66f78b3f27789d8d54c3f6f0e14e3d7fb71f5190d7c0beed08546e1af3d9ef2c44173f0934f47030b7ef44bf7b4cee16beac6c51dbc899c56747c8", 0x85, 0xffffffffffffffff) r3 = add_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000400)="69ca29989fb28f92e35c8b95c9ed4ebc21c836c35af2fd571e737cb5e74feca509ed4c5c10cdf9e8addfc932f00fd626b271cbad7ceba2ca85073334d4a3985ae179bd5e3a47af8c946a57c76053bfec2d4c15540806eca32e2ededb82b2eff1b97a9d960e4dec5fa794ee52a24a10a5657f6ff3b4d91e7d0ba5f27c739ee0b165cac3420d03a5d38f9c538382b4e668b024fc85858f0af56ca1346f77e8eb33d1cb33ce65fcc11b", 0xa8, 0xfffffffffffffffe) keyctl$negate(0xd, r2, 0x5, r3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000000), &(0x7f0000000340)=""/144}, 0xc) 2018/05/31 14:41:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003f80)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/125, 0x7d}, {&(0x7f0000000000)=""/49, 0x31}], 0x2, &(0x7f0000000340)=""/4096, 0x1000, 0x3}, 0xfffffffffffffff7}, {{&(0x7f0000001340)=@nfc_llcp, 0x80, &(0x7f0000001400)=[{&(0x7f00000013c0)=""/43, 0x2b}], 0x1, &(0x7f0000001440)=""/224, 0xe0, 0x3ff}, 0x1}, {{&(0x7f0000001540)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000001980)=[{&(0x7f00000015c0)=""/163, 0xa3}, {&(0x7f0000001680)=""/189, 0xbd}, {&(0x7f0000001740)=""/83, 0x53}, {&(0x7f00000017c0)=""/246, 0xf6}, {&(0x7f00000018c0)=""/169, 0xa9}], 0x5, &(0x7f0000001a00)=""/4096, 0x1000, 0x3b}, 0x3}, {{&(0x7f0000002a00)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000002a80)=""/252, 0xfc}, {&(0x7f0000002b80)=""/148, 0x94}, {&(0x7f0000002c40)=""/183, 0xb7}, {&(0x7f0000002d00)=""/184, 0xb8}, {&(0x7f0000002dc0)=""/226, 0xe2}, {&(0x7f0000002ec0)=""/4096, 0x1000}], 0x6, &(0x7f0000003f40)=""/9, 0x9}, 0x5}], 0x4, 0x0, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000004080)=0x183, 0x4) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010400000000000000002a000000"], 0x14}, 0x1}, 0x0) [ 264.237726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 264.245019] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000000 2018/05/31 14:41:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}, 0x4}, 0x38a) sendmmsg(r2, &(0x7f0000000040), 0x47, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="a50000004802000076143f4a9b9ba2cf9fe385253dbb9a7f9b831d7ccdd25239c60afe3042683ea6e70ec712ebfeb51423bb47a0bf46aa47dd1d0ccb561fdf93388fb7be9586fd1f9c03e8ded086917b361b800006d4407ee1b1b3a4c6fcb8f2deffbde88c74387abaac14e95f4ef135394c8c1ff7d19a4d60b58d42bd1baf3ddc0885e073ef09a420294faed79475617751c8b9f0e9782e43ecd82fc3acc99ac522866c10"], 0x0) 2018/05/31 14:41:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x81) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={r3, 0x5}, &(0x7f00000001c0)=0x8) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000280)=0x14) 2018/05/31 14:41:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x14, 0xffc48fc5c176ea50) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x140, 0x0) r3 = getpgid(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000100)={{0xfffffffffffffc00, 0x2, 0x89, 0x2, "24bfa84f3a2fd5404390eff5174e33d8652a3d3ffdd8f3d5924178cba6c52bac3a8097ef386e8d8ab68143d5", 0x23d}, 0x0, 0x0, 0x1, r3, 0x1, 0x1000, "c9a2cfff39ad2138331adcfe269784cfea4caa4523e65f65a756f536f6ba36c647e4a9de474feedaf6a74d6cba7c0889d0e7c8a7cd013823ffd701ed566186ee", &(0x7f00000000c0)="ab00", 0x2, [], [0x9, 0x1f, 0xffffffff, 0x1]}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000280)=0x16, 0x4) ioperm(0x1c, 0x3ff, 0xffffffff) open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x1) 2018/05/31 14:41:12 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x14, 0x800) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, [], 0xf}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4e23, 0x1f, 0x4e24, 0x6233, 0xa, 0x20, 0x20, 0x32, r2, r3}, {0xa5f, 0x1, 0x57644516, 0x4, 0x2, 0x3, 0xffffffff7fffffff}, {0x80000001, 0x1, 0x9}, 0xffff, 0x6e6bbf, 0x3, 0x1, 0x2, 0x3}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4d3, 0xff}, 0x2, @in=@multicast2=0xe0000002, 0x3505, 0x0, 0x1, 0x101, 0x100000000, 0x9, 0x5}}, 0xe8) r4 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x80) sched_yield() getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000440)={0x0, 0x44, "3b470999ef559f53c95392a496f65e6a770c674ecde7399c568b41bb78709134ea87d58ecfc744580a4b982fd820b25eb9fc9aa082112bdac1afbcb4a599f0f9d072cf85"}, &(0x7f00000004c0)=0x4c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000500)={r5, 0x100000001}, 0x8) fstatfs(r0, &(0x7f0000000540)=""/185) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000600)={r5, 0xa9, "7b79b1a0006bdacc566a8a53e837a352e9de9e6b3576e29b5af451cd6e43dfb88f3faeb637e761f2b34d6ca16b63967ebbf76b3a36e7eea7a65def8b9a4d930213245feaa39f684acbecb174c9368aa8882d859b51d3376318809d73a1e07a20d0d37fda9fb5e702b8a5b49b6571b464553fed9af3d5a91212acd6816934c7d7f6dc8950cdbb42c95a62b15da0459bc04e2d2695742ced01f77bc6d6dae19cfcc26cb560bf06f922b0"}, &(0x7f00000006c0)=0xb1) connect$netlink(r0, &(0x7f0000000700)=@unspec, 0xc) write(r4, &(0x7f0000000740)="18a7c9063ab83bf03198be144b5bd6f5fbec1ba89e781e404fa1d94640c2e1a4cc804308c385a0d294bca47d7015d0a07c7bc742d95096f2011062e090f33a55baf4c05966b8d5b464617803254a6ee2feb754dfed86dc810e9f029ed9d6707aba6b2e0ba24bc6f72a65716ea88df84e972cdb840c8e0b8511322821634c78208f9dc57f7c2b8dffae0f63fb7ab9680073ef4cdd03eb44f73e", 0x99) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000800)=0x4, 0x4) syz_open_dev$sndseq(&(0x7f0000000840)='/dev/snd/seq\x00', 0x0, 0x4000) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000880)={0x9, 0x0, 0x10000, 0x8, 0x1, 0x1, 0x81, 0x3, 0x7fffffff, 0xffffffffffffcd17}, 0xb) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f00000008c0)=""/202, &(0x7f00000009c0)=0xca) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000a00)={{0xa, 0x4e20, 0x100000000, @dev={0xfe, 0x80, [], 0xa}, 0xfffffffffffffff7}, {0xa, 0x4e23, 0x2f3d, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x2, [0x2, 0xffffffffffff8000, 0x4, 0x101, 0x4da, 0x1e0, 0x7, 0x5]}, 0x5c) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) bind$packet(r1, &(0x7f0000000a80)={0x11, 0xf9, r2, 0x1, 0x3, 0x6}, 0x14) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000ac0)) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000c00)={0x77359400}, 0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000c40)={r6, 0x4}, 0x8) accept(r4, &(0x7f0000000c80)=@hci, &(0x7f0000000d00)=0x80) modify_ldt$read_default(0x2, &(0x7f0000000d40)=""/139, 0x8b) ioctl$sock_netdev_private(r4, 0x89f5, &(0x7f0000000e00)="604c836cf6ae911fe5c0db048b153fd22f994cb82b3380a00b6e6c9b09f295a476") getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) accept$inet(r4, &(0x7f0000000ec0)={0x0, 0x0, @dev}, &(0x7f0000000f00)=0x10) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000f40)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000f80)={{{@in6=@mcast2, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000001080)=0xe8) 2018/05/31 14:41:12 executing program 0 (fault-call:1 fault-nth:1): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) [ 264.529280] FAULT_INJECTION: forcing a failure. [ 264.529280] name failslab, interval 1, probability 0, space 0, times 0 [ 264.540684] CPU: 0 PID: 16585 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 264.540700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.540712] Call Trace: [ 264.540763] dump_stack+0x185/0x1d0 [ 264.540800] should_fail+0x87b/0xab0 [ 264.540839] __should_failslab+0x278/0x2a0 [ 264.540901] should_failslab+0x29/0x70 [ 264.540947] __kmalloc+0xc5/0x350 [ 264.540990] ? sctp_get_port_local+0x1ae3/0x1be0 [ 264.541048] ? sctp_add_bind_addr+0xb0/0x630 [ 264.541084] sctp_add_bind_addr+0xb0/0x630 [ 264.541122] sctp_do_bind+0xc26/0xde0 [ 264.541160] __sctp_connect+0xfa5/0x1b00 [ 264.541232] ? sctp_v6_scope+0xc0/0xc0 [ 264.541278] sctp_connect+0x1b0/0x200 [ 264.541310] ? sctp_close+0xdb0/0xdb0 [ 264.541355] inet_dgram_connect+0x40c/0x670 [ 264.541382] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 264.541411] ? __inet_bind+0xff0/0xff0 [ 264.541445] __sys_connect+0x41a/0x510 [ 264.541499] ? syscall_return_slowpath+0xe9/0x700 [ 264.541540] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 264.541603] __x64_sys_connect+0xd8/0x120 [ 264.541633] do_syscall_64+0x152/0x230 [ 264.541670] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 264.541703] RIP: 0033:0x455a09 [ 264.656654] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 264.664414] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 264.671719] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 264.679016] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 264.686311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 264.693607] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000001 2018/05/31 14:41:13 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket(0xa, 0x1, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000440)=0x2) mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='/', r4, &(0x7f0000d06ff8)='./file0\x00') r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") renameat(r4, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000100)='./file1\x00') ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvfrom$packet(r1, &(0x7f0000000140)=""/13, 0xd, 0x0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="afc10d259206"}, 0x6f3000) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) accept(r1, &(0x7f0000000300)=@can={0x0, 0x0}, &(0x7f0000000400)=0x64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ifb0\x00', r6}) 2018/05/31 14:41:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0104000000000000000007000000"], 0x14}, 0x1}, 0x0) 2018/05/31 14:41:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:13 executing program 2: r0 = socket$inet(0x2, 0x0, 0xc96) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x800, 0x80) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000400)='team\x00') getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000440)={@empty, 0x0}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000500)={@dev, @loopback, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@ipv4={[], [], @local}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000000680)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}}}, &(0x7f0000000cc0)=0xe8) accept$packet(r3, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000d40)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000e40)={@multicast1, @empty, 0x0}, &(0x7f0000000e80)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000ec0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000f00)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@rand_addr, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001080)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000001180)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000011c0)={@loopback, 0x0}, &(0x7f00000006c0)=0x14) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f0000001880)={@local, 0x0}, &(0x7f00000018c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001900)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000001a00)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001a40)={0x0, @multicast1, @remote}, &(0x7f0000001a80)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001b80)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000001c80)=0xe8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001fc0)={'syz_tun\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002000)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000002100)=0xe8) accept4$packet(r3, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000002180)=0x14, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003f80)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000004080)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000040c0)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f00000041c0)=0xe8) accept$packet(r3, &(0x7f000000b300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f000000b340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000b380)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f000000b3c0)={0x0, @local, @local}, &(0x7f000000b400)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f000000b480)={'ip6_vti0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f000000b580)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f000000b680)=0xe8) accept4$packet(r3, &(0x7f000000b6c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f000000b700)=0x14, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f000000b740)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f000000b840)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f000000b940)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f000000b980)={{{@in6=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f000000ba80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f000000bac0)={{{@in=@rand_addr, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@rand_addr}}, &(0x7f000000bbc0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f000000bc00)={'vcan0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f000000bc40)={@broadcast, @remote, 0x0}, &(0x7f000000bc80)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f000000bcc0)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f000000bdc0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000000be00)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@loopback}}, &(0x7f000000bf00)=0xe8) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f000000bf80)={@empty, 0x0}, &(0x7f000000bfc0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f000000cbc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2300}, 0xc, &(0x7f000000cb80)={&(0x7f000000c000)=ANY=[@ANYBLOB='t\v\x00\x00', @ANYRES16=r4, @ANYBLOB="010425bd7000ffdbdf250300000008000100", @ANYRES32=r5, @ANYBLOB="7c00020038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004001f0f0000400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ff01000008000600", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="6c020200400001002400010071756575655f696400000000000000000000000000000000000000000000000008000300030000000800040001f8ffff08000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r10, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400060000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b75700000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000300000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000300000008000600", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="7c0002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r15, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004004b060000080007000000000008000100", @ANYRES32=r16, @ANYBLOB="ec0002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r17, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000300000008000100", @ANYRES32=r20, @ANYBLOB="6802020038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000000000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000008000300030000000800040003000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000002000008000600", @ANYRES32=r21, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000300000008000600", @ANYRES32=r22, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r23, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r24, @ANYBLOB="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", @ANYRES32=r25, @ANYBLOB="c000020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004004d08000008000600", @ANYRES32=r26, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r27, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040000080000080007000000000008000100", @ANYRES32=r28, @ANYBLOB="c401020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000010000008000600", @ANYRES32=r29, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r30, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000008008000600", @ANYRES32=r31, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400d800000008000600", @ANYRES32=r32, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c0004000000023f060000000200090000000000050006f90100000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r33, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r34, @ANYBLOB="08000100", @ANYRES32=r35, @ANYBLOB="e401020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000000008008000600", @ANYRES32=r36, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400ff0f00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r37, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r38, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r39, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r40, @ANYBLOB="08000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c0004006861736800000000"], 0xb74}, 0x1, 0x0, 0x0, 0x4048845}, 0x880) connect$vsock_dgram(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e20, @loopback=0x7f000001}}) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r41 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) getsockname(r0, &(0x7f00000001c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000280)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r41, 0x8933, &(0x7f00000002c0)={'vcan0\x00', r42}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000380)={0xfffffffffffffe3e, 0x9, 0x9, 0x3, 0x81, 0x943}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r43, 0x1}, 0x8) 2018/05/31 14:41:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0xd}, 0x1f}, 0x1c) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000040), 0x47, 0x0) 2018/05/31 14:41:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000020d000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x8001) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) connect(r2, &(0x7f0000000040)=@llc={0x1a, 0x200, 0x1, 0x9386, 0x0, 0x10001, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x0, 0x0) syz_open_dev$tun(&(0x7f0000589000)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f00005ad000)) pselect6(0x40, &(0x7f00003e0000), &(0x7f0000000000), &(0x7f0000e90000), &(0x7f0000000000)={0x77359400}, &(0x7f0000e85ff0)={&(0x7f0000c71ff8), 0x8}) 2018/05/31 14:41:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0747fc2f070000000000d13c0e000000000000000000000000000000000000") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:13 executing program 0 (fault-call:1 fault-nth:2): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) [ 265.262366] FAULT_INJECTION: forcing a failure. [ 265.262366] name failslab, interval 1, probability 0, space 0, times 0 [ 265.273782] CPU: 1 PID: 16614 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 265.281181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.290559] Call Trace: [ 265.293197] dump_stack+0x185/0x1d0 [ 265.296869] should_fail+0x87b/0xab0 [ 265.300647] __should_failslab+0x278/0x2a0 [ 265.304929] should_failslab+0x29/0x70 [ 265.308866] __kmalloc+0xc5/0x350 [ 265.312355] ? sctp_association_new+0x75/0x2f40 [ 265.317059] ? sctp_association_new+0xca/0x2f40 [ 265.321759] sctp_association_new+0xca/0x2f40 [ 265.326301] ? sctp_v6_addr_to_user+0x4f0/0x4f0 [ 265.331003] ? sctp_v4_scope+0x2b/0x370 [ 265.335090] ? sctp_v4_addr_valid+0x340/0x340 [ 265.339622] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 265.345025] ? sctp_scope+0x8f/0x130 [ 265.348782] ? sctp_scope+0xc0/0x130 [ 265.352531] __sctp_connect+0x108f/0x1b00 [ 265.356763] ? sctp_v6_scope+0xc0/0xc0 [ 265.360698] sctp_connect+0x1b0/0x200 [ 265.364534] ? sctp_close+0xdb0/0xdb0 [ 265.368388] inet_dgram_connect+0x40c/0x670 [ 265.372742] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 265.378147] ? __inet_bind+0xff0/0xff0 [ 265.382081] __sys_connect+0x41a/0x510 [ 265.386032] ? syscall_return_slowpath+0xe9/0x700 [ 265.390933] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 265.396366] __x64_sys_connect+0xd8/0x120 [ 265.400553] do_syscall_64+0x152/0x230 [ 265.404484] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 265.409698] RIP: 0033:0x455a09 2018/05/31 14:41:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 265.412904] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 265.420650] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 265.427944] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 265.435245] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 265.442548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 265.449843] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000002 2018/05/31 14:41:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x10080, 0x0) bind$unix(r2, &(0x7f0000001980)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmmsg(r1, &(0x7f0000001800)=[{{&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x401, @dev={0xfe, 0x80, [], 0xe}, 0x8}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)="70ac4df68e0064fdb535e1711c053d544c6b3fde7dd406f447ad6f65a52bfe47098832bdbb668df0cfdc0ffcbc7ef2cd9e9b74653a85f44290611e5b0d7ead6d9ed3cbcfcb8339399610f19ad72058f8d33bbd8596cff888774db845ddd5bb65e0885331da7deadf118a5312385241606297b13634a106a224555fc3351ee83a0df3f5594d720638f6fffe577e3bcf6da8c92300b80ff018357d6c58ad62a78e2b06baad76649940316ec815cc50ec1aa278534fd936df0a81135741436f720eddee33edf046474eb7cf", 0xca}], 0x1, &(0x7f00000003c0)=[{0x48, 0x10c, 0x355, "62d64fd02dafb394866635efbf53097f47b6da1b9e7624d3c4a800c1b790f68a35de8006aa2b91110689317c626388dc0706"}], 0x48, 0x40000}, 0x6}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="ed5943393f10150cad4cb132f285c687769eb8ceeceb52dd49a52339f7c22293566d390d59b2089ffb16a398313a85cbd2ceb09b4192a80b02c30c0f213be630ccdea6fc5d4910c61252b6cce5b4f34f7ec2a96680451154da764222f181a8552e43dbcc69169e532a28026834039b5e45182696ad530a7b66d3d9755098353efe2db62b718954caba2b8886964449c3788cb6811c7def11432d54102d1779e0e8ca587e95ca", 0xa6}, {&(0x7f0000000500)="5377a6271fda84481ccd08aa3a12734d8d7fa00a973728313a2d7227cbaff9db68fbcc2a00f975caeb2654e96b7a788db203b38aff104f524be71589025c424d8ce88cd83d78bd1f288d6c1e55966fbf530ddcd229723a504d7ffe9f5cb81d0fce5dff970f81a09220aad84969a49cc1e7c5915d618d4d6db983c806f8a4a1c1ee4ed2111097134344fad9c5ed17367681c0acc6aa2eebe22cc92a137b05a03029cc34b95c17c9e794ca94dcdece651604679f220bc331c755720a57d5e5eb3c52217fcb55af3d0fe21e12b7dc65d31c45f7c69edc9a3d205288a987b5", 0xdd}, {&(0x7f0000000600)="8928d372ad401f64b97837c3c61d0b607522b2ffc3441cdb19bb01030439615bc5cca80ddd635ff1f7cbc8dce3d2a802a21fb3d93ed8560e264fbef15e09fd489135c78d9400f1859a3873247226222e35aad5a3964d01b284bb035bd256c327da", 0x61}], 0x3, &(0x7f0000000680)=[{0x1010, 0x88, 0xe58e, "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"}, {0x40, 0x119, 0x4ee, "6e8180aba84254018529fb0c43cad05ced4ae07be15595320b3e6773b810d480135131a27419323a870c7fb70be1"}, {0x108, 0x107, 0xe5c7, "87ce0e9f135b1451ccd3a0546bcc97911f51cb3b28f2ce15986686dfcfdd0798477e2cd16fbd99c6be91f516c9065c44d997b114b39178736406375edb43735a4ac14b2bad5e46df81540e7a7bb2cde545ee438cd77e3d2a49b2533f902a6e0d9bb084ad9a565a9b2d89fc2990090767d4319aa01a0eb151d42788c477137ffd3c5982287e7ca639e3f4c5546c07a6ba9bfbe66bf4b986592458e0698acd991dcd064caabe63574e0f9f39f15feb889ff543e336d774d117d9888664a8384ea532f12e3942d0b78b364f58acfbe955df625aa5bf48afec972beedc020c78b8d5970b6269aecdc51f162ec8bb3c1f052032ea05a9cf9496c5"}], 0x1158, 0x8000}, 0x3}], 0x2, 0x800) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0104b200000000000000070000003720f48b889347090cef38fc7592ec94c4f19680d8ac9f6f0e794ae23b49b51dd5bd8f4d4363e74513514b8d7232787da0b6b189b80a6ce6dd4870b8bf6ebdecfc4c1e9b42a706cc337f4001347d578d55901e993fd8b57bef48d11d0423cb6e84a47bd650e0d416353b6f1e5e627dfaeb8861eab26c7c314ebab85d8aa8796e31767bb6180e52e63c838777208f2ef612e0215695a7df253d96f97f3152fe66f0d437b8c95e421c94aca6a6b48a4c45d1cb0c4a5279b6782e34bcd495c670ff0832943a5276da739ea0d43023c93895362bf7af712b0e39"], 0x14}, 0x1}, 0x0) sendfile(r0, r0, &(0x7f0000001a40), 0x8001) openat$cuse(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/cuse\x00', 0x8a400, 0x0) 2018/05/31 14:41:13 executing program 1: 2018/05/31 14:41:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty, 0x0}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000080)={0x11, 0x1, r1, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xffdc) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r3, &(0x7f0000000040), 0x47, 0x0) 2018/05/31 14:41:13 executing program 0 (fault-call:1 fault-nth:3): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) r2 = dup2(r0, r0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000000)={0x0, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e21, 0x2, 'rr\x00', 0x2, 0x0, 0x3c}, 0x2c) [ 265.760844] FAULT_INJECTION: forcing a failure. [ 265.760844] name failslab, interval 1, probability 0, space 0, times 0 [ 265.772296] CPU: 1 PID: 16645 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 265.779711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.789085] Call Trace: [ 265.791714] dump_stack+0x185/0x1d0 [ 265.795391] should_fail+0x87b/0xab0 [ 265.799143] __should_failslab+0x278/0x2a0 [ 265.803440] should_failslab+0x29/0x70 [ 265.807371] __kmalloc+0xc5/0x350 [ 265.810861] ? sctp_stream_init+0x23c/0xd40 [ 265.815223] ? sctp_sched_fcfs_dequeue_done+0x10/0x10 [ 265.820465] sctp_stream_init+0x23c/0xd40 [ 265.824661] sctp_association_new+0x18ad/0x2f40 [ 265.829382] __sctp_connect+0x108f/0x1b00 [ 265.833618] ? sctp_v6_scope+0xc0/0xc0 [ 265.837556] sctp_connect+0x1b0/0x200 [ 265.841399] ? sctp_close+0xdb0/0xdb0 [ 265.845286] inet_dgram_connect+0x40c/0x670 [ 265.849649] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 265.855054] ? __inet_bind+0xff0/0xff0 [ 265.855760] IPVS: set_ctl: invalid protocol: 0 172.20.20.30:20001 rr [ 265.858977] __sys_connect+0x41a/0x510 [ 265.859032] ? syscall_return_slowpath+0xe9/0x700 [ 265.859075] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 265.859128] __x64_sys_connect+0xd8/0x120 [ 265.859161] do_syscall_64+0x152/0x230 [ 265.887782] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 265.892994] RIP: 0033:0x455a09 [ 265.896203] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 265.903954] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 265.911243] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 265.913162] IPVS: set_ctl: invalid protocol: 0 172.20.20.30:20001 rr [ 265.918536] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 265.918554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 265.918572] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000003 2018/05/31 14:41:14 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket(0xa, 0x1, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000440)=0x2) mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='/', r4, &(0x7f0000d06ff8)='./file0\x00') r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") renameat(r4, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000100)='./file1\x00') ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvfrom$packet(r1, &(0x7f0000000140)=""/13, 0xd, 0x0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="afc10d259206"}, 0x6f3000) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) accept(r1, &(0x7f0000000300)=@can, &(0x7f0000000400)=0x64) 2018/05/31 14:41:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88041002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000039ddbc44b57c7c5202ec0b9640c76ae7436c4fbe9215d79ab1a121a4205b2ab338dcde4accbe31787c65c29fe301631d274644fcc627096788f96aa20897fb06b280ac09af9385107837007605877d896377bb4101cb856e58f6b95c1c8049c6f6f140a42b6c6ad67717abaf56944d079010935abc30b4835c28b1dcb31b02eac45b03492174f63bab6319f3f363276df0", @ANYRES16=r2, @ANYBLOB="200026bd7000fbdbdf251000000030000200080009000300000008000800040000001400010000000000000000000000007da75b7607f8b7c70002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x20040084) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:14 executing program 1: 2018/05/31 14:41:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8000, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="f734ab98b8e5c83f66b564f3cfc700df8dc6f5d4eca9e2ba61e1844b13a189e82325e7b070657a00a84a04e138a3e3f2a8751cebf903225092affcf9011375", 0x3f) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r3, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:14 executing program 0 (fault-call:1 fault-nth:4): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) dup(r1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000000)=0x54) 2018/05/31 14:41:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80f, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000040), 0x47, 0x0) [ 266.143332] FAULT_INJECTION: forcing a failure. [ 266.143332] name failslab, interval 1, probability 0, space 0, times 0 [ 266.154760] CPU: 1 PID: 16667 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 266.162147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.171526] Call Trace: [ 266.174161] dump_stack+0x185/0x1d0 [ 266.177833] should_fail+0x87b/0xab0 [ 266.181593] __should_failslab+0x278/0x2a0 [ 266.185880] should_failslab+0x29/0x70 [ 266.189799] __kmalloc+0xc5/0x350 [ 266.193290] ? sctp_stream_interleave_init+0xad/0x130 [ 266.198537] ? sctp_auth_asoc_copy_shkeys+0x180/0x7a0 [ 266.203792] sctp_auth_asoc_copy_shkeys+0x180/0x7a0 [ 266.208852] sctp_association_new+0x26ae/0x2f40 [ 266.213571] __sctp_connect+0x108f/0x1b00 [ 266.217799] ? sctp_v6_scope+0xc0/0xc0 [ 266.221732] sctp_connect+0x1b0/0x200 [ 266.225573] ? sctp_close+0xdb0/0xdb0 [ 266.229424] inet_dgram_connect+0x40c/0x670 [ 266.233779] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 266.239180] ? __inet_bind+0xff0/0xff0 2018/05/31 14:41:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xaf, 0x101200) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000080)=0x100) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:14 executing program 1: 2018/05/31 14:41:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000040), 0x47, 0x0) [ 266.243101] __sys_connect+0x41a/0x510 [ 266.247039] ? syscall_return_slowpath+0xe9/0x700 [ 266.251929] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 266.257362] __x64_sys_connect+0xd8/0x120 [ 266.261546] do_syscall_64+0x152/0x230 [ 266.265479] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 266.270705] RIP: 0033:0x455a09 [ 266.273909] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 266.281680] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 2018/05/31 14:41:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) r2 = dup(r0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000000)={0x1ff, 0x8000, 0x4, 0x4, 0x0}, &(0x7f00000000c0)=0x10) r4 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x6, 0x80) umount2(&(0x7f0000000140)='./file0\x00', 0x1) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r3, 0x3, 0x4}, &(0x7f0000000180)=0xc) 2018/05/31 14:41:14 executing program 1: [ 266.281698] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 266.281717] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/31 14:41:14 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="d7", 0x1, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) 2018/05/31 14:41:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xc, &(0x7f0000000280)="c330554cdf9578517de2cb397e704f64c1a0a28b5e7ff571a1007753310898c5423de1dd4d263b773b2ec6635f1a6baf4a1914e4c5a56d908e3a555a7fa077526b58f0579d7cda2d59a393941af246b116c477c101590f276ec1913c1ac1c8da6bf1748b5f12510fa8b8bee701ad23883ad037cc0d9855197547839001f4564ce013e2005125215105f318178d1a44c587441a791074d45bc449e3a4148be2562a67a07c77e1e5e07bfdf3983d8d6d972b4d56295d50d51e07abb168b67b4da1cab784a6b3d1616c3146ed3eb3b4657f3f73a01edcae11f03d7c475bfff4211256a89d1444727b40b8e7a04269b7af8a42860dbf4adbaadf4e", 0xf9) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x1251f58e}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r2, 0xfff, 0x9, 0x7}, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000008}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) [ 266.281735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 266.281752] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000004 2018/05/31 14:41:14 executing program 0 (fault-call:1 fault-nth:5): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:14 executing program 3: r0 = socket$inet6(0xa, 0x800, 0x3ff) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:14 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket(0xa, 0x1, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000440)=0x2) mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='/', r4, &(0x7f0000d06ff8)='./file0\x00') r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") renameat(r4, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000100)='./file1\x00') ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvfrom$packet(r1, &(0x7f0000000140)=""/13, 0xd, 0x0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="afc10d259206"}, 0x6f3000) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0xa9) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x56e5, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000004c0)=""/177) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000180)=0x1e) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x20) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000001c0)=0x0) waitid(0x2, r4, &(0x7f0000000280), 0x2, &(0x7f0000000400)) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0)=0x2, 0x4) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000200)=0x7) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000340)=0x7ff, 0x4) 2018/05/31 14:41:14 executing program 7: r0 = socket$inet6(0xa, 0x1000400000005, 0x3) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:14 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) write(r0, &(0x7f0000000300)="da", 0x1) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x2040}], 0x1, &(0x7f00000000c0)={0x0, r1+10000000}, &(0x7f0000000100), 0x8) 2018/05/31 14:41:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) truncate(&(0x7f0000000000)='./file0\x00', 0x7) sendmmsg(r2, &(0x7f0000000040), 0x47, 0x0) [ 267.038239] FAULT_INJECTION: forcing a failure. [ 267.038239] name failslab, interval 1, probability 0, space 0, times 0 [ 267.049614] CPU: 1 PID: 16727 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 267.057001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.066380] Call Trace: [ 267.069011] dump_stack+0x185/0x1d0 [ 267.072688] should_fail+0x87b/0xab0 [ 267.076446] __should_failslab+0x278/0x2a0 [ 267.080724] should_failslab+0x29/0x70 [ 267.084644] __kmalloc+0xc5/0x350 [ 267.088156] ? sctp_get_af_specific+0x53/0xa0 [ 267.092694] ? sctp_add_bind_addr+0xb0/0x630 [ 267.097145] sctp_add_bind_addr+0xb0/0x630 [ 267.101429] sctp_copy_local_addr_list+0x4e1/0x610 [ 267.106409] sctp_copy_one_addr+0x20b/0xc40 [ 267.110781] sctp_bind_addr_copy+0x28c/0x970 [ 267.115237] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 267.120817] __sctp_connect+0x1108/0x1b00 [ 267.125043] sctp_connect+0x1b0/0x200 [ 267.128881] ? sctp_close+0xdb0/0xdb0 [ 267.132738] inet_dgram_connect+0x40c/0x670 2018/05/31 14:41:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000200)='IPVS\x00', 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x1, 0x10002) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="0b06fda8d083a722b1c0b869772649afadc273ffb8ec9b6edd4c9e95cf7f8f9b05225788973017aebb815c80f1ebc6511980c0a68e1dad15bc67891c04ea0f2194e71d8159", 0x45) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xfffffec6, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="effeffff", @ANYRES16=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x14}, 0x1}, 0x40000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0xf, 0x4) [ 267.137096] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 267.142498] ? __inet_bind+0xff0/0xff0 [ 267.146430] __sys_connect+0x41a/0x510 [ 267.150374] ? syscall_return_slowpath+0xe9/0x700 [ 267.155275] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 267.160710] __x64_sys_connect+0xd8/0x120 [ 267.164898] do_syscall_64+0x152/0x230 [ 267.168835] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 267.174049] RIP: 0033:0x455a09 [ 267.177264] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 2018/05/31 14:41:15 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) [ 267.185011] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 267.192302] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 267.199594] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 267.206883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 267.214177] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000005 2018/05/31 14:41:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/89, 0x59}], 0x1, 0x60) 2018/05/31 14:41:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xc8, 0x8000) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0xffffffffffffff7f) r4 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000000)={0x3, &(0x7f00000002c0)=[{}, {}, {}]}) 2018/05/31 14:41:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x5777) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xb6, 0x10000) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) 2018/05/31 14:41:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x24090000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {0x1}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xba}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x24100, 0x40) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f00000001c0)={0x7ff, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x2, 0x4e24, @rand_addr=0x4}, 0x0, 0x6, 0xffffffffffffff43, 0x10001, 0x7, &(0x7f0000000180)='bond_slave_0\x00', 0x646, 0x7f, 0xe50}) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000100)=0x10, 0x4) r5 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x1) ioctl$sock_netrom_TIOCINQ(r5, 0x541b, &(0x7f0000000080)) 2018/05/31 14:41:15 executing program 0 (fault-call:1 fault-nth:6): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:15 executing program 1: 2018/05/31 14:41:15 executing program 2: r0 = socket$inet6(0xa, 0xe, 0x3) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x2, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000005, 0xa5) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x10000, 0x4, 0x982e, 0x3c}, 0x2e1) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000040), 0x47, 0x0) 2018/05/31 14:41:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket(0xa, 0x1, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000440)=0x2) mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='/', r4, &(0x7f0000d06ff8)='./file0\x00') r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") renameat(r4, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000100)='./file1\x00') ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 268.040883] FAULT_INJECTION: forcing a failure. [ 268.040883] name failslab, interval 1, probability 0, space 0, times 0 [ 268.052271] CPU: 1 PID: 16794 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 268.059720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.069096] Call Trace: [ 268.071727] dump_stack+0x185/0x1d0 [ 268.075408] should_fail+0x87b/0xab0 [ 268.079168] __should_failslab+0x278/0x2a0 [ 268.083446] should_failslab+0x29/0x70 [ 268.087372] __kmalloc+0xc5/0x350 2018/05/31 14:41:16 executing program 1: [ 268.090859] ? sctp_v4_cmp_addr+0x166/0x250 [ 268.095224] ? sctp_add_bind_addr+0xb0/0x630 [ 268.099683] sctp_add_bind_addr+0xb0/0x630 [ 268.103960] ? xfs_symlink+0x1718/0x2fe0 [ 268.108073] sctp_copy_local_addr_list+0x4e1/0x610 [ 268.113057] sctp_copy_one_addr+0x20b/0xc40 [ 268.117433] sctp_bind_addr_copy+0x28c/0x970 [ 268.121890] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 268.127472] __sctp_connect+0x1108/0x1b00 [ 268.131698] sctp_connect+0x1b0/0x200 [ 268.135540] ? sctp_close+0xdb0/0xdb0 2018/05/31 14:41:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) getsockopt$netlink(r1, 0x10e, 0xb, &(0x7f0000000080)=""/91, &(0x7f0000000100)=0x5b) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01040000f23c5bc26dddbeb74dab"], 0x14}, 0x1}, 0x0) [ 268.139398] inet_dgram_connect+0x40c/0x670 [ 268.143758] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 268.149161] ? __inet_bind+0xff0/0xff0 [ 268.153195] __sys_connect+0x41a/0x510 [ 268.157146] ? syscall_return_slowpath+0xe9/0x700 [ 268.162040] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 268.168006] __x64_sys_connect+0xd8/0x120 [ 268.172205] do_syscall_64+0x152/0x230 [ 268.176146] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 268.181364] RIP: 0033:0x455a09 2018/05/31 14:41:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x11d) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) [ 268.184580] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 268.192335] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 268.199632] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 268.206928] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 268.214227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 268.221532] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000006 2018/05/31 14:41:16 executing program 1: 2018/05/31 14:41:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = semget$private(0x0, 0x4, 0x200) r4 = getuid() getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) r6 = geteuid() fstat(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000280)={{0x8000000000, r4, r5, r6, r7, 0x2, 0x8}, 0x4, 0x0, 0x8}) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000040), 0x47, 0x0) 2018/05/31 14:41:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x9) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000074", @ANYRES16=r2, @ANYBLOB="0104000000000000000007000000"], 0x14}, 0x1}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10000, 0x0) mq_getsetattr(r3, &(0x7f0000000080)={0x400, 0x1, 0x0, 0x8, 0x9, 0x5, 0x3, 0x9}, &(0x7f00000000c0)) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) 2018/05/31 14:41:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:16 executing program 0 (fault-call:1 fault-nth:7): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={r2, 0x1}, &(0x7f0000000140)=0x8) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:16 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket(0xa, 0x1, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000440)=0x2) mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='/', r3, &(0x7f0000d06ff8)='./file0\x00') r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") renameat(r3, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000100)='./file1\x00') setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x6) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10040, 0x0) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r3, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) geteuid() r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xb94, 0x2000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000040)={0x5, 0x0, 'client1\x00', 0xffffffff80000002, "3ddc870c967f758f", "63da03cdd40d5a2af05c4946ded01276346eedfeffe1e90dd9f06b8e7894f844", 0x5, 0xcf}) setsockopt(r0, 0x107, 0x5, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r3, &(0x7f0000000040), 0x47, 0x0) 2018/05/31 14:41:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) keyctl$session_to_parent(0x12) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0xfffffffffffffffe, 0x8}, 0xfffffffffffffdb3) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:16 executing program 1: 2018/05/31 14:41:16 executing program 1: 2018/05/31 14:41:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x28, &(0x7f00000000c0)}, 0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000180)=0x1ff, 0x4) 2018/05/31 14:41:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x4, 0x20003, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000040), 0x47, 0x0) 2018/05/31 14:41:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000140)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047ba6ec63d3cd32409700000000000000000") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8, 0x30}, &(0x7f00000000c0)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace$cont(0x9, r4, 0x7ff, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e21, 0x6c3, @loopback={0x0, 0x1}}}, 0x677b, 0x8, 0x3, 0xc, 0x12}, 0x98) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:17 executing program 1: 2018/05/31 14:41:17 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket(0xa, 0x1, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000440)=0x2) mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='/', r3, &(0x7f0000d06ff8)='./file0\x00') r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) [ 269.247039] FAULT_INJECTION: forcing a failure. [ 269.247039] name failslab, interval 1, probability 0, space 0, times 0 [ 269.258468] CPU: 1 PID: 16899 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 269.265859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.275241] Call Trace: [ 269.277872] dump_stack+0x185/0x1d0 [ 269.281544] should_fail+0x87b/0xab0 [ 269.285305] __should_failslab+0x278/0x2a0 [ 269.289580] should_failslab+0x29/0x70 [ 269.293499] __kmalloc+0xc5/0x350 [ 269.296969] ? sctp_v4_cmp_addr+0x166/0x250 [ 269.301297] ? sctp_add_bind_addr+0xb0/0x630 [ 269.305712] sctp_add_bind_addr+0xb0/0x630 [ 269.309980] sctp_copy_local_addr_list+0x4e1/0x610 [ 269.314922] sctp_copy_one_addr+0x20b/0xc40 [ 269.319305] sctp_bind_addr_copy+0x28c/0x970 [ 269.323724] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 269.329270] __sctp_connect+0x1108/0x1b00 [ 269.333466] sctp_connect+0x1b0/0x200 [ 269.337283] ? sctp_close+0xdb0/0xdb0 [ 269.341118] inet_dgram_connect+0x40c/0x670 [ 269.345460] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 269.350825] ? __inet_bind+0xff0/0xff0 [ 269.354719] __sys_connect+0x41a/0x510 [ 269.358652] ? syscall_return_slowpath+0xe9/0x700 [ 269.363528] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 269.368954] __x64_sys_connect+0xd8/0x120 [ 269.373134] do_syscall_64+0x152/0x230 [ 269.377044] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 269.382250] RIP: 0033:0x455a09 [ 269.385434] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 2018/05/31 14:41:17 executing program 0 (fault-call:1 fault-nth:8): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:17 executing program 1: 2018/05/31 14:41:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0xfffffffffffffee3) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:17 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket(0xa, 0x1, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000440)=0x2) mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='/', r3, &(0x7f0000d06ff8)='./file0\x00') socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:17 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000d00)={@local}, &(0x7f0000000d40)=0x14) sendmmsg(r1, &(0x7f0000005dc0), 0x50, 0x0) pread64(r2, &(0x7f0000000000)=""/14, 0xe, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x4b, 0x5) unlink(&(0x7f0000000080)='./file0\x00') 2018/05/31 14:41:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x10001, 0x7f, 0x7fff, 0x40, 0x3}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="8800000039b53a1cee9f8adf39f158abc7c7c6c4eb1e7ccec551929eaa21bd1bc7dda8f0fd6a1ab5b369c67716d4a956321c877a984924359114b85e82477e4e512c9a6df9c9f3d9a19375a4eb6025ad6e038dec096e636bf0e20fd980601396f376e35a6272dbe81a20daa8705f5cd3045ecd392d478203a9bf0edecb7f4a36aa8fc0b2ed76de87895b03bf"], &(0x7f00000000c0)=0x90) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r4, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:17 executing program 7: [ 269.393145] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 269.400415] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 269.407693] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 269.414974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 269.422243] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000007 [ 269.537722] FAULT_INJECTION: forcing a failure. [ 269.537722] name failslab, interval 1, probability 0, space 0, times 0 [ 269.549104] CPU: 1 PID: 16916 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 269.556491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.565869] Call Trace: [ 269.568496] dump_stack+0x185/0x1d0 [ 269.572165] should_fail+0x87b/0xab0 [ 269.575920] __should_failslab+0x278/0x2a0 [ 269.580196] should_failslab+0x29/0x70 [ 269.584125] __kmalloc+0xc5/0x350 2018/05/31 14:41:17 executing program 7: 2018/05/31 14:41:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") io_setup(0xffffffffffffffff, &(0x7f0000000000)=0x0) r2 = dup(r0) connect$vsock_dgram(r2, &(0x7f0000000640)={0x28, 0x0, 0xffffffff, @reserved=0x1}, 0x10) sendmsg$nfc_llcp(r2, &(0x7f0000000580)={&(0x7f0000000300)={0x27, 0x1, 0x1, 0x5, 0x4, 0x2, "c9d8c6865c2a6d5e37debf55d7b1713df8d5adc2b6bf94de5ebf25556ac8833b523d4b547393562c6bd1c21e716379cd15c3ed792fb37766f175e3161e27a6", 0x27}, 0x60, &(0x7f0000000280)=[{&(0x7f0000000100)="192895b2fab2207f0bbe5ebed58ab6863a915a236007db5eabdf0b28460a7408149d6b8f7bc83837a84bc3bf6715b03fbf8419cae2", 0x35}, {&(0x7f0000000380)="46a7a2956df6933dbaf9fe0c9ee85123cce843431d49b4f0a5b0a80a4edafe258c1edbb2c3b186a9833404422b3cb0f49a0b54b7dda3832a6d740e13be4d9a7c61f42e754b0106cc364f0f505a9289a237cd6766728ac2e2d3e2691c526e6abea48f91d351385a1be8165ad0554a10acbb46e652acadc15fea0b1595006f9ef93d57161a209283f16db5971e60f2c355cb16b83e00f8f5d8aa7661bd4d3c338c7ff60237bc396e2ad06e02b03544d177d3bd6bbdab628b4800eed0feb6bda7b78bf798aeac42ed4141912817029c4759c589b6097d28f1e7428ecb4195a9f18669cb6c72a92ba754a31b87db507704d5f4012b18a7", 0xf5}, {&(0x7f0000000480)="8d962a95c5878d5e217c4d9c29392b36e35b9e001b2ff6a0f530d09c0d7e8f9eb87dc83168ad15fefc90fd608c49e302c94172085eafb49ec2c7040783e61f47ada5e33fd3b29763eddf72c166b92486cd9dde6c297fd527cdfdd3366d24edd934cb77eff8", 0x65}], 0x3, &(0x7f0000000500)={0x80, 0x111, 0x7, "1f4b8abd27a908b237bbf40dbc0735487df947f681d15d51ffc816ddcd3edb535c4df6361a909dc073c2f372e4aab43df138c348c7db980e692997ff4b981bb41b7cb44e9579d06ce3b24e0641b3b47d4c9303e5788ff496f673800240074b7f5ecd02c540b32d746ba80bbc"}, 0x80, 0x20000000}, 0x4000000) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x3, r0, &(0x7f0000000140)="7f399bf11f82222180271bfde3594315f3dd756cceceaa5f4096152bbe213a89f56ae922a8253f0e3869a17616ab6c30784905c5b81550cc58b6a466c3c3a277e8a7345b9627fb600ace6f6b273cebd8b6110246e24a7371f81a6b17da338172413eaea2d82eff419fe95166f3044745e9a132fa9588a7e9443fec5fc95036682c7661f6449e2c0e6a778dfcb5b86a21865788a6ae8c964b0f7b07c00323f9348c939a", 0xa3, 0xfffffffffffffff8, 0x0, 0x0, r2}, &(0x7f0000000200)) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000680)={0x6, 0x1, 0x80000000, 0x57}, 0x10) accept4$alg(r2, 0x0, 0x0, 0x80800) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f00000002c0)=0x14, 0xfffffe94) write$binfmt_misc(r0, &(0x7f00000005c0)={'syz1', "a7964f1f214e2019461b2e7e3e792f2968c086b36341dc4519fa4027314d808c3b7091f968edb336eb062c36403a1558eca39cd4d182163a569cb4b43d7a0f4d781dd3d1a55de3625f357d084e5b1e61d4998804d3cc2bbfb790fc6ea6102fcaf19350c243"}, 0x69) [ 269.587617] ? sctp_add_bind_addr+0xb0/0x630 [ 269.592071] sctp_add_bind_addr+0xb0/0x630 [ 269.596798] sctp_copy_local_addr_list+0x4e1/0x610 [ 269.601785] sctp_copy_one_addr+0x20b/0xc40 [ 269.606160] sctp_bind_addr_copy+0x28c/0x970 [ 269.610617] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 269.616282] __sctp_connect+0x1108/0x1b00 [ 269.620503] sctp_connect+0x1b0/0x200 [ 269.624336] ? sctp_close+0xdb0/0xdb0 [ 269.628189] inet_dgram_connect+0x40c/0x670 [ 269.632548] ? __msan_metadata_ptr_for_load_8+0x10/0x20 2018/05/31 14:41:17 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 269.637949] ? __inet_bind+0xff0/0xff0 [ 269.641872] __sys_connect+0x41a/0x510 [ 269.645812] ? syscall_return_slowpath+0xe9/0x700 [ 269.650709] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 269.656142] __x64_sys_connect+0xd8/0x120 [ 269.660328] do_syscall_64+0x152/0x230 [ 269.664266] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 269.669483] RIP: 0033:0x455a09 [ 269.672701] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 269.680445] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 2018/05/31 14:41:17 executing program 1: [ 269.687735] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 269.695028] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 269.702321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 269.709616] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000008 2018/05/31 14:41:17 executing program 7: 2018/05/31 14:41:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3ff, &(0x7f00000005c0)="002f822f07fc10805989ec782340e8273bed1f6aabc80a71328e037a6fe03fb272f78ba44620d32ef5fa82819ef70aef580af8f95de0eee0c6266c9bc800000000000000") ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c392f16d9387d1b4dcc83543de2ca576f2bc", @ANYRES16=r2, @ANYBLOB="0104000000000000000007000000"], 0x14}, 0x1}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x80000, 0x0) getsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000340)=""/90, &(0x7f00000003c0)=0x5a) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000080)={0x6, {{0xa, 0x4e22, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x65}}}, 0x88) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000500), &(0x7f0000000540)=0xc) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x90b}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r2, 0x703, 0x70bd29, 0x4, {0xe}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4010) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000580)) 2018/05/31 14:41:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$sock_netrom_TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) connect$vsock_dgram(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:17 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:18 executing program 0 (fault-call:1 fault-nth:9): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:18 executing program 1: 2018/05/31 14:41:18 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket(0xa, 0x1, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000440)=0x2) mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='/', r3, &(0x7f0000d06ff8)='./file0\x00') socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000002400)=[{{&(0x7f0000000040)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)="0ff28cbd7473c084ed76b0c2a52b3e617b0174aa73cace3fed630dc852720be7629e0db50614", 0x26}], 0x1, &(0x7f00000004c0)=[{0x18, 0x10c, 0x8, '0@n'}, {0x100, 0x1, 0x4831, "0dc18bc711af4649b7330f0ce49f2be395e188b71a1d45d06e60ab6c556c7100f6b62fb6a419e19c0f95a4d2a605369b83bcbe9a4b1424d286ed5ecc7984353a7c2d805f06a06e7cd71f2ff990b92032488e4fc4c89e5071dff669100f44b94b353b39a54ef6cfe90b3667d61811dd21d8707414209cf5c6fdc0a3ce8004bf1d2e8747f20c01f9803f72c1195c4c8ce8aec537ebf35ee8b7ccf4ca6318d35baed6f4fbc0085ce476d0f3815d041b417fabc3a52a8d55ba31a6640e679fc1111c38c45f88e797d63e7f6f3985da4318c7d9b68f7e2b82d20b9353f5af6cf3e1e559a05203ccf22e83d8372c84e8"}, {0xc8, 0x3a, 0xd4, "b165f788ab5ad2baf4251cd3555671433155db88a4d63e51b5817d34426c412751fa06ce66b7db2180711fa7a31cd464ff18ccea3f40750d4249a69330bcb97bd8c12b668e61a87fe094324ea58fb06c4a349a576af3e47cc7eae75b12c378e41692d6670eeaf63e26ad57f18c1296e346c81e112b4b0501a4448639856790a9406ba13c1f7ea1ab210f40cad6c4faa1c52be87c2f8584b566dfb6929f485810262a9c0780deedc1484406a61bcd5b65bc"}, {0x100, 0x1ff, 0x8000, "dfbf81a41dbc5074be6ccf917d8ee02b2b73205944e4b55e1634b1c3bd7d95ce5c4cba097f33531fcada046ed57cfa755b76cea1153f8904c26246c153425423dc3a7dac1b6ccbda23a2dc4c5c798079177baaf76f06e694bf9b52571e80f0d4a9afd25f35430ecae630de72f6f0f4c759b8d813a0310dc733dc962be4e975e20a3871c76a3ff526a3141bf850bab7a1e45ed8c32f2b547965d9bf4e9fd2c307e8459a18d5a8aa17e1f23e52b2f90a590c2f18259fbb063acd8b1fae65710ed1e20444f234737d9d4bfbb8d3fa2b5267039f3fe53e4742561a2567dfaa8bdffa96818e23f8620065bf01e2e63fbc330e"}], 0x2e0, 0x80}, 0xfffffffffffffffa}, {{&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x3, @empty, 'bpq0\x00'}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000280)="f7954ae8af1df278c1aed9eaf5e97a35ce2e9696dd44a69e2ad5f22934c328c4e8757c44bbf9b6ca7f8e4f9bbe7c23db7fe008789f3c5ac8dae32d286a98052d12e4b3985641825c9f399aac2dff091f870d59ce658276e9cf3aaabddfb95f0ec8f8b1f860b2df0518c712291e0be510862692bfe76df12272c7d2ec0ccdc30d25ee", 0x82}, {&(0x7f0000000340)="7de82fb0dba466e3709e4c539facfcb3461b0ad2b2675295c4cf4cda8626345affdb22f528344b199b75a07a7ee8699774bb86f4654c805e2a1ef40673e25c4efd3e56088ee336e21c10dd73b4f3ab8e455f662be80ce2dc616a4bcca9ebd5fab9992e501a8f66e1b6287b6356e5e286ecca41517fabf3dac306bd3317b7df37e2a78995e1da5085027a3808ce", 0x8d}, {&(0x7f00000007c0)="ee2c355678df5158195697269ab470d9b7a61d0f7c622577b7541d3f584a6d2ae224718c5512d79f75c65b83a3ba6da251bda6e276963548eaf4dd4be12cc45896e5800c614c7ef81c504abb5a9446792960e2105715faaeca16249d146ddf2c62bb1d2f74d47513cd329e3e392f5001972ebceaeb97ce3da18e220c4c12e750f34fd12b83d4b7dee38f8b0a172dc24ed900a3948b4bc9", 0x97}, {&(0x7f0000000880)="8d33d6336f45c287b11d5c13c9d2e41d79d0b8ae446419470a6bac7abbbe055972cb5001cea6bff279e128cceb991ba8aa8750d29a5707c68695191ecccc6abba090969f460ec49549596bf15703d401f98bd0257b38d820d89ec34caa8cdb0b0062c2c46de543fee647199867c4df947737eeb5a51af94fc22761a8e0e3f197fe94df68f1cf95409751a8ee77f9a705db4d7f40bd096e0dc9632ebf64d608cfcbea884544cca2f3e9c57526e2d470a411d160437676ad08b3d8f9ce102568ee05cb808a882adc566d06813b2d0723e38e3ee98689ea24e85c71e8ae032310d249557abe1a38c8a0d38885c4cec5f6a73993501f31c57fa735d12ecabc", 0xfd}, {&(0x7f0000000400)="0ce299ab92258791b35b778d63c6f587c3b7ec429f2b203d2339902275dadcfb03295fe03fd5d72401b4fc8d1f418eab112635d975f07b333cdba8910370517c8b46f6daef7e970b4ee19068cc861f622e8aec6b1cc67a68c4706b4f9426a21c6f779a", 0x63}, {&(0x7f0000000980)="0ee4cf4cdc5f9329992bea052af56935a6c933403d3c50a77b9da7fba554aaa2a850a83fae295249b4c3c0520249608854c6c94fdac5a1c37ededa5d2e57b1d6259f905ad70bb5ae6a57b1cbd6891d", 0x4f}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000000a00)="1b9b610b66640714fe8afdb320ed8996bd0a181b02efb6379aa8837b774861a929273bc6aebec014ac6af1e8411a0ce0986951376846b4ac9c4dbe823c0f03bca5d8de393becf19ea4d25297891b879917d46b7c5a9b14d7b7732de14d3a13989ddc4d128304b7eca83998944ad79ea623b17cd5be8ea8c8ef11f2cae91abb1f8a71bd9ac01fc0ff02e77f6b7b8cf059131906aad196a7e6979d74fba2eda300c6f2fef0b6b08e281ddca9f55702a2c6d97cea14784257ae96670274553cf3caddbfc189920c1afd023406f2af71f8675b35be35c74310b00527d25c415ffb2b2d6481734c7dfb1e5ed62a0b49dee2fb40", 0xf1}], 0x8, &(0x7f0000000b80)=[{0xc0, 0x112, 0x0, "441a54a6903b6b7b4f6b31dbaa90d50ae9aae5d7c99af6d4cab783cfb55405e34ce60917e7595a0ce3b0e72681bfce12ebfe569f57f739c97b6b5ba832972f5bf6d6aaa280e95a5badb465b6cfc3167a9c4abbe6cad8bb3e21b3df711d90c7d88d641cb34bdb5aa553fe9d8e5dfef01f75972f2a0a79ff017faa687715af9180467d99024f248fc5619c0183e14332289831ff483c06d7ca8531fcf7ac401ac4ca71d83deab85c683e3d038f"}, {0xe8, 0x11f, 0x3, "845515905857683f7713994ee986e1e7ac81e0f61382f3d8ad3b06235022c5d42095c9f1a3de594dd760b4b18c8e32618c8a69f01b59cf8a0b27507969681c391201b2ced5eae7c0fcb723fddf1f1210f12f7a9853e5db1daec869915fd0a54b9095f896129a5b219d0d3f81e7620ca17e86947ffdc0194b7ed03940b9ba7d593132f1261ce06e688cee6f574b1490b4e9de973fc5b4a28cbfca814db4b08acbc53bd6822ce321a228c7defc1b43e8c516fbd9be63f65c950a353737e1796767d7415952453fadc03fbf14e10798d39b525e316ca05cf7"}, {0x48, 0x118, 0x1, "9ceea4201b4013b776cfa1caffd7a4e0510af0115535b7045315ba020b0718097030a82ebb2bc32c5a37dc8136047427762a79c70d2d16f6"}, {0x28, 0x117, 0xb77, "99ad3eeda3bc9d51c579a8e3f84dafeff4bef7"}, {0x70, 0x100, 0x4, "ef0b10801934442d225ec01edcd8da2fb9ea632a18ab4e8bff54754f03bc0d395add78e738abcb9d9752801644f8f12e5447619f314d12675344a36b9daab4f901700c96479d2f0f6ac5045c3c2c72562c7c0a26347b1537a6f758"}], 0x288, 0x8880}, 0x20}, {{&(0x7f0000000e40)=@generic={0xa, "7801aed926f87d3202fe90cecf2ee2321870da0c7c30b6f705f36466bd7798518b0fba181be8f2ab11638fa945f5de1ac6fc09ab71cc1860e71a61b9f382b87ddc5961c696e8ed3291d76509fd0555cb6bfb89b5a1e272b9f22a7db0399b3b222ebcaa6d94d14d8c13b74af1c0787a9d56d38fb2f76b2046dd694da2faeb"}, 0x80, &(0x7f0000002380)=[{&(0x7f0000000ec0)="7e33750f90597e0868860f2a02636140608cedf2839b1e1df3e4c92a57fb689a17af5bb461d3b456", 0x28}, {&(0x7f0000000f00)="4574f16932872129db3db2f93712e03c22d0e3b220bc4db525233ecf1cc05d27a0ab0eea940cae9439ffe5fe9ff585a530f5069bcf", 0x35}, {&(0x7f0000002040)="fb18be9716987886fe165deffb4841143d07dd5878f557b9074ada8427c3b8865db2d6272cd4e2c70a2acaa933160bd4224be6667965940e9f0f5464aee0f332bb59ddb57070b1834d9698ae9eb431f97747068a403dc0a1177888dc34a3cf6889c976f319cd1171e526f4ca05e560fdfc898e74e408767a9d7c04d6c3b9c2c89193ead91954325a9155f192ed8161db7cea2ca8b35424e6539d50f1e41af94ddfa5fb953cc00b4ca2e9909f0c23523c36aa45b15b5956ac48d8191a14b997f764e002ad86a62536fd54fad386b7935d43", 0xd1}, {&(0x7f0000000f40)="90e30ab9cb99ac6fedb977609d17111a415d3aec83dbdfeedc3566ce00604fd2612c72d85eaeed1a54f2e2e2bc9d89f7f738242627a5aabe45618adb6251154c02b739f638a5dbef381eb432a43e56b22be37849cd080b06e7be82a0306d955ea2c5c42762de4f23bbd7885e6d735398f9cdccaa38793cba085daf50ffc802f60dc5db35b6df89c30b05ca313c20acc21cc2e7", 0x93}, {&(0x7f0000002140)="4c2107f7b0dfe3d4764765eb053b8caba696c3f93b7ee60e", 0x18}, {&(0x7f0000002180)="820ca7e70707486caae709dc299dd50dc3a1d01e4896c14ecc8ae379901cf498d31e", 0x22}, {&(0x7f00000021c0)="b7b38f98922e0cab1703f9517114f523da6c05956c491ce87cb303cd9233e4ed30bbb645dd6fe680b520ac06c2756678d0a3e736ef35f6b4733ecbd8dbe11df6c103bc5a24e98b104af0500f7d3b873ba43a25d5caf6ee5ee5027570df2cdf34da5f6dd9f07eb632426ea9900d931556180bf0d001baaefca18bbe057620b71bab2c7d19cd596ba6d65c7f7c08ac63f65885f0d8efb8087acf565690d42dbe85214e038a5d0e4fe436f3a773399798c25250686e4355d8b0804b17869a0da53d6134cc3c", 0xc4}, {&(0x7f00000022c0)="5446de6e43fe043b121aa03d6326a52fba686541874d6e92bfe70397d67140f7104752095abd88fb723bf5a7179cd158c7fd0ee5f6b2c3341282a1952d5afd6a3f15730863fb22145c1466cf2b1775c6d2dc13a1cc70448be10695c093fa5f712e7ce5783d9242773c5a67ce37ba1ca128a94946b497dfdcc999d362f8d8c8ddb75890f029f7808f3641dc14a00c4c0904845d2a954ba4b9fb92874623b575d619409a1bacbb223b8636e1233787f405384e2aa74fac3e93393b8c155fea", 0xbe}], 0x8, 0x0, 0x0, 0x48010}, 0xffffffff}], 0x3, 0x0) 2018/05/31 14:41:18 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:18 executing program 7: 2018/05/31 14:41:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nfsfs\x00') r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14a7300e23372c9b55b6fa84", @ANYRES16=r4, @ANYBLOB="0104000000000000000007000000"], 0x14}, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') accept$packet(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000004c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000a00)=0xe8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000cc0)={0x0, @loopback, @multicast1}, &(0x7f0000000d00)=0xc) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000d40)={@dev, 0x0}, &(0x7f0000000d80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000e80)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000f80)=0xe8) getsockname$packet(r2, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001040)=0x14) recvmsg$kcm(r2, &(0x7f0000001400)={&(0x7f0000001080)=@can={0x0, 0x0}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001100)=""/71, 0x47}, {&(0x7f0000001180)=""/104, 0x68}, {&(0x7f0000001200)=""/22, 0x16}, {&(0x7f0000001240)=""/61, 0x3d}, {&(0x7f0000001280)=""/81, 0x51}], 0x5, &(0x7f0000001380)=""/85, 0x55, 0xfffffffffffffc00}, 0x10000) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000001840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f0000001440)={0x3b0, r5, 0x101, 0x8001, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x258, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x8001}}, {0x8, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x5f8}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x134, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x2037}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x62}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r14}}}]}}]}, 0x3b0}, 0x1}, 0x800) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000100)={0xdc}, 0x1) 2018/05/31 14:41:18 executing program 2: socketpair$inet(0x2, 0x1, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r1, 0xd3b, 0x200000000000000, 0x8}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) [ 270.154001] FAULT_INJECTION: forcing a failure. [ 270.154001] name failslab, interval 1, probability 0, space 0, times 0 [ 270.165534] CPU: 1 PID: 16964 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 270.172920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.182297] Call Trace: [ 270.184929] dump_stack+0x185/0x1d0 [ 270.188601] should_fail+0x87b/0xab0 [ 270.192358] __should_failslab+0x278/0x2a0 [ 270.196633] should_failslab+0x29/0x70 [ 270.200557] __kmalloc+0xc5/0x350 [ 270.204059] ? sctp_add_bind_addr+0xb0/0x630 [ 270.208519] sctp_add_bind_addr+0xb0/0x630 [ 270.212810] sctp_copy_local_addr_list+0x4e1/0x610 [ 270.217797] sctp_copy_one_addr+0x20b/0xc40 [ 270.222168] sctp_bind_addr_copy+0x28c/0x970 [ 270.226624] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 270.232201] __sctp_connect+0x1108/0x1b00 [ 270.236424] sctp_connect+0x1b0/0x200 [ 270.240271] ? sctp_close+0xdb0/0xdb0 [ 270.244129] inet_dgram_connect+0x40c/0x670 [ 270.248488] ? __msan_metadata_ptr_for_load_8+0x10/0x20 2018/05/31 14:41:18 executing program 7: 2018/05/31 14:41:18 executing program 1: [ 270.253891] ? __inet_bind+0xff0/0xff0 [ 270.257819] __sys_connect+0x41a/0x510 [ 270.261768] ? syscall_return_slowpath+0xe9/0x700 [ 270.266663] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 270.272102] __x64_sys_connect+0xd8/0x120 [ 270.276297] do_syscall_64+0x152/0x230 [ 270.280237] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 270.285452] RIP: 0033:0x455a09 [ 270.288662] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 270.297114] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 2018/05/31 14:41:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f00000000c0)={@dev, @multicast2}, &(0x7f0000000140)=0x8) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) [ 270.304409] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 270.311702] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 270.318999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 270.326310] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000009 2018/05/31 14:41:18 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:18 executing program 1: 2018/05/31 14:41:18 executing program 7: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") write(r0, &(0x7f0000000300)="da2b6e7b6e3ac7e9ec7a11e188698159e501844c", 0x14) 2018/05/31 14:41:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010400000000000000e50600000029e985257f637b484a3143cb06edb61456a90071db251a47ea4328688ff1514badf60799f4bb772525dddfda5098584b43"], 0x14}, 0x1}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x120) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x200, 0x0, 0x10000, 0x3}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f00000000c0)={r4, 0x100000001}) 2018/05/31 14:41:18 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x2) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000140)=""/111) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) 2018/05/31 14:41:19 executing program 0 (fault-call:1 fault-nth:10): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:19 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="37c0a2707ece535c370800a0d9cd1e") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="efffffffa24ee35a43b33aae0af1f6a458797b508431f094b607d164fdc9ca441ead6177b31f9042571b8a85aade38888f0b9e000000000000000000000000000000f1dfe6e58b83c9334e6edf9daa3e904608f21accea94b180ce88a7eb10ad898dba8a1e00f2df311b05f190f0e82a358128319295c737c74aa4520bfcde9fa3466e95c462d2783bb246d244ba2316b18cff4ca0264f84102adb8508cf064428", @ANYRES16=r2, @ANYBLOB="0104000000000000000007000000"], 0x14}, 0x1}, 0x0) 2018/05/31 14:41:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x9, 0x200000) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x800, 0x400000) connect$vsock_dgram(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @hyper}, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4800000}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:19 executing program 7: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="d7", 0x1, 0xfffffffffffffffd) 2018/05/31 14:41:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) poll(&(0x7f0000000040)=[{r0, 0x20}, {r0, 0x2}, {r1, 0x8000}, {r1}, {r0, 0x5060}, {r1, 0x1000}, {r0, 0x400}, {r0, 0x8}], 0x8, 0x6) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x4, 0x7, 0x2, 0xf839, 0xd5def87}, 0x14) r2 = socket$inet6(0xa, 0x2, 0x0) ftruncate(r2, 0xc000000000) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000040), 0x0, 0x0) 2018/05/31 14:41:19 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket(0xa, 0x1, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000440)=0x2) mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='/', r3, &(0x7f0000d06ff8)='./file0\x00') socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:19 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "794842d6f26faa83e5271627122aa0d0f26619e19104997c433f8271b4965c5db5ee0c42676316e4bfd5627180ff"}, 0x39) 2018/05/31 14:41:19 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xd1, &(0x7f0000000100)=""/209}, &(0x7f0000000280), &(0x7f0000000000)=""/38, 0x0, 0x0, 0x0, &(0x7f0000000040)}) poll(&(0x7f00000002c0)=[{r0, 0xd31b}], 0x1, 0x0) 2018/05/31 14:41:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000000000008}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:19 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket(0xa, 0x1, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000440)=0x2) mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='/', r3, &(0x7f0000d06ff8)='./file0\x00') ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000019007f5300fe01b2a4a280930a06000000a8430891000000390009000a000c00060000001900a30700000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 2018/05/31 14:41:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000040), 0x47, 0x0) 2018/05/31 14:41:19 executing program 7: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) close(r0) 2018/05/31 14:41:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) msgget(0x1, 0x0) fdatasync(r0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) [ 271.884194] FAULT_INJECTION: forcing a failure. [ 271.884194] name failslab, interval 1, probability 0, space 0, times 0 [ 271.895585] CPU: 1 PID: 17021 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 271.902987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.912380] Call Trace: [ 271.915022] dump_stack+0x185/0x1d0 [ 271.918796] should_fail+0x87b/0xab0 [ 271.922569] __should_failslab+0x278/0x2a0 [ 271.926865] should_failslab+0x29/0x70 [ 271.930798] __kmalloc+0xc5/0x350 [ 271.934306] ? sctp_add_bind_addr+0xb0/0x630 [ 271.938773] sctp_add_bind_addr+0xb0/0x630 [ 271.943063] sctp_copy_local_addr_list+0x4e1/0x610 [ 271.948057] sctp_copy_one_addr+0x20b/0xc40 [ 271.952432] sctp_bind_addr_copy+0x28c/0x970 [ 271.956891] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 271.962474] __sctp_connect+0x1108/0x1b00 [ 271.966704] sctp_connect+0x1b0/0x200 [ 271.970548] ? sctp_close+0xdb0/0xdb0 [ 271.974406] inet_dgram_connect+0x40c/0x670 [ 271.978771] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 271.984181] ? __inet_bind+0xff0/0xff0 [ 271.988140] __sys_connect+0x41a/0x510 [ 271.992091] ? syscall_return_slowpath+0xe9/0x700 [ 271.996996] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 272.002442] __x64_sys_connect+0xd8/0x120 [ 272.006632] do_syscall_64+0x152/0x230 [ 272.010572] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 272.015796] RIP: 0033:0x455a09 [ 272.019030] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 272.026782] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 272.034084] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 272.041393] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 272.048698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 272.056002] R13: 000000000000005b R14: 00000000006f5928 R15: 000000000000000a 2018/05/31 14:41:20 executing program 0 (fault-call:1 fault-nth:11): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000040)={{0x0, 0x2710}, {r3, r4/1000+30000}}, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) r5 = dup2(r0, r1) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000100)) sendmmsg(r2, &(0x7f0000000040), 0x47, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="1e547839affa112f95b0c463ac5647748488fc16d454edf46cad323b59b41c87577b075f9addd5ff8ddb90fe91be96f49de83fee0628b7f1976815f6da85ed6fd7ad1121a40c", 0x46) 2018/05/31 14:41:20 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket(0xa, 0x1, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000440)=0x2) mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='/', r3, &(0x7f0000d06ff8)='./file0\x00') ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:20 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000002c0)={'filter\x00', 0xdd, "9a1d81287a76acda602fd6e2d6fdc4b1d97a7d0a0ae76fe45029c906c2518d90af852ae93c2b7bfcffaca6e1b62072619245b50a3414c1897b8ce0ad5f6507421985eb454718b2b19382306cfdcab3bb68d4097c67465cd8b41001c8b1f19c2ca15593cc059b863bc51ddedd30139e7229fb5fccbe86799313a81f4beea05041b8e9f140d02a0284058c9a01ca87658c1596caf1e6332970617d9ee04861f1204c7024b58745216aaa3425aa1b0cd360fafc33192efe4b0703d8ad43a7c0433f88500163e8a957dd80a64b09dc9f4abf2ad4a0383f55d271314df4b0ba"}, &(0x7f0000000000)=0x101) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9de05e", @ANYRES16=r2, @ANYBLOB="0104000000000000000007000000"], 0x14}, 0x1}, 0x0) 2018/05/31 14:41:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000140)={0x7ff, 0xfff, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'erspan0\x00'}) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400000, 0x40) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f00000000c0)) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000180)=""/221) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:20 executing program 1: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400), &(0x7f0000000440)=0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000340)={0x0, 0x80, 0x0, 'queue1\x00'}) 2018/05/31 14:41:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 272.274114] FAULT_INJECTION: forcing a failure. [ 272.274114] name failslab, interval 1, probability 0, space 0, times 0 [ 272.285523] CPU: 0 PID: 17071 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 272.292922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.302314] Call Trace: [ 272.304955] dump_stack+0x185/0x1d0 [ 272.308627] should_fail+0x87b/0xab0 [ 272.312387] __should_failslab+0x278/0x2a0 [ 272.316692] should_failslab+0x29/0x70 [ 272.320651] __kmalloc+0xc5/0x350 [ 272.324153] ? sctp_add_bind_addr+0xb0/0x630 [ 272.328613] sctp_add_bind_addr+0xb0/0x630 [ 272.332912] sctp_copy_local_addr_list+0x4e1/0x610 [ 272.337904] sctp_copy_one_addr+0x20b/0xc40 [ 272.342294] sctp_bind_addr_copy+0x28c/0x970 [ 272.346766] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 272.352354] __sctp_connect+0x1108/0x1b00 [ 272.356593] sctp_connect+0x1b0/0x200 [ 272.360442] ? sctp_close+0xdb0/0xdb0 [ 272.364303] inet_dgram_connect+0x40c/0x670 [ 272.368669] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 272.374085] ? __inet_bind+0xff0/0xff0 [ 272.378032] __sys_connect+0x41a/0x510 [ 272.382000] ? syscall_return_slowpath+0xe9/0x700 [ 272.386909] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 272.392361] __x64_sys_connect+0xd8/0x120 [ 272.396556] do_syscall_64+0x152/0x230 [ 272.400498] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 272.405719] RIP: 0033:0x455a09 [ 272.408939] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 272.416714] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 2018/05/31 14:41:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x502, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000002c0)={@loopback={0x0, 0x1}, r2}, 0x14) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r4, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x1000, @mcast1={0xff, 0x1, [], 0x1}, 0x3}, 0x1c) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x0) 2018/05/31 14:41:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 272.424035] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 272.431341] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 272.438645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 272.445947] R13: 000000000000005b R14: 00000000006f5928 R15: 000000000000000b 2018/05/31 14:41:20 executing program 0 (fault-call:1 fault-nth:12): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'tunl0\x00'}, 0x18) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000400ae8fca7ca278db35dcd23d9460215026d832a6e24066706fce5e132f28189b45734a00a0ab6fdcea06a0aa5aa1f0947078a39cd9591677387cb5ad88"], 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000180)={0x8, 0x10001, 0x1}) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100), 0x14) r3 = add_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)="4648158ab7d18d9a8008e834007fe55026e417bcd518b0489b2d40b80ac26889817712324066015704447984d4d767df567e96ec604e64bf40b9ed34d04e6f1799bfeb17251f17bda957c4817f258cc0", 0x50, 0xfffffffffffffffa) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r3) r4 = request_key(&(0x7f0000000300)='big_key\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000380)="2f144000", 0xfffffffffffffff9) set_thread_area(&(0x7f0000000080)={0x6, 0x0, 0x4000, 0xdf70, 0x5, 0x6c92, 0x401, 0x63, 0x143d, 0xb8}) keyctl$link(0x8, r3, r4) 2018/05/31 14:41:20 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket(0xa, 0x1, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000440)=0x2) mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='/', r3, &(0x7f0000d06ff8)='./file0\x00') ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000080)=0xe86, &(0x7f00000000c0)=0x4) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:20 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10000, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2b, 'io', 0x20}, {0x2f, 'rdma', 0x20}, {0x2d, 'pids', 0x20}, {0x2f, 'pids', 0x20}]}, 0x16) 2018/05/31 14:41:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@dev={0xfe, 0x80, [], 0x13}, @empty, @loopback={0x0, 0x1}, 0xffffffff00000000, 0x7, 0xd65, 0x400, 0x9, 0x1000082, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r3, &(0x7f0000000040), 0x47, 0x0) 2018/05/31 14:41:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 272.848458] FAULT_INJECTION: forcing a failure. [ 272.848458] name failslab, interval 1, probability 0, space 0, times 0 [ 272.860126] CPU: 1 PID: 17119 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 272.867530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.876919] Call Trace: [ 272.879570] dump_stack+0x185/0x1d0 [ 272.883258] should_fail+0x87b/0xab0 [ 272.887033] __should_failslab+0x278/0x2a0 [ 272.891321] should_failslab+0x29/0x70 [ 272.895259] __kmalloc+0xc5/0x350 [ 272.898769] ? sctp_v4_cmp_addr+0x1b6/0x250 [ 272.903136] ? sctp_add_bind_addr+0xb0/0x630 [ 272.907601] sctp_add_bind_addr+0xb0/0x630 [ 272.911900] sctp_copy_local_addr_list+0x4e1/0x610 [ 272.916892] sctp_copy_one_addr+0x20b/0xc40 [ 272.921283] sctp_bind_addr_copy+0x28c/0x970 [ 272.925753] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 272.931344] __sctp_connect+0x1108/0x1b00 [ 272.935579] sctp_connect+0x1b0/0x200 [ 272.939428] ? sctp_close+0xdb0/0xdb0 [ 272.943299] inet_dgram_connect+0x40c/0x670 2018/05/31 14:41:20 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x98, r1, 0x90c, 0x70bd26, 0x25dfdbfe, {0x7}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x401}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfa6}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r2 = memfd_create(&(0x7f0000000280)='em1)\x00', 0x2) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000400)={0x0, 0x2}) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="100002000000fbdbdf251000000064000100080004004e20000014000300fe80000000000000000000000000001d080004004e240000080009003a0000000800060073656400080001000a0000000c0007002f00000008000000080009006a000000080002003c00000008000900430000003400020008000b000a000000080007000004000008000400000400c47d6c4c8ba247e4000800070008000000080006000400000008000600cf0000002800020014000100ac1414bb000000000000000000000000080002004e24000008000400050000000800050007000000080004000000000025080600110700000800050080000000"], 0xf4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$ax25_int(r2, 0x101, 0x7, &(0x7f0000000600)=0x3, 0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000f004f68ea5e2e91561cadee734ca09613164aea61c44f2e1d2bb71b271c1ef5b4db417beb16d87918febaf831fcdf20dbd1dda3127ae4bdd39d639a37afa6b8cc19e72c5e883911abd", @ANYRES16=r3, @ANYBLOB="0104000000000000000007204200"], 0x3}, 0x1, 0x0, 0x0, 0x815}, 0x0) [ 272.947661] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 272.953068] ? __inet_bind+0xff0/0xff0 [ 272.956999] __sys_connect+0x41a/0x510 [ 272.960944] ? syscall_return_slowpath+0xe9/0x700 [ 272.965855] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 272.971293] __x64_sys_connect+0xd8/0x120 [ 272.975490] do_syscall_64+0x152/0x230 [ 272.979427] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 272.984644] RIP: 0033:0x455a09 [ 272.987855] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 2018/05/31 14:41:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:21 executing program 2: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200, 0x0) connect$rds(r3, &(0x7f0000000180)={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) r4 = open(&(0x7f0000000340)='./file0\x00', 0x200000, 0x2) accept4$inet(r4, 0x0, &(0x7f0000000380), 0x80800) [ 272.995611] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 273.002912] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 273.010218] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 273.017520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 273.024822] R13: 000000000000005b R14: 00000000006f5928 R15: 000000000000000c [ 273.560183] IPVS: sync thread started: state = MASTER, mcast_ifn = tunl0, syncid = 0, id = 0 2018/05/31 14:41:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x2, 0x0, 0x7f, 0x5, 0x7, 0x80000001, 0x4294, 0xffffffff80000001, 0x1b, 0x7ff, 0x3, 0x800}) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @random="cf33236e8cee"}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffffffff}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r3, &(0x7f0000000040), 0x47, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000000)=0x77878f0b) 2018/05/31 14:41:21 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r1, r2, 0xf, 0x3}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="240500000084e803972bacbc176d236fee61c5612b2ab02f7dcbb27529ccf3e2d7a03b54c5cc67c7f1de757f30ce279165c5b9d41650848c677091ebb6"], 0x14}, 0x1}, 0x0) 2018/05/31 14:41:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f00000000c0)={0x1, 0x2, 0x3, 0xfffffffffffff800}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:21 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket(0xa, 0x1, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000440)=0x2) mkdir(&(0x7f0000014000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:21 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x3ff, 0x1, 0x0, 0x1}, 0x2c) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='veth1_to_bond\x00') ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) migrate_pages(r3, 0x81, &(0x7f00000000c0)=0xbb7, &(0x7f0000000100)=0x102) 2018/05/31 14:41:21 executing program 0 (fault-call:1 fault-nth:13): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) [ 273.945461] FAULT_INJECTION: forcing a failure. [ 273.945461] name failslab, interval 1, probability 0, space 0, times 0 [ 273.956942] CPU: 0 PID: 17160 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 273.964343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.973745] Call Trace: [ 273.976389] dump_stack+0x185/0x1d0 [ 273.980075] should_fail+0x87b/0xab0 [ 273.983844] __should_failslab+0x278/0x2a0 [ 273.988126] should_failslab+0x29/0x70 [ 273.992056] __kmalloc+0xc5/0x350 [ 273.995546] ? sctp_v4_cmp_addr+0x166/0x250 [ 273.999932] ? sctp_add_bind_addr+0xb0/0x630 [ 274.004386] sctp_add_bind_addr+0xb0/0x630 [ 274.008676] sctp_copy_local_addr_list+0x4e1/0x610 [ 274.013660] sctp_copy_one_addr+0x20b/0xc40 [ 274.018036] sctp_bind_addr_copy+0x28c/0x970 [ 274.022511] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 274.028097] __sctp_connect+0x1108/0x1b00 [ 274.032325] sctp_connect+0x1b0/0x200 [ 274.036173] ? sctp_close+0xdb0/0xdb0 [ 274.040038] inet_dgram_connect+0x40c/0x670 [ 274.044402] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 274.049818] ? __inet_bind+0xff0/0xff0 [ 274.053755] __sys_connect+0x41a/0x510 [ 274.057714] ? syscall_return_slowpath+0xe9/0x700 [ 274.062623] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 274.068064] __x64_sys_connect+0xd8/0x120 [ 274.072262] do_syscall_64+0x152/0x230 [ 274.076205] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 274.081430] RIP: 0033:0x455a09 [ 274.084644] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 2018/05/31 14:41:22 executing program 2: r0 = socket$inet6(0xa, 0x8000e, 0x20) r1 = syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0x326, 0x4000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000003c0)={r2}) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f00000000c0)={0x5, 0xa9, 0x6, 0x2, 0x5}) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000140)=""/249, &(0x7f0000000280)=0xf9) r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(r3, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @reserved=0x1}, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:22 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000008}, 0xfffffffffffffec7) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) [ 274.092406] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 274.099712] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 274.107024] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 274.114335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 274.121642] R13: 000000000000005b R14: 00000000006f5928 R15: 000000000000000d 2018/05/31 14:41:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) dup2(r0, r0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x6a50fa1c}, 0x8) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01048d4e000000000000070000009b7472af56d69be80925f82c55c62d8a89bcd39b8ceefa979b5eace7ad552f796883da6e860235501d11677b556bf4b3efe3f92ea8e51da69ce543b7696fdf7c8a4a43f9b4823b5b11eacd9d9094ca07e15d"], 0x14}, 0x1}, 0x0) 2018/05/31 14:41:22 executing program 0 (fault-call:1 fault-nth:14): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:22 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000367fed)='/dev/snd/controlC#\x00', 0xfffffffffffffffd, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffff, 0x800) openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0xa00) 2018/05/31 14:41:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 274.337520] FAULT_INJECTION: forcing a failure. [ 274.337520] name failslab, interval 1, probability 0, space 0, times 0 [ 274.348950] CPU: 1 PID: 17187 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 274.356334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.365708] Call Trace: [ 274.368340] dump_stack+0x185/0x1d0 [ 274.372013] should_fail+0x87b/0xab0 [ 274.375772] __should_failslab+0x278/0x2a0 [ 274.380047] should_failslab+0x29/0x70 [ 274.383965] __kmalloc+0xc5/0x350 [ 274.387465] ? sctp_v4_cmp_addr+0x166/0x250 [ 274.391835] ? sctp_add_bind_addr+0xb0/0x630 [ 274.396292] sctp_add_bind_addr+0xb0/0x630 [ 274.400569] ? xfs_symlink+0x1718/0x2fe0 [ 274.404682] sctp_copy_local_addr_list+0x4e1/0x610 [ 274.409666] sctp_copy_one_addr+0x20b/0xc40 [ 274.414038] sctp_bind_addr_copy+0x28c/0x970 [ 274.418499] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 274.424080] __sctp_connect+0x1108/0x1b00 [ 274.428306] sctp_connect+0x1b0/0x200 [ 274.432144] ? sctp_close+0xdb0/0xdb0 [ 274.435996] inet_dgram_connect+0x40c/0x670 [ 274.440350] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 274.445752] ? __inet_bind+0xff0/0xff0 [ 274.449676] __sys_connect+0x41a/0x510 [ 274.453623] ? syscall_return_slowpath+0xe9/0x700 [ 274.458520] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 274.463961] __x64_sys_connect+0xd8/0x120 [ 274.468149] do_syscall_64+0x152/0x230 [ 274.472079] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 274.477292] RIP: 0033:0x455a09 [ 274.480503] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 274.488252] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 274.495547] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 274.502841] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 274.510130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 274.517426] R13: 000000000000005b R14: 00000000006f5928 R15: 000000000000000e 2018/05/31 14:41:22 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xffffffffffffffbc, 0x7, 0x7ff, 0x1fffe000000000, 0x7}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r1, 0x10000, 0x61}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:22 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x5, 0x8080) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000001c0)=0x29) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000cce4acc84ad800000008000000000000", @ANYRES16=r3, @ANYBLOB="010c2bbd7000ffdbdf250800000024000300080007004e20000008000500ac1414aa080007004e24000008000500ac1414aa08000500040000001400030008000500ac141411080007004e210000140001000800020094ad00000800050002000000180001000c0007001000000008000000080009007c000000"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x800) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54) 2018/05/31 14:41:22 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket(0xa, 0x1, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000440)=0x2) mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:22 executing program 1: bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x11400018}, 0xc) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x4000, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000100)={'nr0\x00', 0x80000001}) getdents64(r0, &(0x7f0000000080)=""/121, 0x79) 2018/05/31 14:41:22 executing program 0 (fault-call:1 fault-nth:15): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:22 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000040), 0x47, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)={0x0, 0x9, 0x2397}) [ 274.680657] FAULT_INJECTION: forcing a failure. [ 274.680657] name failslab, interval 1, probability 0, space 0, times 0 [ 274.692053] CPU: 1 PID: 17218 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 274.699447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.708824] Call Trace: [ 274.711458] dump_stack+0x185/0x1d0 [ 274.715129] should_fail+0x87b/0xab0 [ 274.718888] __should_failslab+0x278/0x2a0 [ 274.723163] should_failslab+0x29/0x70 [ 274.727091] __kmalloc+0xc5/0x350 2018/05/31 14:41:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:22 executing program 2: r0 = socket$inet6(0xa, 0xb, 0x4000000000000002) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200000, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000140)=r0) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) tkill(r3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000180)=0x5, 0x4) [ 274.730577] ? sctp_v4_cmp_addr+0x166/0x250 [ 274.734939] ? sctp_add_bind_addr+0xb0/0x630 [ 274.739386] sctp_add_bind_addr+0xb0/0x630 [ 274.743664] sctp_copy_local_addr_list+0x4e1/0x610 [ 274.748635] sctp_copy_one_addr+0x20b/0xc40 [ 274.753006] sctp_bind_addr_copy+0x28c/0x970 [ 274.757462] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 274.763042] __sctp_connect+0x1108/0x1b00 [ 274.767276] sctp_connect+0x1b0/0x200 [ 274.771121] ? sctp_close+0xdb0/0xdb0 [ 274.774981] inet_dgram_connect+0x40c/0x670 [ 274.779339] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 274.784741] ? __inet_bind+0xff0/0xff0 [ 274.788664] __sys_connect+0x41a/0x510 [ 274.792606] ? syscall_return_slowpath+0xe9/0x700 [ 274.797507] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 274.802937] __x64_sys_connect+0xd8/0x120 [ 274.807127] do_syscall_64+0x152/0x230 [ 274.811055] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 274.816267] RIP: 0033:0x455a09 [ 274.819474] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 2018/05/31 14:41:22 executing program 1: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)=0x0) get_robust_list(r2, &(0x7f0000000300)=&(0x7f00000002c0)={&(0x7f0000000200)={&(0x7f00000001c0)}, 0x0, &(0x7f0000000280)={&(0x7f0000000240)}}, &(0x7f0000000340)=0x18) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000380)=@req3={0x39, 0x893b, 0x6, 0x9, 0x1, 0x7f, 0x80000000}, 0x14) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r1}) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r1, r3}) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 2018/05/31 14:41:22 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket(0xa, 0x1, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000440)=0x2) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) [ 274.827227] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 274.834521] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 274.841817] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 274.849114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 274.856411] R13: 000000000000005b R14: 00000000006f5928 R15: 000000000000000f 2018/05/31 14:41:22 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:23 executing program 6: r0 = socket$inet6(0xa, 0x80000, 0x222000000000c) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@local={0xfe, 0x80, [], 0xaa}, r3}, 0x14) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000040), 0x47, 0x0) 2018/05/31 14:41:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @reserved=0x1}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x1, 0x20}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0x8, 0x10}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$netlink(r0, &(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x3, 0x0, 0x4}, 0xc, &(0x7f00000014c0)={&(0x7f0000001380)=@newsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in=@local={0xac, 0x14, 0x14, 0xaa}}, {@in=@multicast1=0xe0000001, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}, 0x1}, 0x8000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x280000, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000080)=""/214) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0xb55, 0x0, 0x1, 0x3}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000001c0)={0x3132d151, r2, 0x10002, 0x7fffffff}) 2018/05/31 14:41:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000bf", @ANYRES16=r2, @ANYBLOB="0104000000000000000007000000"], 0x14}, 0x1}, 0x0) 2018/05/31 14:41:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket(0xa, 0x1, 0x0) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2000) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x9, 0x20}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r2, 0x9000000000000}, 0x8) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:23 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) creat(&(0x7f0000000000)='./file0\x00', 0x2) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000040), 0x47, 0x0) 2018/05/31 14:41:23 executing program 0 (fault-call:1 fault-nth:16): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) [ 275.430984] FAULT_INJECTION: forcing a failure. [ 275.430984] name failslab, interval 1, probability 0, space 0, times 0 [ 275.442462] CPU: 1 PID: 17278 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 275.449856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.459238] Call Trace: [ 275.461870] dump_stack+0x185/0x1d0 [ 275.465541] should_fail+0x87b/0xab0 [ 275.469306] __should_failslab+0x278/0x2a0 [ 275.473588] should_failslab+0x29/0x70 [ 275.477509] __kmalloc+0xc5/0x350 2018/05/31 14:41:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}, 0x0, 0x3f, 0x0, "2dbeafb806cd9f67b7c5abf955577177bdea2d3dfbf2885b8d96f1a3d97d021a11345b70c3327c78d6b10d023f7f8e7c177417b5e3e798a731b7c3e6aa36e167435e093acf5380f48e5ecd92c2fc0806"}, 0xd8) sendto$inet6(r1, &(0x7f0000000040), 0x113, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r1}) [ 275.480988] ? sctp_v4_cmp_addr+0x166/0x250 [ 275.485425] ? sctp_add_bind_addr+0xb0/0x630 [ 275.489878] sctp_add_bind_addr+0xb0/0x630 [ 275.494165] sctp_copy_local_addr_list+0x4e1/0x610 [ 275.499142] sctp_copy_one_addr+0x20b/0xc40 [ 275.503515] sctp_bind_addr_copy+0x28c/0x970 [ 275.507972] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 275.513553] __sctp_connect+0x1108/0x1b00 [ 275.517773] sctp_connect+0x1b0/0x200 [ 275.521610] ? sctp_close+0xdb0/0xdb0 [ 275.525465] inet_dgram_connect+0x40c/0x670 [ 275.529822] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 275.535234] ? __inet_bind+0xff0/0xff0 [ 275.539159] __sys_connect+0x41a/0x510 [ 275.543105] ? syscall_return_slowpath+0xe9/0x700 [ 275.548005] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 275.553445] __x64_sys_connect+0xd8/0x120 [ 275.557639] do_syscall_64+0x152/0x230 [ 275.561571] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 275.566786] RIP: 0033:0x455a09 [ 275.569996] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 275.577742] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 275.585048] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 275.592346] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 275.599641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 275.606934] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000010 2018/05/31 14:41:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="000010004c4c45f1f7e983741927c3b26af6b9abbc62c2504a9cb4d13d52e40ca1a6c8a9dc2b82dd225042346dfd7f4eb48c3aac27a99cdbd97727566711c3b8a505bc58343352735eb83f347e1b3a3a93c730f5330290357ee3598e3d60a0d916d4468c7a1f4f28bf38f0e7be9c3bdbf6bdd259c8d2f9bfa53369bad142e5dd6df0a7685e05a3547f3f2049", @ANYRES16=r2, @ANYBLOB="0104000000000000000007000000"], 0x14}, 0x1}, 0x0) 2018/05/31 14:41:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:23 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @any=0xffffffff}, 0xffffffd8) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x14, 0x4) socket$netlink(0x10, 0x3, 0x3) 2018/05/31 14:41:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xe8) r4 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000100)='IPVS\x00', 0xfffffffffffffffa) keyctl$get_persistent(0x16, r3, r4) 2018/05/31 14:41:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:23 executing program 0 (fault-call:1 fault-nth:17): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet6(0xa, 0x2, 0x0) read(r1, &(0x7f0000000000)=""/159, 0x9f) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000040), 0x47, 0x0) [ 275.992695] FAULT_INJECTION: forcing a failure. [ 275.992695] name failslab, interval 1, probability 0, space 0, times 0 [ 276.004230] CPU: 0 PID: 17328 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 276.011625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.021005] Call Trace: [ 276.023636] dump_stack+0x185/0x1d0 [ 276.027304] should_fail+0x87b/0xab0 [ 276.031089] __should_failslab+0x278/0x2a0 [ 276.035384] should_failslab+0x29/0x70 [ 276.039307] __kmalloc+0xc5/0x350 [ 276.042794] ? sctp_v4_cmp_addr+0x166/0x250 [ 276.047180] ? sctp_add_bind_addr+0xb0/0x630 [ 276.051631] sctp_add_bind_addr+0xb0/0x630 [ 276.055915] sctp_copy_local_addr_list+0x4e1/0x610 [ 276.060894] sctp_copy_one_addr+0x20b/0xc40 [ 276.065265] sctp_bind_addr_copy+0x28c/0x970 [ 276.069762] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 276.075335] __sctp_connect+0x1108/0x1b00 [ 276.079555] sctp_connect+0x1b0/0x200 [ 276.083388] ? sctp_close+0xdb0/0xdb0 [ 276.087240] inet_dgram_connect+0x40c/0x670 [ 276.091597] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 276.097001] ? __inet_bind+0xff0/0xff0 [ 276.100933] __sys_connect+0x41a/0x510 [ 276.104875] ? syscall_return_slowpath+0xe9/0x700 [ 276.109772] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 276.115205] __x64_sys_connect+0xd8/0x120 [ 276.119390] do_syscall_64+0x152/0x230 [ 276.123322] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 276.128535] RIP: 0033:0x455a09 [ 276.131753] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 2018/05/31 14:41:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000100)={0x3, r1}) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x208502) getsockname$packet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x14) 2018/05/31 14:41:24 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:24 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:24 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x890e, &(0x7f00000000c0)="0047fc2f07d82c992409705fe47c486d4e492ce93ddd6821bf062bdda1e3646dd91e60") getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) 2018/05/31 14:41:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 276.139502] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 276.146791] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 276.154081] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 276.161372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 276.168664] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000011 2018/05/31 14:41:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x151) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000180)={0x5, 0x4, 0x5, 0x9, &(0x7f0000000080)=[{}, {}, {}, {}]}) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000000)) 2018/05/31 14:41:24 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x200) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140)={0x100}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xfffffeda) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x5}, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast2={0xff, 0x2, [], 0x1}, 0x8, 0x1, 0xff, 0x4, 0x8000, 0xa1c, 0x800}, &(0x7f00000001c0)=0x20) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xffffffffffffffe1, 0x48a00) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x194) 2018/05/31 14:41:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:24 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:24 executing program 0 (fault-call:1 fault-nth:18): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:24 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x8000, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="aa207c3df206e0df5facd9c7831e97fe1bffe020185ad4938679a270f12052d7ae97e3cbe53804ce43d92df03acd5c4bfc2769dcb1a6b9e78b4f37c0a7b4200ea0535f0472e37a927e5e29a03036645ed9e7c5565611d5ce8018026e03e690dc3472475b73752b284a669e4bd20782a0749b0c78c4703c103d8c37496042065bffdbdd62398f9279bf5a83a3cf1048e1a6245a8001ccbb9b3a053dcece9e06f91952cf5310646087bd36c506917ab2d73ceaa96a6c465db411", 0xb9, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0xce6a}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket(0x1, 0x80f, 0x80000001) getsockopt$llc_int(r2, 0x10c, 0xe8ab6e72127949c, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="702710000000"], 0x14}, 0x1}, 0x0) [ 276.524543] FAULT_INJECTION: forcing a failure. [ 276.524543] name failslab, interval 1, probability 0, space 0, times 0 [ 276.535918] CPU: 0 PID: 17366 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 276.543317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.552703] Call Trace: [ 276.555350] dump_stack+0x185/0x1d0 [ 276.559029] should_fail+0x87b/0xab0 [ 276.562797] __should_failslab+0x278/0x2a0 [ 276.567076] should_failslab+0x29/0x70 [ 276.570999] __kmalloc+0xc5/0x350 [ 276.574506] ? sctp_v4_cmp_addr+0x166/0x250 [ 276.578868] ? sctp_add_bind_addr+0xb0/0x630 [ 276.583324] sctp_add_bind_addr+0xb0/0x630 [ 276.587613] sctp_copy_local_addr_list+0x4e1/0x610 [ 276.592591] sctp_copy_one_addr+0x20b/0xc40 [ 276.596972] sctp_bind_addr_copy+0x28c/0x970 [ 276.601428] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 276.607030] __sctp_connect+0x1108/0x1b00 [ 276.611255] sctp_connect+0x1b0/0x200 [ 276.615093] ? sctp_close+0xdb0/0xdb0 [ 276.618948] inet_dgram_connect+0x40c/0x670 [ 276.623305] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 276.628704] ? __inet_bind+0xff0/0xff0 [ 276.632655] __sys_connect+0x41a/0x510 [ 276.636599] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 276.642017] ? syscall_trace_enter+0x90f/0xf90 [ 276.646658] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 276.652097] __x64_sys_connect+0xd8/0x120 [ 276.656285] do_syscall_64+0x152/0x230 [ 276.660217] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 276.665434] RIP: 0033:0x455a09 2018/05/31 14:41:24 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x4, 0x600001}, 0xffffffffffffff48) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:24 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 276.668643] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 276.676382] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 276.683680] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 276.690979] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 276.698269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 276.705562] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000012 2018/05/31 14:41:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:25 executing program 0 (fault-call:1 fault-nth:19): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) r2 = semget(0x0, 0x4, 0x220) semctl$GETVAL(r2, 0x0, 0xc, &(0x7f0000000440)=""/187) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)=0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f0000000340)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0]) sendmsg$netlink(r1, &(0x7f0000000400)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000140)={0x9c, 0x29, 0x300, 0x70bd29, 0x25dfdbfc, "", [@generic="059add92849b811ec75b51e9581017f944f1e7abd584d1e1ee1714c7d8c9399f8d13d122a122dd230cde98b6f62b4e9f2d37b3f9146099776b28fff49d5493776468e5423689875f7e530eb8ea5b67b285715572bb14da5e6f2d8657f4eff1b0c309bf394bfb91ea107e79b3497e2fcebd9966490f103daa", @typed={0x14, 0x2, @ipv6=@local={0xfe, 0x80, [], 0xaa}}]}, 0x9c}], 0x1, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r1, r1]}], 0x68, 0x10}, 0x800) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:25 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x930, 0x42) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000080)={{0x0, 0x0, 0x8, 0x2cf6}, 0x0, 0x2, 0x6, 0xfffffffffffffff9, 0x20000, "0f031917a0ca84b5dce1eeb4d6d04892060218f875d7ec6700d00f7a3220743f75a539940671ffc10a3ec2869a06cb0f2d6d35d15bb320708eb8e4ef901b036b7d68c4bc505dd6d80013b16bcc3a2bca767d587960027e197933188165772baf702d22858e51a62caec745922b2132827c71e0dbccc1ba1bc7fe5e529b3ca1af"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r3, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r4) sendmmsg(r3, &(0x7f0000000040), 0x47, 0x0) 2018/05/31 14:41:25 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:25 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) [ 277.078819] FAULT_INJECTION: forcing a failure. [ 277.078819] name failslab, interval 1, probability 0, space 0, times 0 [ 277.090258] CPU: 1 PID: 17405 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 277.097659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.107052] Call Trace: [ 277.109693] dump_stack+0x185/0x1d0 [ 277.113372] should_fail+0x87b/0xab0 [ 277.117132] __should_failslab+0x278/0x2a0 [ 277.121413] should_failslab+0x29/0x70 [ 277.125339] __kmalloc+0xc5/0x350 2018/05/31 14:41:25 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) [ 277.128827] ? sctp_v4_cmp_addr+0x166/0x250 [ 277.133190] ? sctp_add_bind_addr+0xb0/0x630 [ 277.137665] sctp_add_bind_addr+0xb0/0x630 [ 277.141956] sctp_copy_local_addr_list+0x4e1/0x610 [ 277.146931] sctp_copy_one_addr+0x20b/0xc40 [ 277.151315] sctp_bind_addr_copy+0x28c/0x970 [ 277.155767] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 277.161338] __sctp_connect+0x1108/0x1b00 [ 277.165553] sctp_connect+0x1b0/0x200 [ 277.169386] ? sctp_close+0xdb0/0xdb0 [ 277.173250] inet_dgram_connect+0x40c/0x670 [ 277.177612] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 277.183018] ? __inet_bind+0xff0/0xff0 [ 277.186965] __sys_connect+0x41a/0x510 [ 277.190910] ? syscall_return_slowpath+0xe9/0x700 [ 277.195803] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 277.201241] __x64_sys_connect+0xd8/0x120 [ 277.205430] do_syscall_64+0x152/0x230 [ 277.209364] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 277.214578] RIP: 0033:0x455a09 [ 277.217788] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 2018/05/31 14:41:25 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) [ 277.225532] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 277.232829] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 277.240121] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 277.247415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 277.254709] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000013 2018/05/31 14:41:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f01002cb3240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x4, 0x20, 0xf0c6, 0x8000}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e21}}, 0x5, 0x8}, 0x90) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r3, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:25 executing program 1: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x68) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) futex(&(0x7f0000000200), 0x1, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)=0xfffffffffffffffe, 0x0) r2 = memfd_create(&(0x7f0000000000)='/dev/sg#\x00', 0x3) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x4000000000000}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000180)={r3, 0x7}, &(0x7f00000001c0)=0x8) 2018/05/31 14:41:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:25 executing program 0 (fault-call:1 fault-nth:20): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) [ 277.721370] FAULT_INJECTION: forcing a failure. [ 277.721370] name failslab, interval 1, probability 0, space 0, times 0 [ 277.732801] CPU: 1 PID: 17461 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 277.740200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.749591] Call Trace: [ 277.752233] dump_stack+0x185/0x1d0 [ 277.755912] should_fail+0x87b/0xab0 [ 277.759766] __should_failslab+0x278/0x2a0 [ 277.764034] should_failslab+0x29/0x70 [ 277.767947] __kmalloc+0xc5/0x350 [ 277.771426] ? sctp_v4_cmp_addr+0x166/0x250 [ 277.775780] ? sctp_add_bind_addr+0xb0/0x630 [ 277.780206] sctp_add_bind_addr+0xb0/0x630 [ 277.784463] sctp_copy_local_addr_list+0x4e1/0x610 [ 277.789403] sctp_copy_one_addr+0x20b/0xc40 [ 277.793734] sctp_bind_addr_copy+0x28c/0x970 [ 277.798153] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 277.803697] __sctp_connect+0x1108/0x1b00 [ 277.807904] sctp_connect+0x1b0/0x200 [ 277.811717] ? sctp_close+0xdb0/0xdb0 [ 277.815530] inet_dgram_connect+0x40c/0x670 [ 277.819871] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 277.825239] ? __inet_bind+0xff0/0xff0 [ 277.829131] __sys_connect+0x41a/0x510 [ 277.833053] ? syscall_return_slowpath+0xe9/0x700 [ 277.837917] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 277.843320] __x64_sys_connect+0xd8/0x120 [ 277.847491] do_syscall_64+0x152/0x230 [ 277.851394] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 277.856582] RIP: 0033:0x455a09 [ 277.859773] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 2018/05/31 14:41:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x1e}, 0x6}, {0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0x17}, 0x4}, 0x5, [0x1, 0x2, 0x800, 0x5, 0x3ff, 0x7f, 0x1f, 0x2023]}, 0x5c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013000901690000008100000007000040030000003d51a6050000001419001a00040002010700000000000000000000000000000000", 0x39}], 0x1) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r3 = socket$inet6(0xa, 0x2, 0x80000001) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r3, &(0x7f0000000040), 0x47, 0x0) 2018/05/31 14:41:25 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000180)={r3, 0x8, "8c8d58f5650e4a12"}, &(0x7f00000001c0)=0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgid(0x0) tkill(r1, 0x3a) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7be", 0x10) r2 = accept4(r0, 0x0, &(0x7f0000000240), 0x0) recvmmsg(r2, &(0x7f0000003a40)=[{{&(0x7f0000003600)=@nl, 0x80, &(0x7f0000003900), 0x0, &(0x7f0000003980)=""/136, 0x88}}], 0x1, 0x0, &(0x7f0000003b80)={0x0, 0x989680}) 2018/05/31 14:41:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:25 executing program 0 (fault-call:1 fault-nth:21): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 277.867501] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 277.874773] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 277.882065] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 277.889359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 277.896640] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000014 [ 277.989038] FAULT_INJECTION: forcing a failure. [ 277.989038] name failslab, interval 1, probability 0, space 0, times 0 [ 278.000419] CPU: 1 PID: 17480 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 278.007805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.017183] Call Trace: [ 278.019816] dump_stack+0x185/0x1d0 [ 278.023486] should_fail+0x87b/0xab0 [ 278.027250] __should_failslab+0x278/0x2a0 [ 278.031522] should_failslab+0x29/0x70 [ 278.035443] __kmalloc+0xc5/0x350 [ 278.038942] ? sctp_v4_cmp_addr+0x166/0x250 [ 278.043297] ? sctp_add_bind_addr+0xb0/0x630 [ 278.047745] sctp_add_bind_addr+0xb0/0x630 [ 278.052029] sctp_copy_local_addr_list+0x4e1/0x610 [ 278.057008] sctp_copy_one_addr+0x20b/0xc40 [ 278.061380] sctp_bind_addr_copy+0x28c/0x970 [ 278.065837] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 278.071419] __sctp_connect+0x1108/0x1b00 [ 278.075662] sctp_connect+0x1b0/0x200 [ 278.079494] ? sctp_close+0xdb0/0xdb0 [ 278.083345] inet_dgram_connect+0x40c/0x670 2018/05/31 14:41:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0104000000ae2cbe6edb87968400"], 0x14}, 0x1}, 0x0) setsockopt(r0, 0x100, 0x9, &(0x7f0000000080)="33c9b362858d485b26cba3bbf77c290dc47a62d988b29b055d7df5ff7ce9ee9b98d4530e3b99e6e277a54f9f6f8698cf2b7a12418c9a4a39bf0ea9e2f1e15d16711e7dd1b148323b78aa89a35b3deb03e017faf7b4113750500b871e7d8c212151bf2c3e9eaef00fd7d88aa2ae4fdd92f2692acd81c045fba29d91bfaa133ea47904737ca6f8a89a2a416a0d8c224a9fd2eda8b56620580b6b51f0dce6d58c68abbb8fd355cf876e479174a1dc9c07e0a5", 0xb1) [ 278.087707] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 278.093112] ? __inet_bind+0xff0/0xff0 [ 278.097038] __sys_connect+0x41a/0x510 [ 278.100995] ? syscall_return_slowpath+0xe9/0x700 [ 278.105889] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 278.111318] __x64_sys_connect+0xd8/0x120 [ 278.115515] do_syscall_64+0x152/0x230 [ 278.119446] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 278.124658] RIP: 0033:0x455a09 [ 278.127869] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 278.135616] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 278.142910] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 278.150205] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 278.157511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 278.164810] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000015 2018/05/31 14:41:26 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0xf, 0x3, 0xfffffffffffffffc) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000040), 0x47, 0x0) 2018/05/31 14:41:26 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:26 executing program 0 (fault-call:1 fault-nth:22): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xfffffe10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01040000010000200000000049f3"], 0x14}, 0x1}, 0x0) 2018/05/31 14:41:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 278.352679] FAULT_INJECTION: forcing a failure. [ 278.352679] name failslab, interval 1, probability 0, space 0, times 0 [ 278.364096] CPU: 1 PID: 17496 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 278.371495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.380878] Call Trace: [ 278.383513] dump_stack+0x185/0x1d0 [ 278.387187] should_fail+0x87b/0xab0 [ 278.390954] __should_failslab+0x278/0x2a0 [ 278.395234] should_failslab+0x29/0x70 [ 278.399174] __kmalloc+0xc5/0x350 [ 278.402682] ? sctp_v4_cmp_addr+0x166/0x250 [ 278.407048] ? sctp_add_bind_addr+0xb0/0x630 [ 278.411500] sctp_add_bind_addr+0xb0/0x630 [ 278.415783] sctp_copy_local_addr_list+0x4e1/0x610 [ 278.420765] sctp_copy_one_addr+0x20b/0xc40 [ 278.425135] sctp_bind_addr_copy+0x28c/0x970 [ 278.429589] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 278.435170] __sctp_connect+0x1108/0x1b00 [ 278.439394] sctp_connect+0x1b0/0x200 [ 278.443241] ? sctp_close+0xdb0/0xdb0 [ 278.447087] inet_dgram_connect+0x40c/0x670 2018/05/31 14:41:26 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) [ 278.451443] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 278.456849] ? __inet_bind+0xff0/0xff0 [ 278.460775] __sys_connect+0x41a/0x510 [ 278.464728] ? syscall_return_slowpath+0xe9/0x700 [ 278.469625] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 278.475066] __x64_sys_connect+0xd8/0x120 [ 278.479255] do_syscall_64+0x152/0x230 [ 278.483185] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 278.488407] RIP: 0033:0x455a09 [ 278.491613] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 2018/05/31 14:41:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") nanosleep(&(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0xc29, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x40000, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f00000001c0)='net/ip_tables_targets\x00') setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 278.499357] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 278.506658] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 278.513953] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 278.521248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 278.528544] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000016 2018/05/31 14:41:26 executing program 1: unshare(0x8000400) r0 = mq_open(&(0x7f0000000040)='lowlan1[#\x00', 0x8c0, 0x0, &(0x7f0000664fc0)={0x0, 0x7, 0x3}) mq_timedreceive(r0, &(0x7f00000004c0)=""/35, 0x23, 0x0, &(0x7f0000000500)={0x0, 0x989680}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10040, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{}, {}]}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) 2018/05/31 14:41:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000040), 0x47, 0x0) getsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)=""/47, &(0x7f0000000040)=0x2f) 2018/05/31 14:41:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x80000000000, 0x8}, 0x6) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:26 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:26 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x3, 0x1ffb) poll(&(0x7f0000000040)=[{r1}, {}, {r2}], 0x3, 0x0) dup3(r0, r0, 0x80000) dup2(r2, r2) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x3}}, 0x1e) 2018/05/31 14:41:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @host=0x2}, 0x8d) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x1c, 0x4) 2018/05/31 14:41:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:26 executing program 0 (fault-call:1 fault-nth:23): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0104000000000000000007000000"], 0x14}, 0x1}, 0x0) 2018/05/31 14:41:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:26 executing program 6: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) bind$packet(r0, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd}, 0x4) syz_emit_ethernet(0x7ffff, &(0x7f00000000c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x4, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000000)) fchmod(r0, 0x80) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000040)) 2018/05/31 14:41:26 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:27 executing program 1: socketpair(0x19, 0x807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04007dc443000000000800000000000000"], 0x14}, 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000001400)=@alg, 0x80, &(0x7f00000026c0)=[{&(0x7f0000001480)=""/4096, 0x1081}, {&(0x7f00000024c0)=""/16, 0x10}, {&(0x7f0000002500)=""/83, 0x53}, {&(0x7f0000002580)=""/69, 0x45}, {&(0x7f0000002600)=""/147, 0x93}], 0x5, &(0x7f0000002740)=""/218, 0xda}}], 0x1, 0x0, &(0x7f0000002e40)={0x77359400}) flock(r1, 0x2) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x42, 0x105}, 0x14}, 0x1}, 0x0) socket$unix(0x1, 0x5, 0x0) 2018/05/31 14:41:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x5a4, 0x2, 0x80000001, 0x4, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r2, 0xfff, 0x1, [0x1]}, 0xa) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r3, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:27 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(0xffffffffffffffff, 0x6) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) signalfd4(r1, &(0x7f0000000000), 0x8, 0x80000) close(r0) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10d) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x7, 0x9, 0x0, r2}, 0x10) signalfd4(r1, &(0x7f00000001c0)={0x10000}, 0x8, 0x80800) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) [ 279.308689] FAULT_INJECTION: forcing a failure. [ 279.308689] name failslab, interval 1, probability 0, space 0, times 0 [ 279.320114] CPU: 0 PID: 17580 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 279.327503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.336883] Call Trace: [ 279.339515] dump_stack+0x185/0x1d0 [ 279.343187] should_fail+0x87b/0xab0 [ 279.346947] __should_failslab+0x278/0x2a0 [ 279.351228] should_failslab+0x29/0x70 [ 279.355154] __kmalloc+0xc5/0x350 [ 279.358639] ? sctp_v4_cmp_addr+0x166/0x250 [ 279.362998] ? sctp_add_bind_addr+0xb0/0x630 [ 279.367459] sctp_add_bind_addr+0xb0/0x630 [ 279.371760] sctp_copy_local_addr_list+0x4e1/0x610 [ 279.376748] sctp_copy_one_addr+0x20b/0xc40 [ 279.381116] sctp_bind_addr_copy+0x28c/0x970 [ 279.385576] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 279.391154] __sctp_connect+0x1108/0x1b00 [ 279.395372] sctp_connect+0x1b0/0x200 [ 279.399209] ? sctp_close+0xdb0/0xdb0 [ 279.403063] inet_dgram_connect+0x40c/0x670 [ 279.407418] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 279.412821] ? __inet_bind+0xff0/0xff0 [ 279.416756] __sys_connect+0x41a/0x510 [ 279.420702] ? syscall_return_slowpath+0xe9/0x700 [ 279.425604] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 279.431046] __x64_sys_connect+0xd8/0x120 [ 279.435234] do_syscall_64+0x152/0x230 [ 279.439159] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 279.444370] RIP: 0033:0x455a09 [ 279.447579] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 2018/05/31 14:41:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 279.455327] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 279.462617] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 279.469909] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 279.477205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 279.484503] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000017 2018/05/31 14:41:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:27 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6f, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e20, 0x4, 'fo\x00', 0xc, 0x7, 0x35}, {@empty, 0x4e23, 0x3, 0x8000, 0x1, 0x6}}, 0x44) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) recvmsg$kcm(r2, &(0x7f0000000680)={&(0x7f0000000180)=@l2, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/48, 0x30}, {&(0x7f0000000300)=""/37, 0x25}, {&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000440)=""/94, 0x5e}, {&(0x7f00000004c0)=""/115, 0x73}], 0x5, &(0x7f00000005c0)=""/145, 0x91}, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000140)=0x4c) pwritev(r1, &(0x7f0000000200), 0x10000000000003b0, 0x0) 2018/05/31 14:41:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@mcast2={0xff, 0x2, [], 0x1}, 0x5, 0x2, 0x0, 0x7, 0x100000000, 0x8, 0x1f}, 0x20) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200000, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080)={0xffffffffffffff7f, 0x1, 0x4, 0x9, 0x0, 0x3298045, 0x1ff, 0x140000000000, 0x9, 0x10000, 0x9}, 0xb) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0xa, @in6=@loopback={0x0, 0x1}, 0x0, 0x7, 0x0, 0x90}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0x2}, 0x1c) fsetxattr(r1, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)='/dev/rfkill\x00', 0xc, 0x3) 2018/05/31 14:41:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1009, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x100000000000401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x10000) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 2018/05/31 14:41:27 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(0xffffffffffffffff, 0x6) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8b12, &(0x7f0000000280)="0047fc2f07da2c9924097009e5800950a9f3a70edba7a83f6acf2502000000000000006a8d6fe559df79cb71fda1d687e49a1f29505f8604689ffc98ed69c89b4692497d008a2591e8c8698021d65e8efabe9650d111f06c21a8ae1aa7e854bec5dd5b28a2dbb877a6735dd7293463dcd806816ce28de71236b5cf605a2471d04da7a3e8ffca34472671ab432d8c6c926a40f7aeebab6d28bc4d745151125c70e29e91") r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2b4, 0x111000) sendto$inet6(r1, &(0x7f0000000c00)="b776dc575de43120749f772d65ec771431cd3c4e8880a96dce2c6e13e753c8ac8734bebda3486b43311a29a9e8e43cc2965b125c634263b8a8a719801174", 0x3e, 0x4000, &(0x7f0000000c40)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x1d}, 0x1}, 0x1c) r2 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x14, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000003}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9c0800002800020127bd70002377689ad8434e2d", @ANYRES32=r3, @ANYBLOB="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"], 0x89c}, 0x1}, 0x20000004) connect$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x7, {0x0, 0x9, 0x5, 0x1ff, 0xffffffff, 0x100}, 0xfa37}, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:27 executing program 0 (fault-call:1 fault-nth:24): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) [ 279.740568] FAULT_INJECTION: forcing a failure. [ 279.740568] name failslab, interval 1, probability 0, space 0, times 0 [ 279.752122] CPU: 1 PID: 17620 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 279.759518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.768897] Call Trace: [ 279.771525] dump_stack+0x185/0x1d0 [ 279.775196] should_fail+0x87b/0xab0 [ 279.778955] __should_failslab+0x278/0x2a0 [ 279.783234] should_failslab+0x29/0x70 [ 279.787158] __kmalloc+0xc5/0x350 [ 279.790636] ? sctp_v4_cmp_addr+0x166/0x250 [ 279.794996] ? sctp_add_bind_addr+0xb0/0x630 [ 279.799451] sctp_add_bind_addr+0xb0/0x630 [ 279.803740] sctp_copy_local_addr_list+0x4e1/0x610 [ 279.808719] sctp_copy_one_addr+0x20b/0xc40 [ 279.813088] sctp_bind_addr_copy+0x28c/0x970 [ 279.817545] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 279.823125] __sctp_connect+0x1108/0x1b00 [ 279.827349] sctp_connect+0x1b0/0x200 [ 279.831182] ? sctp_close+0xdb0/0xdb0 [ 279.835038] inet_dgram_connect+0x40c/0x670 [ 279.839393] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 279.844791] ? __inet_bind+0xff0/0xff0 [ 279.848714] __sys_connect+0x41a/0x510 [ 279.852659] ? syscall_return_slowpath+0xe9/0x700 [ 279.857549] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 279.862982] __x64_sys_connect+0xd8/0x120 [ 279.867169] do_syscall_64+0x152/0x230 [ 279.871103] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 279.876316] RIP: 0033:0x455a09 [ 279.879525] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 2018/05/31 14:41:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:27 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.stat\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x1) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000680)}, {&(0x7f00000001c0)="75e239ee930ce28f7cf0d9add5c1a4c1b09ac5c6a07779aa", 0x18}], 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4, 0x20000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x5, 0x1, 0x600000000000000, 0xff, 0x0}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={r3, 0x4c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x5, @local={0xfe, 0x80, [], 0xaa}}, @in={0x2, 0x4e24}, @in={0x2, 0x4e21, @rand_addr=0x4}, @in={0x2, 0x4e21}]}, &(0x7f0000000400)=0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="f9effc86f576f214ef04850ae2711649a6bdf78d0ece3c6347c015b09c39b6c4a694d1ed48b9f6d8e1aa73fee7164acb7c7abffb664af6169b4931f9cb68c88fcfdcc5c4053fdd908798e0250401a344e93a9968f048e6a0ceacd9bf6c6d12c2cbbfbdf1a575a21fa5b928d964ae76fdab5fec34492d2c9a27e5b9e0daaa3766c58104460cb4eee71aa98e96", 0x8c}], 0x1, 0x0, 0x0, 0x8c0}, 0x40480c0) 2018/05/31 14:41:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:27 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(0xffffffffffffffff, 0x6) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) [ 279.887269] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 279.894561] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 279.901854] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 279.909145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 279.916437] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000018 2018/05/31 14:41:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000280)={r3, &(0x7f0000000140)=""/238}) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140700000030edf11332cfe51400000000d0", @ANYRES16=r2, @ANYBLOB="0104000000000000000007000000"], 0x14}, 0x1}, 0x0) 2018/05/31 14:41:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:28 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4600525f3690675dc00e009100000000000000000000000000000000000000ffffffff3800"], 0x28) 2018/05/31 14:41:28 executing program 6: syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @random="b42d87402e52", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0xc0ffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff87, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}}}}}}}}, &(0x7f00000016c0)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8001, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0x4a, "4a80a20a628d70390912371464514bb595559cdc41ff98b56f0f91e083dc2aa7d2ab9807879e19478d40f5d7b10f7bef3a7a894aaa73be89158e3cc15048ffc4440dcb7cc4c22408dbb1"}, &(0x7f0000000140)=0x6e) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0)=0x325, 0x4) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000180)=0x3) 2018/05/31 14:41:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:28 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) lseek(r0, 0x0, 0x7) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f00000000c0)={0x6, 0x7b7}) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:28 executing program 0 (fault-call:1 fault-nth:25): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:28 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x230802) 2018/05/31 14:41:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x22abf450, &(0x7f0000000600)="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") r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xa00, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000080)=0x3) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="220d000010000000000000000000000003000600000000000200e5ffe00000010000000000000000080012000200020000000000000000003000000003030000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000030005000000020002000097e00000010000000000000000"], 0x80}, 0x1}, 0x0) restart_syscall() openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x100000000000800, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x3, 0x8001, 0x1ab, 0x2, 0x8001, 0x0, 0xffffffff, {0x0, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, 0x3ff, 0x5, 0xff, 0x81, 0x81}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={r3, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x1, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x3}]}, &(0x7f0000000340)=0x10) 2018/05/31 14:41:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) statx(r3, &(0x7f0000000080)='./file0\x00', 0x400, 0x880, &(0x7f00000002c0)) 2018/05/31 14:41:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000015c0)='/dev/snd/pcmC#D#p\x00', 0x6, 0xb4926c4d001049e6) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001600)={0x0, 0x3}, &(0x7f0000001640)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000001680)={r2, 0x1, 0x10, 0x13, 0x10000}, &(0x7f00000016c0)=0x18) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) r4 = dup2(r3, r0) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000200)=""/29) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100127bd7000fcdbdf2503000000080001004e230000080001004e20000008000400030000000800020002000000040005000800cb003a000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000001280)=@int=0x1f, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) r6 = dup(r3) setsockopt$packet_buf(r6, 0x107, 0x7, &(0x7f0000000280)="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", 0x1000) 2018/05/31 14:41:28 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000200)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000000c0)={0x3, {0x2, 0x4e22, @multicast2=0xe0000002}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1, 0xe5e9, 0x4, 0x3ff, 0x9, &(0x7f0000000000)='team_slave_0\x00', 0x5, 0xada, 0x1}) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080), 0x10) 2018/05/31 14:41:28 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000503000)={0x5, 0x9c, 0x8, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000100)="ca3b27533d3f405b219ce001307b2153fde081e1524803504f86c085d607f266b266c8b831fd421b41e65402233606baeb391abbae8aa3bd752a271e2d9efce93a7661e69314400e1ddae47e4073c9f00d5db3bfab8c8cdd2329cad69348210904e13764f038b34d69e1df6b46b990480c79b01cd82bfd22a46b26c5d6b4b188c46c2cccb299a122f0c5c501bc5b0a89212795", &(0x7f0000000000)=""/51}, 0xfffffffffffffeeb) 2018/05/31 14:41:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:28 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) [ 280.765933] FAULT_INJECTION: forcing a failure. [ 280.765933] name failslab, interval 1, probability 0, space 0, times 0 [ 280.777341] CPU: 0 PID: 17705 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 280.784751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.794125] Call Trace: [ 280.796762] dump_stack+0x185/0x1d0 [ 280.800432] should_fail+0x87b/0xab0 [ 280.804195] __should_failslab+0x278/0x2a0 [ 280.808474] should_failslab+0x29/0x70 [ 280.812396] __kmalloc+0xc5/0x350 [ 280.815893] ? sctp_v4_cmp_addr+0x166/0x250 [ 280.820255] ? sctp_add_bind_addr+0xb0/0x630 [ 280.824715] sctp_add_bind_addr+0xb0/0x630 [ 280.828992] ? xfs_symlink+0x1718/0x2fe0 [ 280.833097] sctp_copy_local_addr_list+0x4e1/0x610 [ 280.838075] sctp_copy_one_addr+0x20b/0xc40 [ 280.842445] sctp_bind_addr_copy+0x28c/0x970 [ 280.846900] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 280.852476] __sctp_connect+0x1108/0x1b00 [ 280.856695] sctp_connect+0x1b0/0x200 [ 280.860537] ? sctp_close+0xdb0/0xdb0 [ 280.864387] inet_dgram_connect+0x40c/0x670 [ 280.868747] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 280.874155] ? __inet_bind+0xff0/0xff0 [ 280.878078] __sys_connect+0x41a/0x510 [ 280.882019] ? syscall_return_slowpath+0xe9/0x700 [ 280.886913] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 280.892349] __x64_sys_connect+0xd8/0x120 [ 280.896535] do_syscall_64+0x152/0x230 [ 280.900467] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 280.905682] RIP: 0033:0x455a09 [ 280.908900] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 2018/05/31 14:41:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x80000001, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000000c0)=0x14, 0x4) [ 280.916645] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 280.923937] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 280.931233] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 280.938526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 280.945830] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000019 2018/05/31 14:41:29 executing program 6: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x200040, 0x0) userfaultfd(0x80800) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semget$private(0x0, 0x3, 0x1c0) semop(r0, &(0x7f0000000000)=[{0x0, 0xe229d9b}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x10) 2018/05/31 14:41:29 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'teql0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001400b97e000000000000000002000000", @ANYRES32=r2, @ANYBLOB="140006000000000000000601000000000000000000080002007f0000"], 0x34}, 0x1}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000180)={0x8, 0x20, 0x1753, {0x0, 0x989680}, 0x9}) 2018/05/31 14:41:29 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:29 executing program 0 (fault-call:1 fault-nth:26): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r3, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) close(r0) 2018/05/31 14:41:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000140)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) setuid(r1) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:29 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:29 executing program 4 (fault-call:5 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 281.685219] FAULT_INJECTION: forcing a failure. [ 281.685219] name failslab, interval 1, probability 0, space 0, times 0 [ 281.687929] FAULT_INJECTION: forcing a failure. [ 281.687929] name failslab, interval 1, probability 0, space 0, times 0 [ 281.696708] CPU: 1 PID: 17729 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #103 [ 281.715248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.724612] Call Trace: [ 281.727231] dump_stack+0x185/0x1d0 [ 281.730876] should_fail+0x87b/0xab0 [ 281.734606] __should_failslab+0x278/0x2a0 [ 281.738849] should_failslab+0x29/0x70 [ 281.742797] kmem_cache_alloc+0x12e/0xb90 [ 281.746952] ? mmap_region+0x1c2d/0x3730 [ 281.751064] mmap_region+0x1c2d/0x3730 [ 281.754998] do_mmap+0x193f/0x2020 [ 281.758569] __se_sys_remap_file_pages+0xf3c/0x1130 [ 281.763610] ? prepare_exit_to_usermode+0x149/0x3a0 [ 281.768666] __x64_sys_remap_file_pages+0x15d/0x1b0 [ 281.773697] do_syscall_64+0x152/0x230 [ 281.777601] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 281.782794] RIP: 0033:0x455a09 [ 281.785983] RSP: 002b:00007f5060804c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 281.793708] RAX: ffffffffffffffda RBX: 00007f50608056d4 RCX: 0000000000455a09 [ 281.800993] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 281.808268] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 281.815542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 281.822816] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 0000000000000000 [ 281.830117] CPU: 0 PID: 17730 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 281.837509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.846884] Call Trace: [ 281.849518] dump_stack+0x185/0x1d0 [ 281.853189] should_fail+0x87b/0xab0 [ 281.856948] __should_failslab+0x278/0x2a0 [ 281.861219] should_failslab+0x29/0x70 [ 281.865139] __kmalloc+0xc5/0x350 [ 281.868638] ? sctp_v4_cmp_addr+0x166/0x250 [ 281.872998] ? sctp_add_bind_addr+0xb0/0x630 [ 281.877447] sctp_add_bind_addr+0xb0/0x630 [ 281.881738] sctp_copy_local_addr_list+0x4e1/0x610 [ 281.886720] sctp_copy_one_addr+0x20b/0xc40 [ 281.891085] sctp_bind_addr_copy+0x28c/0x970 [ 281.895538] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 281.901105] __sctp_connect+0x1108/0x1b00 [ 281.905313] sctp_connect+0x1b0/0x200 [ 281.909143] ? sctp_close+0xdb0/0xdb0 [ 281.912987] inet_dgram_connect+0x40c/0x670 [ 281.917336] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 281.922736] ? __inet_bind+0xff0/0xff0 [ 281.926660] __sys_connect+0x41a/0x510 [ 281.930605] ? syscall_return_slowpath+0xe9/0x700 [ 281.935504] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 281.940944] __x64_sys_connect+0xd8/0x120 [ 281.945126] do_syscall_64+0x152/0x230 [ 281.949057] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 281.954271] RIP: 0033:0x455a09 [ 281.957478] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 281.965223] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 281.972540] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 2018/05/31 14:41:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000002e40)='veth0\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002bc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000829bd7000fbdbdf25070000000c00020008000600000000802c0001000c0007003000000004000000080004004e200000140003007f000001000000000000a40000000000080006001f0000001800010014000300ff010000000000030000000000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8001) sendmmsg$nfc_llcp(r2, &(0x7f0000002b00)=[{&(0x7f0000000080)={0x27, 0x1, 0x1, 0x4, 0xaab6, 0x0, "7e970a6b7b144574d43fd8b26c17f5dcd29fbd1076938695b2c6b0bf0ee82e13842e2dbde7168e8e83dc25a0d29bcf668867b872204ba2be88cce61a0b26e8", 0x3c}, 0x60, &(0x7f0000000300)=[{&(0x7f0000000100)="773b4e8ad3d75569048e60b9e8abf68d3426ff48e3bc5182ccdc4fa6247f81bd188748e8512be5a625691f351fe3e6a655fe1ad8b7", 0x35}, {&(0x7f00000002c0)="84083ae2ffd959ebbeddf9a2a7f16feac6e127c0806dca580be004815cb38dd52bbc0402", 0x24}], 0x2, &(0x7f0000000340)={0x100, 0x109, 0x615, "7b002084e4e6da03b977ad73cb74a60529d569bc6b102a727fbe0d30619b6fbed9b85b49221bd8ef19721f5d0fba69c3f076827e2adac4801b6e6610c6d30163bf5f04bbe35190882833e65afc949aee9ef97994c98587a6139d35e410c6e80f71c75ded65bb19ef73d3fadab85b69bfbedd9e05c38e9d9cdbcf53661e5d4efede4035d7958999b30ecdf521a46b79b9f703c1aead23497644f75347104bd7de33483ce2cab23a070d280dc29af7a6e391d6d17e41a56547ef848b78a2464498b528ecd08aff9e2616dc749d81e8c4ec5e50b81050af20e105d0d412fabf206825ce2468ad9e4b8f3d3d5167bb"}, 0x100, 0x4000}, {&(0x7f0000000440)={0x27, 0x0, 0x2, 0x7, 0x3f, 0x800, "4c0cafb7fc4070e258b2cef0d851d638057b9e46823447534ca5bd5083b78894e184e89eccfc2138b7947fc52b9ce77cba70baba7fdf5ab20c4c2eaa78d9f2", 0x3a}, 0x60, &(0x7f0000002940)=[{&(0x7f00000004c0)="eee9e913d2141d5f683ed39de65fe237e456c1732fd9ae3f366f20998f7264857f4b14c37cb59c444372532cb07adc6631e0c72e8c3502e6969b6607376f628e1dd0890042ef3d25aa92991b76eb517cc6ec24a81c7bba7c1f51fce9faac80ab6e3a6a2688972f01b34e760208b9a6602d5b2643acc9f62bd23af57c64dc55f3080f8f1dd885f66abb46ca00e47f5d2a027893a90db23dfbd3c2cb8cc7253e1038debd4e95e96e8b985048", 0xab}, {&(0x7f0000000580)="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", 0xff}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="7a3d94868ef3fa8353d4e8fa4b080e4961da71abb2b33499cf26a8acf653d75ae9881793a6e327fa1d00597791a69af2671ed4dc9624551987eed7f99259e0d84d3a2ea70c5add80080dfc4519f1daa76854402938a48a6ab23219e1d1f508b0af96983c2f05a6131a08463a43fb6fec20dd39803003d9a1c2d4c722af1080f2ec3de0db544af572fab29ef7ab9e4e28cd784690e77e95decf5fa2c67a02ca7768a22d1e0eaeebf48b560605a2fbe30419329a3048bcab9eeb1c015aab36012950566b3ed38c5d1beec97912bd53e50f524b5f5cdbd5a78a6fadee884035e58f781c5db898901f1abd848ac1288837c71b2baf7895ffd81639f4ec3a6c99e264a03b7dccce57190bd2282e4f4fe1fb6c4014f2a49c4b75a1a37ace1d852397904abc282d70723e84a8b6a39283b6a3e185158edd034b83c361cc2c3c20bf7b44332bd7315d082b27a74c3412cd421a1a5f6e7efa4387da0191468c91e045c223b197c8b43025aefad179a4e22ec559117c22c89c31d50da8624e71163c9bd0480ca94cc84b597e8d4f7df5c11a9d083723bca9cc60dabae0c0222092561e6b7356bdb82ad338ccf3699fb04e81d23349d533d8ad27496167cd7c9d57125f74986af7886fddbd0215e069586f8a6da382b62c5fa1d5302038d10e9d5dfbc2dda9b8985dda130df2f3399ac14d261a0fa11c518483224667abf37c3ee68597236d07e16c0fed8a1225ccfd1cfff9d8b856056d36cde24b6a36d1628edf69ae3a636978dc17a2a3583ffb2c96b35d93a102e6e64772de0e75a24b987d83de5b1c16c9121b72e42815804439489886b3f0d53ad959708e6f1059dc94fc1d5a195a9558f3f50ded3e0b2ed57a41d79aef8f23fe22427b6765bf7e2179269b36061f439994b56f7f59d02aa8bcc602bdd68d3866e185e3eda173067c2776881afa7655725164b5273d5bc3edbd683a8430c6d3c896e6f1ce5da37f25828081448a83e3e06e6f07b2cd5c7c6f13b7e152824b9576a377b973b75fc4eaa88c08800a608fbf9607b4eccba31beb700648fb4aebab21ff294458a8ecc252dc613c50f1917844496f93310d3bf302f981e1e1699c3d9fa211b4cc9929fd41ce58c735fa0209ad70ac0959406658ff4a744c324ebe8caec9d5b7ec492ec7edeab4d6e842231a1e449edf02fd283327d55aa60b16223842788bb071bc3e4e743074b53269179011b7a627c8a77ae3820be34bff55869aa94b98925962dfaea8a397c6fb3180d9df2650b2eea6e96734c40ba951dae7a5582871b8ba031d31f7d5f8e6c2381bc0643e13e2eb18c81a52b03a43ca3515d5c4f14ba83c013eed0a7a4e497f4654776b914a17167d5874f9ca65af479e9cff05a80aa1ddc075bfcae02af47c23ca583ec36cc313f145ae41e069a6a68842834c6963678ea7ab643d0c025c6766bd4168da29fc7d259b5561032ae30f833a67ab1cf696dd9374096f9f509440550207342811ef72ceaf09679a3de335d87db9350c12823a7a7938679ca76f0f0ff876250ca3e8c5df3d6862af37daf1f8e43f6ba3c8c1266aa91caf66bbdf3d2f832919ae88783b83e10b4b91306e8eebc01cfe4785897332de4c4511ea4cfa39b8f01386623b36b1a2dbda3f57f5599d3367c027992ec163493400b247ea056ef0b1b7749a55e0cf84616b406d7f99b20e559abdaea151fc71a5ae4fce945d25ca6ec9baff39e6473014684b52e9380f6a5299ad0cb27cd5fb79ed1f659cb567e13694ba1789faadeb1e7c90e3e7cb0a5b303ac3a6596486f7c1d6b76983a11cdeb4d5b01e8aa5e96a9921a546878d2d3a86d84ecbf85a20a4c1d8e2856f6d92671ad51b24a9643a0fe41c2780a3168ceb78ababe284a7d1939ab1f3a2bdee95683d4f3dc0ff4dde9565a86ee5a3b9fbbb19754e51fc91b2a18f44c4eb88cb83702889da37face625dab1530479c49da6c23cb2a635412648023d9a459656891f46d8dab51dfc9da8add96b95e1c9ab9c667b9e83e4f85647990c58e1540377db752ac5f079b2cea9771095a59520027a6332a42250b121f1df892e0f5a0e8b1431f0c41e57649ccdff4b0919bcde9e3bf74b9624c589cc6f5d8b8ff124d1ab9e84979ea60fa58653d303df8c9b6769d0c3a5e0673d18c17dfe2f37477a520e6cac06e4ea692712da14a7210fb34b9b6f2a3a620585b8ce4d6741370efc6cde1a4a5172266e175b3949d8b3e92cd0d09926cc3dfbc016ad9fadac5471bfdc6e1e4293b176ff576ec80d47b1a9948463018b4a6b3a44fa6f942d371abcb4c09773c23f39f4bce222d0803936fa7fa0c06ea1c458070148d436bcd4b66c588f24be1a14cdd1ad523c16ee8bd17878e3ee64a2a7aa02d8c594312f27a3d286d2c9230ec745dd1032ec2ccdc3ffc6807381cbc22f674202e06d50646d7c43a97828451bfe1b2bb618ff42a698ac24e838ba9ce426791ca58a9271824059add9607a2d3d2fb1b9e820a3ea1cf180ff56bea4e21a9711318215ea19a3de384e3ce25664fc4aef95c54a011794b2261f311582e3b657e1df0f88ee3d34f9940a458598425bc5da5593ea2bcf83ec0665927d537343e5323d5e3b7712c81bdf0da4834ee3f2627db69b6af55f8766ba82fe60722121fede171d47c6dad568ce49d3b6524e5ed64c43e4a3910926479b832587a44fd1472be97a6eec6eee1e619de158c7321bf376929d54e9d2788f4cc0adb14ddc38c4d2e62c1a6b75b1fdb60d47523a6239a673b9f7a6befa8ba6060e0e268e7aca63ac55963b5cf5211a02a85348aa94546fd2d6eee9063811b771f608471eea71dea4507cdc61017030de328b7147f165bedb97094323305afde63b7784fce0a8dbb396b23e783cf665e2e502de8a2a1cd0879ae440bf513a3983cd7e3f6cb9a7907d3056e73be090c2b1701dcc29b4e48a6639439c46ed883e1350d8e3c19f9de1eaafdf5049895b13ed2b374e1be81ae28b31e2e48f4a26a7a87a750e641289e2c9badf6ce8e37ebebe24e4fcdd2e2816d9373e3011db82066871857f257c88c0ebd20ca2e1085a6d5687f003a1ee91437d8a00d5983647a1f78e6ec1e1ee0e49ff36b94af4878ecd010cad0bdf907fea4bc23d8ad268cd63975a91aa63c5ac94d0c8a4574aec319652bacea59a50a9f4586947b90bed3e6814825913a74c58ac66d41fc31fc30cd823ca753cf5290f4fb041a2b8e34f8d51a9571669d5faa91fc1a45cad7442680ec06d1e30a7fba7eea8c3c99e6b3600e63c6358949a5c4984128a7b51a123bea67d3d35968478b7b2bc23494629e2793cf7a9b8c8591ddb5da70bc3d61dd93de1ebfcb153010ecf4f9bc2c0734a568aec1343e9ec30267f3c140d57cd0e23285ef5d55ccb73506d79789ef4e0748da5a4cdef3a67d0938619e5d8b02c7d46c51600ae071db1714253168fbc287274f450c2f9054386e5c3c380cbb587e8605226bfac01bda5e4507c008aa1ae9a7bee395fff6d1f3cf18f4e016909f465b7d18bad7b00f3f8b29bf8e8c56c45506123cd29883262f57b97d5edd2c83427f9fb9ff605db1045b34fdf4f0439099588525998c18bc3092dfdd225dc5c1e2ea53d336ef0a940cc0f911cc9b95b0ba80ff86e0cde93acbb725f54443f0f26939c50139e8fbbf328eebc1c5b01638189c2eb30ac85745480f6575c1338ffaa479a23577f731b00c9cedcb6e4b05ef71678c7141d5371ae33a9ea72d65e0138b030cc6dc1161264065cf6f6c7085e172e386cac2c7414c9851ae0daa9df7630c105405714dbbb642cb51dec5339750709f584e866e981d8bd4f532cf2f5d005b1dd88e17c0a47213ba1d85f0563b044c21f07fa9124ba65c03fd71a36dfe79a92193aac5e34ec4a4d650868754f992bdfe7be3a0d32ea2670717387cae5785d4dbade8a55198be45196bf155ffea8606a6f9bf31e54c7ccfe440d3f15f84f2d812455535635dd5b53791849a463672e86ec08c49df0ab1d0678a471e57e0095e7d9964b18db842dfd6566b7bd8bf80b13c1f46495e793534f819b22f07ac48344969b0efb21b2698d8046079dc5e1e2e9c4fbccae85ecf0fb62de9e6b415dd3497e7797813b942999db988346afec6c7ec126f8d119aabcc05fd119813259ff3aeceed9e9620a99323cddacfdf315a0133a424800dda414820812b4f8171f82e047e760d5283c92d77c9efeffc3792a6c3cb99c2555f67747baddec5c6d30be77fa6e0ddfedf03dc62da95fb92bb05c1837bdf89b98acbcddc37efe41356c1662a50dbed81450ab97b2c49a07871deac2420ba1735a5d12ca256a4fe1157690c0bc964b9f20127da14ec00db9b7a6d9997f5da542c3550a5ce2b729a2be67cce65877b64faef493cfa2619d3741b361071b96cfd35b4e8999853b548a85c010050f51fa7a60f7e9168f50da2729846a1b96f033d076e4cb977b626bd3f9d4108827085acd57c6a9008c8f9847b65cf5d331ec847614d85f9bf92fecc245d67008dee4b5888d1cd39b8c6c3c1af4c3e3b2161d8b6f6db69b9f9988e0d5fdad5d4a3691b1bb1bde6dd35ebef765471e260ba75bf4c456c6703cb1ff654d010c396b289a7ab237c9fcc44ea1a4f4ba746ee6d4a69a71f4a77558a708532f2f6c7161589ec2d446fcd971ebbfc237b64c761bf78d74a869ed0dfafaefc78fe78ccfc84b2387bbca7b98b4a2746fb3916a38afd8b727704995d2bd8868f6dda14238e2c41bbbea2f0da26f654b3c793bda37a4949274e929c56505433a3c82af9f011be5a5fbd96f3f901058aa9b4322e62a8f90f2704f322df62d13ce66d26647158e70ea4679add24834bfb506cf3b286afc90eb965b6864dd11a50e6516485c44cf798d05600a42c5b502a0ed78ba50ea41fd437a9d1be05c5536af6cb6df78087a4d2508bd11d7341bd59126a6c7e0872236033047981cc9d0b1ed1a48c32a57a4833edd306870604bd5453615297d8afa82217b945ce49a5ca55832e75ea9bf4bc5be8ffc8c8de9a22643f64634cf8fbbb3909f90885b7ed184a0a7e947492cbdf358629cd4fcb47a89e9ef9b0901f90c71e748dda231c343929ed0dcf44fe2231de6870560875c0056d812228e0d5a7090cca74486ebeb65de538c71e5524cdcb2536a8939d56d17d9dd31b3909a514317972946367209c57aa88ba0c9c3b6e715ec91a051afdf44fd21882e794fe094dc163d19cea83f2afbe957b537080ec364572b354ffc348f834245a6c9b9635066395050ae83dc5ae0673b6338da55e993e7bdeb9504f6eba610c6963b4993af6a80f58f91dd6ebf8e3175208ad878ae2a80c0881e411d56505a34d095b8fd998107b4e208b81c597bb2078beba97659df37b9f8a1208016b8d17327ab326bd559411dedb3182d833b1729f3e39209b64d755bbb7ee63edd908c15fef76d44c419f82cb95355397669ff26e097326d2196fca980a7af0601f537838b415326c6c9a8588bbce5d00308b9f7418f0f6eb30f63a0fe41606dc725a08b42be5b6e346a26fbd46647d05807a16d19406062ac66af42e3c1cf36bc39ea5c1d1af2639f9e3d5cdb36345d67bde3ff2960b232a4b098005c27611794763852938f6ebca355e940550aa50177b9bfc4f545dac558f65202cf904e9434f58bba6e496369f6ec1436e0198b221aaa1ce33cdd40c80499b0faa361da122e648500b048f5c51999c0dc38fceb62c254b5608d3cda8867268677bf24de6d2f0a592ac1ecc5eb639d59c4d5e8fd85c6b62588429fa3bcb8fa61fe3fb4e733f31461c", 0x1000}, {&(0x7f0000002680)="47ab44fc98dbcf3c838b6e0cabac4e9195f11d802e7288539c3910ebba", 0x1d}, {&(0x7f00000026c0)="05e123cef531290f67531fbab6a281ed235009eec755994d509a69806470ef03c110ebb2253af042959c031e277dd89c28bdb19518cccb3d0c12ab25a41e73c662b396cd49", 0x45}, {&(0x7f0000002740)="ce5258512c94b1ab7406cfd2571762542cd529244b43fc0068d36cb22d37157dc974802d6f5e7f2aa37f5cc3b6ef6c0627a3a77cceb54eb73658fa71dece01fa83931aa041edd812c7422004a8fd37db4989ff8c01f3c223b5c8ccdd5a42ac6cac95b91050e07cc4a37b847b93960c5061c35217af604aa6c3a36a03afe9076e7164301395d8635cc63ac32bf8f5b4b4559dadfe93bd78cbbc39c33532739fff1901d2396b234898258ba5d28eec09a15cb34d59f173aff8b6a9216e8a2dfb7d9313d561d1cc0c33bfff9c46c1c270d1b32270548b48cdd4fca1490d5f83d934747fd2729d31d70f2e3ce1ac50897af5a731f889dc27e9", 0xf7}, {&(0x7f0000002840)="13fd09f2349a98617260a912c5968d7c3a8985b03d13d3024942b970800cea608a383b3ff19dea10fa332955d6e3711858ca58e323712562df7a5da0c967345589353f09595f294d8c20adfc48cc204b3c5e253848c23036a0868564df9399e4776859fe8cd3058fadcfd507e032b5bac0ebf72863c2b22f23a63257b466a6fd9a664fb1f12a12a10c136a924b5d99fa204fbf93140a3468764d7462ed9309405c706399b93923b5ee50cea8348bab999045437ece82493637a2f520b474549db4e8f66c2afacc30", 0xc8}], 0x8, &(0x7f00000029c0)={0x108, 0x19e, 0xfffffffffffffffd, "957770e0f9a752775fb8518b5e5380965fbd2f43faccc0eda052fef6dc159d06a3bd2fc3f212a4e34eb52d76e825a9e8654a312bbd679688d3376e5d051a8a21a722ebfdac7195cdc5dc925e5d587ae166233a5568fd6f1202fa0db0942603958beb3bab64b38ec6c6e73229447c7d1d14b4bafee299841da2045c123bcb58d6249d36603746511bbc9382fed32c6f734091828ff1b319168a089fb34ac07161e000dbb8d21b1904e09b882773182e3ee18b26af501591d7de09255a5d1d3f1df852b54888e11fe10293f1f5912e8d950f8ec783178f623b005b4b61611860d19482acb47b52c26b584173656ea0852a3b2edf"}, 0x108, 0x20004000}], 0x2, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002d80)={r2, 0x50, &(0x7f0000002d00)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002dc0)=r4, 0x4) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002e00)) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') renameat2(r2, &(0x7f0000002e80)='./file0\x00', r2, &(0x7f0000002ec0)='./file0\x00', 0x4) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r5, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:30 executing program 4 (fault-call:5 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x4) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) [ 281.979829] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 281.987119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 281.994411] R13: 000000000000005b R14: 00000000006f5928 R15: 000000000000001a 2018/05/31 14:41:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0xe, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x20000) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f00000000c0)={0x6}) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:30 executing program 1: socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={"73697450100000000000000000000040", @ifru_mtu}) 2018/05/31 14:41:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x401) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:31 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:31 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r1, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:31 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) listen$netrom(r0, 0x9b) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$ipx(r0, &(0x7f0000001080)="2d7296bac0df7e677a34d1ab7b510eeef95db022551179b37fa520a6ac46e0bc71753f09aef2ec4d6805a81887a932caf391beed979ae990c6233eec31fba17ecb4ba4ddfbe2f87d41992f1569fc771301b9eb1c71e720e2877032955a75efecbdd005b0391908b2365f080e9fd5cf54758eaf0fd76fe336c092a12f9325447a", 0x80, 0x1, &(0x7f0000001100)={0x4, 0x28, 0x5, "dd292e64606a", 0x80}, 0x10) sendmsg$nl_netfilter(r1, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)={0x24, 0x0, 0x1, 0x800000001, 0x0, 0x0, {0x2}, [@nested={0x10, 0x2, [@typed={0xc, 0x1, @ipv4=@multicast2=0xe0000002}]}]}, 0x24}, 0x1}, 0x0) r2 = msgget$private(0x0, 0x400) msgrcv(r2, &(0x7f0000000040)={0x0, ""/4096}, 0x1008, 0x2, 0x1000) 2018/05/31 14:41:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x4, 0xf, [], 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], &(0x7f00000000c0)=""/15}, &(0x7f0000000280)=0x78) 2018/05/31 14:41:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:31 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x22000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0xc3, 0x80003, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000c03000)={{0x20000000000080}, "0a4ceaa05dad126e00000002a1569b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42d576589701a4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x3, 0x6}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r2, 0xd, 0x1}, 0x14) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0xfff, r1}) 2018/05/31 14:41:31 executing program 0 (fault-call:1 fault-nth:27): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) [ 283.159867] FAULT_INJECTION: forcing a failure. [ 283.159867] name failslab, interval 1, probability 0, space 0, times 0 [ 283.169511] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 283.171204] CPU: 1 PID: 17794 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 283.171235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.196436] Call Trace: [ 283.199066] dump_stack+0x185/0x1d0 [ 283.202736] should_fail+0x87b/0xab0 [ 283.206495] __should_failslab+0x278/0x2a0 [ 283.210769] should_failslab+0x29/0x70 [ 283.214690] __kmalloc+0xc5/0x350 [ 283.218174] ? sctp_v4_cmp_addr+0x166/0x250 [ 283.222556] ? sctp_add_bind_addr+0xb0/0x630 [ 283.227009] sctp_add_bind_addr+0xb0/0x630 [ 283.231295] sctp_copy_local_addr_list+0x4e1/0x610 [ 283.236279] sctp_copy_one_addr+0x20b/0xc40 [ 283.240675] sctp_bind_addr_copy+0x28c/0x970 [ 283.245130] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 283.250708] __sctp_connect+0x1108/0x1b00 [ 283.254927] sctp_connect+0x1b0/0x200 [ 283.258761] ? sctp_close+0xdb0/0xdb0 [ 283.262612] inet_dgram_connect+0x40c/0x670 [ 283.266963] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 283.272358] ? __inet_bind+0xff0/0xff0 [ 283.276282] __sys_connect+0x41a/0x510 [ 283.280230] ? syscall_return_slowpath+0xe9/0x700 [ 283.285127] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 283.290562] __x64_sys_connect+0xd8/0x120 [ 283.294745] do_syscall_64+0x152/0x230 [ 283.298672] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 283.303887] RIP: 0033:0x455a09 2018/05/31 14:41:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='team0\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:31 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000140)={0x1, 0xa7, &(0x7f0000000080)="bf3496f07be217d9754ee97e7908ec40fe74ddd6e8d90f24410d1936ec3edda1a8fc40c43b594261fc38fdf14153a45d4af255e180f0230f52c20ad0f967adee909dfa82054b8c43a7d43b13573a5048f2ac838292a5cb32ef559a7c94700ed0acab3a56f5a644624c4093f1224cc00bfe4156ac37ed86d2957c61b46c7af8e88d623672dec6b5e480af1138c0db16900ef7c7cf4b2f219936fcb0fd83fe20a715c4ff6483f103"}) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000000)=0x562f3ca5) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) dup2(r0, r0) 2018/05/31 14:41:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7fff, 0x400000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@updsa={0x110, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80}, @in=@loopback=0x7f000001}, {@in6, 0x0, 0x2b}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@local={0xac, 0x14, 0x14, 0xaa}}, @mark={0xc, 0x15}]}, 0x110}, 0x1}, 0x0) [ 283.307092] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 283.314835] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 283.322128] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 283.329421] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 283.336718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 283.344014] R13: 000000000000005b R14: 00000000006f5928 R15: 000000000000001b 2018/05/31 14:41:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = memfd_create(&(0x7f0000000000)='ppp1ppp0$nodev\x00', 0x1) getpeername(r1, &(0x7f0000000500)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000580)=0x80) sendto$packet(r1, &(0x7f0000000440)="bd089f17d0c53b972a64fe65d1a6819843c2b97436210e9b26fff21f3df9889d5fc171edb9e3a82337cffc7351551e424d3b910e81fd6846ce26f23e9b3c7ea6161c47a0e77e844ba37d893db7e147d520022292f9fd74981c742bc18534b2dc0297a387138faa3b75778cd6e5d30219a29bb376864669d01053b0ff66094064f1850cb6", 0x84, 0x4c000, &(0x7f00000005c0)={0x11, 0x8, r2, 0x1, 0x3b38, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}}, 0x14) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r4 = shmget$private(0x0, 0x2000, 0x248, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_INFO(r4, 0x3, &(0x7f0000000600)=""/148) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x40, r3, 0x800, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/snapshot\x00', 0x40000, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x204808}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xd8, r3, 0x8, 0x70bd26, 0x25dfdbfc, {0x7}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x5}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x25, 0x2}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xf}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0xa}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x4}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000003c0)={r7, 0x78, 0x30, 0x0, 0x401}, &(0x7f0000000400)=0x18) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='+V\x00\x00', @ANYRES16=r6, @ANYBLOB="0104000000000000000007000000"], 0x14}, 0x1}, 0x0) [ 283.474323] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 2018/05/31 14:41:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:31 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) [ 283.529427] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 2018/05/31 14:41:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x4003) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000300)={0x3, &(0x7f0000000040)=""/71, &(0x7f0000000280)=[{0x100, 0x21, 0x8, &(0x7f00000000c0)=""/33}, {0x4, 0xcc, 0x2, &(0x7f0000000100)=""/204}, {0x5a4d, 0x18, 0x7, &(0x7f0000000200)=""/24}]}) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) [ 283.916291] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 2018/05/31 14:41:32 executing program 6: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0xfffffffffffffffb) syslog(0x9, 0x0, 0xfffffd2d) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@remote, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', r1}) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000140)=""/240, &(0x7f0000000040)=0xf0) close(r0) 2018/05/31 14:41:32 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'bridge_slave_0\x00', {0x2, 0x4e22, @multicast2=0xe0000002}}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f00000000c0)) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0xdffd, 0x220002) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:32 executing program 0 (fault-call:1 fault-nth:28): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:32 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000380)={r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/71) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x7fffffff, 0xb3c6, 0xffffffffffffffff}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000300)={r4, 0x5}, &(0x7f0000000340)=0x8) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0104000000000000000007000162152cbb2f3f309b2afcfe7c00"], 0x14}, 0x1}, 0x0) 2018/05/31 14:41:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4200, 0x0) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) [ 284.255425] FAULT_INJECTION: forcing a failure. [ 284.255425] name failslab, interval 1, probability 0, space 0, times 0 [ 284.266815] CPU: 0 PID: 17870 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 284.274208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.283594] Call Trace: [ 284.286231] dump_stack+0x185/0x1d0 [ 284.289904] should_fail+0x87b/0xab0 [ 284.293664] __should_failslab+0x278/0x2a0 [ 284.297962] should_failslab+0x29/0x70 [ 284.301885] __kmalloc+0xc5/0x350 [ 284.305370] ? sctp_v4_cmp_addr+0x166/0x250 [ 284.309739] ? sctp_add_bind_addr+0xb0/0x630 [ 284.314194] sctp_add_bind_addr+0xb0/0x630 [ 284.318484] sctp_copy_local_addr_list+0x4e1/0x610 [ 284.323469] sctp_copy_one_addr+0x20b/0xc40 [ 284.327842] sctp_bind_addr_copy+0x28c/0x970 [ 284.332302] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 284.337883] __sctp_connect+0x1108/0x1b00 [ 284.342109] sctp_connect+0x1b0/0x200 [ 284.345947] ? sctp_close+0xdb0/0xdb0 [ 284.349802] inet_dgram_connect+0x40c/0x670 [ 284.354155] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 284.359555] ? __inet_bind+0xff0/0xff0 [ 284.363482] __sys_connect+0x41a/0x510 [ 284.367428] ? syscall_return_slowpath+0xe9/0x700 [ 284.372324] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 284.377764] __x64_sys_connect+0xd8/0x120 [ 284.381952] do_syscall_64+0x152/0x230 [ 284.385880] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 284.391094] RIP: 0033:0x455a09 [ 284.394300] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 2018/05/31 14:41:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0104000000008b0d000000000000"], 0x14}, 0x1}, 0x0) 2018/05/31 14:41:32 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xeb2b, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x5a, 0x7, 0x1000}, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) 2018/05/31 14:41:32 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) sendto$inet(r0, &(0x7f00006d1fd4)="db", 0x1, 0x4000000, &(0x7f00004daff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/05/31 14:41:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 284.402051] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 284.409350] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 284.416658] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 284.424045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 284.431345] R13: 000000000000005b R14: 00000000006f5928 R15: 000000000000001c 2018/05/31 14:41:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x80000001, 0x900) socket$inet6(0xa, 0x3, 0x200) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000000000004, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffffffff, 0x109000) 2018/05/31 14:41:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x6) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0xffffffffffffffff, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:32 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:32 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x18) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) r2 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x8, 0x8080) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000000c0)={0x9, 0x1, 0x7}) 2018/05/31 14:41:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x3f, &(0x7f0000000080)=0x2) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmctl$IPC_RMID(r2, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:32 executing program 6: ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000500)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x68000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x320) creat(&(0x7f0000000000)='./file0\x00', 0x10) 2018/05/31 14:41:32 executing program 0 (fault-call:1 fault-nth:29): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x4]}, 0x6) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0104000004000000100007000000"], 0x14}, 0x1}, 0x0) [ 284.839918] FAULT_INJECTION: forcing a failure. [ 284.839918] name failslab, interval 1, probability 0, space 0, times 0 [ 284.851418] CPU: 0 PID: 17934 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 284.858813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.868199] Call Trace: [ 284.870830] dump_stack+0x185/0x1d0 [ 284.874504] should_fail+0x87b/0xab0 [ 284.878261] __should_failslab+0x278/0x2a0 [ 284.882531] should_failslab+0x29/0x70 [ 284.886451] __kmalloc+0xc5/0x350 [ 284.889947] ? sctp_v4_cmp_addr+0x166/0x250 [ 284.894320] ? sctp_add_bind_addr+0xb0/0x630 [ 284.898862] sctp_add_bind_addr+0xb0/0x630 [ 284.903147] sctp_copy_local_addr_list+0x4e1/0x610 [ 284.908128] sctp_copy_one_addr+0x20b/0xc40 [ 284.912621] sctp_bind_addr_copy+0x28c/0x970 [ 284.917083] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 284.922667] __sctp_connect+0x1108/0x1b00 [ 284.926911] sctp_connect+0x1b0/0x200 [ 284.930757] ? sctp_close+0xdb0/0xdb0 [ 284.934612] inet_dgram_connect+0x40c/0x670 [ 284.938966] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 284.944363] ? __inet_bind+0xff0/0xff0 [ 284.948292] __sys_connect+0x41a/0x510 [ 284.952242] ? syscall_return_slowpath+0xe9/0x700 [ 284.957141] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 284.962570] __x64_sys_connect+0xd8/0x120 [ 284.966760] do_syscall_64+0x152/0x230 [ 284.970706] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 284.975927] RIP: 0033:0x455a09 [ 284.979145] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 2018/05/31 14:41:32 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@local, @in6=@mcast2}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x121442) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) r3 = getegid() r4 = accept4(r0, &(0x7f0000000440)=@hci, &(0x7f00000004c0)=0x80, 0x0) fchownat(r1, &(0x7f0000000080)='./file0\x00', r2, r3, 0x100) getsockname$unix(r1, &(0x7f00000003c0)=@abs, &(0x7f0000000100)=0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r6, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000500)) [ 284.986893] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 284.994189] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 285.001481] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 285.008777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 285.016079] R13: 000000000000005b R14: 00000000006f5928 R15: 000000000000001d 2018/05/31 14:41:33 executing program 6: r0 = epoll_create(0x4) epoll_pwait(r0, &(0x7f0000001380)=[{}], 0x1, 0x8001, &(0x7f00000001c0), 0x8) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ppoll(&(0x7f0000000280), 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf8ff4)={0x4}) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000000)) 2018/05/31 14:41:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:34 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:34 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x2}, 0xfffffec0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, @empty, 0x40, 0x800, 0x0, 0x100, 0x1, 0x40000000, r1}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 2018/05/31 14:41:34 executing program 0 (fault-call:1 fault-nth:30): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x400) write$fuse(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="30000000000000000a000000000000000800000000000000a5000000000000001585d8750900000000000000ffffff7f00000000"], 0x30) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:34 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x4002, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000300)=[0x3, 0x387, 0x7, 0x3, 0x20, 0xfffffffffffffffd, 0x878], 0x7, 0x5, 0x7, 0x7fff, 0x7, 0x47b, {0x7, 0x4, 0x3, 0x4, 0x3, 0x4, 0x7fff, 0x1, 0xfff, 0x4, 0x15, 0x7, 0x7a90, 0x1, "0beccbe4d859237f5b2997d8ed1e00d6c4d7e2a15e3d267dab743cce57df8dc8"}}) r1 = epoll_create1(0x80000) io_setup(0x720, &(0x7f0000000040)=0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={r3, r3, 0xf, 0x3}, 0x10) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xaf53, r1, &(0x7f0000000140)="c88dfd7c3afd71e2db9d86d04ad366df4d92ad1e163eeae0909dfc6bd09f28015b437fe4d15b6e8a33507a18e582d7ee261881a98559d5037ce17ae8786f0bdaf2aa26568a95e11571ac33231312f5651174f7d4f8b0187e0797a7ac31e08a2efaaf2b7622c8bb8dba1c2ca07961eac007938d5e0bc94d55b46ef4f2ccc7260acf857f12c602e10b53651d22b6ddcae04d042f66f91d79f5b253f7535c76b7a274983b7f33c785c205b029fdedf721cb4f62c5c63fdcdf989691406e2495c15bb3942caeaea1f30186df18b85b484e", 0xcf, 0x7, 0x0, 0x1, r3}, &(0x7f0000000240)) r4 = epoll_create1(0x0) fcntl$lock(r4, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x10000000000}) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000000}) 2018/05/31 14:41:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x400) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010400000000000000006b7718e0bb737e3a86693b10c19b59c202b62a2df49643c3c0fc492a913e09cebb99c1f1f8d4158004ab0e3c6dfdf8a5e8d02d6ebbbdfd2792b9e7fca451b532a2e64bbdc74e1502c44f9dce9844aa4f6d7790632fe24e1db02c6946e1f63638b1492189456391914e96eef4bf73b7a4a79f32d537d7cf52a12707d7d0f64aafa3982ccfef2907dbf08b63298795111c716c6462a482264f761e2498e3ce0683e357c3c202aed33c292d3bfc64ad8228fc10f939e82e720070276e2a2fd3d1dfe6c85307e2a85f1fb0f480684bc4340e8b3bf492d93c55"], 0x14}, 0x1}, 0x0) read(r0, &(0x7f00000000c0)=""/109, 0x6d) 2018/05/31 14:41:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) [ 286.198572] FAULT_INJECTION: forcing a failure. [ 286.198572] name failslab, interval 1, probability 0, space 0, times 0 [ 286.209990] CPU: 1 PID: 17979 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 286.217385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.226794] Call Trace: [ 286.226839] dump_stack+0x185/0x1d0 [ 286.226878] should_fail+0x87b/0xab0 [ 286.226917] __should_failslab+0x278/0x2a0 [ 286.226949] should_failslab+0x29/0x70 [ 286.226978] __kmalloc+0xc5/0x350 [ 286.227004] ? sctp_v4_cmp_addr+0x166/0x250 [ 286.227037] ? sctp_add_bind_addr+0xb0/0x630 [ 286.227071] sctp_add_bind_addr+0xb0/0x630 [ 286.227114] sctp_copy_local_addr_list+0x4e1/0x610 [ 286.227157] sctp_copy_one_addr+0x20b/0xc40 [ 286.227203] sctp_bind_addr_copy+0x28c/0x970 [ 286.227243] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 286.227276] __sctp_connect+0x1108/0x1b00 [ 286.227342] sctp_connect+0x1b0/0x200 [ 286.227370] ? sctp_close+0xdb0/0xdb0 [ 286.227415] inet_dgram_connect+0x40c/0x670 [ 286.227442] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 286.227472] ? __inet_bind+0xff0/0xff0 [ 286.227507] __sys_connect+0x41a/0x510 [ 286.227555] ? syscall_return_slowpath+0xe9/0x700 [ 286.227596] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 286.227655] __x64_sys_connect+0xd8/0x120 [ 286.227685] do_syscall_64+0x152/0x230 [ 286.227721] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 286.227744] RIP: 0033:0x455a09 [ 286.227761] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 2018/05/31 14:41:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000040)=""/195) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 286.227792] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 286.227821] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 286.360101] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 286.367406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 286.375315] R13: 000000000000005b R14: 00000000006f5928 R15: 000000000000001e 2018/05/31 14:41:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x60002) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000080)={0x80000000, 0x570, 0x200, 0xffff, 0x0, 0x8000}) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:34 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1d}, 0x2c) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x80000000, 0x82200) accept$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x10001, 0x7f, 0x7, 0x0, r0, 0x6}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x7, 0x1, 0x0, 0x0, 0x7a}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) 2018/05/31 14:41:34 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:34 executing program 0 (fault-call:1 fault-nth:31): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:34 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) [ 286.643918] FAULT_INJECTION: forcing a failure. [ 286.643918] name failslab, interval 1, probability 0, space 0, times 0 [ 286.655342] CPU: 1 PID: 18011 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 286.662725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.672100] Call Trace: [ 286.674731] dump_stack+0x185/0x1d0 [ 286.678404] should_fail+0x87b/0xab0 [ 286.682163] __should_failslab+0x278/0x2a0 [ 286.686445] should_failslab+0x29/0x70 [ 286.690367] __kmalloc+0xc5/0x350 [ 286.693873] ? sctp_v4_cmp_addr+0x166/0x250 [ 286.698242] ? sctp_add_bind_addr+0xb0/0x630 [ 286.702696] sctp_add_bind_addr+0xb0/0x630 [ 286.706981] sctp_copy_local_addr_list+0x4e1/0x610 [ 286.711963] sctp_copy_one_addr+0x20b/0xc40 [ 286.716331] sctp_bind_addr_copy+0x28c/0x970 [ 286.720784] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 286.726362] __sctp_connect+0x1108/0x1b00 [ 286.730580] sctp_connect+0x1b0/0x200 [ 286.734414] ? sctp_close+0xdb0/0xdb0 [ 286.738266] inet_dgram_connect+0x40c/0x670 [ 286.742623] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 286.748026] ? __inet_bind+0xff0/0xff0 [ 286.751953] __sys_connect+0x41a/0x510 [ 286.755893] ? syscall_return_slowpath+0xe9/0x700 [ 286.760787] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 286.766249] __x64_sys_connect+0xd8/0x120 [ 286.770457] do_syscall_64+0x152/0x230 [ 286.774382] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 286.779594] RIP: 0033:0x455a09 [ 286.782802] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 2018/05/31 14:41:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mkdir(&(0x7f00000001c0)='./file0\x00', 0x4) shmctl$IPC_RMID(r1, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @loopback=0x7f000001}}}, &(0x7f00000000c0)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={r2, 0x3, 0x6, "3b60181ebd35"}, 0xe) r3 = open(&(0x7f0000000140)='./file0\x00', 0x440000, 0x4) write$cgroup_int(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000280)=""/230) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:34 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) [ 286.790561] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 286.797855] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 286.805148] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 286.812446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 286.819744] R13: 000000000000005b R14: 00000000006f5928 R15: 000000000000001f 2018/05/31 14:41:35 executing program 6: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='fd/4\x00') accept$packet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x14) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}, 0x7, 0x7, 0x4e21, 0x8001, 0xa, 0x80, 0x20, 0x2f, r2, r3}, {0x0, 0x1, 0x9, 0xc1, 0x3, 0x5, 0x2, 0xcf1}, {0x5fe84580, 0xffffffffffff0001, 0x58, 0x6}, 0x401, 0x6e6bbb, 0x1, 0x1, 0x3, 0x1}, {{@in=@multicast1=0xe0000001, 0x4d4, 0xff}, 0x2, @in6, 0x0, 0x3, 0x1, 0x9, 0x3, 0x6, 0x1938}}, 0xe8) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 2018/05/31 14:41:35 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:35 executing program 7 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_ipx_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'bpq0\x00', {0x4, 0x1, 0x1, "b6c1be824fd4"}}) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x0, 0xfffffffffffffffc) 2018/05/31 14:41:35 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(0xffffffffffffffff, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:35 executing program 0 (fault-call:1 fault-nth:32): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00000000000004000c"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) recvmmsg(0xffffffffffffff9c, &(0x7f0000007240)=[{{&(0x7f0000000580)=@nl=@unspec, 0x80, &(0x7f0000001780)=[{&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000000680)=""/85, 0x55}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x4, &(0x7f00000017c0)=""/159, 0x9f, 0x40}, 0x9f9f}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001880)=""/221, 0xdd}], 0x1, &(0x7f00000019c0)=""/107, 0x6b, 0x20}, 0xeec8}, {{&(0x7f0000001a40)=@hci, 0x80, &(0x7f0000001c80)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/27, 0x1b}, {&(0x7f0000001b00)=""/9, 0x9}, {&(0x7f0000001b40)=""/10, 0xa}, {&(0x7f0000001b80)=""/90, 0x5a}, {&(0x7f0000001c00)=""/123, 0x7b}], 0x6, &(0x7f0000001d00)=""/103, 0x67, 0xffff}, 0xe3001f2}, {{&(0x7f0000001d80)=@hci={0x0, 0x0}, 0x80, &(0x7f0000003400)=[{&(0x7f0000001e00)=""/190, 0xbe}, {&(0x7f0000001ec0)=""/234, 0xea}, {&(0x7f0000003000)=""/196, 0xc4}, {&(0x7f0000003100)=""/66, 0x42}, {&(0x7f0000003180)=""/19, 0x13}, {&(0x7f00000031c0)=""/42, 0x2a}, {&(0x7f0000003200)=""/200, 0xc8}, {&(0x7f0000003300)=""/219, 0xdb}], 0x8, 0x0, 0x0, 0x7fffffff}, 0x10001}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/172, 0xac}, {&(0x7f0000003540)=""/117, 0x75}, {&(0x7f0000004000)=""/4096, 0x1000}], 0x3, &(0x7f0000003600), 0x0, 0x9}}, {{&(0x7f0000003640)=@hci, 0x80, &(0x7f0000003840)=[{&(0x7f00000036c0)=""/82, 0x52}, {&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000003740)=""/229, 0xe5}], 0x3, &(0x7f0000003880)=""/251, 0xfb, 0x5}, 0x1}, {{&(0x7f0000003980)=@can, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003a00)=""/7, 0x7}, {&(0x7f0000003a40)=""/207, 0xcf}, {&(0x7f0000003b40)=""/138, 0x8a}, {&(0x7f0000006000)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/102, 0x66}, {&(0x7f0000003c80)=""/186, 0xba}, {&(0x7f0000003d40)=""/27, 0x1b}], 0x7, 0x0, 0x0, 0x8}, 0xff}, {{&(0x7f0000003e00)=@hci, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003e80)=""/255, 0xff}, {&(0x7f0000007000)=""/149, 0x95}, {&(0x7f00000070c0)=""/213, 0xd5}], 0x3, &(0x7f00000071c0)=""/86, 0x56, 0x5d74}, 0x8000}], 0x8, 0x10143, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000007440)=ANY=[@ANYBLOB="b400000000f2ff009f000000000000001500000000000000000000000000e500950a00009a3a2faf"], &(0x7f0000007480)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0xfffffffffffffffc}, 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x100000000) 2018/05/31 14:41:35 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x1000100104) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) [ 287.158797] FAULT_INJECTION: forcing a failure. [ 287.158797] name failslab, interval 1, probability 0, space 0, times 0 [ 287.170163] CPU: 0 PID: 18043 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 287.177548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.186926] Call Trace: [ 287.189563] dump_stack+0x185/0x1d0 [ 287.193240] should_fail+0x87b/0xab0 [ 287.197003] __should_failslab+0x278/0x2a0 [ 287.201295] should_failslab+0x29/0x70 [ 287.205230] __kmalloc+0xc5/0x350 2018/05/31 14:41:35 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x5}, 0xffffffffffffffea) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) [ 287.208717] ? sctp_v4_cmp_addr+0x166/0x250 [ 287.213081] ? sctp_add_bind_addr+0xb0/0x630 [ 287.217535] sctp_add_bind_addr+0xb0/0x630 [ 287.221820] sctp_copy_local_addr_list+0x4e1/0x610 [ 287.226797] sctp_copy_one_addr+0x20b/0xc40 [ 287.231163] sctp_bind_addr_copy+0x28c/0x970 [ 287.235622] sctp_assoc_set_bind_addr_from_ep+0x21b/0x280 [ 287.241201] __sctp_connect+0x1108/0x1b00 [ 287.245427] sctp_connect+0x1b0/0x200 [ 287.249270] ? sctp_close+0xdb0/0xdb0 [ 287.253150] inet_dgram_connect+0x40c/0x670 [ 287.257508] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 287.262910] ? __inet_bind+0xff0/0xff0 [ 287.266840] __sys_connect+0x41a/0x510 [ 287.270780] ? syscall_return_slowpath+0xe9/0x700 [ 287.275674] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 287.281113] __x64_sys_connect+0xd8/0x120 [ 287.285302] do_syscall_64+0x152/0x230 [ 287.289234] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 287.294445] RIP: 0033:0x455a09 [ 287.297659] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 2018/05/31 14:41:35 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0x100000000, 0xfffffffffffffffe}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x66, &(0x7f0000000140)=@assoc_value, &(0x7f0000000080)=0x8) [ 287.305413] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 287.312710] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 287.320002] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 287.327307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 287.334627] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000020 [ 287.362118] FAULT_INJECTION: forcing a failure. [ 287.362118] name failslab, interval 1, probability 0, space 0, times 0 [ 287.373481] CPU: 0 PID: 18045 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #103 [ 287.380868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.390255] Call Trace: [ 287.392891] dump_stack+0x185/0x1d0 [ 287.396567] should_fail+0x87b/0xab0 [ 287.400343] __should_failslab+0x278/0x2a0 [ 287.404647] should_failslab+0x29/0x70 2018/05/31 14:41:35 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) [ 287.408785] kmem_cache_alloc+0x12e/0xb90 [ 287.412974] ? mmap_region+0x1c2d/0x3730 [ 287.417085] mmap_region+0x1c2d/0x3730 [ 287.421049] do_mmap+0x193f/0x2020 [ 287.424660] __se_sys_remap_file_pages+0xf3c/0x1130 [ 287.429745] ? prepare_exit_to_usermode+0x149/0x3a0 [ 287.434833] __x64_sys_remap_file_pages+0x15d/0x1b0 [ 287.439888] do_syscall_64+0x152/0x230 [ 287.443820] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 287.449035] RIP: 0033:0x455a09 [ 287.452247] RSP: 002b:00007fc91acedc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 287.460002] RAX: ffffffffffffffda RBX: 00007fc91acee6d4 RCX: 0000000000455a09 [ 287.467302] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 287.474782] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 287.482082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 287.489382] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 0000000000000000 2018/05/31 14:41:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x0, 0x80000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000300)=0x5, 0x4) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x100) accept4$nfc_llcp(r3, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r4, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:35 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(0xffffffffffffffff, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r3 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x5, 0x20000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0xc) uname(&(0x7f0000000000)=""/65) pread64(r0, &(0x7f0000000080)=""/81, 0x51, 0x0) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x3003) shmget(0x2, 0x2000, 0x54000000, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_RMID(r2, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:35 executing program 6: r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080), 0x0) 2018/05/31 14:41:35 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:35 executing program 0 (fault-call:1 fault-nth:33): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:35 executing program 7 (fault-call:4 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:35 executing program 2: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000000140)='./control\x00', 0x2, 0x0) lseek(r0, 0x8000, 0x1) r1 = open(&(0x7f00002e5000)='./control\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000000)=""/193, &(0x7f0000000100)=0xc1) lseek(r1, 0x8000, 0x0) [ 287.735368] FAULT_INJECTION: forcing a failure. [ 287.735368] name failslab, interval 1, probability 0, space 0, times 0 [ 287.746835] CPU: 1 PID: 18079 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 287.754228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.758785] FAULT_INJECTION: forcing a failure. [ 287.758785] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 287.763600] Call Trace: [ 287.763642] dump_stack+0x185/0x1d0 [ 287.763679] should_fail+0x87b/0xab0 [ 287.763748] __should_failslab+0x278/0x2a0 [ 287.789670] should_failslab+0x29/0x70 [ 287.793569] __kmalloc+0xc5/0x350 [ 287.797070] ? sctp_transport_new+0x93/0x940 [ 287.801505] sctp_transport_new+0x93/0x940 [ 287.805756] sctp_assoc_add_peer+0x531/0x1e30 [ 287.810275] __sctp_connect+0x1181/0x1b00 [ 287.814460] sctp_connect+0x1b0/0x200 [ 287.818296] ? sctp_close+0xdb0/0xdb0 [ 287.822121] inet_dgram_connect+0x40c/0x670 [ 287.826473] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 287.831847] ? __inet_bind+0xff0/0xff0 [ 287.835748] __sys_connect+0x41a/0x510 [ 287.839660] ? syscall_return_slowpath+0xe9/0x700 [ 287.844522] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 287.849919] __x64_sys_connect+0xd8/0x120 [ 287.854076] do_syscall_64+0x152/0x230 [ 287.857976] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 287.863172] RIP: 0033:0x455a09 [ 287.866367] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 287.874106] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 287.881377] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 287.888649] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 287.895922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 287.903205] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000021 [ 287.910517] CPU: 0 PID: 18088 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #103 [ 287.917905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.927280] Call Trace: [ 287.929911] dump_stack+0x185/0x1d0 2018/05/31 14:41:35 executing program 6: timer_create(0xfffffffffffffffd, &(0x7f000014b000)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000000000)) r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x2, 0x400000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x800, 0xa, 0x2, 0x1ff, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000300)={r1, @in6={{0xa, 0x4e21, 0x9, @local={0xfe, 0x80, [], 0xaa}, 0x100000001}}, [0x2, 0x100000001, 0x0, 0x8, 0x8, 0x80000001, 0x81, 0x10001, 0x7, 0x1, 0x4, 0x9, 0x4ee3, 0x5, 0x400]}, &(0x7f0000000240)=0x100) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00007a3fe0)={{0x77359400}}, &(0x7f0000000000)) set_mempolicy(0xfffffffffffffffd, &(0x7f0000000140)=0x5, 0x80) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 287.933591] should_fail+0x87b/0xab0 [ 287.937356] __alloc_pages_nodemask+0x630/0x5dc0 [ 287.942146] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 287.947541] ? is_bpf_text_address+0xb4/0x4b0 [ 287.952073] ? __is_insn_slot_addr+0x198/0x1c0 [ 287.956699] ? kernel_text_address+0x34d/0x3a0 [ 287.961311] ? __kernel_text_address+0x34/0xe0 [ 287.965926] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 287.971403] ? __save_stack_trace+0x90d/0xb00 [ 287.975935] ? kmsan_set_origin_inline+0x6b/0x120 [ 287.980913] ? shmem_alloc_and_acct_page+0x6f0/0x1020 2018/05/31 14:41:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xd8, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000800", @ANYRES16=r2, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYRES16, @ANYRES16=r0, @ANYBLOB="82b075fdcdc0c9a83100ee957ae706cc7f32ebdcd8e85060ef6e377b65fe58bc3dd11797b3c938477bfa449b5180a6b000ae49e671378a8d215ffecdaa02123b1a0f29dc6cf106e0b4c355d6bb1b3076468fc55f4f2dac039ef5fab9688f1b032cbbe5c1a1bd16481b57ab5c085d72f036cf9f12cdb1e91cc2d9c2aa6e35d859250fc2668256612ab2ebe9fe4e3b24b84bf3eec6b6a202f5bb3d8f943fa5cf23d77e0331cd01611c0bd149df12744c6ccd9ed9925b271365dfbe02121c6deb15cbe2e19814b993db57d5c97bd507f9f979171aa1dbfaf0", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYPTR64], @ANYRES16=r1, @ANYRES64=r2, @ANYBLOB="fb6f0b1c8a85e1d5dba22790898bb6285be668a25ed363f936559567d6046aab6f09447a54de5a806c477d6462d400ef189d56d9912fa9b98d899efc0e8c270712330fe51969a07529da155011217f599f6eb137697ed014536b3c39fd56835a6a8fe0060c649e1585717d0e784c1925fa59e16ba6946b27a82d56b18f5b61b8fc673ccc453067b84a6e24e512591591948a7b5ee318a4facfe69f91cfe516e0a452ce54884ea6770e2bb665ec66a67ec23ba317e74e0876c1cd07a3c96872559c60da00066d3ae44532"]], 0x3}, 0x1}, 0x0) 2018/05/31 14:41:36 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) [ 287.986148] alloc_pages_vma+0xcc6/0x17f0 [ 287.990339] shmem_alloc_and_acct_page+0x6f0/0x1020 [ 287.995406] ? find_lock_entry+0xc8/0x720 [ 287.999605] ? find_get_entry+0x7ef/0x820 [ 288.003797] ? shmem_getpage_gfp+0x61f/0x5980 [ 288.008336] ? shmem_getpage_gfp+0x61f/0x5980 [ 288.012874] shmem_getpage_gfp+0x3971/0x5980 [ 288.017324] ? unmap_page_range+0x3b7e/0x3be0 [ 288.021871] ? __irqentry_text_end+0x1fb63e/0x1fb63e [ 288.027028] ? __msan_metadata_ptr_for_load_8+0x10/0x20 2018/05/31 14:41:36 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x420000, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0xe, 0x10, "4a36be5b7243080cdb9abaccff9ef18e375464a30f6f568d91396179b96815babbd5f7bee1b3bf36a870f746e7c1e5cf669a92b2efe5ee91011d04c7890e840b", "48a9ef19569446b2b4d9748141b5e4a03365dc4be076ae9c44091b4c027f7635", [0x7]}) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x2000000002, 0x1000082) r2 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000240)={{{@in=@local, @in6=@mcast2}}, {{@in=@rand_addr}}}, &(0x7f0000000040)=0xe8) getpeername$ipx(r2, &(0x7f0000000180), &(0x7f0000000380)=0x10) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) rt_sigtimedwait(&(0x7f00005a1000), &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00000cc000/0x4000)=nil) mremap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000cd000/0x2000)=nil) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x100, 0x0) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000100)=""/108) [ 288.032433] ? __msan_poison_alloca+0x15c/0x1d0 [ 288.037155] ? __msan_poison_alloca+0x15c/0x1d0 [ 288.041863] shmem_fault+0x509/0x950 [ 288.045635] ? shmem_destroy_callback+0x150/0x150 [ 288.050517] shm_fault+0xbc/0x110 [ 288.054017] ? shm_split+0x180/0x180 [ 288.057800] handle_mm_fault+0x5c01/0x7e90 [ 288.057874] __get_user_pages+0x176a/0x24a0 [ 288.057918] ? __msan_metadata_ptr_for_load_1+0x20/0x20 [ 288.057977] __mm_populate+0x6cb/0x8b0 2018/05/31 14:41:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8992, &(0x7f0000000080)="3031be1c480a31e37a077c54b40d") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x20000, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x40100, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x40, 0x400000) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={r3, 0xa7e8d0ef3b7f0682, 0x1, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x22}, 0xffffff5b) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000180)={r5, 0x9d2}, 0x8) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f00000000c0)=""/57) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) recvfrom$packet(r2, &(0x7f0000000300)=""/145, 0x91, 0x20, 0x0, 0x0) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x1, 0x1) 2018/05/31 14:41:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(0xffffffffffffffff, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) [ 288.058024] __se_sys_remap_file_pages+0x100f/0x1130 [ 288.058069] ? prepare_exit_to_usermode+0x149/0x3a0 [ 288.058126] __x64_sys_remap_file_pages+0x15d/0x1b0 2018/05/31 14:41:36 executing program 3: r0 = socket$inet6(0xa, 0x4, 0x10001) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0184000000000000000007000000"], 0x14}, 0x1}, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)={{0x10b, 0x41b9, 0x9, 0x248, 0x217, 0xd5e, 0x237, 0x33816c5f}, "231c98f9e4318a4b8a706d3106a9a548f47f912b800c4e0c65081a7f7df419d331f33596a7a4416e0516a20ece70eebd4c43bcb788bdda9ce3463b263f783baf9fe15fadead97f4800917eb7a1fd", [[], [], []]}, 0x36e) [ 288.058164] do_syscall_64+0x152/0x230 2018/05/31 14:41:36 executing program 0 (fault-call:1 fault-nth:34): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) [ 288.058202] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 288.058224] RIP: 0033:0x455a09 2018/05/31 14:41:36 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:36 executing program 7 (fault-call:4 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 288.058239] RSP: 002b:00007fc91acedc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 2018/05/31 14:41:36 executing program 4: r0 = socket$inet6(0xa, 0x8000a, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) epoll_create(0xb1e2) [ 288.058271] RAX: ffffffffffffffda RBX: 00007fc91acee6d4 RCX: 0000000000455a09 [ 288.058289] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 288.058306] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 288.058324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 288.058342] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 0000000000000001 [ 288.392255] FAULT_INJECTION: forcing a failure. [ 288.392255] name failslab, interval 1, probability 0, space 0, times 0 [ 288.392288] CPU: 0 PID: 18121 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 288.392305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.392317] Call Trace: [ 288.392359] dump_stack+0x185/0x1d0 [ 288.392403] should_fail+0x87b/0xab0 [ 288.392443] __should_failslab+0x278/0x2a0 [ 288.392500] should_failslab+0x29/0x70 [ 288.392534] kmem_cache_alloc+0x12e/0xb90 [ 288.392566] ? dst_alloc+0x295/0x860 [ 288.392604] dst_alloc+0x295/0x860 [ 288.392649] ip_route_output_key_hash_rcu+0x22ad/0x3a90 [ 288.392707] ip_route_output_flow+0x1d4/0x3b0 [ 288.392744] sctp_v4_get_dst+0x5e0/0x16a0 [ 288.392782] ? get_random_bytes+0xe2/0x2b0 [ 288.392816] ? sctp_v4_xmit+0x210/0x210 [ 288.392865] sctp_transport_route+0x137/0x640 [ 288.392902] sctp_assoc_add_peer+0x801/0x1e30 [ 288.392946] __sctp_connect+0x1181/0x1b00 [ 288.393011] sctp_connect+0x1b0/0x200 [ 288.393040] ? sctp_close+0xdb0/0xdb0 [ 288.393085] inet_dgram_connect+0x40c/0x670 [ 288.393112] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 288.393142] ? __inet_bind+0xff0/0xff0 [ 288.393177] __sys_connect+0x41a/0x510 [ 288.393226] ? syscall_return_slowpath+0xe9/0x700 [ 288.393269] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 288.393330] __x64_sys_connect+0xd8/0x120 [ 288.393361] do_syscall_64+0x152/0x230 [ 288.393400] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 288.393422] RIP: 0033:0x455a09 [ 288.393439] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 288.393473] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 288.393491] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 288.393509] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 288.393528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 288.393545] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000022 [ 288.538732] FAULT_INJECTION: forcing a failure. [ 288.538732] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 288.538747] CPU: 1 PID: 18127 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #103 [ 288.538754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.538757] Call Trace: [ 288.538775] dump_stack+0x185/0x1d0 [ 288.538792] should_fail+0x87b/0xab0 [ 288.538812] __alloc_pages_nodemask+0x630/0x5dc0 [ 288.538826] ? kernel_poison_pages+0x40/0x360 [ 288.538839] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 288.538851] ? kernel_poison_pages+0x1a0/0x360 [ 288.538864] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 288.538876] ? get_page_from_freelist+0xab08/0xb5e0 [ 288.538892] ? __next_zones_zonelist+0x15f/0x290 [ 288.538906] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 288.538922] ? kernel_text_address+0x34d/0x3a0 [ 288.538938] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 288.538950] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 288.538969] ? kmsan_set_origin_inline+0x6b/0x120 [ 288.538981] ? __msan_poison_alloca+0x15c/0x1d0 [ 288.539000] kmsan_alloc_page+0x82/0xe0 [ 288.539019] __alloc_pages_nodemask+0xfc0/0x5dc0 [ 288.539033] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 288.539045] ? is_bpf_text_address+0xb4/0x4b0 [ 288.539059] ? __is_insn_slot_addr+0x198/0x1c0 [ 288.539073] ? kernel_text_address+0x34d/0x3a0 [ 288.539086] ? __kernel_text_address+0x34/0xe0 [ 288.539098] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 288.539109] ? __save_stack_trace+0x90d/0xb00 [ 288.539133] alloc_pages_vma+0xcc6/0x17f0 [ 288.539152] shmem_alloc_and_acct_page+0x6f0/0x1020 [ 288.539166] ? find_lock_entry+0xc8/0x720 [ 288.539184] ? find_get_entry+0x7ef/0x820 [ 288.539197] ? shmem_getpage_gfp+0x61f/0x5980 [ 288.539210] ? shmem_getpage_gfp+0x61f/0x5980 [ 288.539227] shmem_getpage_gfp+0x3971/0x5980 [ 288.539239] ? unmap_page_range+0x3b7e/0x3be0 [ 288.539255] ? __irqentry_text_end+0x1fb63e/0x1fb63e [ 288.539272] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 288.539290] ? __msan_poison_alloca+0x15c/0x1d0 [ 288.539306] ? __msan_poison_alloca+0x15c/0x1d0 [ 288.539321] shmem_fault+0x509/0x950 [ 288.539338] ? shmem_destroy_callback+0x150/0x150 [ 288.539349] shm_fault+0xbc/0x110 [ 288.539359] ? shm_split+0x180/0x180 [ 288.539370] handle_mm_fault+0x5c01/0x7e90 [ 288.539395] __get_user_pages+0x176a/0x24a0 [ 288.539413] ? __msan_metadata_ptr_for_load_1+0x20/0x20 [ 288.539432] __mm_populate+0x6cb/0x8b0 [ 288.539451] __se_sys_remap_file_pages+0x100f/0x1130 [ 288.539464] ? prepare_exit_to_usermode+0x149/0x3a0 [ 288.539481] __x64_sys_remap_file_pages+0x15d/0x1b0 [ 288.539494] do_syscall_64+0x152/0x230 [ 288.539509] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 288.539517] RIP: 0033:0x455a09 [ 288.539542] RSP: 002b:00007fc91acedc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 288.976134] RAX: ffffffffffffffda RBX: 00007fc91acee6d4 RCX: 0000000000455a09 [ 288.976140] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 288.976146] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 288.976170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 289.012923] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 0000000000000002 [ 289.096153] print_req_error: I/O error, dev loop4, sector 2056 [ 289.116357] print_req_error: I/O error, dev loop4, sector 3080 [ 289.122895] print_req_error: I/O error, dev loop4, sector 4104 2018/05/31 14:41:37 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0f47fc700000150000000000") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:37 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:37 executing program 6: mmap(&(0x7f0000000000/0xfd8000)=nil, 0xfd8000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80000, 0x80000000000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000cde000)={0x2000, {{0xa, 0x80000000004, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x9}}, {{0xa, 0x0, 0xfffffffffffffffc, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x442, 0x40000) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001040)={0x17, 0x1000, &(0x7f0000000040)="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"}) 2018/05/31 14:41:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xffffffffffffffb5, 0x100) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000040)=[0x1], 0x1, 0xff, 0x8, 0x9, 0x9, 0x0, {0x8, 0x5, 0x8, 0x800, 0xc5, 0xfffffffffffffffb, 0xa670, 0x8d7, 0xfffffffffffffffd, 0x7fffffff, 0x1, 0xffffffffffffff84, 0x3ff, 0x100, "96c5bdc614d86021887428e92c496521407fc9e7fb31b52e5df8e475343e413c"}}) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x0) 2018/05/31 14:41:37 executing program 7 (fault-call:4 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:37 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_create(0x7, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000040)) 2018/05/31 14:41:37 executing program 0 (fault-call:1 fault-nth:35): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) [ 289.286119] print_req_error: I/O error, dev loop4, sector 40 [ 289.292158] print_req_error: I/O error, dev loop4, sector 72 [ 289.298157] print_req_error: I/O error, dev loop4, sector 136 [ 289.304297] print_req_error: I/O error, dev loop4, sector 520 [ 289.312613] print_req_error: I/O error, dev loop4, sector 1544 [ 289.318827] print_req_error: I/O error, dev loop4, sector 2056 [ 289.326222] print_req_error: I/O error, dev loop4, sector 3080 [ 289.445806] FAULT_INJECTION: forcing a failure. [ 289.445806] name failslab, interval 1, probability 0, space 0, times 0 [ 289.457168] CPU: 1 PID: 18169 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 289.464559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.474044] Call Trace: [ 289.476675] dump_stack+0x185/0x1d0 [ 289.480350] should_fail+0x87b/0xab0 [ 289.484126] __should_failslab+0x278/0x2a0 [ 289.488407] should_failslab+0x29/0x70 [ 289.492348] __kmalloc+0xc5/0x350 [ 289.495848] ? sctp_bind_addrs_to_raw+0x73/0x550 [ 289.499113] FAULT_INJECTION: forcing a failure. [ 289.499113] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 289.500644] ? sctp_bind_addrs_to_raw+0x190/0x550 [ 289.517325] ? sctp_bind_addrs_to_raw+0xa9/0x550 [ 289.522103] sctp_bind_addrs_to_raw+0x190/0x550 [ 289.526788] ? __msan_poison_alloca+0x15c/0x1d0 [ 289.531480] sctp_make_init+0x238/0x3bc0 [ 289.535580] sctp_sf_do_prm_asoc+0x160/0x710 [ 289.539997] ? sctp_sm_lookup_event+0x6ae/0x8a0 [ 289.544678] ? sctp_sf_violation+0x260/0x260 [ 289.549101] sctp_do_sm+0x29d/0x8d20 [ 289.552841] ? _raw_spin_unlock_bh+0x57/0x70 [ 289.557284] ? __local_bh_enable_ip+0x3b/0x140 [ 289.561897] ? _raw_spin_unlock_bh+0x57/0x70 [ 289.566325] ? __local_bh_enable_ip+0x3b/0x140 [ 289.570927] ? _raw_spin_unlock_bh+0x57/0x70 [ 289.575358] ? sctp_hash_transport+0x1f18/0x20c0 [ 289.580147] ? kmsan_memcpy_origins+0xf1/0x170 [ 289.584752] ? sctp_sf_violation+0x260/0x260 [ 289.589170] sctp_primitive_ASSOCIATE+0x172/0x1a0 [ 289.594026] __sctp_connect+0x1655/0x1b00 [ 289.598214] sctp_connect+0x1b0/0x200 [ 289.602021] ? sctp_close+0xdb0/0xdb0 [ 289.605842] inet_dgram_connect+0x40c/0x670 [ 289.610192] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 289.615564] ? __inet_bind+0xff0/0xff0 [ 289.619462] __sys_connect+0x41a/0x510 [ 289.623373] ? syscall_return_slowpath+0xe9/0x700 [ 289.628233] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 289.633632] __x64_sys_connect+0xd8/0x120 [ 289.637790] do_syscall_64+0x152/0x230 [ 289.641692] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 289.646885] RIP: 0033:0x455a09 [ 289.650073] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 289.657805] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 289.665077] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 289.672347] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 289.679617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 289.686887] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000023 [ 289.694171] CPU: 0 PID: 18167 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #103 [ 289.701536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.710881] Call Trace: [ 289.713463] dump_stack+0x185/0x1d0 [ 289.717101] should_fail+0x87b/0xab0 [ 289.720815] __alloc_pages_nodemask+0x630/0x5dc0 [ 289.725570] ? kernel_poison_pages+0x40/0x360 [ 289.730090] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 289.735459] ? kernel_poison_pages+0x1a0/0x360 [ 289.740065] ? __msan_metadata_ptr_for_store_8+0x13/0x20 2018/05/31 14:41:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x602001, 0x0) sendmsg$rds(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x4e24, @broadcast=0xffffffff}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/221, 0xdd}, {&(0x7f0000000180)=""/57, 0x39}], 0x2, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0xfffffffffffffffb, 0x3}, &(0x7f0000000200), &(0x7f0000000280)=0x9, 0x6, 0x2, 0x799, 0x3, 0x40, 0x4f}}, @rdma_dest={0x18, 0x114, 0x2, {0x6, 0x5}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x7f}], 0x88, 0x10}, 0x40000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f00000003c0)={r2, 0x7}) [ 289.745514] ? get_page_from_freelist+0xab08/0xb5e0 [ 289.750610] ? __next_zones_zonelist+0x15f/0x290 [ 289.755409] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 289.760786] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 289.765805] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 289.771263] ? kmsan_set_origin_inline+0x6b/0x120 [ 289.776107] ? __msan_poison_alloca+0x15c/0x1d0 [ 289.780788] kmsan_alloc_page+0x82/0xe0 [ 289.784770] __alloc_pages_nodemask+0xfc0/0x5dc0 [ 289.789529] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 289.794893] ? is_bpf_text_address+0xb4/0x4b0 [ 289.799389] ? __is_insn_slot_addr+0x198/0x1c0 [ 289.803975] ? kernel_text_address+0x34d/0x3a0 [ 289.808557] ? __kernel_text_address+0x34/0xe0 [ 289.813141] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 289.818590] ? __save_stack_trace+0x90d/0xb00 [ 289.823093] alloc_pages_vma+0xcc6/0x17f0 [ 289.827249] shmem_alloc_and_acct_page+0x6f0/0x1020 [ 289.832269] ? find_lock_entry+0xc8/0x720 [ 289.836416] ? find_get_entry+0x7ef/0x820 [ 289.840564] ? shmem_getpage_gfp+0x61f/0x5980 2018/05/31 14:41:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x2) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x54000010, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 289.845084] ? shmem_getpage_gfp+0x61f/0x5980 [ 289.849580] shmem_getpage_gfp+0x3971/0x5980 [ 289.853983] ? unmap_page_range+0x3b7e/0x3be0 [ 289.858669] ? __irqentry_text_end+0x1fb63e/0x1fb63e [ 289.863781] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 289.869148] ? __msan_poison_alloca+0x15c/0x1d0 [ 289.873820] ? __msan_poison_alloca+0x15c/0x1d0 [ 289.878491] shmem_fault+0x509/0x950 [ 289.882207] ? shmem_destroy_callback+0x150/0x150 [ 289.887046] shm_fault+0xbc/0x110 [ 289.890498] ? shm_split+0x180/0x180 [ 289.894213] handle_mm_fault+0x5c01/0x7e90 [ 289.898461] __get_user_pages+0x176a/0x24a0 [ 289.902791] ? __msan_metadata_ptr_for_load_1+0x20/0x20 [ 289.908167] __mm_populate+0x6cb/0x8b0 [ 289.912065] __se_sys_remap_file_pages+0x100f/0x1130 [ 289.917176] ? prepare_exit_to_usermode+0x149/0x3a0 [ 289.922201] __x64_sys_remap_file_pages+0x15d/0x1b0 [ 289.927215] do_syscall_64+0x152/0x230 [ 289.931106] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 289.936288] RIP: 0033:0x455a09 [ 289.939475] RSP: 002b:00007fc91acedc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 2018/05/31 14:41:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) gettid() 2018/05/31 14:41:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fallocate(r0, 0x1, 0x200, 0xfbf) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000004", @ANYRES16=r2, @ANYBLOB="0104000000000000000007000000"], 0x14}, 0x1}, 0x0) 2018/05/31 14:41:37 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:37 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x1d}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "1afef0ba414850d0"}}, 0x48}, 0x1}, 0x0) r1 = socket$inet6(0xa, 0xa, 0x8) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x1d}, 0x10, &(0x7f0000000080)={&(0x7f0000000280)={0x5, 0x400, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x392c9b31}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9ed478208b086ecd"}}, 0x48}, 0x1}, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x4e24, 0x3, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x4e22, 0x1f, @empty, 0x2}, 0x80, [0x20, 0x87, 0x66a, 0x400, 0x5, 0x97, 0x6d568121, 0x7]}, 0x5c) [ 289.947181] RAX: ffffffffffffffda RBX: 00007fc91acee6d4 RCX: 0000000000455a09 [ 289.954477] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 289.961743] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 289.969009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 289.976305] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 0000000000000003 2018/05/31 14:41:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget(0x2, 0x1000, 0x3cc2376a7bad217e, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffe000/0x1000)=nil, 0x1000) socketpair$inet(0x2, 0xe, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x400, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x0, 0xfffffffffffffffb, 0x88, 0x0, @scatter={0x2, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/196, 0xc4}, {&(0x7f0000000380)=""/238, 0xee}]}, &(0x7f0000000480)="11a072662e72d10dfe0dc3884680c2eeeec819f1149e5e96aed527119d54dd5e652fcc529c938df5ef5c50c499e7607d1b3b3f3d95f17ed2efd344c7e60af9289b4613015908e0a4e3d71a5d051d0f66631feb8d91dea8ad2ec7cd27dfaeb960d57226fa0bbd73c61b72450727d15431763a000c84f7473946cc1e4b1d2fa059e0b197441dcc0f1a", &(0x7f0000000540)=""/38, 0x800, 0x1, 0x1, &(0x7f0000000580)}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000100)=""/24, &(0x7f0000000140)=0x18) shmctl$IPC_RMID(r3, 0x0) shmctl$IPC_RMID(r3, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000001c0)) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000180)=0xfff) 2018/05/31 14:41:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:38 executing program 7 (fault-call:4 fault-nth:4): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:38 executing program 6: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x8000, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @multicast2=0xe0000002}, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x0, 0x0, 0x0, 0x80000000}) getsockname$packet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@loopback={0x0, 0x1}, @empty, @remote={0xfe, 0x80, [], 0xbb}, 0x9, 0x3, 0x379, 0x500, 0xf57, 0x0, r1}) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x1) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/4, &(0x7f0000000040)=0x4) 2018/05/31 14:41:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) connect$llc(r2, &(0x7f0000000080)={0x1a, 0x7970e271a8283b1, 0x74a, 0x4, 0x6, 0x0, @random="05b06979047a"}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r3, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:38 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:38 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000700)={0x0, @in={{0x2}}, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x98) sendto$inet6(r0, &(0x7f0000000080)="c2", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1c) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x3, 0x200800) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000180)) 2018/05/31 14:41:38 executing program 0 (fault-call:1 fault-nth:36): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) [ 290.365844] FAULT_INJECTION: forcing a failure. [ 290.365844] name failslab, interval 1, probability 0, space 0, times 0 [ 290.377304] CPU: 0 PID: 18230 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 290.384706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.394090] Call Trace: [ 290.396733] dump_stack+0x185/0x1d0 [ 290.400410] should_fail+0x87b/0xab0 [ 290.404173] __should_failslab+0x278/0x2a0 [ 290.408453] should_failslab+0x29/0x70 [ 290.412382] kmem_cache_alloc_node+0x15e/0xc90 [ 290.415994] FAULT_INJECTION: forcing a failure. [ 290.415994] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 290.417199] ? __alloc_skb+0x202/0x9e0 [ 290.417256] ? kmsan_memcpy_origins+0xf1/0x170 [ 290.417306] __alloc_skb+0x202/0x9e0 [ 290.441275] _sctp_make_chunk+0xf6/0x8f0 [ 290.445371] ? sctp_inet6_supported_addrs+0xd2/0x140 [ 290.450490] sctp_make_init+0xc4f/0x3bc0 [ 290.454590] sctp_sf_do_prm_asoc+0x160/0x710 [ 290.459038] ? sctp_sm_lookup_event+0x6ae/0x8a0 [ 290.464235] ? sctp_sf_violation+0x260/0x260 [ 290.468658] sctp_do_sm+0x29d/0x8d20 [ 290.472402] ? _raw_spin_unlock_bh+0x57/0x70 [ 290.476836] ? __local_bh_enable_ip+0x3b/0x140 [ 290.481446] ? _raw_spin_unlock_bh+0x57/0x70 [ 290.485873] ? __local_bh_enable_ip+0x3b/0x140 [ 290.490476] ? _raw_spin_unlock_bh+0x57/0x70 [ 290.494907] ? sctp_hash_transport+0x1f18/0x20c0 [ 290.499699] ? kmsan_memcpy_origins+0xf1/0x170 [ 290.504302] ? sctp_sf_violation+0x260/0x260 [ 290.508717] sctp_primitive_ASSOCIATE+0x172/0x1a0 [ 290.513569] __sctp_connect+0x1655/0x1b00 [ 290.517754] sctp_connect+0x1b0/0x200 [ 290.521560] ? sctp_close+0xdb0/0xdb0 [ 290.525382] inet_dgram_connect+0x40c/0x670 [ 290.529710] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 290.535088] ? __inet_bind+0xff0/0xff0 [ 290.538988] __sys_connect+0x41a/0x510 [ 290.542900] ? syscall_return_slowpath+0xe9/0x700 [ 290.547781] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 290.553178] __x64_sys_connect+0xd8/0x120 [ 290.557336] do_syscall_64+0x152/0x230 [ 290.561238] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 290.566436] RIP: 0033:0x455a09 [ 290.569627] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 290.577354] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 290.584625] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 290.591897] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 290.599169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 290.606442] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000024 [ 290.613740] CPU: 1 PID: 18239 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #103 [ 290.621125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.630520] Call Trace: [ 290.633146] dump_stack+0x185/0x1d0 [ 290.636818] should_fail+0x87b/0xab0 [ 290.640580] __alloc_pages_nodemask+0x630/0x5dc0 [ 290.645399] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 290.650881] ? shmem_getpage_gfp+0x57d4/0x5980 [ 290.655500] ? unmap_page_range+0x3b7e/0x3be0 [ 290.660050] ? __irqentry_text_end+0x1fb63e/0x1fb63e 2018/05/31 14:41:38 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) [ 290.665214] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 290.670656] alloc_pages_current+0x6b1/0x970 [ 290.675103] pte_alloc_one+0x56/0x100 [ 290.678932] __pte_alloc+0x86/0x410 [ 290.682609] ? shmem_fault+0x58e/0x950 [ 290.686552] alloc_set_pte+0x1236/0x1d80 [ 290.690667] handle_mm_fault+0x5e95/0x7e90 [ 290.694981] __get_user_pages+0x176a/0x24a0 [ 290.699345] ? __msan_metadata_ptr_for_load_1+0x20/0x20 [ 290.704777] __mm_populate+0x6cb/0x8b0 [ 290.708712] __se_sys_remap_file_pages+0x100f/0x1130 2018/05/31 14:41:38 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x2000000107d, 0x0) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x9) [ 290.713862] ? prepare_exit_to_usermode+0x149/0x3a0 [ 290.718936] __x64_sys_remap_file_pages+0x15d/0x1b0 [ 290.723985] do_syscall_64+0x152/0x230 [ 290.727907] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 290.733114] RIP: 0033:0x455a09 [ 290.736316] RSP: 002b:00007fc91acedc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 290.744057] RAX: ffffffffffffffda RBX: 00007fc91acee6d4 RCX: 0000000000455a09 [ 290.751348] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 290.758643] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 290.765937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 290.773227] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 0000000000000004 2018/05/31 14:41:38 executing program 7 (fault-call:4 fault-nth:5): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:38 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x80}) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={r1, 0x80000, r2}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r5, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x480, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={r3, 0x84, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x1ff, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x1}, @in6={0xa, 0x4e20, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0x4}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}, @in={0x2, 0x4e22, @loopback=0x7f000001}, @in={0x2, 0x4e22, @multicast1=0xe0000001}, @in6={0xa, 0x4e23, 0x4, @loopback={0x0, 0x1}, 0xe5a}]}, &(0x7f0000000200)=0x10) listen$netrom(r2, 0x800) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000280)=0xffffffff, 0x0) [ 290.900944] FAULT_INJECTION: forcing a failure. [ 290.900944] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 290.912804] CPU: 1 PID: 18253 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #103 [ 290.920165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.929556] Call Trace: [ 290.932185] dump_stack+0x185/0x1d0 [ 290.935822] should_fail+0x87b/0xab0 [ 290.939550] __alloc_pages_nodemask+0x630/0x5dc0 [ 290.944311] ? kernel_poison_pages+0x40/0x360 2018/05/31 14:41:38 executing program 6: r0 = add_key(&(0x7f0000016ff8)='keyring\x00', &(0x7f000000b000)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x80004) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x801, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[{0x8, 0x7}, {0x8, 0x724e000}, {0x7, 0x7}, {0xb, 0xff}, {0x3, 0x3}, {0x4, 0x100}, {0xc, 0x2}, {0x2, 0x549}, {0x3, 0x84}, {0x0, 0x3}], 0xa) keyctl$join(0x1, &(0x7f0000019ffb)={0x73, 0x79, 0x7a, 0x0}) keyctl$session_to_parent(0x12) [ 290.948808] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 290.954178] ? kernel_poison_pages+0x1a0/0x360 [ 290.960155] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 290.965617] ? get_page_from_freelist+0xab08/0xb5e0 [ 290.970637] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 290.976023] ? update_cfs_rq_load_avg+0x66e/0x1aa0 [ 290.980966] ? kmsan_set_origin_inline+0x6b/0x120 [ 290.985816] ? __msan_poison_alloca+0x15c/0x1d0 [ 290.990492] ? memcg_kmem_charge+0x5dd/0xa30 [ 290.994908] kmsan_alloc_meta_for_pages+0x8d/0x3a0 2018/05/31 14:41:39 executing program 4: r0 = socket$inet6(0xa, 0x8000a, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000000)={0x6c1, 0x8, 0x1}) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 290.999841] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 291.005298] ? kmsan_set_origin_inline+0x6b/0x120 [ 291.010138] ? __msan_poison_alloca+0x15c/0x1d0 [ 291.014809] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 291.020169] ? memcg_kmem_charge+0x703/0xa30 [ 291.024586] kmsan_alloc_page+0x82/0xe0 [ 291.028566] __alloc_pages_nodemask+0xfc0/0x5dc0 [ 291.033323] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 291.038775] ? shmem_getpage_gfp+0x57d4/0x5980 [ 291.043356] ? unmap_page_range+0x3b7e/0x3be0 2018/05/31 14:41:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r1, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000180)={r4, 0x1}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)={0x303, 0x33}, 0x28) dup3(r2, r1, 0x0) [ 291.047856] ? __irqentry_text_end+0x1fb63e/0x1fb63e [ 291.052966] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 291.058351] alloc_pages_current+0x6b1/0x970 [ 291.062768] pte_alloc_one+0x56/0x100 [ 291.066572] __pte_alloc+0x86/0x410 [ 291.070207] ? shmem_fault+0x58e/0x950 [ 291.074093] alloc_set_pte+0x1236/0x1d80 [ 291.078162] handle_mm_fault+0x5e95/0x7e90 [ 291.082425] __get_user_pages+0x176a/0x24a0 [ 291.086761] ? __msan_metadata_ptr_for_load_1+0x20/0x20 [ 291.092135] __mm_populate+0x6cb/0x8b0 [ 291.096034] __se_sys_remap_file_pages+0x100f/0x1130 2018/05/31 14:41:39 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) [ 291.101141] ? prepare_exit_to_usermode+0x149/0x3a0 [ 291.106168] __x64_sys_remap_file_pages+0x15d/0x1b0 [ 291.111199] do_syscall_64+0x152/0x230 [ 291.115092] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 291.120275] RIP: 0033:0x455a09 [ 291.123464] RSP: 002b:00007fc91acedc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 291.131178] RAX: ffffffffffffffda RBX: 00007fc91acee6d4 RCX: 0000000000455a09 [ 291.138448] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 291.145715] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 291.152983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 291.160249] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 0000000000000005 2018/05/31 14:41:39 executing program 6: syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x81, 0x80) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000440)="0047fc2f07d82c99240970") ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000140)="6e996cba427d689e7dc47cdfd68bb7d0f2841447c9059d3584913d5bd620ee973ec2d35638a1522c00702db414011114f9497c943f34bdd162034236fb76ffb59b7be1c9ba3745a6a858b5208dd864b7d62883275262d7dc7f25bf7ddfd62e7fe0f5214f7886981538c34e8dea2490c9b5c87d748a90d92ffb95145ff5417c9f858dcb131b23d4cc4dd0274c26b9e03f4b5c158c6ddd0a998e32dce8989f191c023c072a489cab11dc8bcb3a3c689adf728767312f6b9836c58a394c230cd014203a71dddb5f135b2187f3a6fb10") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00000000000004000c"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000005000000000000000000000095000000000096460000100000000000000000000000967b703d0bc6ab52bd18201150cd880fba1ae8f0c30e154482ebc2d463458ebbfc"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) 2018/05/31 14:41:39 executing program 7 (fault-call:4 fault-nth:6): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 291.492132] FAULT_INJECTION: forcing a failure. [ 291.492132] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 291.503991] CPU: 0 PID: 18297 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #103 [ 291.511349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.520694] Call Trace: [ 291.523285] dump_stack+0x185/0x1d0 [ 291.526918] should_fail+0x87b/0xab0 [ 291.530638] __alloc_pages_nodemask+0x630/0x5dc0 [ 291.535399] ? kernel_poison_pages+0x40/0x360 [ 291.539903] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 291.545267] ? kernel_poison_pages+0x1a0/0x360 [ 291.549843] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 291.555282] ? get_page_from_freelist+0xab08/0xb5e0 [ 291.560277] ? is_bpf_text_address+0xb4/0x4b0 [ 291.564753] ? kmsan_set_origin_inline+0x6b/0x120 [ 291.569573] ? __msan_poison_alloca+0x15c/0x1d0 [ 291.574222] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 291.579216] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 291.584652] ? kmsan_set_origin_inline+0x6b/0x120 [ 291.589484] ? __msan_poison_alloca+0x15c/0x1d0 [ 291.594144] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 291.599499] ? memcg_kmem_charge+0x703/0xa30 [ 291.603891] kmsan_alloc_page+0x82/0xe0 [ 291.607860] __alloc_pages_nodemask+0xfc0/0x5dc0 [ 291.612602] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 291.618040] ? shmem_getpage_gfp+0x57d4/0x5980 [ 291.622614] ? unmap_page_range+0x3b7e/0x3be0 [ 291.627090] ? __irqentry_text_end+0x1fb63e/0x1fb63e [ 291.632177] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 291.637529] alloc_pages_current+0x6b1/0x970 [ 291.641932] pte_alloc_one+0x56/0x100 [ 291.645725] __pte_alloc+0x86/0x410 [ 291.649333] ? shmem_fault+0x58e/0x950 [ 291.653198] alloc_set_pte+0x1236/0x1d80 [ 291.657238] handle_mm_fault+0x5e95/0x7e90 [ 291.661461] __get_user_pages+0x176a/0x24a0 [ 291.665764] ? __msan_metadata_ptr_for_load_1+0x20/0x20 [ 291.671107] __mm_populate+0x6cb/0x8b0 [ 291.674979] __se_sys_remap_file_pages+0x100f/0x1130 [ 291.680069] ? prepare_exit_to_usermode+0x149/0x3a0 [ 291.685080] __x64_sys_remap_file_pages+0x15d/0x1b0 [ 291.690110] do_syscall_64+0x152/0x230 [ 291.693991] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 291.699159] RIP: 0033:0x455a09 [ 291.702325] RSP: 002b:00007fc91acedc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 291.710014] RAX: ffffffffffffffda RBX: 00007fc91acee6d4 RCX: 0000000000455a09 [ 291.717271] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 291.724518] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 291.731853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 2018/05/31 14:41:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01d96d000000e7ffffff07000800"], 0x14}, 0x1}, 0x0) times(&(0x7f0000000000)) 2018/05/31 14:41:39 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:39 executing program 0 (fault-call:1 fault-nth:37): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:39 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3f, 0x40) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000840)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200029bd7000fcdbdf250200000800040002000000080001004e200000080001004e220000080001004e247eb0"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r4, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[], 0xff26) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x503000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) recvfrom$unix(r2, &(0x7f0000000080)=""/194, 0xc2, 0x0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) 2018/05/31 14:41:39 executing program 7 (fault-call:4 fault-nth:7): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:39 executing program 6: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={"6c6f0000000000000000f2858000", &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000000000b1e8cf5d000000000000000001eb5eb40907"]}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x201, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r0, r1}) [ 291.739105] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 0000000000000006 [ 291.798193] FAULT_INJECTION: forcing a failure. [ 291.798193] name failslab, interval 1, probability 0, space 0, times 0 [ 291.809565] CPU: 0 PID: 18310 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 291.816956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.826334] Call Trace: [ 291.828969] dump_stack+0x185/0x1d0 [ 291.832643] should_fail+0x87b/0xab0 [ 291.836413] __should_failslab+0x278/0x2a0 [ 291.840694] should_failslab+0x29/0x70 [ 291.844649] __kmalloc_node_track_caller+0x24b/0x11b0 [ 291.849903] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 291.855303] ? _sctp_make_chunk+0xf6/0x8f0 [ 291.859608] ? kmsan_memcpy_origins+0xf1/0x170 [ 291.864232] __alloc_skb+0x2cb/0x9e0 [ 291.867981] ? _sctp_make_chunk+0xf6/0x8f0 [ 291.872255] _sctp_make_chunk+0xf6/0x8f0 [ 291.876369] ? sctp_inet6_supported_addrs+0xd2/0x140 [ 291.881510] sctp_make_init+0xc4f/0x3bc0 [ 291.885636] sctp_sf_do_prm_asoc+0x160/0x710 [ 291.890084] ? sctp_sm_lookup_event+0x6ae/0x8a0 2018/05/31 14:41:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:39 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x201, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x80800) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x989680}, {}, {}, @addr}], 0x30) write$sndseq(r1, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}], 0x30) [ 291.894787] ? sctp_sf_violation+0x260/0x260 [ 291.899238] sctp_do_sm+0x29d/0x8d20 [ 291.903006] ? _raw_spin_unlock_bh+0x57/0x70 [ 291.907472] ? __local_bh_enable_ip+0x3b/0x140 [ 291.912102] ? _raw_spin_unlock_bh+0x57/0x70 [ 291.916571] ? sctp_v6_cmp_addr+0x13e/0x180 [ 291.920941] ? __local_bh_enable_ip+0x3b/0x140 [ 291.925568] ? _raw_spin_unlock_bh+0x57/0x70 [ 291.930022] ? sctp_hash_transport+0x1f18/0x20c0 [ 291.934850] ? kmsan_memcpy_origins+0xf1/0x170 [ 291.939492] ? sctp_sf_violation+0x260/0x260 [ 291.943935] sctp_primitive_ASSOCIATE+0x172/0x1a0 2018/05/31 14:41:39 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) [ 291.948816] __sctp_connect+0x1655/0x1b00 [ 291.953035] sctp_connect+0x1b0/0x200 [ 291.956871] ? sctp_close+0xdb0/0xdb0 [ 291.960725] inet_dgram_connect+0x40c/0x670 [ 291.965078] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 291.970478] ? __inet_bind+0xff0/0xff0 [ 291.974433] __sys_connect+0x41a/0x510 [ 291.978410] ? syscall_return_slowpath+0xe9/0x700 [ 291.983344] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 291.988781] __x64_sys_connect+0xd8/0x120 [ 291.992968] do_syscall_64+0x152/0x230 2018/05/31 14:41:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x10000) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000040)) open(&(0x7f0000000080)='./file0\x00', 0x1, 0x102) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 291.996899] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 292.002112] RIP: 0033:0x455a09 [ 292.005325] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 292.013083] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 292.020389] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 292.027694] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 292.034996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 292.042297] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000025 2018/05/31 14:41:40 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000001c0)=""/128, &(0x7f0000000000)=0x80) r2 = creat(&(0x7f0000000140)='./file0\x00', 0xff3331e6e8fe9171) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3d, &(0x7f0000000240)=""/117, &(0x7f00000002c0)=0x75) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c000104000000000000000002000000", @ANYRES32=r1, @ANYBLOB="090000000c0001000180c200"], 0x28}, 0x1}, 0x0) [ 292.157540] FAULT_INJECTION: forcing a failure. [ 292.157540] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 292.169547] CPU: 0 PID: 18331 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #103 [ 292.176939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.186315] Call Trace: [ 292.188938] dump_stack+0x185/0x1d0 [ 292.192593] should_fail+0x87b/0xab0 [ 292.196342] __alloc_pages_nodemask+0x630/0x5dc0 [ 292.201137] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 292.206628] ? get_page_from_freelist+0xab08/0xb5e0 [ 292.211688] ? is_bpf_text_address+0xb4/0x4b0 [ 292.216240] ? kmsan_set_origin_inline+0x6b/0x120 [ 292.221125] ? __msan_poison_alloca+0x15c/0x1d0 [ 292.225834] ? kmsan_set_origin_inline+0x6b/0x120 [ 292.230724] ? shmem_alloc_and_acct_page+0x6f0/0x1020 [ 292.235964] alloc_pages_vma+0xcc6/0x17f0 [ 292.240178] shmem_alloc_and_acct_page+0x6f0/0x1020 [ 292.245256] ? find_lock_entry+0xc8/0x720 [ 292.249460] ? find_get_entry+0x7ef/0x820 [ 292.253677] ? shmem_getpage_gfp+0x61f/0x5980 [ 292.258224] ? shmem_getpage_gfp+0x61f/0x5980 [ 292.262818] shmem_getpage_gfp+0x3971/0x5980 [ 292.267278] ? unmap_page_range+0x3b7e/0x3be0 [ 292.271838] ? __irqentry_text_end+0x1fb63e/0x1fb63e [ 292.277003] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 292.282446] ? __msan_poison_alloca+0x15c/0x1d0 [ 292.287156] shmem_fault+0x509/0x950 [ 292.290927] ? shmem_destroy_callback+0x150/0x150 [ 292.295856] shm_fault+0xbc/0x110 [ 292.299360] ? shm_split+0x180/0x180 [ 292.303123] handle_mm_fault+0x5c01/0x7e90 [ 292.307419] __get_user_pages+0x176a/0x24a0 [ 292.311834] __mm_populate+0x6cb/0x8b0 [ 292.315830] __se_sys_remap_file_pages+0x100f/0x1130 [ 292.321006] ? prepare_exit_to_usermode+0x149/0x3a0 [ 292.326121] __x64_sys_remap_file_pages+0x15d/0x1b0 [ 292.331181] do_syscall_64+0x152/0x230 [ 292.335117] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 292.340364] RIP: 0033:0x455a09 [ 292.343608] RSP: 002b:00007fc91acedc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 292.351380] RAX: ffffffffffffffda RBX: 00007fc91acee6d4 RCX: 0000000000455a09 [ 292.358683] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 292.365981] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 292.373278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 292.380578] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 0000000000000007 2018/05/31 14:41:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:40 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x200000) ioctl$void(r0, 0x544a) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x403}, 0x10) r1 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x1, 0x4) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) ppoll(&(0x7f0000d77ff0)=[{r1}], 0x1, &(0x7f0000645000), &(0x7f000089dffe), 0x8) 2018/05/31 14:41:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:40 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:40 executing program 6: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) set_tid_address(&(0x7f00000000c0)) 2018/05/31 14:41:40 executing program 0 (fault-call:1 fault-nth:38): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:40 executing program 7 (fault-call:4 fault-nth:8): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x6) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x4, 0x7f, 0x2, 0x5}, {0x6, 0x4, 0x7fffffff, 0x8}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = dup(r0) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000100)=0xd13) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="33d5b5d51b4912aeca9ebc951ca00966a4775e93faf8c10e94799c6aaae75bbdafdfd018a215d38805c59cdb7a5aa8e3c5b0d24c7106deeb0e5c7e0c61acf1160ff7c7b538aa40b400c838a0ec8435a77b85243927cad22c0e3c67e2fb7695566cc91fcdd5d4c1b9efa664a0a5fb77d48b33cec0344d62d5a961a4ee5526c3930770c38b71b08ee35d8c0ac30cac3c6ec582b9a666fb7c00b9d061673cd89943c4b6a91ad840958fd0cac997b3e9d9f33b09ba15cdfdeb651ac5531a60", @ANYRES16=r3, @ANYBLOB="0104000000000000000007000000"], 0x14}, 0x1}, 0x0) write$cgroup_type(r2, &(0x7f0000000500)='threaded\x00', 0x9) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000480)={&(0x7f0000000280)="b6f27af500e2ada6b39730542bf43fea9cabcb99b70fdf72f3d6912f23352f49aa904430884c221ee2759735c934eb2e129e4e14d34207f981955853f202d85693e4b0101547685b60c2e64acd7466ea9131a44ba80dd7c7a83b79b17b75766390407d3ef8c6a1d28c31a5215309b7c9688e271af7c6f409a64351b505f6947f0ac2692b6011e392faf0d6bd46358c86e3812e78a3aa460385d68016d1b546458a0cebf3058f3c97810556e4d7a8df5a", 0xb0}) [ 292.535104] FAULT_INJECTION: forcing a failure. [ 292.535104] name failslab, interval 1, probability 0, space 0, times 0 [ 292.546484] CPU: 0 PID: 18345 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 292.553901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.563320] Call Trace: [ 292.565955] dump_stack+0x185/0x1d0 [ 292.569643] should_fail+0x87b/0xab0 [ 292.573429] __should_failslab+0x278/0x2a0 [ 292.577715] should_failslab+0x29/0x70 [ 292.581666] kmem_cache_alloc+0x12e/0xb90 [ 292.585904] ? _sctp_make_chunk+0x24d/0x8f0 [ 292.590266] ? skb_put+0x232/0x360 [ 292.593880] _sctp_make_chunk+0x24d/0x8f0 [ 292.598086] sctp_make_init+0xc4f/0x3bc0 [ 292.602213] sctp_sf_do_prm_asoc+0x160/0x710 [ 292.606678] ? sctp_sm_lookup_event+0x6ae/0x8a0 [ 292.611423] ? sctp_sf_violation+0x260/0x260 [ 292.615932] sctp_do_sm+0x29d/0x8d20 [ 292.619772] ? _raw_spin_unlock_bh+0x57/0x70 [ 292.624294] ? __local_bh_enable_ip+0x3b/0x140 [ 292.628961] ? _raw_spin_unlock_bh+0x57/0x70 [ 292.633430] ? __local_bh_enable_ip+0x3b/0x140 [ 292.638124] ? _raw_spin_unlock_bh+0x57/0x70 [ 292.642625] ? sctp_hash_transport+0x1f18/0x20c0 [ 292.647487] ? kmsan_memcpy_origins+0xf1/0x170 [ 292.652126] ? sctp_sf_violation+0x260/0x260 [ 292.656582] sctp_primitive_ASSOCIATE+0x172/0x1a0 [ 292.661470] __sctp_connect+0x1655/0x1b00 [ 292.663716] FAULT_INJECTION: forcing a failure. [ 292.663716] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 292.665686] sctp_connect+0x1b0/0x200 [ 292.681260] ? sctp_close+0xdb0/0xdb0 [ 292.685126] inet_dgram_connect+0x40c/0x670 [ 292.689465] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 292.694950] ? __inet_bind+0xff0/0xff0 [ 292.698860] __sys_connect+0x41a/0x510 [ 292.702788] ? syscall_return_slowpath+0xe9/0x700 [ 292.707706] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 292.713144] __x64_sys_connect+0xd8/0x120 [ 292.717928] do_syscall_64+0x152/0x230 [ 292.721848] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 292.727041] RIP: 0033:0x455a09 [ 292.730236] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 292.737966] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 292.745236] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 292.752507] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 292.759777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 292.767061] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000026 [ 292.774361] CPU: 1 PID: 18360 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #103 [ 292.781738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.791097] Call Trace: [ 292.793686] dump_stack+0x185/0x1d0 [ 292.797314] should_fail+0x87b/0xab0 [ 292.801032] __alloc_pages_nodemask+0x630/0x5dc0 [ 292.805790] ? kernel_poison_pages+0x40/0x360 [ 292.810304] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 292.815684] ? kernel_poison_pages+0x1a0/0x360 [ 292.820274] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 292.825736] ? get_page_from_freelist+0xab08/0xb5e0 [ 292.830753] ? __save_stack_trace+0x90d/0xb00 [ 292.835282] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 292.840231] ? shmem_getpage_gfp+0x3971/0x5980 [ 292.844825] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 292.850215] ? kmsan_set_origin_inline+0x6b/0x120 [ 292.855059] ? __msan_poison_alloca+0x15c/0x1d0 [ 292.859737] kmsan_alloc_page+0x82/0xe0 [ 292.863735] __alloc_pages_nodemask+0xfc0/0x5dc0 [ 292.868509] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 292.873965] ? get_page_from_freelist+0xab08/0xb5e0 [ 292.878989] ? kmsan_set_origin_inline+0x6b/0x120 [ 292.883831] ? __msan_poison_alloca+0x15c/0x1d0 [ 292.888532] alloc_pages_vma+0xcc6/0x17f0 [ 292.892705] shmem_alloc_and_acct_page+0x6f0/0x1020 [ 292.897730] ? find_lock_entry+0xc8/0x720 [ 292.901878] ? find_get_entry+0x7ef/0x820 [ 292.906035] ? shmem_getpage_gfp+0x61f/0x5980 [ 292.910534] ? shmem_getpage_gfp+0x61f/0x5980 [ 292.915033] shmem_getpage_gfp+0x3971/0x5980 [ 292.919438] ? unmap_page_range+0x3b7e/0x3be0 [ 292.923938] ? __irqentry_text_end+0x1fb63e/0x1fb63e [ 292.929046] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 292.934426] ? __msan_poison_alloca+0x15c/0x1d0 [ 292.939099] shmem_fault+0x509/0x950 [ 292.942820] ? shmem_destroy_callback+0x150/0x150 [ 292.947662] shm_fault+0xbc/0x110 [ 292.951288] ? shm_split+0x180/0x180 [ 292.955869] handle_mm_fault+0x5c01/0x7e90 [ 292.960127] __get_user_pages+0x176a/0x24a0 [ 292.964468] __mm_populate+0x6cb/0x8b0 [ 292.968362] __se_sys_remap_file_pages+0x100f/0x1130 [ 292.973475] ? prepare_exit_to_usermode+0x149/0x3a0 [ 292.978502] __x64_sys_remap_file_pages+0x15d/0x1b0 [ 292.983524] do_syscall_64+0x152/0x230 [ 292.987413] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 292.992597] RIP: 0033:0x455a09 [ 292.995787] RSP: 002b:00007fc91acedc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 293.003496] RAX: ffffffffffffffda RBX: 00007fc91acee6d4 RCX: 0000000000455a09 [ 293.010767] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 293.018036] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 293.025306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 2018/05/31 14:41:40 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x0) signalfd4(r0, &(0x7f0000000040)={0x3}, 0x8, 0x80000) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x7, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)="070b95007cada1904c1a3791806ade76b0663bba440064e6b910b8a80f2a6df2f4bfecd8f6f46d3d25bd5dba77d838b03e4ef1d421e4eedb5e1590c33ee633903fc6cb2f072e163225b3289a8356dbdffe23be885b8af2bd889c30b6292771af64ee16bfef") 2018/05/31 14:41:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:41 executing program 6: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002580)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000001000040029bd7000fbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="061400000401000008000e00d700000008000e000500000008002100a100000008001d00c20a0000580012000c000400736974700000000034000200e4b15c2309473f4d1b226929b5da2bbd790d5a5a7ea41caf67a31d6102b4e37b58bb2a30f85abee6fb452341dfe2dbd0ed16e2c837c8d9c79fe9c600000008000100656d30000cfb01007369743000000000"], 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@mcast2={0xff, 0x2, [], 0x1}, 0x0, r1}) 2018/05/31 14:41:41 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:41 executing program 2: unshare(0x2000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x104) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x10000, 0x0, 0x1, 0x3e, r1, 0x7}, 0x2c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x4}) [ 293.032574] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 0000000000000008 2018/05/31 14:41:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:41 executing program 0 (fault-call:1 fault-nth:39): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) [ 293.215727] FAULT_INJECTION: forcing a failure. [ 293.215727] name failslab, interval 1, probability 0, space 0, times 0 [ 293.227118] CPU: 0 PID: 18393 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 293.234503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.243880] Call Trace: [ 293.246514] dump_stack+0x185/0x1d0 [ 293.250184] should_fail+0x87b/0xab0 [ 293.253940] __should_failslab+0x278/0x2a0 [ 293.258217] should_failslab+0x29/0x70 2018/05/31 14:41:41 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="a29ab0893fde", [], {@ipv6={0x86dd, {0x0, 0x6, '?:T', 0x14, 0x2f, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @tcp={{0x0, 0x883e, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000004c0)) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) 2018/05/31 14:41:41 executing program 7 (fault-call:4 fault-nth:9): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 293.262143] kmem_cache_alloc_node+0x15e/0xc90 [ 293.266761] ? __irqentry_text_end+0x1fb63e/0x1fb63e [ 293.271901] ? __alloc_skb+0x202/0x9e0 [ 293.275833] __alloc_skb+0x202/0x9e0 [ 293.279576] ? __msan_poison_alloca+0x15c/0x1d0 [ 293.284285] sctp_packet_transmit+0x48a/0x4360 [ 293.288938] ? sctp_packet_append_chunk+0xaf2/0x12e0 [ 293.294121] sctp_outq_flush+0x11e6/0x6320 [ 293.298423] ? __mod_timer+0x370/0x2c60 [ 293.302461] ? process_slab+0x15c0/0x1f20 [ 293.306672] sctp_outq_uncork+0xd2/0xf0 [ 293.310689] sctp_do_sm+0x8707/0x8d20 [ 293.314538] ? _raw_spin_unlock_bh+0x57/0x70 [ 293.319003] ? __local_bh_enable_ip+0x3b/0x140 [ 293.323651] ? _raw_spin_unlock_bh+0x57/0x70 [ 293.328124] ? __local_bh_enable_ip+0x3b/0x140 [ 293.332759] ? _raw_spin_unlock_bh+0x57/0x70 [ 293.337232] sctp_primitive_ASSOCIATE+0x172/0x1a0 [ 293.342122] __sctp_connect+0x1655/0x1b00 [ 293.346344] sctp_connect+0x1b0/0x200 [ 293.350177] ? sctp_close+0xdb0/0xdb0 [ 293.354032] inet_dgram_connect+0x40c/0x670 [ 293.358390] ? __msan_metadata_ptr_for_load_8+0x10/0x20 2018/05/31 14:41:41 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x200000088) recvfrom$inet6(r0, &(0x7f0000000080)=""/185, 0xb9, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000280)=0x85a, 0x4) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x101, 0x400041) connect$netrom(r2, &(0x7f00000001c0)=@full={{0x3, {"aa3f08f9b8e146"}, 0x4000000000000}, [{"d6242888117f11"}, {"fcb036037947d1"}, {"741fda1f2eb785"}, {"ff80b412ba8c8b"}, {"924949f6f73b33"}, {"c7d96344221531"}, {"38a4efaee9356a"}, {"6825cd068e1fd1"}]}, 0x48) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000002540)}, 0x0) 2018/05/31 14:41:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) [ 293.363796] ? __inet_bind+0xff0/0xff0 [ 293.367726] __sys_connect+0x41a/0x510 [ 293.371669] ? syscall_return_slowpath+0xe9/0x700 [ 293.376569] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 293.382008] __x64_sys_connect+0xd8/0x120 [ 293.386198] do_syscall_64+0x152/0x230 [ 293.390131] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 293.395349] RIP: 0033:0x455a09 [ 293.398552] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 293.406299] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 293.414028] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 293.421321] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 293.428612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 293.435903] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000027 [ 293.437006] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x3 2018/05/31 14:41:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x80000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0xffffffffffffff01, 0x7, 0x9, 'queue0\x00', 0x3}) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r3, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) [ 293.528615] FAULT_INJECTION: forcing a failure. [ 293.528615] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 293.540468] CPU: 1 PID: 18410 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #103 [ 293.547832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.557195] Call Trace: [ 293.559794] dump_stack+0x185/0x1d0 [ 293.563433] should_fail+0x87b/0xab0 [ 293.567154] __alloc_pages_nodemask+0x630/0x5dc0 [ 293.571920] ? kernel_poison_pages+0x40/0x360 [ 293.576419] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 293.581785] ? kernel_poison_pages+0x1a0/0x360 [ 293.586373] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 293.591824] ? get_page_from_freelist+0xab08/0xb5e0 [ 293.596843] ? __save_stack_trace+0x90d/0xb00 [ 293.601358] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 293.606381] ? shmem_getpage_gfp+0x3971/0x5980 [ 293.610968] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 293.616337] ? kmsan_set_origin_inline+0x6b/0x120 [ 293.621188] ? __msan_poison_alloca+0x15c/0x1d0 [ 293.625861] kmsan_alloc_page+0x82/0xe0 [ 293.629836] __alloc_pages_nodemask+0xfc0/0x5dc0 [ 293.634590] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 293.640043] ? get_page_from_freelist+0xab08/0xb5e0 [ 293.645060] ? is_bpf_text_address+0xb4/0x4b0 [ 293.649564] ? kmsan_set_origin_inline+0x6b/0x120 [ 293.654418] ? __msan_poison_alloca+0x15c/0x1d0 [ 293.659092] alloc_pages_vma+0xcc6/0x17f0 [ 293.663253] shmem_alloc_and_acct_page+0x6f0/0x1020 [ 293.668278] ? find_lock_entry+0xc8/0x720 [ 293.672433] ? find_get_entry+0x7ef/0x820 [ 293.676584] ? shmem_getpage_gfp+0x61f/0x5980 [ 293.681080] ? shmem_getpage_gfp+0x61f/0x5980 [ 293.685578] shmem_getpage_gfp+0x3971/0x5980 [ 293.689982] ? unmap_page_range+0x3b7e/0x3be0 [ 293.694478] ? __irqentry_text_end+0x1fb63e/0x1fb63e [ 293.699582] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 293.704961] ? __msan_poison_alloca+0x15c/0x1d0 [ 293.709640] shmem_fault+0x509/0x950 [ 293.713362] ? shmem_destroy_callback+0x150/0x150 [ 293.718206] shm_fault+0xbc/0x110 [ 293.721659] ? shm_split+0x180/0x180 [ 293.725367] handle_mm_fault+0x5c01/0x7e90 [ 293.729592] __get_user_pages+0x176a/0x24a0 [ 293.733903] __mm_populate+0x6cb/0x8b0 [ 293.737782] __se_sys_remap_file_pages+0x100f/0x1130 [ 293.742864] ? prepare_exit_to_usermode+0x149/0x3a0 [ 293.747880] __x64_sys_remap_file_pages+0x15d/0x1b0 [ 293.752891] do_syscall_64+0x152/0x230 [ 293.756763] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 293.761929] RIP: 0033:0x455a09 [ 293.765096] RSP: 002b:00007fc91acedc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 293.772785] RAX: ffffffffffffffda RBX: 00007fc91acee6d4 RCX: 0000000000455a09 [ 293.780040] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 293.787310] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 293.794567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 293.801815] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 0000000000000009 2018/05/31 14:41:42 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x240100, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) accept4$packet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x14, 0x80000) 2018/05/31 14:41:42 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r1, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:42 executing program 2: r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000002c0)={@empty, @rand_addr, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000340)={@loopback={0x0, 0x1}, r1}, 0x14) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x80, 0x0, 0x7, 0x1a49, 0x0}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000380)={r2, 0x2000000000000000, 0x0, 0x6}, 0x10) write(r0, &(0x7f0000000180)="2400000052001f00e89d99bf1214f9f40700090400020007fc07000100ffffffff080000000000000099194bb8dae2ef83fd90ff82ffc68b3a8a21d9d136d1b32cb1e4f528af025f8267c1f342c6818112be9ad6820edf548012cb85e1daa35baabe8ebd8025036a98a9ddc764c7d65198cd103c62f4181fe65b1f0cf35eeb0a77fb6a50af8a", 0xfff2) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0xb6e}}, 0x6, 0x9500000000000}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r3, 0x1a}, 0x8) 2018/05/31 14:41:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:42 executing program 7 (fault-call:4 fault-nth:10): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:42 executing program 0 (fault-call:1 fault-nth:40): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:42 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet={0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0xffffffffffffff8e) recvmmsg(r0, &(0x7f0000006140)=[{{&(0x7f00000027c0)=@nfc, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002840)=""/225, 0xe1}], 0x1, &(0x7f0000005040)=""/4096, 0x1000, 0x3}}, {{&(0x7f0000002c40)=@pppoe={0x0, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000006080)=[{&(0x7f0000006040)=""/43, 0x2b}], 0x1, &(0x7f00000060c0)=""/74, 0x4a}}], 0x2, 0x2, &(0x7f0000006280)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000062c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000014fc8)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000000000000000000000000000dcf27ec122ecd0034045d66e39f6816c80aa45d6cc747ad5cbb0b71be02e9e3550fde3456f6f5818d19682e4a4694436a73d43c17ea8173eee763721d862f39793192cb6", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="000000000100337f00000000000000a40063000000000000"], 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[]}, 0x1}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x80000001, 0x4043) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f00000000c0)=ANY=[@ANYBLOB="e19f00000f000000b4a6fec0a5edb7d4b2a325ee62a3d9ee5b7f5738a2e1dc7f994a38aaf446f2ba60222dd49a0c8de0aa793c9e340c6890e065968199462c2e5dcf017065d303850fde92c3a76da2ca664057b30c1e75a2822e3a8c35d6684cb7137d99f113ed3e09590045908ed77681967d25c7b71a3776059836beb08b81def467acf7000ea684790c8ead934c8463c2"]) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000004c0)=ANY=[@ANYRES64, @ANYBLOB="c40000003495f2674fb7d010719a9184d28e8030a8364693e98b73244d5bdf8c24c293a57a399cd0fc3082e6a488426727c21bbe5337dc0b685ea7d786df5834bcaf91cc7aee2ed0615626a787a503ad88b4bdd29c02b7fa3f98cbc6c97d114949dc70f2d1209b0b6c99cf7bed2ad9757686108d841821d4cc43be982d759eed89bf2eaf349011a5535bb35d3db37907daef37a4ffda54e1974c5e5a01bd8c05c0cec89b7514e77923d9e31c964bd423c56f521f2e9a32b62eebae07070a814f09e843b4411b3cc4"], &(0x7f00000001c0)=0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x84, &(0x7f0000000240)=[@in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e20, 0x1, @empty, 0x5}, @in={0x2, 0x4e22}, @in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0xc}, 0x101}, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x17}, 0x1}, @in={0x2, 0x4e22}]}, &(0x7f00000003c0)=0x10) [ 294.364182] FAULT_INJECTION: forcing a failure. [ 294.364182] name failslab, interval 1, probability 0, space 0, times 0 [ 294.375625] CPU: 1 PID: 18435 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 294.383016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.392394] Call Trace: [ 294.395029] dump_stack+0x185/0x1d0 [ 294.398707] should_fail+0x87b/0xab0 [ 294.402474] __should_failslab+0x278/0x2a0 [ 294.406763] should_failslab+0x29/0x70 [ 294.410699] __kmalloc_node_track_caller+0x24b/0x11b0 [ 294.415933] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 294.421335] ? sctp_packet_transmit+0x48a/0x4360 [ 294.426142] __alloc_skb+0x2cb/0x9e0 [ 294.429897] ? sctp_packet_transmit+0x48a/0x4360 [ 294.434694] sctp_packet_transmit+0x48a/0x4360 [ 294.439327] ? sctp_packet_append_chunk+0xaf2/0x12e0 [ 294.444506] sctp_outq_flush+0x11e6/0x6320 [ 294.448801] ? __mod_timer+0x370/0x2c60 [ 294.452842] ? process_slab+0x15c0/0x1f20 [ 294.455623] FAULT_INJECTION: forcing a failure. [ 294.455623] name failslab, interval 1, probability 0, space 0, times 0 [ 294.457046] sctp_outq_uncork+0xd2/0xf0 [ 294.472744] sctp_do_sm+0x8707/0x8d20 [ 294.476577] ? _raw_spin_unlock_bh+0x57/0x70 [ 294.481008] ? __local_bh_enable_ip+0x3b/0x140 [ 294.485609] ? _raw_spin_unlock_bh+0x57/0x70 [ 294.490046] ? __local_bh_enable_ip+0x3b/0x140 [ 294.494656] ? _raw_spin_unlock_bh+0x57/0x70 [ 294.499096] sctp_primitive_ASSOCIATE+0x172/0x1a0 [ 294.503950] __sctp_connect+0x1655/0x1b00 [ 294.508156] sctp_connect+0x1b0/0x200 [ 294.511975] ? sctp_close+0xdb0/0xdb0 [ 294.515798] inet_dgram_connect+0x40c/0x670 [ 294.520141] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 294.525526] ? __inet_bind+0xff0/0xff0 [ 294.529430] __sys_connect+0x41a/0x510 [ 294.533343] ? syscall_return_slowpath+0xe9/0x700 [ 294.538210] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 294.543610] __x64_sys_connect+0xd8/0x120 [ 294.547771] do_syscall_64+0x152/0x230 [ 294.551684] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 294.556895] RIP: 0033:0x455a09 [ 294.560085] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 294.567806] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 294.575078] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 294.582351] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 294.589796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 294.597084] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000028 [ 294.604384] CPU: 0 PID: 18437 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #103 [ 294.611776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.621153] Call Trace: [ 294.623768] dump_stack+0x185/0x1d0 [ 294.627432] should_fail+0x87b/0xab0 [ 294.631179] __should_failslab+0x278/0x2a0 [ 294.635444] should_failslab+0x29/0x70 [ 294.639359] kmem_cache_alloc+0x12e/0xb90 [ 294.643561] ? radix_tree_node_alloc+0x135/0x5c0 [ 294.648383] radix_tree_node_alloc+0x135/0x5c0 [ 294.653008] radix_tree_extend+0x23d/0x910 [ 294.657275] ? mem_cgroup_try_charge+0xa80/0xf00 2018/05/31 14:41:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = memfd_create(&(0x7f0000000000)='*$GPL[eth0vboxnet1\x00', 0x2) getsockopt$nfc_llcp(r1, 0x118, 0x2, &(0x7f0000000040)=""/161, 0xa1) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffe000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x1000) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) shmctl$IPC_RMID(r3, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:42 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x30200, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x10001, @mcast1={0xff, 0x1, [], 0x1}, 0xfff}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000039ff8)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000801ff8)=@file={0x1, './file0\x00'}, 0x6e) r3 = fcntl$dupfd(r1, 0x3fe, r2) sendmsg$unix(r2, &(0x7f0000000fc8)={&(0x7f0000f5aff6)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000471000), 0x0, &(0x7f0000000ff0)}, 0x10) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x6b) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000000)={0x3, r3}) r4 = dup2(r3, r2) write(r4, &(0x7f0000168000), 0x0) flock(r2, 0x3) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x1000, @mcast1={0xff, 0x1, [], 0x1}, 0x70000000000000}}, 0x40, 0x2, 0x6, 0x400, 0x3}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r5, 0xfda7) connect$unix(r2, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e) [ 294.662096] __radix_tree_create+0x338/0xc00 [ 294.666571] __radix_tree_insert+0x17d/0x580 [ 294.671021] shmem_add_to_page_cache+0x59c/0xae0 [ 294.675825] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 294.681221] shmem_getpage_gfp+0x428d/0x5980 [ 294.685677] ? unmap_page_range+0x3b7e/0x3be0 [ 294.690230] ? __irqentry_text_end+0x1fb63e/0x1fb63e [ 294.695395] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 294.700832] ? __msan_poison_alloca+0x15c/0x1d0 [ 294.705545] shmem_fault+0x509/0x950 [ 294.709326] ? shmem_destroy_callback+0x150/0x150 [ 294.714215] shm_fault+0xbc/0x110 [ 294.717707] ? shm_split+0x180/0x180 [ 294.721510] handle_mm_fault+0x5c01/0x7e90 [ 294.725830] __get_user_pages+0x176a/0x24a0 [ 294.730267] __mm_populate+0x6cb/0x8b0 [ 294.734212] __se_sys_remap_file_pages+0x100f/0x1130 [ 294.739356] ? prepare_exit_to_usermode+0x149/0x3a0 [ 294.744438] __x64_sys_remap_file_pages+0x15d/0x1b0 [ 294.749485] do_syscall_64+0x152/0x230 [ 294.753400] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 294.758612] RIP: 0033:0x455a09 2018/05/31 14:41:42 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = socket(0x3, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000200)={@rand_addr=0xffffffff, @empty, r3}, 0xc) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000002c0)={0x4, [0xb6, 0x20, 0x62a9, 0x400]}, &(0x7f0000000300)=0xc) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x80000801}) epoll_pwait(r1, &(0x7f00000001c0)=[{}], 0x1, 0x0, &(0x7f0000000240), 0x8) 2018/05/31 14:41:42 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:42 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) socket$unix(0x1, 0x7, 0x0) shmctl$IPC_RMID(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x5007) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x800) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040), 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 294.761819] RSP: 002b:00007fc91acedc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 294.769578] RAX: ffffffffffffffda RBX: 00007fc91acee6d4 RCX: 0000000000455a09 [ 294.776882] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 294.784174] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 294.791478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 294.798775] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 000000000000000a 2018/05/31 14:41:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r1, &(0x7f0000000300)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40201, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000080)={0x101, 0x40, 0x5, 'queue1\x00', 0x3}) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r4, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:43 executing program 7 (fault-call:4 fault-nth:11): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 295.074914] FAULT_INJECTION: forcing a failure. [ 295.074914] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 295.086953] CPU: 1 PID: 18480 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #103 [ 295.094337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.103712] Call Trace: [ 295.106339] dump_stack+0x185/0x1d0 [ 295.110014] should_fail+0x87b/0xab0 [ 295.113788] __alloc_pages_nodemask+0x630/0x5dc0 [ 295.118587] ? memcg_kmem_put_cache+0x40/0x280 [ 295.123210] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 295.128614] ? kmem_cache_alloc+0xad3/0xb90 [ 295.132999] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 295.138502] ? radix_tree_node_alloc+0x31f/0x5c0 [ 295.143296] ? kmsan_set_origin_inline+0x6b/0x120 [ 295.148188] ? shmem_alloc_and_acct_page+0x6f0/0x1020 [ 295.153428] alloc_pages_vma+0xcc6/0x17f0 [ 295.157648] shmem_alloc_and_acct_page+0x6f0/0x1020 [ 295.162730] ? find_lock_entry+0xc8/0x720 [ 295.166942] ? find_get_entry+0x7ef/0x820 2018/05/31 14:41:43 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x6c5c, 0x1, 0x6, 0x7, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r2, 0x4) 2018/05/31 14:41:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:43 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x24000000099, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x2ec) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000140)) [ 295.171142] ? shmem_getpage_gfp+0x61f/0x5980 [ 295.175699] ? shmem_getpage_gfp+0x61f/0x5980 [ 295.180235] shmem_getpage_gfp+0x3971/0x5980 [ 295.184691] ? unmap_page_range+0x3b7e/0x3be0 [ 295.189247] ? __irqentry_text_end+0x1fb63e/0x1fb63e [ 295.194409] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 295.199847] ? __msan_poison_alloca+0x15c/0x1d0 [ 295.204554] shmem_fault+0x509/0x950 [ 295.208336] ? shmem_destroy_callback+0x150/0x150 [ 295.213230] shm_fault+0xbc/0x110 [ 295.216716] ? shm_split+0x180/0x180 [ 295.220481] handle_mm_fault+0x5c01/0x7e90 2018/05/31 14:41:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) getsockopt$inet6_buf(r0, 0x29, 0xcc, &(0x7f0000000300)=""/167, &(0x7f00000003c0)=0xa7) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x0, 0x70bd26, 0x25dfdbff, {0x10}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffffffffd67d}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 295.224801] __get_user_pages+0x176a/0x24a0 [ 295.229226] __mm_populate+0x6cb/0x8b0 [ 295.233158] __se_sys_remap_file_pages+0x100f/0x1130 [ 295.238307] ? prepare_exit_to_usermode+0x149/0x3a0 [ 295.243394] __x64_sys_remap_file_pages+0x15d/0x1b0 [ 295.248454] do_syscall_64+0x152/0x230 [ 295.252386] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 295.257600] RIP: 0033:0x455a09 [ 295.260810] RSP: 002b:00007fc91acedc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 295.268553] RAX: ffffffffffffffda RBX: 00007fc91acee6d4 RCX: 0000000000455a09 [ 295.275844] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 295.283134] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 295.290430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 295.297721] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 000000000000000b 2018/05/31 14:41:43 executing program 0 (fault-call:1 fault-nth:41): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) rt_sigpending(&(0x7f00000000c0), 0x8) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x44100) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e9146c616e4bd05ece526417f0986b99af29c5b7acaa02c0858fc6e32eeff7ba9fd749e8be55a6a23b554cda8c91721869ed8b461f85303a2eb14eafc42f7dc0151c2eb9711465e1d0540208e111326f60a429361b16e2145af149f9a69bb8220d70d9011c06c2331b9814058227246140b86b2191f5999e3637a64bca5b5333000000000000000000000000", @ANYRES16=r3, @ANYBLOB="0104000000000000000007000000"], 0x14}, 0x1}, 0x0) 2018/05/31 14:41:43 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = request_key(&(0x7f00000002c0)='.request_key_auth\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000340)='\'/eth0\x00', 0xfffffffffffffffa) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)='vmnet0\x00', r1) r2 = request_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)='vmnet0\x00', 0xffffffffffffffff) keyctl$set_timeout(0xf, r2, 0x1f) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x104) 2018/05/31 14:41:43 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x7fff, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0x50, &(0x7f00000004c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540)=r3, 0x4) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000003c0)=""/158) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x36, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x101000, 0x0) listen$netrom(r4, 0x7fff) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', r5}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x80000001, 0x7}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000000c0)={r6, 0x4, 0x20}, 0xc) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/105) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) sendto$packet(r4, &(0x7f0000000280)="f65982e4c5ae3bb25f3d0310d122757e75ba4211bcb64023858d28309a76e676c069cbc79cc4b08de720df9a74cd93fb5dbb921ac12af7f7264f1ada10d967", 0x3f, 0x4, &(0x7f0000000340)={0x11, 0x1f, r7, 0x1, 0x3, 0x6, @random="6096fb4f45a6"}, 0x14) 2018/05/31 14:41:43 executing program 6: unshare(0x24020400) unshare(0x10000) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0x5}}, [0x1, 0x5, 0x8, 0x9, 0x4, 0x7, 0x6, 0x8de4, 0x2, 0x5, 0x10000, 0x3ff, 0x9, 0x8, 0xb90]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r1, 0x40}, 0x8) close(r0) sendto$packet(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 2018/05/31 14:41:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:43 executing program 7 (fault-call:4 fault-nth:12): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 295.605647] FAULT_INJECTION: forcing a failure. [ 295.605647] name failslab, interval 1, probability 0, space 0, times 0 [ 295.617114] CPU: 0 PID: 18522 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 295.619414] FAULT_INJECTION: forcing a failure. [ 295.619414] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 295.624507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.645649] Call Trace: [ 295.648265] dump_stack+0x185/0x1d0 [ 295.651933] should_fail+0x87b/0xab0 [ 295.655686] __should_failslab+0x278/0x2a0 [ 295.659934] should_failslab+0x29/0x70 [ 295.663832] kmem_cache_alloc+0x12e/0xb90 [ 295.667989] ? skb_clone+0x31e/0x590 [ 295.671722] ? kmsan_set_origin_inline+0x6b/0x120 [ 295.677097] skb_clone+0x31e/0x590 [ 295.680652] ip_mc_output+0x978/0x15e0 [ 295.684587] ? __ip_local_out+0x6d5/0x7e0 [ 295.688754] ? ip_build_and_send_pkt+0xec0/0xec0 [ 295.693525] ip_queue_xmit+0x1a1d/0x1d10 [ 295.697609] sctp_v4_xmit+0x188/0x210 [ 295.701418] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 295.706880] ? sctp_addr_wq_timeout_handler+0x840/0x840 [ 295.712249] sctp_packet_transmit+0x3eb2/0x4360 [ 295.716931] ? sctp_packet_release_owner+0x70/0x70 [ 295.721865] ? sctp_csum_update+0xa0/0xa0 [ 295.726059] sctp_outq_flush+0x11e6/0x6320 [ 295.730321] ? __mod_timer+0x370/0x2c60 [ 295.734333] ? process_slab+0x15c0/0x1f20 [ 295.738507] sctp_outq_uncork+0xd2/0xf0 [ 295.742491] sctp_do_sm+0x8707/0x8d20 [ 295.746312] ? _raw_spin_unlock_bh+0x57/0x70 [ 295.750739] ? __local_bh_enable_ip+0x3b/0x140 [ 295.755339] ? _raw_spin_unlock_bh+0x57/0x70 [ 295.759778] ? sctp_v6_cmp_addr+0x13e/0x180 [ 295.764119] ? __local_bh_enable_ip+0x3b/0x140 [ 295.768729] ? _raw_spin_unlock_bh+0x57/0x70 [ 295.773168] sctp_primitive_ASSOCIATE+0x172/0x1a0 [ 295.778022] __sctp_connect+0x1655/0x1b00 [ 295.782208] sctp_connect+0x1b0/0x200 [ 295.786014] ? sctp_close+0xdb0/0xdb0 [ 295.789835] inet_dgram_connect+0x40c/0x670 [ 295.794165] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 295.799537] ? __inet_bind+0xff0/0xff0 [ 295.803436] __sys_connect+0x41a/0x510 [ 295.807350] ? syscall_return_slowpath+0xe9/0x700 [ 295.812211] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 295.817609] __x64_sys_connect+0xd8/0x120 [ 295.821765] do_syscall_64+0x152/0x230 [ 295.825671] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 295.830863] RIP: 0033:0x455a09 [ 295.834051] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 295.841771] RAX: ffffffffffffffda RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 295.849038] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 295.856308] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 295.863579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 295.870858] R13: 000000000000005b R14: 00000000006f5928 R15: 0000000000000029 [ 295.878139] CPU: 1 PID: 18528 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #103 [ 295.885507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.894857] Call Trace: [ 295.897450] dump_stack+0x185/0x1d0 [ 295.901087] should_fail+0x87b/0xab0 2018/05/31 14:41:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x10, 0x4, 0x0) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) r2 = getpgrp(0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x4, 0x94200) openat$cgroup_subtree(r3, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000180)='net/unix\x00') sendfile(r1, r4, &(0x7f0000000040), 0x800003) [ 295.904805] __alloc_pages_nodemask+0x630/0x5dc0 [ 295.909558] ? kernel_poison_pages+0x40/0x360 [ 295.914054] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 295.919418] ? kernel_poison_pages+0x1a0/0x360 [ 295.923999] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 295.929450] ? get_page_from_freelist+0xab08/0xb5e0 [ 295.934473] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 295.939924] ? __save_stack_trace+0x90d/0xb00 [ 295.944430] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 295.949384] ? shmem_getpage_gfp+0x3971/0x5980 2018/05/31 14:41:43 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) [ 295.953970] ? shmem_fault+0x509/0x950 [ 295.957854] ? shm_fault+0xbc/0x110 [ 295.961478] ? __mm_populate+0x6cb/0x8b0 [ 295.965538] ? __x64_sys_remap_file_pages+0x15d/0x1b0 [ 295.970728] ? do_syscall_64+0x152/0x230 [ 295.974792] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 295.980173] ? kmsan_set_origin_inline+0x6b/0x120 [ 295.985016] ? __msan_poison_alloca+0x15c/0x1d0 [ 295.989701] kmsan_alloc_page+0x82/0xe0 [ 295.993677] __alloc_pages_nodemask+0xfc0/0x5dc0 [ 295.998433] ? memcg_kmem_put_cache+0x40/0x280 [ 296.003016] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 296.008382] ? kmem_cache_alloc+0xad3/0xb90 [ 296.012704] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 296.018162] ? radix_tree_node_alloc+0x31f/0x5c0 [ 296.022930] alloc_pages_vma+0xcc6/0x17f0 [ 296.027080] shmem_alloc_and_acct_page+0x6f0/0x1020 [ 296.032100] ? find_lock_entry+0xc8/0x720 [ 296.036249] ? find_get_entry+0x7ef/0x820 [ 296.040399] ? shmem_getpage_gfp+0x61f/0x5980 [ 296.044896] ? shmem_getpage_gfp+0x61f/0x5980 [ 296.049393] shmem_getpage_gfp+0x3971/0x5980 2018/05/31 14:41:44 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xdb1, 0x145002) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000000200)={@empty, @dev, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @multicast2, @remote}, &(0x7f0000000300)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000340)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002880)={'tunl0\x00', 0x0}) getsockname$packet(0xffffffffffffff9c, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000002900)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9a80e426a651ddd5}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002940)=ANY=[@ANYBLOB="68020000", @ANYRES16=r1, @ANYBLOB="000628bd7000fedbdf250300000008000100", @ANYRES32=r2, @ANYBLOB="f401020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004003a00000008000600", @ANYRES32=r3, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000140004007b0b2fff09000000fbffff00fcffffff38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000500000040000100240001006c625f686173685f7374617473000000000000000000000000000000009651b5999b43000000080003000b000000080004000700005b59af078eac00080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000", @ANYRES32=r4, @ANYBLOB="080007000000000040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e00003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c006efb17c7abc6a784140e3d34040072616e6400003800010024000100616374697665706f7274000000000000000000000000000000000000000000000000", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="500002004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x268}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000881) r7 = socket$unix(0x1, 0x5, 0x0) getsockopt$SO_COOKIE(r7, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) [ 296.053807] ? unmap_page_range+0x3b7e/0x3be0 [ 296.058304] ? __irqentry_text_end+0x1fb63e/0x1fb63e [ 296.063413] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 296.068784] ? __msan_poison_alloca+0x15c/0x1d0 [ 296.073453] shmem_fault+0x509/0x950 [ 296.077175] ? shmem_destroy_callback+0x150/0x150 [ 296.082116] shm_fault+0xbc/0x110 [ 296.085595] ? shm_split+0x180/0x180 [ 296.089304] handle_mm_fault+0x5c01/0x7e90 [ 296.093549] __get_user_pages+0x176a/0x24a0 [ 296.097886] __mm_populate+0x6cb/0x8b0 [ 296.101782] __se_sys_remap_file_pages+0x100f/0x1130 [ 296.106888] ? prepare_exit_to_usermode+0x149/0x3a0 [ 296.111908] __x64_sys_remap_file_pages+0x15d/0x1b0 [ 296.116924] do_syscall_64+0x152/0x230 [ 296.120818] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 296.126000] RIP: 0033:0x455a09 [ 296.129204] RSP: 002b:00007fc91acedc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 296.136910] RAX: ffffffffffffffda RBX: 00007fc91acee6d4 RCX: 0000000000455a09 [ 296.144179] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 2018/05/31 14:41:44 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x8002, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="ae000000bd5adb787530f19688be325185d0de09c8993a8b0a7a9174d1c8ee6dc6e90ff05e9b413359fbf62f70010ee0aa1ab66f4cbf59e4cb1185123b34b2135bad7772a6828cb5e24cfbaeb96875ce313d17c8e85b556137b601e671241604953d2dc3b743f78d00de7cb55efb9eb82ce387f276e0d10989f53570d728636624f8c6f7d4c89f819f2bd21c4da8ddbda9281b68a23d5c45ae25ffa034e373d974f0d1d666df4ea9e9dd7aea55925b73e850cd8bb77327ef82b6efffddfa4eca83244493f5e0ed2a345450c58272d45730dfaa2b246d2868d585261e24c3b2f4e07a397d7ba881d0d4f533edb6937da1"], &(0x7f0000000180)=0xb6) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r1, 0xffffffffffff0000}, 0x8) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) shmctl$IPC_RMID(r3, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:44 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400cd858299ef792085f74e17314f495d5f60f7b9cc0000", @ANYRES16=r2, @ANYBLOB="0104000000000000000007000000"], 0x14}, 0x1}, 0x0) [ 296.151444] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 296.158711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 296.165980] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 000000000000000c 2018/05/31 14:41:44 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000003, 0x5011, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xeb96) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x10700, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0xfff, 0x4) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000040)=0x800) 2018/05/31 14:41:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:44 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:44 executing program 0 (fault-call:1 fault-nth:42): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:44 executing program 6: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) getpid() getpid() fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0xffff, 0x0) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000580)={0x3, 0x1}) r5 = syz_open_procfs(r2, &(0x7f00000001c0)='net/sockstat\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f0000000280)={{0x6, 0x7, 0x6, 0x3, "8e59be54a10e7665ca939e85dc1f19582c525026fd4143a63e979a061ef5e63137248ce77273061340abe1cb", 0x1342}, 0x0, 0x0, 0x1, r0, 0x7, 0x2b, "207b9ab1bd1ebb619d738385c9bc1aa3747c5397804428a8aa96f427bbf015265584f9bd29279be2289fff98c0f9694ec03a850546d439e5bf565bb4774adc22", &(0x7f0000000200)='mime_type{cpuset\x00', 0x11, [], [0x5, 0xfffffffffffffffa, 0x20, 0x8000]}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0x1f87, 0x0, 0x3ff, 0x3ff, 0x5, 0x686bcda2, 0xd9, 0x0}, &(0x7f0000000400)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000440)={r6, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x40, 0x1, 0x0, 0x9, 0x3}, &(0x7f0000000500)=0x98) openat(r5, &(0x7f00000005c0)='./file0\x00', 0x2001, 0x1) r7 = getpgrp(r3) r8 = gettid() rt_sigprocmask(0x0, &(0x7f0000000240)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r7, r8, 0x27, &(0x7f00000000c0)={0x0, 0x0, 0x9}) rt_sigtimedwait(&(0x7f0000000040)={0xffffffffffff0001}, &(0x7f0000000080), &(0x7f0000645000), 0x8) 2018/05/31 14:41:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000040)=""/91) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:44 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffc) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:44 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0xfd66) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x181001, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x6, 0x6}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x5, 0x9, 0x8201, 0xffffffffffff31bf, 0xfffffffffffffffc, 0x0, 0x10000, 0x4, r2}, &(0x7f0000000200)=0x20) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={r2, 0xe6, 0x10, 0xff, 0x1}, &(0x7f0000000180)=0x18) 2018/05/31 14:41:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4100, 0x0) accept4$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x14, 0x80800) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r3, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'ipddp0\x00', {0x2, 0x4e22, @broadcast=0xffffffff}}) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000093", @ANYRES16=r2, @ANYBLOB="0104000000000000000007000000"], 0x14}, 0x1}, 0x0) 2018/05/31 14:41:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:44 executing program 2: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x0, &(0x7f00000000c0)}) 2018/05/31 14:41:44 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000980)=0x0) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000a40)=[0x0, 0x0]) bind$unix(r1, &(0x7f0000001e40)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000001d80)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000140)="859e7f8d6c245d1dbae07026780fec93aa71209c2132f4ced656571fac034e80331d8b2266cad830ec65359797abd2d6e3eb68bbb5c07053bc53219b219b91bbf7c17e5661e1ef44efebb89020df5b2ebc42c0a87a07cc70c35d2fbbbe5e01318fbb5b2a0b0dd85afb5ef7a95e973e09ca4bcb889e686e38f086385de5dab3df9da93dbcfc553fc7c780d611e1c139a1c034dc962fdcdf5344ae1162922fba4c02101248f531c6565e7c7b4a0410d2cf55d6385f27503d4fc963a396839722a64ee0ad151e9819727bb10f68", 0xcc}, {&(0x7f0000000240)="1b8db0ea858809d37230e9451ac2a012c3b8715e7432a6f3744feb94b6cdb2bb4f7c07f698c9f7c9bd549874f7f5deceda41d7b50d25ceb479258680e718f2eaa4a13ef9a593cd18062813de9c3f361c93aba3b4a24e6401d04b8096160c9b5de47840b8acdc6e864672e2aa84f0f9351f555bada8825f2a3dc4ea3d984944cc3185e2b2b1947db766e80219135473497f5ac77d3b2af73a4152750a3168a17eb45ce60706374c1a2dbe17e6d462770d02b933e25c44708d47b24cd258bc53b2b965244c4fe5eb2d104ad62fd9399a4c588e86fb992219398e74b1ab8f7f9f91e071f8396ace3c03a882e6bf3b86a0a86a79c3", 0xf3}, {&(0x7f0000000340)="03e1006c1079d4fecdd2aabbfca429635bc670e955d44131944d860979fa3a9246502378f7ed474f9d5d789c2a9a472423a318e833ce857ae7051a53a43769a990a7dd8ac5a97ca364cc8d61884588096d148fee85884b4c32069d28536f7076208350c1fe48d11fa3ca459be44d0af02433bfed9d0934ba789dc3c3cc9aa4e5e3fb3d429b507e5bff7a140f921fda3ec5617d92c8c5d1f85e61ff98b724623f1eb9dad420c872408b6360dc29cbe7195d5ceb0817a9cc29de6beffee87a72296c01244a1a234c7d6b0e49e4e6a49b9d1205e1e104056e6e7a57e56db027a2a3b0c6da7100368ec0fa18f5", 0xeb}, {&(0x7f00000000c0)="d047a31329e5a952d1e0664ddda1c3702d536376", 0x14}, {&(0x7f0000000440)="5da4e0de69991edeb234c48f488a6b4f385c96b1", 0x14}], 0x5, 0x0, 0x0, 0x40}, {&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000480)}, {&(0x7f0000000640)="bda6ffa9e2cc17c59e3aad9019546a6e46b049d07ff8d7e9a87b70c8d0e0e42d53284c1227fcef33b068f29d28062e02693698b4cf25212ad93df4f97ff3f581aa436394c0b58dfe0c43c23c9618a80fd832bf026c33ec40cac2336edcacb892da0f48733ace5456e7472cff0d79daa31949ade9eb48", 0x76}, {&(0x7f00000006c0)="d7b1c9f50c37bf03e8ff65b176a7f60c80dd6e367e5f2d3789aebfd8c53c50673fa0274e98f247962cc4a83c77a12d9f40944d1dfd3c42a5cc429db7b247896a5063d93620682cc2731a49e23444975042920c719a4d6a381e5c034807cb92fea977338aaf9009d3748ab440e0a72097e51621d3b918b302852eef6e859662ecada6f4c7d18cc14f0ee0b0e4ed5eaf15aec447f9e9fbb2a52869357e4973ad89bd", 0xa1}, {&(0x7f0000000780)="7bcc1dfcec5506ebd070276251ad696773a9d04cf4a628271ae5d1b8ebd8dacb4d6399f083d6ab682c01552e9b2513cf3b4aa36ced6ef19300f23851b7995468e5e0af01dbdd5eaca70786879178346bc315ba377e3b57b3ad40c730dc9b6f519a149c675f2b6495dff0887158104827e9795df8bd4cba1e087bbc43db598bce93693e4dcb40bd68387589ff1c02e4860a49d535e3e7ab20a8b68bb0c0be1ad2127f7bcf0a", 0xa5}, {&(0x7f0000000840)="3afc19b1e0408fb3a2f7f0fb3c4d8be65ad5469421c11c2aac6ace865682e1eb86e1b4f7ca7a781ba19f8cd3da23f7c007204e2a8c073c80b433d99af9b808f39c6ac56b0413135049a58eacfec1869da0aafce3d9c4e5f5685b22cfa5047608d0835cea361eb6113a1b56e17aa0cd336f85ee4eda96153cb2f1dff909a98b575a0bc26b5a1191bac02bfe69d1a15a81fe7a83887df849fce4915e7a19", 0x9d}], 0x5, &(0x7f0000000a80)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x40000}, {&(0x7f0000000ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="0ad9", 0x2}, {&(0x7f0000001b80)="aa193990b7e6dce65e0d8ad9eab3627aff3ef0884d0779866eb223b7fbfd067e97e58d60156032776ce469df894784f99cf700ca043b40e25d610e91d077198b7cad9b13846ba266893f5b3e267c3bce73fd7ea8b01eee0e643e43932f8b59e93c3fb87f19e808e63c5366", 0x6b}, {&(0x7f0000001c00)="4f66cf7b26fa446fc2992d128a2e30fae56e2728f59e16bac93633a25eb2a90239ba3d538ac0d100b3fd54ec0cefb6e2844f151c7723b1d873be9bf57ade4e22f0cea76b7298d97821a026c396291ce31f1e941edff4a244f107c5004b62cf533393da5980c02debab0c65ebab39184caaf15c14b121ff24143a63da4d8a84db059c3a708c374bc898bbf3d6a29f73a225d6a7256c3c7704e287b8ab1a631f4af8b50f7c87767c60209d49f93c6a67b16f7457c8", 0xb4}], 0x4, &(0x7f0000001d00)=[@rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, 0xffffffffffffffff]}], 0x58, 0x40}], 0x3, 0x8000) 2018/05/31 14:41:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:44 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:44 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) fcntl$setflags(r1, 0x2, 0x1) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000000000000, 0x0, 0x0) recvfrom$ipx(r1, &(0x7f0000000080)=""/41, 0x29, 0x100, &(0x7f00000000c0)={0x4, 0x3, 0x401, "3f0e0c9ac757", 0x401}, 0x10) [ 297.594946] FAULT_INJECTION: forcing a failure. [ 297.594946] name failslab, interval 1, probability 0, space 0, times 0 [ 297.606261] CPU: 0 PID: 18628 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #103 [ 297.613609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.622963] Call Trace: [ 297.625552] dump_stack+0x185/0x1d0 [ 297.629173] should_fail+0x87b/0xab0 [ 297.632882] __should_failslab+0x278/0x2a0 [ 297.637114] should_failslab+0x29/0x70 [ 297.641005] kmem_cache_alloc+0x12e/0xb90 [ 297.645144] ? taskstats_exit+0x17a/0x17e0 [ 297.649385] ? do_exit+0x496/0x38d0 [ 297.653015] taskstats_exit+0x17a/0x17e0 [ 297.657066] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 297.662505] ? acct_collect+0x8d8/0xb20 [ 297.666486] do_exit+0xbfc/0x38d0 [ 297.669948] do_group_exit+0x1a0/0x360 [ 297.673829] get_signal+0xfcb/0x1f40 [ 297.677544] ? sctp_wait_for_connect+0x746/0x7d0 [ 297.682302] ? init_wait_entry+0x1a0/0x1a0 [ 297.686537] ? __msan_poison_alloca+0x15c/0x1d0 [ 297.691201] ? prepare_exit_to_usermode+0x271/0x3a0 [ 297.696209] do_signal+0xb8/0x1cf0 [ 297.699760] ? __local_bh_enable_ip+0x3b/0x140 [ 297.704342] ? kmsan_set_origin_inline+0x6b/0x120 [ 297.709184] ? __msan_poison_alloca+0x15c/0x1d0 [ 297.713852] ? syscall_return_slowpath+0xe9/0x700 [ 297.718683] ? prepare_exit_to_usermode+0x4a/0x3a0 [ 297.723611] ? syscall_return_slowpath+0xe9/0x700 [ 297.728457] ? prepare_exit_to_usermode+0xec/0x3a0 [ 297.733386] prepare_exit_to_usermode+0x271/0x3a0 [ 297.738227] syscall_return_slowpath+0xe9/0x700 [ 297.742896] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 297.748268] ? __x64_sys_connect+0xd8/0x120 [ 297.752579] do_syscall_64+0x1af/0x230 [ 297.756462] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 297.761649] RIP: 0033:0x455a09 [ 297.764831] RSP: 002b:00007f3760435c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 297.772532] RAX: fffffffffffffe00 RBX: 00007f37604366d4 RCX: 0000000000455a09 [ 297.779789] RDX: 000000000000001c RSI: 0000000020966fe4 RDI: 0000000000000013 [ 297.787050] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/31 14:41:45 executing program 6: r0 = socket$packet(0x11, 0x14000000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000bc0)=@setlink={0x28, 0x13, 0x211, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x8, 0x16, [{0x4, 0x1}]}]}, 0x28}, 0x1}, 0x0) 2018/05/31 14:41:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='posix_acl_access\x00', 0xfffffffffffffff8) keyctl$describe(0x6, r1, &(0x7f00000000c0)=""/117, 0x75) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x48400, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000200)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4) 2018/05/31 14:41:45 executing program 2: r0 = userfaultfd(0xfffffffffffffffe) userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl(r0, 0x0, &(0x7f0000000040)) 2018/05/31 14:41:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) 2018/05/31 14:41:45 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:45 executing program 4: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r4, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000100)=0xe8) r3 = getgid() fchown(r0, r2, r3) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 297.794312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 297.801572] R13: 000000000000005b R14: 00000000006f5928 R15: 000000000000002a 2018/05/31 14:41:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') lseek(r0, 0x800000000000063, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 2018/05/31 14:41:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x34, 0x4) r2 = fcntl$dupfd(r0, 0x0, r0) connect$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x800, {0x4, 0x81, 0x1, 0x8, 0x2800000000000000, 0x200}, 0x8, 0x4}, 0xe) connect$rds(r2, &(0x7f0000000100)={0x2, 0x4e24}, 0x10) clock_getres(0x7, &(0x7f0000000000)) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x80) unlinkat(r3, &(0x7f0000000080)='./file0\x00', 0x200) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x80000000000000, 0x0) 2018/05/31 14:41:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0104000000000000000007000000"], 0x3}, 0x1}, 0x40000000000) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001480)='/dev/dsp\x00', 0x404001, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="0600050000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="8ce70183f1255adce0c8d856fb700e426449998dbd182601c4a0ffb5335b3e946ff09ef68b8373c1c4bca59583ad64956d0a5772bdbeea9d6cc931b0b5951538f67ec3f8bb85f9b5328c57e34f25c1bf11a0dc7c42d6030359545dacc4d1d9586333d876a7ac7f8e81d984ccbd4358fd768db3f28d93dd31db11e1820fb4a1c5651073b703"], @ANYBLOB="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"]) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000015c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x30, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {0x3}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000180)=r3) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000014c0)={'broute\x00'}, &(0x7f00000001c0)=0x78) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000080)=""/179) 2018/05/31 14:41:46 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = memfd_create(&(0x7f0000000480)='\\\x00', 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000004c0)=0xfa42) r2 = socket(0x2, 0x1, 0x0) r3 = shmget$private(0x0, 0x3000, 0x5400000a, &(0x7f0000ffc000/0x3000)=nil) shmat(r3, &(0x7f0000ffe000/0x1000)=nil, 0x2000) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000006c0)=@broute={'%route\x00', 0x20, 0x1, 0x3b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200010c0], 0x0, &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="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"]}, 0x4ad) 2018/05/31 14:41:46 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0xc) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000100)=0xe8) r3 = getgid() fchown(r0, r2, r3) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1) 2018/05/31 14:41:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) r1 = dup(r0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)) shutdown(r0, 0x2) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)) 2018/05/31 14:41:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = dup(r0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0fc7f23c4f09647ead90fee4e49dccd50002fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000240)="8d0065580eb3a879d96eb06e0a6f92dca82ea00a698c15fd1f199e2cbb47042220", 0x21, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x1000010) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0104000000001400000007000054"], 0x14}, 0x1}, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) accept$alg(r4, 0x0, 0x0) [ 298.727583] sctp: [Deprecated]: syz-executor0 (pid 18651) Use of int in max_burst socket option. [ 298.727583] Use struct sctp_assoc_value instead [ 298.823417] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/05/31 14:41:46 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000000)={0x1}, 0x8, 0x0) msgsnd(r1, &(0x7f000010d000)={0x3}, 0x8, 0x0) msgrcv(r1, &(0x7f00000002c0)={0x0, ""/206}, 0xd6, 0x2, 0x800) 2018/05/31 14:41:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:41:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000040)) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x10) 2018/05/31 14:41:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7f, 0x800) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000080)={0xe9, 0x100000001, 0xc6, 0x8d87}) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r2, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:47 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x40000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000400)=[{0x3, 0x5}, {0x4, 0x2}, {0xb, 0x100000000}, {0x8, 0x5}, {0x8, 0xaf96}], 0x5) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2000400) timer_create(0x7, &(0x7f0000000040)={0x0, 0x1, 0x3}, &(0x7f0000000080)=0x0) clock_gettime(0x93c531fd13570a72, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000100)={{r3, r4+30000000}}, &(0x7f0000000140)) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x101, 0x20}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000340)={r6, 0x4, "5751098c"}, &(0x7f0000000380)=0xc) r7 = dup3(r1, r0, 0x80002) ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000240)=""/220) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, r1, 0x0) 2018/05/31 14:41:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xd40, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000100)) socket$alg(0x26, 0x5, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000080)=0xfff, 0x4) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1f, 0x88000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:47 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000100)={@mcast1={0xff, 0x1, [], 0x1}, 0x66, r1}) shutdown(r0, 0x2) 2018/05/31 14:41:47 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x3) lseek(r0, 0x0, 0x1) 2018/05/31 14:41:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x6, &(0x7f0000000040)="94976b2fe0965e4829b56d23bf3f2162fcd8ffa314b50da6ddfa257c48748d748b072af868b97016eb34ac6fef7fb75a65e12d2c6ea78a2a98e79bbf9c400a61e83a3ae455ef54a5aac8eead6e8919cb95b64a9c7cf0") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'team_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'ip6tnl0\x00', r1}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="ac00000013000904000000000000000002000009", @ANYRES32=r2, @ANYBLOB="000000000000000008001b000000000004002b00"], 0x2c}, 0x1}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) setsockopt(r3, 0x3, 0x8, &(0x7f0000000240)="72974a04b066bdb650b4ea7740c0b36943e8fb1932be2c0d66ddac4c122958b8ab5e2c4754b325787708029806ea7571271f741df4c72f6c1371a37b667ac4cb47ec56ca0a7424cb575ba3", 0x4b) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000100)) [ 299.742365] Unknown ioctl 8829 2018/05/31 14:41:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) ioprio_get$pid(0x1, r2) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000100)=ANY=[@ANYBLOB="f0ffffff01026d0040000900812fefff03007f000008"], &(0x7f0000000080)=0x14) 2018/05/31 14:41:47 executing program 1 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) [ 299.787894] Unknown ioctl 8829 2018/05/31 14:41:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000012c0)={@pptp={0x18, 0x2, {0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, {&(0x7f00000002c0)=""/4096, 0x1000}, &(0x7f0000000080), 0x28}, 0xa0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r3, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:41:47 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) [ 299.902884] FAULT_INJECTION: forcing a failure. [ 299.902884] name failslab, interval 1, probability 0, space 0, times 0 [ 299.914428] CPU: 0 PID: 18743 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #103 [ 299.921835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.931225] Call Trace: [ 299.933854] dump_stack+0x185/0x1d0 [ 299.937566] should_fail+0x87b/0xab0 [ 299.941344] __should_failslab+0x278/0x2a0 [ 299.945649] should_failslab+0x29/0x70 2018/05/31 14:41:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x2, &(0x7f0000000240)='\x00GUh') r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 299.949579] kmem_cache_alloc+0x12e/0xb90 [ 299.953781] ? __split_vma+0x1d5/0xcd0 [ 299.957729] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 299.963154] __split_vma+0x1d5/0xcd0 [ 299.966937] do_munmap+0x7f6/0x26b0 [ 299.970626] mmap_region+0x1500/0x3730 [ 299.974600] do_mmap+0x193f/0x2020 [ 299.978205] __se_sys_remap_file_pages+0xf3c/0x1130 [ 299.983279] ? prepare_exit_to_usermode+0x149/0x3a0 [ 299.988374] __x64_sys_remap_file_pages+0x15d/0x1b0 [ 299.993439] do_syscall_64+0x152/0x230 [ 299.997375] entry_SYSCALL_64_after_hwframe+0x44/0xa9 2018/05/31 14:41:48 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @multicast2}, &(0x7f0000000080)=0xc) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x81, 0x30, 0x0, 0xb0f}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x2, 0x4, 0x5, 0xffff, r3}, &(0x7f0000000180)=0x10) shmctl$IPC_RMID(r2, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:48 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8400, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000080)={0x8001, 0x6, 0x0, 0x9e6, 0xa, 0x8}) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet6_int(r1, 0x29, 0x39, &(0x7f0000000ffc), &(0x7f0000013000)=0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x2}) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)) close(r0) 2018/05/31 14:41:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) unshare(0x24020400) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-generic\x00'}, 0xffd1) [ 300.002589] RIP: 0033:0x455a09 [ 300.005793] RSP: 002b:00007fe552d0bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 300.013536] RAX: ffffffffffffffda RBX: 00007fe552d0c6d4 RCX: 0000000000455a09 [ 300.020832] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 300.028142] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 300.035443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 300.042748] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 0000000000000000 2018/05/31 14:41:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x9, &(0x7f0000000000)="004718a3070007") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbff, 0x21040001}, 0xfffffffffffffe75) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1100", @ANYRES16=r2, @ANYBLOB="0104000000000000000007000000"], 0x14}, 0x1}, 0x0) 2018/05/31 14:41:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x80) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000040)=""/194, &(0x7f0000000140)=0xc2) r2 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) readlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=""/77, 0x4d) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000280)=""/120) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) futex(&(0x7f0000000180)=0x2, 0x4, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x1, 0x1) 2018/05/31 14:41:48 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) close(r0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x2, 0x42200) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000140)={{&(0x7f0000000080)}, &(0x7f0000000100), 0x10}, 0x20) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, r3, 0x800, 0x70bd2c, 0x25dfdbff, {0x7}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xffff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2018/05/31 14:41:48 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:48 executing program 1 (fault-call:4 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:41:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) shmctl$IPC_RMID(r1, 0x0) 2018/05/31 14:41:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0047fc2f07d82c99240970") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000012c0)='proc\x00', 0x0, &(0x7f0000000080)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x420400, 0x0) getdents64(r1, &(0x7f0000000240)=""/107, 0x2c) getdents64(r1, &(0x7f0000002300)=""/4096, 0x1000) 2018/05/31 14:41:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40240000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newtaction={0xb4, 0x30, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0xfff, 0x1}, [{0xa0, 0x1, @m_bpf={0x9c, 0x1b, {{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, @TCA_ACT_BPF_FD={0x8, 0x5, r0}}, {0x80, 0x6, "5d36dd4e8aff86c836d00a28105d3140edc0a9b53a0da182c55b0d2cb0826a55a4559cf46e8d832be80a0a36ab8cdd41ec64dd81a1d21e6bdab8158652586f82aa0e0e61fd3b75d40cb34cb328e5f54fc3b30df55b6bf64f8820791ce1877d53803fe1e5098c0de11df0a590084f56aeb70435b3bb47eb84b00a"}}}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) [ 300.973419] FAULT_INJECTION: forcing a failure. [ 300.973419] name failslab, interval 1, probability 0, space 0, times 0 [ 300.984772] CPU: 0 PID: 18786 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #103 [ 300.992160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.001553] Call Trace: [ 301.004186] dump_stack+0x185/0x1d0 [ 301.007865] should_fail+0x87b/0xab0 [ 301.011639] __should_failslab+0x278/0x2a0 [ 301.015928] should_failslab+0x29/0x70 2018/05/31 14:41:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) ioctl$KDDISABIO(r2, 0x4b37) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000040)=""/123, &(0x7f00000000c0)=0x7b) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 301.019849] kmem_cache_alloc+0x12e/0xb90 [ 301.024029] ? mmap_region+0x1c2d/0x3730 [ 301.028142] mmap_region+0x1c2d/0x3730 [ 301.032104] do_mmap+0x193f/0x2020 [ 301.035709] __se_sys_remap_file_pages+0xf3c/0x1130 [ 301.040778] ? prepare_exit_to_usermode+0x149/0x3a0 [ 301.045865] __x64_sys_remap_file_pages+0x15d/0x1b0 [ 301.050924] do_syscall_64+0x152/0x230 [ 301.054854] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 301.060064] RIP: 0033:0x455a09 [ 301.063273] RSP: 002b:00007fe552d0bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 2018/05/31 14:41:49 executing program 3: socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6gre0\x00', 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) quotactl(0xf4c, &(0x7f0000000240)='./file0\x00', r2, &(0x7f00000003c0)="8caa6b5e7ba2f137ab23da93a80cf6b63e812330306e7e2bef7c36cd309cb7521635248e43181ac5edd809dcda64a0004f2e2dc2bae227c28c722d5219320b049eae326f0f078884097e27470723711698bffa7a1034a08a810fd2baa13d3ee014b94e031065aa6909250b6b261c4b52f1a5850ce5e4f32cbedf72db91e7a550ce9a86cf806628946543fa447fb35bc373d9b5441e6a7883673c65dd0782093c2f724c4005c04ace7b") ioctl(r1, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="f8bf88df5b1b", @remote={0xac, 0x14, 0x14, 0xbb}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @rand_addr=0xac1414bb}}}}, &(0x7f0000000100)) accept4(r0, &(0x7f0000000140)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, &(0x7f00000001c0)=0x80, 0x80000) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000200)={'bond_slave_1\x00', 0x9}) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000480)=0x51, 0x4) [ 301.071028] RAX: ffffffffffffffda RBX: 00007fe552d0c6d4 RCX: 0000000000455a09 [ 301.078325] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 301.085616] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 301.092917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 301.100213] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 0000000000000001 2018/05/31 14:41:49 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x4000, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740)='/dev/cuse\x00', 0x1, 0x0) write$tun(r1, &(0x7f0000000780)={@void, @void, @eth={@random="efeb4ce87462", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipx={0x8137, {0xffff, 0x9e, 0x80, 0x0, {@current, @current, 0x7f}, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xa2b}, "dee9b57c334413d93fa95bbd5674785ec922143d7442ef548f9bafcad562f553540144785a0ddd315365b0d024487fb7db807710a9345e0d0826661c8b0ba765c597cf29d60350ee23b359a1763fad3e9a9a1cbb5680e330f8242c4dc9155bf3299b1865cbcc6ae380609a75eb18f6d5ac78ea34d005ca0f5c2dabefef1fa397"}}}}}, 0xac) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ppp\x00', 0x24102, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0x100, @remote={0xfe, 0x80, [], 0xbb}, 0xee64}}, [0xf1e, 0xdf0, 0x2, 0x6, 0x5, 0x7, 0x52, 0x195ac9ac, 0x1000, 0x0, 0x81, 0xe3b, 0xff, 0xb5, 0x3]}, &(0x7f0000000680)=0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000006c0)={r3, 0x8}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r5 = socket(0x10, 0x80000, 0x95) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f00000003c0)={0x0, 0x3ff}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000440)={r6, 0xfffffffffffff000}, &(0x7f0000000480)=0x8) setsockopt$sock_int(r5, 0x1, 0x0, &(0x7f0000000000)=0x10001, 0x4) socketpair(0x0, 0x800, 0x11a200000000000, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGETD(r8, 0x5424, &(0x7f0000000080)) shmctl$IPC_RMID(r4, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f00000000c0)="737c6f548afeadb77fcdf5d6ec0404ec732c6e2bc63b6c27093d6c697db9a24bac38a9c96752b3f7746c09986d36ef20410388a8d403964cb0c4970f23b903753b69dfb3639004ef2a081aec1f28d3a7729efc43bc78e428d07f07a6b29dcb94838798870e1e04041d2f458103b1b297f533cc25aa3d882b8acc72c896af29c509f984e05496c4a37defdb245468", 0x8e}, {&(0x7f0000000180)="00a9b90cd96774a3d082e8fba3e78e49bbd0a536693327b82b5fb370cb3f245f10762ebaa4e1abf735b9b9dbbc0e1fc3a7443fdb997ab529f5182f90b12a764a5be037200e7f8d67f2f88b99e7cd469bae0c0ae91daf8079cf04051c2d5a91ef2b17be38cc34cf21f3e93205e2f95c1ff6b93630a180b7a5be0ab9111307110475f505730bc0f8ef2834ebeff9f451906f7940ebc47a05defb2a7ef91b6d2f1debbadd9b8c9a3957ad8cc0924800d77454b61d25b10a", 0xb6}, {&(0x7f0000000280)="b27a1c78c61853d49d82e501874c9910308c12d205bc785f727aa13f1477412fb172eac4b8b3cdbbbf730cd02207eec183c229f2e5e8d765f97b52a319f82d45b6a1fffbd7addedb816ffc75352a4d44bd", 0x51}, {&(0x7f0000000300)="9167809ec096b63d5e8665c1bd42b5f9d84be0d3c289511119eb171431d7709d6433b2a219d07a50f72ec52619d52326f0e54354116cfcbfbb97170b7ea339790e274ac74e716a538b7a487c668c66754abf4c3e84bd1550e6202d1708f4445a3a0347f4ee481859a79bd21738f6361a", 0x70}], 0x4, 0x4) 2018/05/31 14:41:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_FLAGS={0x8, 0x8}, @IFA_ADDRESS={0x14, 0x1, @local={0xfe, 0x80, [], 0xaa}}]}, 0x34}, 0x1}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r4, 0xffffffffffffff7f) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = accept$inet(r1, &(0x7f0000000000)={0x0, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x3}}, 0x1, 0x69}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000340)={r7, 0x8, 0x9, 0x1, 0x253d, 0x3}, &(0x7f0000000380)=0x14) sendto$inet6(r5, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x22, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f0000000240)=0x100) 2018/05/31 14:41:49 executing program 1 (fault-call:4 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:41:49 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000000100)=""/185, 0x72f393b83c42f278, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) r2 = dup3(r1, r0, 0x0) recvfrom$inet(r2, &(0x7f0000000040)=""/17, 0x11, 0x42, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000000)={&(0x7f00005dafe4)=@in={0x2, 0x4e23}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)="a0e036", 0x3}], 0x1}, 0x10008000) r3 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r3, &(0x7f0000001040)='$', 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) sendto$inet6(r1, &(0x7f0000000600)="64f6baf69d97b0a04998263d7e3ed65f9f277ba8b51d1934e6e35113b4ea9e58c3000000009f00000067b2420759d590a655822e2e00b1bcc7b1bedb48abace1318f", 0x42, 0x0, 0x0, 0x0) [ 301.426764] FAULT_INJECTION: forcing a failure. [ 301.426764] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 301.438765] CPU: 0 PID: 18827 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #103 [ 301.446156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.455536] Call Trace: [ 301.458166] dump_stack+0x185/0x1d0 [ 301.461836] should_fail+0x87b/0xab0 [ 301.465597] __alloc_pages_nodemask+0x630/0x5dc0 [ 301.470390] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 301.475785] ? is_bpf_text_address+0xb4/0x4b0 [ 301.480321] ? __is_insn_slot_addr+0x198/0x1c0 [ 301.484942] ? kernel_text_address+0x34d/0x3a0 [ 301.489561] ? __kernel_text_address+0x34/0xe0 [ 301.494188] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 301.499678] ? __save_stack_trace+0x90d/0xb00 [ 301.504217] ? kmsan_set_origin_inline+0x6b/0x120 [ 301.509100] ? shmem_alloc_and_acct_page+0x6f0/0x1020 [ 301.514341] alloc_pages_vma+0xcc6/0x17f0 [ 301.518545] shmem_alloc_and_acct_page+0x6f0/0x1020 [ 301.523631] ? find_lock_entry+0xc8/0x720 [ 301.527848] ? find_get_entry+0x7ef/0x820 [ 301.532051] ? shmem_getpage_gfp+0x61f/0x5980 [ 301.536693] ? shmem_getpage_gfp+0x61f/0x5980 [ 301.541241] shmem_getpage_gfp+0x3971/0x5980 [ 301.545709] ? unmap_page_range+0x3b7e/0x3be0 [ 301.550265] ? __irqentry_text_end+0x1fb63e/0x1fb63e [ 301.555428] ? kmsan_set_origin_inline+0x6b/0x120 [ 301.560347] ? __msan_poison_alloca+0x15c/0x1d0 [ 301.565074] shmem_fault+0x509/0x950 [ 301.568860] ? shmem_destroy_callback+0x150/0x150 [ 301.573753] shm_fault+0xbc/0x110 [ 301.577237] ? shm_split+0x180/0x180 [ 301.580998] handle_mm_fault+0x5c01/0x7e90 [ 301.585328] __get_user_pages+0x176a/0x24a0 [ 301.589707] ? __msan_metadata_ptr_for_load_1+0x20/0x20 [ 301.595143] __mm_populate+0x6cb/0x8b0 [ 301.599086] __se_sys_remap_file_pages+0x100f/0x1130 [ 301.604239] ? prepare_exit_to_usermode+0x149/0x3a0 [ 301.609325] __x64_sys_remap_file_pages+0x15d/0x1b0 [ 301.614382] do_syscall_64+0x152/0x230 [ 301.618310] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 301.623522] RIP: 0033:0x455a09 [ 301.626731] RSP: 002b:00007fe552d0bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 301.634474] RAX: ffffffffffffffda RBX: 00007fe552d0c6d4 RCX: 0000000000455a09 [ 301.641767] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 301.649061] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 301.656354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 301.663652] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 0000000000000002 2018/05/31 14:41:50 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000240)={0xfff, 0x53, 0x9, 'queue1\x00', 0x9}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') 2018/05/31 14:41:50 executing program 7: r0 = socket$inet6(0xa, 0x4, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:50 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x1e, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="af26262c8523bf012cf66f") r3 = accept4(r0, &(0x7f00000000c0)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000440)=0x80, 0x0) fstat(r0, &(0x7f0000000200)) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000), &(0x7f0000000040)=0xc) getpeername$netlink(r3, &(0x7f0000000180), &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140), 0x4) 2018/05/31 14:41:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x455c}}, [0x5, 0x1, 0x2, 0x81, 0x401, 0x7f, 0x97, 0x99, 0x1, 0x3, 0xa31a, 0x3, 0x7, 0x4, 0x2]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r2, 0x94a, 0x1, 0x2000000000000000, 0x5, 0x8}, &(0x7f0000000180)=0x14) 2018/05/31 14:41:50 executing program 1 (fault-call:4 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:41:50 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = accept(r0, &(0x7f0000000000)=@in={0x0, 0x0, @dev}, &(0x7f0000000080)=0x80) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:41:50 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x5) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000080)) r1 = getpid() r2 = request_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)='*\x00', 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x7) syz_open_procfs(r1, &(0x7f0000000040)='net/igmp6\x00') [ 302.316645] FAULT_INJECTION: forcing a failure. [ 302.316645] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 302.328495] CPU: 1 PID: 18852 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #103 [ 302.335857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.345209] Call Trace: [ 302.347806] dump_stack+0x185/0x1d0 [ 302.351445] should_fail+0x87b/0xab0 [ 302.355173] __alloc_pages_nodemask+0x630/0x5dc0 [ 302.359928] ? kernel_poison_pages+0x40/0x360 [ 302.364428] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 302.369794] ? kernel_poison_pages+0x1a0/0x360 [ 302.374378] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 302.379833] ? get_page_from_freelist+0xab08/0xb5e0 [ 302.384857] ? __next_zones_zonelist+0x15f/0x290 [ 302.389623] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 302.395001] ? kernel_text_address+0x34d/0x3a0 [ 302.399587] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 302.404522] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 302.409983] ? kmsan_set_origin_inline+0x6b/0x120 [ 302.414833] ? __msan_poison_alloca+0x15c/0x1d0 [ 302.419519] kmsan_alloc_page+0x82/0xe0 [ 302.423502] __alloc_pages_nodemask+0xfc0/0x5dc0 [ 302.428260] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 302.433624] ? is_bpf_text_address+0xb4/0x4b0 [ 302.438119] ? __is_insn_slot_addr+0x198/0x1c0 [ 302.442710] ? kernel_text_address+0x34d/0x3a0 [ 302.447295] ? __kernel_text_address+0x34/0xe0 [ 302.451879] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 302.457331] ? __save_stack_trace+0x90d/0xb00 [ 302.461844] alloc_pages_vma+0xcc6/0x17f0 [ 302.466004] shmem_alloc_and_acct_page+0x6f0/0x1020 [ 302.471024] ? find_lock_entry+0xc8/0x720 [ 302.475180] ? find_get_entry+0x7ef/0x820 [ 302.479331] ? shmem_getpage_gfp+0x61f/0x5980 [ 302.483827] ? shmem_getpage_gfp+0x61f/0x5980 [ 302.488328] shmem_getpage_gfp+0x3971/0x5980 [ 302.492743] ? unmap_page_range+0x3b7e/0x3be0 [ 302.497247] ? __irqentry_text_end+0x1fb63e/0x1fb63e [ 302.502357] ? kmsan_set_origin_inline+0x6b/0x120 [ 302.507214] ? __msan_poison_alloca+0x15c/0x1d0 [ 302.511895] shmem_fault+0x509/0x950 [ 302.516134] ? shmem_destroy_callback+0x150/0x150 [ 302.521002] shm_fault+0xbc/0x110 [ 302.524493] ? shm_split+0x180/0x180 [ 302.528211] handle_mm_fault+0x5c01/0x7e90 [ 302.532464] __get_user_pages+0x176a/0x24a0 [ 302.536799] ? __msan_metadata_ptr_for_load_1+0x20/0x20 [ 302.542182] __mm_populate+0x6cb/0x8b0 [ 302.546088] __se_sys_remap_file_pages+0x100f/0x1130 [ 302.551196] ? prepare_exit_to_usermode+0x149/0x3a0 [ 302.556223] __x64_sys_remap_file_pages+0x15d/0x1b0 [ 302.561245] do_syscall_64+0x152/0x230 2018/05/31 14:41:50 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000180)=0x6, 0x4) mmap(&(0x7f0000000000/0xaa1000)=nil, 0xaa1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x40, 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x4, &(0x7f0000000100)=0x4) fchdir(r2) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x7fff, 0x20, 0x7ff, 0x4f0e95ac, 0x10000, 0x100000001, 0x8001, 0x3, 0x1}) getsockopt$inet_buf(r2, 0x0, 0x2000000000480, &(0x7f0000059fe8)=""/24, &(0x7f0000c5dffc)=0xfdc0) 2018/05/31 14:41:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x3}, &(0x7f00000000c0)=0x8) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000180)=""/196) 2018/05/31 14:41:50 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f00008a8000)={0xa}, 0x1c) r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x796, 0x200) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\x00') r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000000040)={&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x800) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000140)={@local, @multicast2, 0x0}, &(0x7f0000000180)=0xc) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), 0x4) uselib(&(0x7f0000000200)='./file0\x00') [ 302.565144] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 302.570336] RIP: 0033:0x455a09 [ 302.573540] RSP: 002b:00007fe552d0bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 302.581270] RAX: ffffffffffffffda RBX: 00007fe552d0c6d4 RCX: 0000000000455a09 [ 302.588540] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 302.595803] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 302.603072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 302.610340] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 0000000000000003 2018/05/31 14:41:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x14000, 0x0) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000180)={0x8000, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x72, &(0x7f0000000080)=""/114, 0x62, &(0x7f0000000100)=""/98}) 2018/05/31 14:41:50 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:50 executing program 1 (fault-call:4 fault-nth:4): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:41:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) socketpair$inet6(0xa, 0x7, 0x5, &(0x7f0000000000)) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xfffffffffffffffc) [ 302.787421] FAULT_INJECTION: forcing a failure. [ 302.787421] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 302.799276] CPU: 1 PID: 18882 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #103 [ 302.806634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.815984] Call Trace: [ 302.818585] dump_stack+0x185/0x1d0 [ 302.822221] should_fail+0x87b/0xab0 [ 302.825943] __alloc_pages_nodemask+0x630/0x5dc0 [ 302.830703] ? kernel_poison_pages+0x40/0x360 [ 302.835204] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 302.840574] ? kernel_poison_pages+0x1a0/0x360 [ 302.845167] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 302.850622] ? get_page_from_freelist+0xab08/0xb5e0 [ 302.855640] ? __next_zones_zonelist+0x15f/0x290 [ 302.860402] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 302.865782] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 302.870800] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 302.876258] ? kmsan_set_origin_inline+0x6b/0x120 [ 302.881099] ? __msan_poison_alloca+0x15c/0x1d0 [ 302.885776] kmsan_alloc_page+0x82/0xe0 [ 302.889758] __alloc_pages_nodemask+0xfc0/0x5dc0 [ 302.894518] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 302.899877] ? is_bpf_text_address+0xb4/0x4b0 [ 302.904374] ? __is_insn_slot_addr+0x198/0x1c0 [ 302.908959] ? kernel_text_address+0x34d/0x3a0 [ 302.913545] ? __kernel_text_address+0x34/0xe0 [ 302.918132] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 302.923585] ? __save_stack_trace+0x90d/0xb00 [ 302.928099] alloc_pages_vma+0xcc6/0x17f0 [ 302.932256] shmem_alloc_and_acct_page+0x6f0/0x1020 [ 302.937278] ? find_lock_entry+0xc8/0x720 [ 302.941433] ? find_get_entry+0x7ef/0x820 [ 302.945580] ? shmem_getpage_gfp+0x61f/0x5980 [ 302.950171] ? shmem_getpage_gfp+0x61f/0x5980 [ 302.954678] shmem_getpage_gfp+0x3971/0x5980 [ 302.959090] ? unmap_page_range+0x3b7e/0x3be0 [ 302.963592] ? __irqentry_text_end+0x1fb63e/0x1fb63e [ 302.968699] ? kmsan_set_origin_inline+0x6b/0x120 [ 302.973558] ? __msan_poison_alloca+0x15c/0x1d0 [ 302.978229] shmem_fault+0x509/0x950 [ 302.981948] ? shmem_destroy_callback+0x150/0x150 [ 302.986791] shm_fault+0xbc/0x110 [ 302.990246] ? shm_split+0x180/0x180 [ 302.993964] handle_mm_fault+0x5c01/0x7e90 [ 302.998215] __get_user_pages+0x176a/0x24a0 [ 303.002549] ? __msan_metadata_ptr_for_load_1+0x20/0x20 [ 303.007923] __mm_populate+0x6cb/0x8b0 [ 303.011820] __se_sys_remap_file_pages+0x100f/0x1130 [ 303.016925] ? prepare_exit_to_usermode+0x149/0x3a0 [ 303.021954] __x64_sys_remap_file_pages+0x15d/0x1b0 [ 303.027158] do_syscall_64+0x152/0x230 [ 303.031057] entry_SYSCALL_64_after_hwframe+0x44/0xa9 2018/05/31 14:41:51 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d8") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:51 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 303.036245] RIP: 0033:0x455a09 [ 303.039433] RSP: 002b:00007fe552d0bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 303.047150] RAX: ffffffffffffffda RBX: 00007fe552d0c6d4 RCX: 0000000000455a09 [ 303.054423] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 303.061695] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 303.068967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 303.076235] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 0000000000000004 [ 303.088454] hrtimer: interrupt took 567341 ns 2018/05/31 14:41:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(aes))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x5) fchmod(r0, 0x113) 2018/05/31 14:41:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) getsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/05/31 14:41:51 executing program 1 (fault-call:4 fault-nth:5): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:41:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) r2 = accept4(r0, &(0x7f0000000000), &(0x7f0000000080)=0x80, 0x80000) accept$packet(0xffffffffffffff9c, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000840)=0x14) connect$can_bcm(r2, &(0x7f0000000880)={0x1d, r3}, 0x10) getsockname$packet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x14) 2018/05/31 14:41:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 2018/05/31 14:41:51 executing program 6: r0 = socket$inet_sctp(0x2, 0x2, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x11000000000b) r1 = accept(r0, &(0x7f00000011c0)=ANY=[], &(0x7f0000123000)) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x200000000000000, @mcast2={0xff, 0x2, [], 0x1}, 0x2f17}}, 0x5, 0x3}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0xd5, "ec4a4c7848e80d714d31eaed5506f42ac2d494eb1c433144aa78cbf4ba7712777391d1b6612071f972bc670bedfdcd1e2301fe61a84cb783fb198826c8fecc9f8f29b02ee2d9afd61d1ca91629db0650af6fa01b0fb6ed9f9cf9d88f59a03ece12034c2c43ef415dfa2dbabbac95989127db0a1d3d31fad01e3fb14556887829218c8c70f6009a248e88848b990ccbac5b6a6bb6cad8c99f38031f9fa612530aa3b0a67413daba18cebdad5de2d1f33beb441e90189e2968d2154b9e54c1233faab5173ac4d2be6215ea03c165667426dde3811f4d"}, &(0x7f00000002c0)=0xdd) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2, 0xfffffffffffffffa}, &(0x7f0000000340)=0x8) 2018/05/31 14:41:51 executing program 3: io_setup(0x800, &(0x7f0000000040)=0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000002c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x14) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)=0x81, 0x4) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x8) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000100)=0x1e) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x9, 0x5c, 0x5, 'queue1\x00', 0x7}) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080), 0x171}]) 2018/05/31 14:41:51 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d8") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) [ 303.416150] FAULT_INJECTION: forcing a failure. [ 303.416150] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 303.428187] CPU: 1 PID: 18916 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #103 [ 303.435617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.444998] Call Trace: [ 303.447633] dump_stack+0x185/0x1d0 [ 303.451313] should_fail+0x87b/0xab0 [ 303.455078] __alloc_pages_nodemask+0x630/0x5dc0 [ 303.459901] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 303.465397] ? shmem_getpage_gfp+0x57d4/0x5980 [ 303.470045] ? unmap_page_range+0x3b7e/0x3be0 [ 303.474614] ? __irqentry_text_end+0x1fb63e/0x1fb63e [ 303.479781] ? kmsan_set_origin_inline+0x6b/0x120 [ 303.484693] alloc_pages_current+0x6b1/0x970 [ 303.489276] pte_alloc_one+0x56/0x100 [ 303.493117] __pte_alloc+0x86/0x410 [ 303.496793] ? shmem_fault+0x58e/0x950 [ 303.500738] alloc_set_pte+0x1236/0x1d80 [ 303.504877] handle_mm_fault+0x5e95/0x7e90 [ 303.509212] __get_user_pages+0x176a/0x24a0 [ 303.513596] ? __msan_metadata_ptr_for_load_1+0x20/0x20 [ 303.519039] __mm_populate+0x6cb/0x8b0 [ 303.522983] __se_sys_remap_file_pages+0x100f/0x1130 [ 303.528148] ? prepare_exit_to_usermode+0x149/0x3a0 [ 303.533235] __x64_sys_remap_file_pages+0x15d/0x1b0 [ 303.538297] do_syscall_64+0x152/0x230 [ 303.542231] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 303.547453] RIP: 0033:0x455a09 [ 303.550660] RSP: 002b:00007fe552d0bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 303.558405] RAX: ffffffffffffffda RBX: 00007fe552d0c6d4 RCX: 0000000000455a09 2018/05/31 14:41:51 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x8000050001) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mkdirat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x50) r1 = shmget$private(0x0, 0x1000, 0x200003, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) munlockall() r2 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7e}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={r3, 0x100000000}, &(0x7f0000000100)=0x8) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x7ff, 0x7, 0x9000}, 0x4) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x6f24, 0x10001, 0x4e6e, 0xffffffff00000001, 0x7fff, 0x5, 0x9, {0x0, @in6={{0xa, 0x4e23, 0x51, @dev={0xfe, 0x80, [], 0x1a}, 0x10000}}, 0x2, 0x0, 0xf7bd, 0xfc, 0x4}}, &(0x7f00000004c0)=0xb0) r5 = add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="fe706340dff62694df7e3e2883d06cb92471d46241a981da41c14aab40e7f110176f71a139d85e84dd4a2fb63de3a25d0186822d2bd70e", 0x37, 0x0) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)="4c18a5f7b279c5c4bb1381ab7d5fae1ec08ee2534717b0df09bd2d9d11e14cc05c42307f48f1d463b8bca2832528c319d027fef23c42dd46bd50b73223bcc957229eee6b17ebe9f8c4ad2977a7b7cc17d785e375ab5b70f040c97c4daaebc1b5df38fc1d530141e7c78ae46e326148a842f95096511edee9bc7f3f1eb1af4e8495526908ee8fc562b89436c270b4681d82fb818340ebe970e5742c2eb6eb6ac281a2cb58e1ed015511161495d9ce7b5a360f8b853501504cbae035f08e31e05dc7fcf5f404911be684a01621e852cfa0", 0xd0, 0xfffffffffffffffa) r7 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000005c0)="94afc0daac8533", 0x7, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000600)={r5, r6, r7}, &(0x7f0000000640)=""/86, 0x56, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000500)={r4, 0x7, 0x2, 0x5, 0x0, 0xffffffffffffff80}, &(0x7f0000000540)=0x14) 2018/05/31 14:41:51 executing program 7: r0 = socket$inet6(0xa, 0x80000, 0x4000000000000008) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 303.565701] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 303.572993] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 303.580290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 303.587579] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 0000000000000005 2018/05/31 14:41:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1000000000000131) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x7f, 0xe00) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) get_robust_list(r4, &(0x7f0000000200)=&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, &(0x7f0000000240)=0x18) r5 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x380) r6 = dup3(r1, r0, 0x0) shutdown(r5, 0x1) writev(r6, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) ioctl$SG_GET_SG_TABLESIZE(r5, 0x227f, &(0x7f0000000280)) 2018/05/31 14:41:51 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d8") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:51 executing program 6: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xfff, 0x30}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000002c0)={r1, 0x20, 0x1, 0xffffffffffff6863, 0x7fff, 0x93, 0xfffffffffffff4a1, 0x7ff, {r2, @in6={{0xa, 0x4e22, 0x8000, @mcast1={0xff, 0x1, [], 0x1}, 0x1}}, 0x2, 0x2f82, 0x50f, 0xfffffffffffffffd, 0x5}}, &(0x7f0000000380)=0xb0) r3 = socket$kcm(0x29, 0x5, 0x0) readahead(r0, 0xb97a, 0x69) r4 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x2, 0x8001) write$binfmt_aout(r4, &(0x7f0000000d40)=ANY=[@ANYBLOB="b801000054"], 0x5) sysfs$1(0x1, &(0x7f00000003c0)='/dev/vcsa#\x00') ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") write$binfmt_aout(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000866106f8aed5aae1601ac0cc1312eefcb92f7c265f909d73b7c07ceb5da1c386585042549cde2b30b7bd4923aaaa3ee1fabb4e20c77b66a6121a8f2b46eb9c00ad59630a6a3719bd3e80665d081d8ee1f0a8357e6be455d1c3ae0a2db33f0e8aae30617f3c88d9865b9d3bfee045f761cde0e6b4f3e49c3388bae97c52ab0175a43fe48f49547a5f33399fae2ae2b08b454cd43ebf0bdb1385996ed4d99d5e72b415662a0ba03344de784aa59457ca67e56f9a6adc0b4f7e2f592990d068e87fd1a7c0ef763db49c3a5503766e7ab9e523dee3cb88b99311777e6c7afa5b8341"], 0x20) connect$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0x10001, 0x80, 0x401, 0xfffffffffffffeff, 0x1, 0x3d9}, 0x3ff}, 0xa) 2018/05/31 14:41:51 executing program 1 (fault-call:4 fault-nth:6): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:41:51 executing program 6: mkdir(&(0x7f0000000140)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rmdir(&(0x7f000015dff6)='./control\x00') mount(&(0x7f00000003c0)='./control\x00', &(0x7f0000000400)='./control\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./control\x00', 0x80000000007fffff) close(r0) 2018/05/31 14:41:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) fstatfs(r0, &(0x7f0000000000)=""/79) [ 303.996692] FAULT_INJECTION: forcing a failure. [ 303.996692] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 304.008559] CPU: 0 PID: 18968 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #103 [ 304.015925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.025278] Call Trace: [ 304.027873] dump_stack+0x185/0x1d0 [ 304.031511] should_fail+0x87b/0xab0 [ 304.035234] __alloc_pages_nodemask+0x630/0x5dc0 [ 304.039998] ? kernel_poison_pages+0x40/0x360 [ 304.044511] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 304.049889] ? kernel_poison_pages+0x1a0/0x360 [ 304.054477] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 304.059935] ? get_page_from_freelist+0xab08/0xb5e0 [ 304.064949] ? is_bpf_text_address+0xb4/0x4b0 [ 304.069459] ? kmsan_set_origin_inline+0x6b/0x120 [ 304.074308] ? __msan_poison_alloca+0x15c/0x1d0 [ 304.078988] ? memcg_kmem_charge+0x5dd/0xa30 [ 304.083404] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 304.088341] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 304.093803] ? kmsan_set_origin_inline+0x6b/0x120 [ 304.098652] ? __msan_poison_alloca+0x15c/0x1d0 [ 304.103327] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 304.108697] ? memcg_kmem_charge+0x703/0xa30 [ 304.113110] kmsan_alloc_page+0x82/0xe0 [ 304.117085] __alloc_pages_nodemask+0xfc0/0x5dc0 [ 304.121846] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 304.127295] ? shmem_getpage_gfp+0x57d4/0x5980 [ 304.131874] ? unmap_page_range+0x3b7e/0x3be0 [ 304.136372] ? __irqentry_text_end+0x1fb63e/0x1fb63e [ 304.137587] alg: No test for echainiv(ccm(aes)) (echainiv(ccm_base(ctr(aes-fixed-time),cbcmac(aes-fixed-time)))) [ 304.141472] ? kmsan_set_origin_inline+0x6b/0x120 [ 304.141502] alloc_pages_current+0x6b1/0x970 [ 304.141520] pte_alloc_one+0x56/0x100 [ 304.141531] __pte_alloc+0x86/0x410 [ 304.141545] ? shmem_fault+0x58e/0x950 [ 304.141558] alloc_set_pte+0x1236/0x1d80 [ 304.141576] handle_mm_fault+0x5e95/0x7e90 [ 304.141606] __get_user_pages+0x176a/0x24a0 [ 304.184981] ? __msan_metadata_ptr_for_load_1+0x20/0x20 [ 304.190356] __mm_populate+0x6cb/0x8b0 [ 304.194251] __se_sys_remap_file_pages+0x100f/0x1130 [ 304.199355] ? prepare_exit_to_usermode+0x149/0x3a0 [ 304.204382] __x64_sys_remap_file_pages+0x15d/0x1b0 [ 304.209428] do_syscall_64+0x152/0x230 [ 304.213322] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 304.218503] RIP: 0033:0x455a09 [ 304.221681] RSP: 002b:00007fe552d0bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 304.229380] RAX: ffffffffffffffda RBX: 00007fe552d0c6d4 RCX: 0000000000455a09 [ 304.236656] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 304.243906] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 304.251162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 304.258428] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 0000000000000006 2018/05/31 14:41:52 executing program 7: connect$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x4}, 0x10) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) setpriority(0x2, r1, 0x7) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) shmctl$IPC_RMID(r0, 0x0) 2018/05/31 14:41:52 executing program 6: uselib(&(0x7f0000000000)='./file0\x00') r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)="2f70726f632f30796e635f70650473766a17e272730900000000000031000000000000", 0x2, 0x0) connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x1, @random="1340c8420c27", 'teql0\x00'}}, 0x1e) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x400, 0x6, 0x101, 0x8921, 0x2}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0x2}, &(0x7f0000000140)=0x8) 2018/05/31 14:41:52 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:52 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x101, @loopback={0x0, 0x1}}, 0x1c) shutdown(r0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 2018/05/31 14:41:52 executing program 1 (fault-call:4 fault-nth:7): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:41:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8911, &(0x7f00000000c0)="98f6ffff06d82c99240970fe0991cf662298c271ee1761a3c388c84474d3e9433a8fa45c52800f6e41a7ac6adcb095d925a7060082608a1cbef0afbe78e92f054fdd1ae0cbed377faa4dd5f81ee32a413465c518c50b2cd817fe7a58e9f80b8e18a7451b74c3cf248e0db22174ffe084951ec54bb4f84bd93db154bcd3ab63832737687c32ed782ced42c4d76af7054ff1be6eb02b77cc5b360b62852714c5662fcaa5b7bb782709b2e2a3620afed9453e12fcab84d7636d7617b89af6552e3075a00245e73b9f94bc26acdfc4126eab14c983c605678c6aed5fd0886fdea70e12b40ea092928bdeae9b89625e4dd36e628a6c199e92895519cd1c26c9c39d720416f582c72acfc23a18a6e4797a496c3defcf43da84030bf2063e42c54d9a973495a9ee52a33b794758090575c559dab30f0f8da835696f24008c6865613fa08898") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:41:52 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x80080, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0xc2) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x400000, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x100000000, 0x9}, {0x1ff, 0x8, 0x200, 0x1}, {0x5, 0x0, 0xdc5, 0x1}]}) r4 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f00000002c0)={{0xfff, 0xffff}, {0x100000001, 0x1}, 0x600e, 0x1, 0x9}) sendfile(r1, r1, &(0x7f0000000080), 0x102000004) alarm(0x0) sync() ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000280)={0x5, 0xfffffffffffff001}) [ 305.021763] FAULT_INJECTION: forcing a failure. [ 305.021763] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 305.033620] CPU: 0 PID: 18996 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #103 [ 305.041012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.050368] Call Trace: [ 305.052963] dump_stack+0x185/0x1d0 [ 305.056603] should_fail+0x87b/0xab0 [ 305.060330] __alloc_pages_nodemask+0x630/0x5dc0 [ 305.065095] ? kernel_poison_pages+0x40/0x360 [ 305.069596] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 305.074960] ? kernel_poison_pages+0x1a0/0x360 [ 305.079549] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 305.085002] ? get_page_from_freelist+0xab08/0xb5e0 [ 305.090015] ? is_bpf_text_address+0xb4/0x4b0 [ 305.094520] ? kmsan_set_origin_inline+0x6b/0x120 [ 305.099358] ? __msan_poison_alloca+0x15c/0x1d0 [ 305.104032] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 305.109055] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 305.114512] ? kmsan_set_origin_inline+0x6b/0x120 2018/05/31 14:41:53 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x58040) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 305.119354] ? __msan_poison_alloca+0x15c/0x1d0 [ 305.124031] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 305.129404] ? memcg_kmem_charge+0x703/0xa30 [ 305.133820] kmsan_alloc_page+0x82/0xe0 [ 305.137801] __alloc_pages_nodemask+0xfc0/0x5dc0 [ 305.142560] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 305.148015] ? shmem_getpage_gfp+0x57d4/0x5980 [ 305.152655] ? unmap_page_range+0x3b7e/0x3be0 [ 305.157164] ? __irqentry_text_end+0x1fb63e/0x1fb63e [ 305.162283] ? kmsan_set_origin_inline+0x6b/0x120 [ 305.167144] alloc_pages_current+0x6b1/0x970 [ 305.171562] pte_alloc_one+0x56/0x100 [ 305.175365] __pte_alloc+0x86/0x410 [ 305.179014] ? shmem_fault+0x58e/0x950 [ 305.182943] alloc_set_pte+0x1236/0x1d80 [ 305.187019] handle_mm_fault+0x5e95/0x7e90 [ 305.191273] __get_user_pages+0x176a/0x24a0 [ 305.195607] ? __msan_metadata_ptr_for_load_1+0x20/0x20 [ 305.200992] __mm_populate+0x6cb/0x8b0 [ 305.204894] __se_sys_remap_file_pages+0x100f/0x1130 [ 305.210010] ? prepare_exit_to_usermode+0x149/0x3a0 [ 305.215045] __x64_sys_remap_file_pages+0x15d/0x1b0 [ 305.220068] do_syscall_64+0x152/0x230 [ 305.223969] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 305.229157] RIP: 0033:0x455a09 [ 305.232345] RSP: 002b:00007fe552d0bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 305.240054] RAX: ffffffffffffffda RBX: 00007fe552d0c6d4 RCX: 0000000000455a09 [ 305.247351] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 305.254619] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 305.261888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 305.269155] R13: 0000000000000578 R14: 00000000006fd3e0 R15: 0000000000000007 2018/05/31 14:41:53 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/05/31 14:41:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0xfffffffffffffdd7, 0x0, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @local={0xfe, 0x80, [], 0xaa}}, 0xfffffffffffffe97) r1 = epoll_create(0x4) shutdown(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000ae7ff4)={0x80000004}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 2018/05/31 14:41:53 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x800) r1 = getpid() fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x3, 0xffff, 0x1, r1}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000016c0)={0x0, @loopback, @multicast2}, &(0x7f0000001700)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001740)={'vcan0\x00', r3}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002840)={0x2, 0x0, [{0x0, 0x1000, &(0x7f0000001780)=""/4096}, {0x116000, 0x94, &(0x7f0000002780)=""/148}]}) sched_setaffinity(r1, 0x8, &(0x7f00000028c0)=0x10001) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000002900)=@sack_info={0x0, 0x1f}, &(0x7f0000002940)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000002980)={r4, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x7, 0x1}, &(0x7f0000002a40)=0x90) timer_create(0x4, &(0x7f0000002a80)={0x0, 0x33, 0x1, @tid=r1}, &(0x7f0000002ac0)) mknod(&(0x7f0000002b00)='./file0\x00', 0x0, 0xffff) r5 = syz_open_dev$dspn(&(0x7f0000002b40)='/dev/dsp#\x00', 0xffffffffffffff5a, 0x40) r6 = semget(0x2, 0x0, 0x188) semctl$IPC_RMID(r6, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002bc0)={r5, 0x1, 0x1, 0x8, &(0x7f0000002b80)=[0x0], 0x1}, 0x20) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000002c40)={&(0x7f0000002c00)=[0x8, 0xe0cf, 0x6, 0xffffffff], 0x4, 0x4, 0x7, 0x1ff, 0xfff, 0x1, {0x9, 0x9, 0x4, 0x1, 0x401, 0x40, 0x2, 0xffffffff, 0x672, 0x7, 0x7fff, 0x0, 0x9, 0x7fff, "641c082891c3560fd91e10329b46f4072da2881b6176337bf30c1b03c60cc724"}}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000002cc0)=""/112, &(0x7f0000002d40)=0x70) mkdirat(r5, &(0x7f0000002d80)='./file0\x00', 0x40) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) tkill(r1, 0x1a) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000002e00)={'bcsh0\x00', 0xffff}) clock_gettime(0x0, &(0x7f0000002e80)={0x0, 0x0}) semtimedop(r6, &(0x7f0000002e40)=[{0x1, 0xfffffffffffffffc, 0x1800}, {0x1, 0x81}, {0x3, 0x20, 0x800}, {0x7, 0x3, 0x1800}, {0x0, 0x6c1, 0x800}, {0x3, 0x7, 0x800}], 0x6, &(0x7f0000002ec0)={r7, r8+10000000}) clock_settime(0x2, &(0x7f0000002f00)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002f40)={0x0, 0x0}, &(0x7f0000002f80)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000002fc0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f00000030c0)=0xe8) getresuid(&(0x7f0000003100)=0x0, &(0x7f0000003140), &(0x7f0000003180)) setresuid(r9, r10, r11) sendmsg$netrom(r0, &(0x7f0000003540)={&(0x7f00000031c0)=@ax25={0x3, {"7f070708145b41"}, 0x8}, 0x10, &(0x7f0000003380)=[{&(0x7f0000003200)="3b945e096bf387075152cf1cdb3ca427dc714ac168a3cccd611ab0f9974ff33b5a35b42743836f52c243936e7bb603c4568eb81f0179fb00c5a1c8972d13d149d355e07b1f99de7b6948c34b9b85331c9b0cf3ccf493251f875dac87faf509af3773cab09570d24d0f5a38766a1b3f80509e00877665d26607fb442be1a7abcf55dd1a4e572572d59a73b62f5ce2c2a4e2e29f2769743afc7d0f3f0bb58bb24229caeff8603b52dd7b0f5618ec60196fa8bc146ea9e580c4", 0xb8}, {&(0x7f00000032c0)="bc", 0x1}, {&(0x7f0000003300)="75df4fd752347fd816c81f5476589d3b663483a4273654f6932707fa886f69ff6a4d863ba861b3ce1101f1946629b415", 0x30}, {&(0x7f0000003340)="456332360bd903eac60694c7021bda7fdeb61f26932b1b85d9f5dceeaff3173bb91c589d879b2f4a97e0706301b72230ac557ffa6523dfd748c06d35b3c0a417", 0x40}], 0x4, &(0x7f00000033c0)=[{0xa0, 0x101, 0xe9f4, "06782167e6866e4f165a6b62a4221efbf098d0c1752d3264c653ba3c70dd38afccbcb322e172c155d352f4d9b76610508710d1cb0b488073b9e3436ac3e18e198b2d89e91e6bc0a728608d94bd6b51b7f3eea920d9d181ae6ad336fbf53e200611c7eda6f657e196249c13d57c3a9c98317764e3d65b893dfee8738b55cff6dd25321f42bce050d0a8070d932f69ba29"}, {0x98, 0x111, 0x0, "07c6812fb32b4f2723ced052cc01e5a6a7f906291342be155786a2eb3e25ad8286335a755d46cb9a0935767690e7a16885e940916a296868786fc02948eb9117c96e43db828967b381997ec029efc7d8253a03b6fa066215df1eb07019e367e6cc06952448c723d2ddcc06e713b7085fb7a4b85ff2ac146a857f286ffbe2af02d1845a204f"}, {0x48, 0x113, 0x2, "83b79670967814041521167e1bc6ae40236f844b8c28aba26b853b38154f7a9a42b64c52bf21c7a5e4a7444d8a621a6b8549f1f8"}], 0x180, 0x800}, 0x24000005) 2018/05/31 14:41:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x8, 0x46f, 0x5, 0x0, 0x1}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r2, 0x7}, 0x8) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000040)={0x38, 0x5, 0x7, 0x1, 0xf27, 0x4}) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r4 = getpid() ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000100)=ANY=[@ANYBLOB="060000000c0000ffffffffff0900050000000000eb1b45dc0b7c96eec52a0414a36ee0"]) ptrace$setopts(0x4206, r4, 0x388b, 0x4) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000180)={0x8000, 0xfff, 0x7ff, 0x10001, 0x6, 0x5}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000140)={r5, 0x2}) sched_setparam(r4, &(0x7f00000000c0)=0xfffffffffffff800) socket$inet_sctp(0x2, 0x0, 0x84) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:54 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:54 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x404800) ppoll(&(0x7f0000013000)=[{r0}], 0x1, &(0x7f0000001000)={0x77359400}, &(0x7f000000d000), 0x8) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000080)=0x7f) 2018/05/31 14:41:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x81) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000040)) connect(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x2, @multicast2=0xe0000002}}, 0x80) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r3, 0x7, 0x30) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7ffc, 0x0, 0x20) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) 2018/05/31 14:41:54 executing program 1 (fault-call:4 fault-nth:8): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:41:54 executing program 3: r0 = socket(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x68) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000002340)=@nat={'nat\x00', 0x3c1, 0x2, 0x390, [0x20000140], 0x0, &(0x7f0000000040), &(0x7f0000000140)=ANY=[@ANYBLOB="00000000020000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000110000000000000000006263736830000000000000000000000067726574617030000000000000000000626f6e645f736c6176655f300000000062637368300000000000000000000000aaaaaaaaaa00000000000000aaaaaaaaaa0000000000000000009c000000cc000000fc000000637075000000000000000000000000000000000000000000000000000000000008000000000000fdf2b4d0006172707265706c790000000000000000000000000000000000000000000000000c000000aaaaaaaaaa00000000000000736e6174000000eeea8e6fdd4d190300000000000000000000000000000000000c0000000000000000000000000000001300000000000000000079616d30000000000000000000000000697036746e6c30000000000000000000626f6e645f736c6176655f310000000076657468315f746f5f626f6e6400000034d92186f650000000000000aaaaaaaaaaaa0000000000000000940100009401000004020000636f6d6d656e740000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e464c4f470000000000000000000000000000000000000000000000000000004c000000000000000000000000000000851000f75c8b49658ee19851a01521c045cf019eee270023d251bccb45e53b282340dcf088aa288a3bcf7a295156c16c57ff67df1b5f41488815552f5841875100000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000"]}, 0x408) 2018/05/31 14:41:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x10000, 0x7, [0x1, 0x6, 0x7, 0x4, 0x1, 0x7fff, 0x6]}, &(0x7f0000000080)=0x16) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e23, 0x7, @ipv4={[], [0xff, 0xff]}}}, 0xb91, 0x400, 0x1, 0x800, 0x8}, 0x98) shutdown(r0, 0x2) 2018/05/31 14:41:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:41:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7c33, 0x10000) 2018/05/31 14:41:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x4000) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x1, 0xfff}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e20, 0x42f8, @remote={0xfe, 0x80, [], 0xbb}}}, 0x2, 0x0, 0x2, 0x4, 0x40}, 0x98) r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x10001, 0x2200000) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000380)) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r4) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000280)=""/233, &(0x7f0000000200)=0xe9) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:54 executing program 3: unshare(0x2000400) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0x716b, 0x4) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x3, 0x1, 0x3e, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x1f, 0x7, 0xfffffffffffffff8, 0x6, 0x6, 0x7, 0xfff, 0x5, 0x0, 0x2, 0xdc, 0xffff, 0x1, 0x5, 0x6, 0x4, 0x9ec, 0x101, 0x7f, 0x2, 0xffffffffffffff7f, 0x5, 0x100000000, 0x7, 0xb9, 0x9, 0x7, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x802, 0x7f, 0xfffffffffffffffe, 0x2, 0x1f, 0x7, 0x2}, r2, 0x10, r0, 0xb) 2018/05/31 14:41:54 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xc4, "ad1ff13f5eec795aa07dbb81f5619098ac8c03b2b8ffbe3577bd8024d5fa9fba3e078172a8a1f8148a9b2c59147ece0fa26202da3eefb2b38b67d08deced049b69bd54e8f2e9d87d13f4e6ac6506627d1d07e9be14f25ea4dbf0b2fb8d93bdefd9e0d017ca23668a2df02e2b58d32d6b58ec607e9394027456118294ddf80f12ec171f7b8cd87672a35964fbf231289851b439f55f58d5499ce1a92e9091e744853129133c0177fa6d976bc8b527e48401a30367e6b4ddf4a4163a82496c5e57def96cfd"}, &(0x7f0000000100)=0xcc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={r1, 0x3f}, &(0x7f0000000180)=0x8) r2 = shmget$private(0x0, 0x3000, 0xa8, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x3fffffffffffe) ioctl(r0, 0x1, &(0x7f0000000080)="004770000000000000a600509b16e0eba73bf1045bfe53a0a32e6d8cb6d201f6ff7f37182a4e39f2731bb2a26365cfc87fa44ead10423d0d192d7bacee5b56b5d02ef12ca22414d0724fe1d5b997d94b037e26c057443effe8ed") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) gettid() r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x29c001) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000300)=[0x100000000, 0x80000000]) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x3ffd) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0xea, "42fa89f126a98791b925e93b75feb1f1d97cb4d298e546b2ee9de6ecce76160471e63cd8f861f1b05c64d54670dec36028c1e7c530e0e066480c5f4a2eebcfe2808a2f83f3e622c5d310e28f339056828d15b109aa04c53ec0eec3c1730501a24e20863387f45d94858927472eb3c3430270d6bb4a5ec841f43b801426d3a6137bb43995fee988184b966b6720fe0165a642a4e13c230c98789ee032227f5b4b243ab5a644b4a17469e0e744ddd92d86da7bf1900fb1d9b141fd8056034a7783ae226154894aa5140ded5af57706a59a5fcfd52b2ee107b2d89d4341879269c2d5e89a6945ca54e195b8"}, &(0x7f0000000000)=0xf2) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r3, 0x1, 0x6, [0x80, 0xec1, 0xbad, 0x0, 0x5672bcd, 0xfffffffffffffffb]}, 0x14) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x200400, 0x0) getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000180)=0x100000000, &(0x7f00000001c0)=0x4) 2018/05/31 14:41:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$int_out(r0, 0x2, &(0x7f00000001c0)) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xc0000) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000040)={0x3fe0000, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000080)={0x8, r3, 0x10003, 0x3}) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) move_pages(r4, 0x4, &(0x7f0000000100)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000140)=[0x9], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4) r5 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="9fc8e9ea9c23041affc22c8f083b29370235ab6b37e6b98357544319147d81c23d561427a2ec51193ff0cb76874e763e76254d526417e8cc01a3ea7ac41010e77c943c88b020fc541d7fb89d5f82916b8e374ff141e133fa0bd477b8d678da1b7a430660c18c228599a7903a38648a7ccdc13d208625ba63e2f252fc6fd9f558970482642619c51b64c6e57a647d71190185dfa63521d9861b578fb1d5d8769bae316e87f86d9b2cd268abab41db13278d94f4913b582ba2d6305894f3d266a3410a4aa203ae54cd75eabc9665aac59f15194cc9d375643bcea3e6e03421f9d474cd00c246b368bbe93d7ab4b6e1e6", 0xef, 0xfffffffffffffffc) r6 = add_key$user(&(0x7f0000001480)='user\x00', &(0x7f00000014c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001500)="003ddeba7d1fb6ab6e1597c242f041e89f147f680310aac85df74d581b383c1cefff0f5f48ffaeb92c1683905f356539499f9421174deeb61a6f29ce7034722560709c09483f03acdb092444c2af9810ade03b1be8f375a4b5f267fd16cf82ed1cad93ca0850d4f51972b00c1961d150ab3ea772a5b76e0140e2174f99e22a4cd4f96d48f194fd99a174667dbdae03f2ba61038159093990026bec33298422f99d746429020169907b15afc06c0f408b768328836b5f90101e45846d3384a50ed25298fa4a80ca123538a1cb5566520270302ed7316bff628b1f7da44d3947e5fb5bbe451102c0c1d66417da2b9fbc726629085c893c", 0xf6, 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r5, &(0x7f0000001440)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="472dd1457981432623e01d8eb7c322930ad54e94a1b3b7b3d2fd1a1bd69ab8df00480f8ca9a29632a102c801aaaa468f3272", 0x32}], 0x2, r6) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:41:55 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7, 0x8}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000080)={0x3ff, 0x1, 0x10001}) 2018/05/31 14:41:55 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$urandom(&(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x10401) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socket$inet6_dccp(0xa, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:41:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:41:55 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0xfffffffffffff109) mkdir(&(0x7f0000639000)='./file0\x00', 0x0) r3 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) pread64(r3, &(0x7f00000011c0)=""/4096, 0x1000, 0x0) 2018/05/31 14:41:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) r1 = dup2(r0, r0) ioctl$TIOCCBRK(r1, 0x5428) 2018/05/31 14:41:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xab75, &(0x7f0000000240)="0047fc2f07d82c99240970") socket$inet6(0xa, 0x1, 0x3) r1 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff9000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x101403, 0x0) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x908c0000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x4) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 2018/05/31 14:41:55 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, &(0x7f0000000100)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x5000560) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) sendmsg$can_raw(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x1d, r2}, 0x10, &(0x7f0000000340)={&(0x7f0000000300)=@can={{0x1, 0x6, 0x80, 0x1000}, 0x1, 0x1, 0x0, 0x0, "970ce11d3743acf8"}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x4) 2018/05/31 14:41:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x8) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x3, 0x0) 2018/05/31 14:41:55 executing program 6: r0 = socket(0xa, 0x1, 0xab) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/31 14:41:55 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) [ 307.688394] devpts: called with bogus options 2018/05/31 14:41:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = dup(r0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x100000004000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x103) 2018/05/31 14:41:55 executing program 3: r0 = socket$inet(0x2, 0xffffffffffffffff, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000280)=0x7, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2, @broadcast=0xffffffff}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x2) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0}) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x4040) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r2, 0x80000, r3}) 2018/05/31 14:41:55 executing program 7: r0 = timerfd_create(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:55 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), 0xb) 2018/05/31 14:41:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="51fdd7585b9589e18ab58864cf305125", 0x10) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) 2018/05/31 14:41:56 executing program 6: r0 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x7, 0x84001) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000001280)={0x80}, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000340)={0x3, 0x70, 0x4, 0x401, 0xffffffff, 0x2, 0x0, 0x1, 0x20400, 0x7, 0xae, 0x5, 0x35e8, 0x9, 0x7e65f53000, 0x224, 0x9, 0x4, 0x1ff, 0x8, 0x9, 0x3a00000000000000, 0x2f, 0x10001, 0x10000, 0x1, 0x5, 0x3, 0x0, 0x3, 0x800, 0x3, 0xffffffffffffffe1, 0x4, 0x20, 0x100000000, 0x61476a3b, 0x81, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x2}, 0x2800, 0x101, 0x4, 0x7, 0x9c, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x6) r3 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000180)=""/120) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)=0x0) capset(&(0x7f0000000140)={0x20080522, r4}, &(0x7f0000000280)={0x6, 0x3, 0x77d88cac, 0x2, 0x2ff50085, 0x4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000080)={0x8, 0x2}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f00000002c0)={0xfffffffffffffffe, 0x3, 0x787, 0x3}, 0x10) r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[{0x8, 0xfffffffffffffffa}, {0xb, 0x2}, {0x3, 0xff}], 0x3) 2018/05/31 14:41:56 executing program 3: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='xfs\x00', 0x0, 0x0) flock(r0, 0x4) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x180, 0x4) 2018/05/31 14:41:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f0000000040)={@remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x17}}, 0xc) 2018/05/31 14:41:56 executing program 7: r0 = accept4$llc(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x80000) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'nr0\x00', {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x440000, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000100)={0x4, 0x8, 0x3ff, 0x400, "a3a2654b544f960e5f63c4acae7fb10071331426077085d37cacba4072872d81"}) r2 = socket$inet6(0xa, 0x800000000000004, 0x400) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r3 = shmget$private(0x0, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:56 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), 0xb) 2018/05/31 14:41:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:41:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x20000000001, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x3, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000000c0)={{0x1, 0x4, 0x4, 0xffff, "e98aba874ee2fa91c39d55febc016244e4e954905c585bb1c56fa9cf5694d291edbc5f38baf0c4ed9eee1ca6", 0x7ff}, 0x0, 0x0, 0x100, r2, 0x82b3, 0xbb, "e94bf9a738b21c685ca315639da1553731c58c226e4232fecee0fbdfd1d50a4538d1595d75bef1e4cd7d0bb150bba83d76ea7b0b18e15a1ec223b19415ef5796", &(0x7f0000000040)='\'\x00', 0x2, [], [0x100000001, 0xffffffff, 0xffff, 0x7]}) 2018/05/31 14:41:56 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x400) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) r2 = dup3(r0, r0, 0x80000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f00000000c0)={0x4, &(0x7f0000000280)=[{}, {}, {}, {}]}) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="736563757228bcf48f69740001000000"], &(0x7f0000000080)='GPL#\x00', 0x5, 0x1) 2018/05/31 14:41:56 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@random="9f9b318f7080", @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x153000, 0x20) 2018/05/31 14:41:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = accept4(r0, &(0x7f0000000000)=@pptp={0x0, 0x0, {0x0, @multicast1}}, &(0x7f0000000080)=0x80, 0x80800) rt_sigtimedwait(&(0x7f00000000c0)={0xffffffffffffff74}, &(0x7f0000000140), &(0x7f0000000180)={0x77359400}, 0x8) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000380)={0x303, 0x33}, 0xffffffffffffff1c) r2 = shmget(0x2, 0x1000, 0x8, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x3000, 0x1001, &(0x7f0000ffd000/0x3000)=nil) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 2018/05/31 14:41:56 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), 0xb) 2018/05/31 14:41:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt(r0, 0x5, 0x5, &(0x7f0000000000)="af27d1d6b3416d673cd1db91efa7d97abacb9ba378743144eff5041a10b516984ceebaf4ec85e87e297e890e233e3e455503551465bda3bad6919666ce05f78399d88ace9364dc64a19a98baadb305321ad87c6b2c99280215136f1428f1864ccbc7f71044a619aee48c1a9135ff82ec2161810e06706b615a884e38e94abcb641d0d87e10f01156c15fa534a9e8add5bcea698d413d0b7f8adc0aa89a995cbe11", 0xa1) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000340)=""/128, &(0x7f0000000280)=0xffffffffffffff5a) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x80800) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:41:56 executing program 6: r0 = socket$unix(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x1}, 0x289) connect$unix(r0, &(0x7f000000cff8)=@abs={0x1, 0x0, 0x1}, 0x8) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/232, &(0x7f0000000100)=0xe8) 2018/05/31 14:41:57 executing program 3: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000001380)='fd\x00') exit(0x0) utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{}, {0x77359400}}, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0x3) 2018/05/31 14:41:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) sendmsg$rds(r2, &(0x7f0000000940)={&(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)=""/174, 0xae}, {&(0x7f0000000140)=""/155, 0x9b}, {&(0x7f0000000280)=""/211, 0xd3}], 0x3, &(0x7f0000000700)=[@cswp={0x58, 0x114, 0x7, {{0x211d, 0x1f}, &(0x7f0000000380)=0x3f, &(0x7f00000003c0)=0x9, 0x2, 0x3, 0x0, 0x0, 0x2, 0x40}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000400)=""/50, 0x32}, &(0x7f0000000440)}}, @fadd={0x58, 0x114, 0x6, {{0x3, 0xdc}, &(0x7f0000000480)=0x100000001, &(0x7f00000004c0)=0x4, 0x3, 0xb9, 0x64, 0x0, 0x0, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000500)=""/7, 0x7}, &(0x7f0000000540), 0x20}}, @mask_cswp={0x58, 0x114, 0x9, {{0xffffffff, 0x4}, &(0x7f0000000580)=0x1, &(0x7f00000005c0)=0x5ab5, 0x9, 0x0, 0x200, 0x9, 0x0, 0x1f}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @cswp={0x58, 0x114, 0x7, {{0x0, 0x5}, &(0x7f0000000600)=0x7, &(0x7f0000000640)=0x8b11, 0x2, 0xfff, 0x5, 0x400, 0x30, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x4}, &(0x7f0000000680)=0x5ba5, &(0x7f00000006c0)=0x4, 0x8, 0x1ff, 0x5ea7, 0x9, 0x4, 0xf6d}}], 0x230, 0x4000}, 0x44000) 2018/05/31 14:41:57 executing program 7: r0 = socket$inet6(0xa, 0x7, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) socketpair(0x0, 0x6, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x1d) fchdir(r3) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001480), &(0x7f00000014c0)=0x10) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/127, 0x7f}, {&(0x7f00000000c0)=""/186, 0xba}, {&(0x7f0000000180)=""/129, 0x81}, {&(0x7f0000000280)=""/192, 0xc0}, {&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x6) 2018/05/31 14:41:57 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x200000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x9ba5) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff2000/0x3000)=nil) shmat(r2, &(0x7f0000ff2000/0xe000)=nil, 0x2000000000006ffe) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x80000) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) 2018/05/31 14:41:57 executing program 5 (fault-call:7 fault-nth:0): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:57 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x40000) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000240)={0x53, 0x4, 0xffffffffffffff1b, {0x1, 0x7f03}, {0x7, 0x3}, @ramp={0x4f, 0x0, {0x0, 0x0, 0x5, 0x7fffffff}}}) write$sndseq(r0, &(0x7f0000000380)=[{0xffff, 0x52d0e88f, 0xfffffffffffffffe, 0x1, @time, {0x2b4, 0x40}, {0x7fff, 0x8}, @connect={{0x9, 0x9}, {0xcc45475, 0xfffffffffffffffb}}}, {0x101, 0x4, 0x8, 0x8001, @tick=0x5, {0x400, 0x6}, {0x7fffffff, 0x1}, @control={0x4, 0x4, 0x2285}}, {0x101, 0x2, 0x98, 0x6, @time={r1, r2+30000000}, {0x1}, {0x1ff, 0xfffffffffffffff9}, @quote={{0xd, 0x9}, 0x8, &(0x7f00000000c0)={0x6, 0x8, 0x1000, 0x1000, @tick, {0x7, 0xde9}, {0x7ff, 0x2}, @control={0x80, 0xffffffff, 0x8001}}}}, {0x1000, 0x0, 0xfffffffffffffffa, 0xffffffffffff0000, @time, {0x21, 0xb1d}, {0x0, 0x3}, @control={0x511d77e6, 0x3, 0x9}}, {0x9, 0x10000, 0xe8, 0x7fff, @tick=0x5, {0x5, 0xfffffffffffffffc}, {0x7, 0x3f}, @connect={{0x4, 0x4}, {0x100000001, 0x1}}}, {0x6, 0x3, 0x0, 0x1, @tick=0x3, {0x7e, 0x5}, {0x1, 0x7}, @raw8={"f96447c063679c75e0aa52ce"}}, {0x12, 0x6, 0x4, 0x0, @time={0x77359400}, {0x3f, 0x401}, {0x7, 0x5}, @note={0x2, 0x9, 0x8, 0xffffffffffffffc1, 0xd6}}], 0x150) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000100)=""/210) renameat(r0, &(0x7f0000000280)='./file0\x00', r0, &(0x7f00000002c0)='./file0\x00') close(r3) 2018/05/31 14:41:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) socket$kcm(0x29, 0x1000000000002, 0x0) shutdown(r0, 0x0) 2018/05/31 14:41:57 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000200)="b8622b9293f4457d9490b7e6e1d95ff7e62bdb818f132ea29258fc5dd8dbdab227b78769ac804e18a8c2d9a0e2a1701b9fb1efc28c0b016303e849c7d1a6abe99d3da40fd42ba4f4befaa63f6d2b71f423ea4c5cf889d4808766d96cbea37927c7873a51481c39ca66665ebb1730466171d8f5571b92f7f70633b744fd2ea04090d2d387558dfa398521dd143fa8d0b2cd4ab88656bc5301f29ff70300e508b802ae5a61160b787c7f98e2", 0xab, 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r1, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) accept$inet6(r0, &(0x7f0000000040), &(0x7f0000000080)=0x1c) shutdown(r1, 0x2) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000000c0)={0x30, 0x0, 0xff, 0x7, 0x8001, 0x6}) 2018/05/31 14:41:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x8001, @mcast1={0xff, 0x1, [], 0x1}, 0x9}}, 0x8, 0x10000, 0x7fffffff, 0x9, 0x1}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r2, 0x6, 0x7, 0x3}, &(0x7f0000000140)=0x10) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:57 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000140)=""/171) r1 = socket$inet6(0xa, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x1ff, @ipv4={[], [0xff, 0xff]}, 0x9}}, 0x8, 0x31, 0x8, 0x80, 0x4}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r2, 0x0, 0xfffffffffffffff8, 0x4, 0x40, 0xf0b7}, 0x14) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x101000, 0x40) openat(r4, &(0x7f0000000280)='./file0\x00', 0x2, 0x90) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x2000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:41:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x2) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=0x0, &(0x7f00000002c0)=0x4) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000300)={r2, 0x8}, 0x8) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x84800, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000080)={0x80, {{0xa, 0x4e22, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff}}}, 0x88) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000040)={0x7fffffff, 0x3}) ioctl(r0, 0x4000008912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x10000, 0x400000) r4 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) shmctl$IPC_RMID(r4, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 309.643254] FAULT_INJECTION: forcing a failure. [ 309.643254] name failslab, interval 1, probability 0, space 0, times 0 [ 309.654764] CPU: 0 PID: 19253 Comm: syz-executor5 Not tainted 4.17.0-rc5+ #103 [ 309.662159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.671541] Call Trace: [ 309.674171] dump_stack+0x185/0x1d0 [ 309.677834] should_fail+0x87b/0xab0 [ 309.681611] __should_failslab+0x278/0x2a0 [ 309.685906] should_failslab+0x29/0x70 [ 309.689836] kmem_cache_alloc_node+0x15e/0xc90 [ 309.694480] ? __alloc_skb+0x202/0x9e0 [ 309.698407] ? switch_fpu_finish+0x6e/0x4d0 [ 309.702800] __alloc_skb+0x202/0x9e0 [ 309.706590] sctp_ulpevent_make_sender_dry_event+0x85/0x9c0 [ 309.712380] ? kmsan_set_origin+0x9e/0x160 [ 309.716693] ? sctp_outq_is_empty+0xd8/0x130 [ 309.721162] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 309.726581] ? sctp_outq_is_empty+0xec/0x130 [ 309.731041] sctp_setsockopt+0x942b/0x114c0 [ 309.735423] ? kmsan_set_origin_inline+0x6b/0x120 [ 309.740325] ? __msan_poison_alloca+0x15c/0x1d0 [ 309.745055] ? __fdget+0x4e/0x60 [ 309.748489] ? __fget_light+0x57/0x700 [ 309.752442] ? sctp_shutdown+0x270/0x270 [ 309.756547] sock_common_setsockopt+0x136/0x170 [ 309.761289] ? sock_common_recvmsg+0x270/0x270 [ 309.765928] __sys_setsockopt+0x4af/0x560 [ 309.770151] __x64_sys_setsockopt+0x15c/0x1c0 [ 309.774694] do_syscall_64+0x152/0x230 [ 309.778635] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 309.783854] RIP: 0033:0x455a09 2018/05/31 14:41:57 executing program 4: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000180)=0x108, 0x9, 0x1) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x100, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000000c0)) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x5972cf860ef5c19d, 0x0) ioctl$sock_ipx_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000040)={'lo\x00', {0x4, 0x6abd, 0x100, "8882c86fb9bd", 0x7}}) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) r4 = msgget(0x2, 0x10) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000000100)=""/126) [ 309.787064] RSP: 002b:00007f6fee2b8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 309.794809] RAX: ffffffffffffffda RBX: 00007f6fee2b96d4 RCX: 0000000000455a09 [ 309.802192] RDX: 000000000000000b RSI: 0000000000000084 RDI: 0000000000000014 [ 309.809487] RBP: 000000000072bea0 R08: 000000000000000b R09: 0000000000000000 [ 309.816781] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000016 [ 309.824076] R13: 0000000000000669 R14: 00000000006fea78 R15: 0000000000000000 2018/05/31 14:41:57 executing program 5 (fault-call:7 fault-nth:1): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x204480, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0xe41d, 0x9651, 0x0, 0x6, 0x4abb, 0x0, 0x43, 0x3ff, 0x8, 0x401, 0x1, 0x3}) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4, 0x4000) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) [ 310.073493] FAULT_INJECTION: forcing a failure. [ 310.073493] name failslab, interval 1, probability 0, space 0, times 0 [ 310.084907] CPU: 0 PID: 19303 Comm: syz-executor5 Not tainted 4.17.0-rc5+ #103 [ 310.092303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.101688] Call Trace: [ 310.104326] dump_stack+0x185/0x1d0 [ 310.108091] should_fail+0x87b/0xab0 [ 310.111853] __should_failslab+0x278/0x2a0 [ 310.116145] should_failslab+0x29/0x70 [ 310.120088] __kmalloc_node_track_caller+0x24b/0x11b0 [ 310.125316] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 310.130714] ? sctp_ulpevent_make_sender_dry_event+0x85/0x9c0 [ 310.136666] __alloc_skb+0x2cb/0x9e0 [ 310.140421] ? sctp_ulpevent_make_sender_dry_event+0x85/0x9c0 [ 310.146382] sctp_ulpevent_make_sender_dry_event+0x85/0x9c0 [ 310.152160] ? kmsan_set_origin+0x9e/0x160 [ 310.156471] ? sctp_outq_is_empty+0xd8/0x130 [ 310.160940] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 310.166370] ? sctp_outq_is_empty+0xec/0x130 [ 310.170841] sctp_setsockopt+0x942b/0x114c0 [ 310.175226] ? kmsan_set_origin_inline+0x6b/0x120 [ 310.180125] ? __msan_poison_alloca+0x15c/0x1d0 [ 310.184835] ? __fdget+0x4e/0x60 [ 310.188245] ? __fget_light+0x57/0x700 [ 310.192181] ? sctp_shutdown+0x270/0x270 [ 310.196282] sock_common_setsockopt+0x136/0x170 [ 310.200991] ? sock_common_recvmsg+0x270/0x270 [ 310.205696] __sys_setsockopt+0x4af/0x560 [ 310.209889] __x64_sys_setsockopt+0x15c/0x1c0 [ 310.214415] do_syscall_64+0x152/0x230 [ 310.218336] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 310.223538] RIP: 0033:0x455a09 [ 310.226736] RSP: 002b:00007f6fee2b8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 310.234471] RAX: ffffffffffffffda RBX: 00007f6fee2b96d4 RCX: 0000000000455a09 [ 310.241754] RDX: 000000000000000b RSI: 0000000000000084 RDI: 0000000000000014 [ 310.249042] RBP: 000000000072bea0 R08: 000000000000000b R09: 0000000000000000 [ 310.256320] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000016 [ 310.263595] R13: 0000000000000669 R14: 00000000006fea78 R15: 0000000000000001 2018/05/31 14:41:58 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x40000000089f0, &(0x7f0000000000)={'ip6gre0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) mq_notify(r3, &(0x7f0000000200)={0x0, 0x19, 0x0, @thr={&(0x7f0000000280)="9ad1acc3d69c6070d50c141de6c71fc2f384c523555af91438353811c8dab594c1baa1b46ceaa121dffd40f4fad54e3731f974d8a53ac0aada735a2d5e14afc08883985811271da26fd920b25ac534769568f383ecba8d851cd4c6970381574aa59c8f12f7b927b0f87c9d7067de98a7d22f522fa5a1727359cfeb3056265841491166b84b8b8c41ba13d3", &(0x7f00000001c0)="0a205f192eb7da7be721d79d7e"}}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x5) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x9719000000000000, 0x120000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e21, 0xffffffff7fffffff, @remote={0xfe, 0x80, [], 0xbb}, 0x6}, {0xa, 0x4e21, 0x8, @empty, 0x5}, 0x2, [0x8, 0x7, 0x7fffffff, 0x4, 0xe376, 0x7, 0x6, 0x3]}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r1}) setsockopt$inet_tcp_int(r4, 0x6, 0x15, &(0x7f0000000100)=0x3, 0x4) 2018/05/31 14:41:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000040)={0x6, 0x1, 0x101, 0x2, "571e4e5872eb53fa33dd628fa20a57b2dce8799c5b29ff14b2a3d87351ffddf8b50b73005c8302014233f82d", 0xffff}) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) 2018/05/31 14:41:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x2, [], 0x1}, 0x6, 0x3, 0x3, 0x8, 0x0, 0x71cf}, 0x20) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:41:58 executing program 5 (fault-call:7 fault-nth:2): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x12000, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x8) 2018/05/31 14:41:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) socket$kcm(0x29, 0x1000000000002, 0x0) shutdown(r0, 0x0) 2018/05/31 14:41:58 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") fsetxattr(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="757365722e2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa0742ff3560ba2bfad33ba846504adee901d2da75af1f02acc7ed"], &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a", 0x16d, 0x0) 2018/05/31 14:41:58 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000006b40)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000006b00)={&(0x7f0000006a40)=@ipv6_deladdr={0x34, 0x15, 0x5, 0x0, 0x0, {0xa}, [@IFA_FLAGS={0x8, 0x8}, @IFA_ADDRESS={0x14, 0x1, @remote={0xfe, 0x80, [], 0xbb}}]}, 0x34}, 0x1}, 0x0) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000000040)="e316595963d2821d5f0817fc5cb9f4f77fc8733fa9e002b0fa57d41bdd3858a1669bfe73db7c7b59ccc2d5d6244e76ad709cd8a7e45877fab4df9d26289443fa97e599bfac8915b870071a1263e7b2f97e2448bd2f7f4c64") 2018/05/31 14:41:58 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") fsetxattr(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="757365722e2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa0742ff3560ba2bfad33ba846504adee901d2da75af1f02acc7ed"], &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a", 0x16d, 0x0) 2018/05/31 14:41:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x12000, 0x0, &(0x7f0000fee000/0x12000)=nil) gettid() r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000280)='net/rt_cache\x00') ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000040)=""/135) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:41:58 executing program 6: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffff9c, 0x0, 0x1, 0x5, &(0x7f0000000040)=[0x0], 0x1}, 0x20) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r1}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) msgget$private(0x0, 0x3f) 2018/05/31 14:41:58 executing program 4: r0 = socket$inet6(0xa, 0xa, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:58 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6, 0x80000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0)={0x8001}, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'ifb0\x00', {0x2, 0x4e22, @loopback=0x7f000001}}) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/124) exit_group(0x7ff) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:41:58 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"78616d30000117947f00000000ffea00", 0x3}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [], [], [], 0xf202, 0x0, 0x0, 0x0, "b50864bf19e028f2b24943e37c47d24b"}) 2018/05/31 14:41:58 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYRES16], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0x1, &(0x7f0000009f3d)=""/195}, 0xffffffffffffffb9) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f00000001c0)={@local, 0x0}, &(0x7f0000000200)=0x14) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0xc) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffc7b}, [@call={0x85, 0x0, 0x0, 0x23}, @ldst={0x0, 0x0, 0x1, 0x9, 0xf, 0x4, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xce}, @call={0x85, 0x0, 0x0, 0x39}, @exit={0x95}], {0x95}}, &(0x7f00000003c0)='GPL\x00', 0x5, 0xf9, &(0x7f0000000400)=""/249, 0x41100, 0x1}, 0x48) r2 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000580)={{{@in6, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4e24, 0x0, 0x4e23, 0x6, 0xa, 0x80, 0x20, 0x1d, r0, r2}, {0x8df9, 0x3, 0x5, 0x1ff, 0x5, 0x1ff, 0x8, 0xbe8}, {0x3, 0x4, 0x81, 0x2}, 0x6, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in, 0x4d3, 0xff}, 0xa, @in6=@loopback={0x0, 0x1}, 0x3505, 0x1, 0x3, 0x8, 0x5, 0x66, 0x5}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0xe, &(0x7f0000000000)=@raw=[@exit={0x95}, @call={0x85, 0x0, 0x0, 0x7}, @exit={0x95}, @exit={0x95}, @exit={0x95}, @generic={0xfffffffffffffffd, 0x5f86, 0x4, 0x6}, @call={0x85, 0x0, 0x0, 0x16}], &(0x7f0000000080)='syzkaller\x00', 0x3, 0xf6, &(0x7f00000006c0)=""/246, 0x41000, 0x1, [], r0, 0x9}, 0x48) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b400001147ffff002500000000000000070000000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000680)={0x6, 0x918}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast2, @rand_addr}, &(0x7f0000000140)=0xc) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000180)={0x3, 0x8000}) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x601, 0x0) 2018/05/31 14:41:59 executing program 7: r0 = socket$inet6(0xa, 0xffffffffffff, 0xad) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000000)) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) fcntl$setflags(r0, 0x2, 0x1) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:59 executing program 1: r0 = socket$inet6(0xa, 0xfffffffffffa, 0x5) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ftruncate(r0, 0x6) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:41:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000dbfffc)=0x3, 0x4) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r0, &(0x7f0000000000)="782975b37c34f48c2af055a36ecc82390cb85e0e6275efd773f0dd9e830871a1954371393be21ea4af5400b913f1c3d0e0e22b76f1a2aa4a31c10db0bfa65bb07bad2c568b3d6d9e", 0x48) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000c9effc), 0x4) sendto$inet6(r0, &(0x7f0000ab4f8e)="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", 0x540, 0x0, &(0x7f0000aaa000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000140)={0x9, 0x5}) r2 = dup(r0) write$sndseq(r2, &(0x7f0000801f40)=[{}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0xc0) write$evdev(r2, &(0x7f00001d1000)=[{{0x0, 0x2710}}], 0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000f06000)={0x9}, 0x10) write$eventfd(r2, &(0x7f000057bff8), 0x8) readv(r2, &(0x7f0000864f80)=[{&(0x7f0000142000)=""/4096, 0x1000}], 0x1) write$eventfd(r2, &(0x7f000061f000), 0x8) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)={r2}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00007e4ff0), 0x10) write$eventfd(r2, &(0x7f00006d5000), 0x8) 2018/05/31 14:41:59 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x200000, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x3}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0xcea) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:59 executing program 6: r0 = socket$inet6(0xa, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000bbeff4)) shutdown(r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 2018/05/31 14:41:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) socket$kcm(0x29, 0x1000000000002, 0x0) shutdown(r0, 0x0) 2018/05/31 14:41:59 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x10001, 0x2000) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r1, 0x6) 2018/05/31 14:41:59 executing program 4: r0 = socket$inet6(0xa, 0xa, 0x100000000) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='ipddp0\x00') remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) ioctl(r0, 0x5, &(0x7f0000000040)="d8f3a7bf3aab1863d4fe6b771ec377fbac36b9b91f9c2bace9e41c0e532ae807a81a785cb456326f825a1fab416d89f182c7db06e292fd69e5a58842e7948cb198d3e697400164247f2492da171716fa4341a21273145e4fb68e31c636e94932808084845a2ca44d6f85a3e0b3a0ff32098c455c6b53388b01ee043f7d8ce528") 2018/05/31 14:41:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x1) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:41:59 executing program 6: r0 = request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000000c0)='$}[ppp0vboxnet0\'\x00', 0xffffffffffffffff) keyctl$describe(0x6, r0, &(0x7f0000000100)=""/80, 0x50) rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r1 = memfd_create(&(0x7f0000000040)=',mime_typebdev(\x00', 0x20000000004) ftruncate(r1, 0x4) 2018/05/31 14:41:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) time(&(0x7f0000000000)) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:41:59 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x9, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) fallocate(r2, 0x0, 0x100000000, 0x101) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000180)={@dev, 0x0}, &(0x7f00000001c0)=0x14) recvfrom$packet(r3, &(0x7f0000000140)=""/37, 0x25, 0x10001, &(0x7f0000000200)={0x11, 0x17, r4, 0x1, 0x3ff, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:41:59 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1001, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x80003, 0xff) getsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/05/31 14:41:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x40000000000010) writev(r0, &(0x7f0000000080)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000000e80001040000040d000300ea1100000005000000", 0x29}], 0x1) r1 = shmget(0x1, 0x3000, 0x20, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) 2018/05/31 14:41:59 executing program 4: r0 = socket$inet6(0xa, 0x80006, 0x79b5) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80400, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x1d8) 2018/05/31 14:42:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x9}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="76dd0aaa548b470648078990250880347651d40f4963009f764585", 0x1b}, {&(0x7f00000000c0)="3f59c7d1ded13e287b2e507ea7aaa3973be6e9aea964022e7c497bd7454a05d1609b49d03500442b844d30324199232aff19d830aca941bb", 0x38}, {&(0x7f0000000100)="5e541eab00b8aa454e467322cdcc68d29fecd2fb15509e4e837370ee05cf03605c99790e8f3e261c2229abf0feb91d6a3c39f5da097d54088cd7a5a6caa97e400cb95dd93fff19eba4370e0916f2fd1e5facd89969d31fb478b60244653ec993ce47d86dd696f6042a71cff3c614e4a0d17ff2496c90a09fc2113dc1cbc7e7279210c5dbc2eb73f5300ec9bda5000e61d746709c6334", 0x96}], 0x3, &(0x7f0000000280)=[{0x100, 0x1, 0x33b, "bc931bde214242997dcb5913f8c44dbafaf9956e11f0668b02e5672d4b6c9cfdb1041f759cd1ccf70cdee3858b493fd4df2798f882f9292c04d9165bc66d0ef574de610433498eed0a09de3b63bff3a2d3e66acebc4616f5fe7db424c399b1ea548facdfd967ceffc6a76321db1e85e60b111e3b9f105038eb552e828652830bc69c3aea46d67065024588542615cdc4ec21aa2b1dfeabc1772de6cbf54d19364c17ffdcc070890110fef0d127ea90f37a5cb46ad5fef472c4cd4a1c6cb71ec4ed6307fc1707580c9b171bb10d6aa2016deb489adc9dc3ced0becaef14d2dc764b6ed3d497f05501825983bc5b"}], 0x100, 0x4}, 0x4044) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x9, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) keyctl$session_to_parent(0x12) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:00 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4000, 0x0) bind$llc(r1, &(0x7f0000000080)={0x1a, 0x323, 0x7, 0xa0bc, 0x8, 0x3ff, @random="ed33882b0efe"}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000880)=0xe8) sendmmsg(r0, &(0x7f0000001f00)=[{{&(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm4-generic)\x00'}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="04165213749e4dad4ce8cb1f45ed47e29019233119fc1a56ad8e1bd0ddb94ae33f8be184015d", 0x26}, {&(0x7f0000000180)="ff3b7254cb8f851df5822492ba20839f4b9d17e8bbf98acdb4c5cb3ee4470431231ab8daa21fb1d7a1d93e8926bdf04eb3a2cde3eaebb8f99f95c26a72a35b4fd954be54326438d6bcc955118710a103f975c09d535f7caa100d98e8ff35603853f486f42cc95c002271e3ac704113108c4e12", 0x73}], 0x2, &(0x7f0000000340)=[{0x60, 0x117, 0xd71, "bae7e2a99b335d71c19439943aef4805bfa5b5ee03a53467c0126f7e228e31098759a65b289100cfa709850f1127d306056ec2a505ed22505469186b42e38dc4cb413c63bcc52d40d7181892ef3b"}, {0xf8, 0x11f, 0x0, "275d2fbfbf9a43c032162499a48268c60378e754e3e104f49fac72c9dc2c83b369478b2ae7bce67039fbfc12b81025630698c5266bb7b52eaea873908bb95e01ff9bb577ae1572f44a8a495c242d775f5d426afaf3562b8496160204e8781576f5fcf7aeb128fb782be1e0c185e4b48d4247589a24bf066d92ecd2a0ae227deaf9c5b877cc96a49f1021c28ab12d57bfc3f4f2ac573a694490b5985ef0142a08bb147c93fd65256bde2aa15937af2eaa16b9a13b70109971907c72cd4648113bdc860e2d0867e6fd8a31b30ddf377401ccd9117470fccb67577a39856b21bb5ec5b52f"}, {0x30, 0x11f, 0x1f, "a45da668c1e4350cd2b53c3f9d1b060616e1a71b6df98e88fcf96d48"}, {0x28, 0x0, 0x8, "78475dcadbf8001c19e062685ddaac4ad602fa086019"}], 0x1b0, 0x48001}, 0x1}, {{&(0x7f00000008c0)=@can={0x1d, r4}, 0x80, &(0x7f0000000940), 0x0, &(0x7f0000000980)=[{0x1010, 0x115, 0x1, "dbed3d097f7989b953c0c0560958d1cd7690a6e49828b27071ec4c3a66a6f24f852b9261e3845725f3adcbe63162e2a6ca4e3078f26a4da6e61293e20ef3a7cd753292288fdd8185f1338b6d82dd7af278f73a65aaf9a01e75c6bc09af8e3b03b93e1600cffdbf91eb61d3be682e96351297e2e077d7988d4a12b933411c652cf3c7cee01b08567bf3cbb9acd26b5f4489115c17937d944a76d3d80b4e0bd5875d09719ec3f0bd0bdcc7333a4bf7d4058b943e0a482d71e57e102e40b4696ecb9c5250c4244b5dca320e9904d6d5ff48999d0b14f14cdb0a02c28a1e5a3dcc1a397f28c52eeaf2f0739755f54f246afe5176bf859a9c8d827b7811d4fc0f8b9f6d2e8f0219080f5c0e84362afd2edfd92e98d3ad437b769b7164e6235da11ef8382d45d592419b43fc2b4a4e39015c69fe9b9d86ac6dcdb44a20252b4474ccdd9a2079b40f096c528e5e270ad70beb557f9e2d0a5471be430ad5e718b0ca36151637fea8f896cb40cd9743a7027446b2cf4fe2b510f1bf4a4219b893815d20428d4c0026702d6ff77d5e3cc2ef5699f82959ec3abf45aab0b2a2fa63c28c0c9bb599aacea710ef6191bfe513e7d51a0390c4f06f29f4a3cbeb143b3506240948758860a561c267f7509fcc8d066999cfd1a8bfe4ffe6b99ebbf5ffb6a8337c670a7dd317e7a7881aa81dc990353ce4e788330db0c228573a021eb14342fa09a315cabe1d4f76958e9f9559743c59e938e94431890b7a22b2b32fce475e038b19287d5cdfb13564a5355583090ffcff94f39fb65357324a95b80e531189789338e5c30323ef9545c45d5819bccf8fff1a68a79ad652a23bc50405f20e5e8652c742bca8ad84dd2b1103ca2cf1718197aca5bd1c97d0ab073d2c1ad1a94df4c3ccde61b1c53a6817b2f80e00eaf56303ea90bdc5f290bed3550911414bb596230f2bbc817c1840ca9ce33e107c413d7e8593efff54c7482e65274dc895a122d8d441a6c5c06ce8858f2cbed2a4639d5a1bdf5768d77dfa4fb1090ad30daa6b968c96a088daed5661ad6a74a1d22107780579669566957cf2feee8028179c0bc442f1fad1d0a07f3334023559fd3b17ff953853d5064bc15c139fcdd60eddaa25858b390855d5684454c04d34a41d5d4c24b633924e2b8c406668bf74dd46dc1739131b64e53e4922bd2c0d04a235f477e4aea5499ec07d17c13c6e2c16cb5b2e6c48f7aab4df61ff494a3a2fef3c3e5f805f166aeb29fa789d75e9ee8a928f7ad0d9ea92aed86cee036877690aaaa95ec1677be85d33081c62d31d39445fc2409d0b0a72d4fcfd1161b4311b1856a0eba3ad58c6d5edd683d571cb57c046775294bd9197f7eb9388fcfc6bf4cb09e7d5a724245bd5b12b33c8a9e551530184dfe767e07ed904ecf1cd1046ccc2634363c0e683da471f9706145064d8645e2ea32d9f23353c7684dd83bdd4930fedb70e5407e269fac5444a1e483d6a6022445f751d99f937c9b2b9adb36b5bdd77777af62d4a1e083c8e06004ac003dcd899c556a28a4a79f6b4a7e8843150aa1a2bc3a06c21cb260d968424dcde51479c3f988cae6cc29815550bb65696e2696fb59418b17981b52e0114b27918828df3c75888fdbcf61c208da0aef2f8f3fd8792246d6f903eeae02201a612bb88f2833de143856b9fd7f378cc7abaedda09d35edca945a5e0c47637c21666a63f7a9ea8672e6056064bb218e787a09ebcc842de23f851d92868a2f2d0b516ce1541c0cdb4b309d5ea963ec8de2bd6a9cf47b7056f70a52cd30e98d742fbdf5191815887538e7c67fff288ea33e95360e019a2dcb3361c9e78fc85a5ea05d086693432c58b50facca2d5e34ad377dd1ae1cefd7c603fcc867076311963c2b7867806480e041196b6240b5e9e3b7074ec9324e4509f3ebd37f0dff6e8b39669ad49edb5de6eb59a3ef16ca641ca865a35db8c5e9cd4d1e083720d5a7169aa842da4c014953b1f52b9cf561d7356d4ffaebc9feb3fec0ebb900b22a960f4086e67d63ad99ecb3788d4757c3303e02eb3165dbee7fa2290e8ce0960550a3908e8e603a66402cb25a0f059c02675810c5196967cb8fe28c745cb412f452bb55c718e284f58bdaffce3e48701d491f6382c7fd8c0eb1e8f1b2ff1331e9e5b2ab14910ed2f0af8a27a7b1801cf0ca939f62cfa69e822442a01e7433dedc80cbfa5b4aa212790f57170c7b49664900ea1e671c552731c076daf7556a2530117127c5c2f6ee352dc64c71f4a5f756323e774098349dc4aacceea9471fd43a364b28cd44c51f152877d3e62f2746764d36c716afdbc36a4c43275970339b7b0f16013c4c595fdd0be11f26adaba3cc0131e1d16e00b1c378e8b686971c20be52473a195038a9539b0968f98060901d65049783abe11f0669d3e385854fb8313b827bd0c045efafd7f87d0fcaa671fb560c1909fca50725bf81b7c9f22a588c23a28fb25d3248943108726833be762bde5d9a855648bb0e17c2a1f8d21cf6823d53708f3b5725cfecd611487cfc926976ad5e59e2319c18de6a1e8205bdc7807cfbfa09d6b7508908a738a57ee8eef06af935f4471736406b3edc349f01c395760c3b8b586071240d0bb778560ece01cdf42e9262b7625e8c14d0af4f359f74ca51ec6c59b05a1639d3b4b519463862ed74e05edb565f3ce06be9adddbeff90c4ed93df7d331effc2f152d4139d91d0184683d2ea693927a31fede78da50ec5524d6d6a38fe6532a3ba0221f8e7c21a92195e78d28286fe5d8ef54c689e6ffea89e7b22684abc7cfd452d9764ac0a2c4dd3e82f2e891bd97d25168546fb8c1901f0b46be438a640797186e366e78c3fb180f28a9e2730fc9301f43b68e5d90c2b2ee47102b9f644eacb3b3f4029e026b0403eb1f51735957205d49e3912f1f31d073becca1ca7ec3580c41d8791c03ed88dc103633e72e07b951b856991ed41bbc0c05ed6dc0cb21b6b0d0a8d1f1f0ca4d98f0378e46f230d0ecea69b87e8a3c47918bf9135a801e8b3cc822f5c266a1869b4ac12e8328e68e9e238e8e812b92ee7c03b00fddf6e94076854e733f7f07ae354a0249474ef76adf8a83e38ddb341401c46c9c89e56fdff81e29d850b30f3c98df5aec6b3000f92534941dd11f855cad6a34de1a7af7631752473bf04bd356fa51afe2bb508b0249eadcb001719324f0024788e6627ba9c4bb420fab79d5af3c2226c95fc2f3930081dff8795ee86ebaa52b3477adc060bfb84ac09034e10c2b2906211c05028de50c08ef86b1bb93c110f07d4c71d9dff159f44ab0e57ff36112881c142676ded5ab647e01de3d168401e45abd2b3f8edfd5f43dfbdcb9f5646169791da1484cd53df2773915c601568ca6aaea44bf92e473b932de15f5122c30af12d4e867bf745c24fe6ec935612639b6363713b25919f6121d7e87db264dc1742373e4a9d603c0756bad96e0cb66ead0095c871fb2e164eb6fc4aabb76fe27f0e2c271a7bde9ed1183cf9d582d025d7b5f8ecfce3b4477c9f7a300f6d4629a1f9ad2e881b6fef42d3735fd99ad93f225e1d2b880a12f8b24b6cd03f6fb621fa9da1b61937a873c9693fb009dac85e0b10d1d8afd93b61f0f5b19237f7d5647cd53a45d86afb4864230c07abdc8bf51aeb2e8ebda55665b56c9914a8ff915b4f9813ae3432a4745c9ad0c40048b39205513801cbd8f4d0b19dc41fdf74d3e2de3576a865c5fd2966351cebd8ea83c748d09de6c4efc00ca3f917aa519caec75de190441641ddbc704e95110e668d0f8d27a90984173014cd640015b5211725c6c9d653fcd04116f8f30f19a43e72b3b2e34ef959a59a7ab92675c77e378bc9e7817fc8c570b9c4a1d69fa00f14d02f73b4a63e0fde3860be3d4e97123f477c38cfe88755d6d5fd3064a2336ee73d712a9fd90bb28f73b4d686cb73daccff7963c6c30c9225f2cb36eb2920118f7bfcebb32c08b408c98b014e6460a3c358cdfcc1d3e1d8423c84a3ce17b9f7f2ce78a26e7ce9cc09d02fbc1337b94d1b81a6e34690274ed2440430b583a256f80fc5c3de0e3b68c08e58a557426e1ef40ad60eab5d574b0bd112c03933b296bb1f26a625a052ae71b171c56f486afcab9d24396a90fe0f9330808b9c6423538dbdadcf22a8add205576d012b4ced103487b5915e7a00777161e65cad81f3f72d61256b72ac9a4cdacd906ac8a0cab8fa84995b54cd637e270969922cb7c227939056248635bbc1f3c7f567dfc7eef131e7db20a1033ca9f713fab09519d1ed2492e2dfac4123bce776471f084d2fe5c3c344c351de13a922cb8b1b81603970812b9c8a098f44f7b03c41723335c4d78161fb0b17ea467482979aa34e4839f383f93073f5bed0d59c89a9142e0e27173e1c70725f9d04f52bf922f33f630154165ab3f50062282151daf64fad95b3120d19fa5375841763014457c1d5075c38e75205f6e0740d30766dd21871db6baa7c1f9bfbd06b78bda9ba25a4c166f4378890b80f57f95ea36608f5fd14b10d12f4d8fd45e2d0ece08689b407d1ef5d35d3d68d16c95035e96c42138420cd5168cb104f5ae21b02503a0423d577b489b53cc1dd69e93b82433e23ad62a9c7195ec66afe37c4ca4c0d9fb048440cf0c6558e316502d9aa8743ea1bd16eb0badf03044a59bcb5f03df40e0e6f3a2e21f15e58777638124b27b933ad74a18148de710c5b032df9c254c5b184ee1801d344e9b7b0d5bfa155fa14bcf345d7e1d56a694af031f05c7d04b7ab99ca0db6516d0e54bf37104b5b5f9478e0cfb9cea33dce439fce7ac80d044e241d01e178cdb7329e0a05bd8f7e38103c9c55962635bb2f91a54ed7dac25c4f6cfb1190302bc36e78e4c1fa78ca27829dc97648dc8aa40fc92f83feaf7f3820e76a39bb70c7080522baacdb441e39bd6eef2f0b5a300e5130b9d5386420ab31ca7f025cc7d3640c77e1b6750b34b97411bbc9932dd2b1255250fb37fad74b2583cebf49c6dd1a971c743a20e072ac51550cb16390fa00fadd33c2b37cda2208a5d0688ee0b4a1fc7429b5cc59403d18b1ae6937eaf8daebe2e1c2db0575c95eb2ad3fa16943707201527f9953b584488db6fcbddff0d476c182e176b2ee0ff128b7a3eae1c3c29efc2ddfde317039fc2de2a8d25ae63720c1a97298ee5f04825003fc5119f813cef9e019c7fa1d04c48a658f35273da538a489051d97c5f2cab7c74f93ee60393f18c2194496aba7f8c9161f3fae5743017af96711978dbf537bb0bca5abeddeba6a7d248460c7a099fbeda9d74133d9151f1d1e225f6b814b01b6a0f412a678e5a346a0b5ac615111af9c978428337dd02c03ed96d083e2533e37509afa121a39c60a605321497aa12e79bbd3fad3f00f7019ba1cf1dd5322db19048352fe2fe4d16a4a9c13a2c39e4ac964895c321d7d0cc38497e75ba0771ce573e0ec64ae17adb05bbc1687c8f782601fe96872a236ed0f9a4463afb323f8d5fb09aea64652a83685bb213a21ea0d0a1664a5c0d6c6d955da95de7f6437fa8d2cd6f44c449f9847d194e41618482fd4a58d99f869102a0d0e138a5ed2c659688d91186c275cf97a38b66391daafce0daf216958c9743f4ac265b19b5343829313d5810b5597c0b209a27ce71238344b6a8b58e9ac124a28f7fc916505c4b70ddf22a4f876672f14caada0978bcde7575cd739cdd60a8af21e8b8808a0ce1cb13cc7bffb91f6c4ee0e66510816701cb4703d15ae21e36949f90fd2697a620b58353c9b02d912ca2ce50e3b3b9ac2020a145"}, {0x100, 0xff, 0x200, "48e1d5d162c5cb04e856ec3389fcc90dfc222d678a1c3ad99f06898f8569351bd4cb631a9e6c68309bebb17208ab70ff11820aa498bf3bfa123967afa02954332d7ba6588f71957cd4af08f2223e61b8825d663c507cfcf3827716b22d70aad74dae56f760ec11a6a7a72999661d91e97607d46266d91ecd2e8efdaf0eb946382f35761e880f53be7c5a21f2903e5fb9771363b657ebbb82c2731435af8017169723c209c74736cb8a5f263f0f209a629903a4632f6505a311af0343252639362338526eb4b37630cfedc9436a5272ff179d42be0db1f02fd1ce02bff95e4105b9230d96a2c1ae4689c609dde59c"}, {0x90, 0x114, 0x6f, "82fe84f4469cc869c88b2fe37054c36f2a74f6c4f101dd0842aa4e13e6fda906a994c5a1913bef41e09837172b3edd76ffac8ec29a00e02dbc6721594cab69289c8653412581a32dc21353d9c8a2394729dd1070da558d18d912eeee53926c4ca1e8527098f8682950b5a54b17c6dd6d5e7dd17396ec3a4f73b0548ee81734"}, {0x40, 0x10a, 0x6, "036685fd503d84f8b1f75861225c65d8ffd6dc69e41cbf2c11b8ca507734a23920e630269baf047c47"}], 0x11e0, 0x10}, 0x6d6}, {{&(0x7f0000001b80)=@rc={0x1f, {0x400000, 0x4, 0x10000, 0x8, 0x9, 0xdf7}, 0x7800000000000000}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001c00)="3840cf80171d6749acdcef9de7c8d06489fdd9b54b315c706b2c5588a7fcedd47ba842ed7e47ed6eb471cfa85efdbf58a6de3d58a27f4db56c1e4c5caf457c0ebfd35576c9129f1c15548a7a2ab212a3f00c289b08720e5c140a9f3d8ce931a700e33fbaeb0a793d96ca6ad737f5de2dc34d6458400fdc9843329208fc3cc89e6eeeaa74b4b9577bc239d4714e39a6f48b57b83fc185f165e4f7ee023aa8b1c106b38d4ec0f719", 0xa7}, {&(0x7f0000001cc0)="c6eaa87950a0294634a8ff45384a50bd5f609781b65689e17f58664efe60f1", 0x1f}, {&(0x7f0000001d00)="04db08b12fb6ff9f5d37ac228e317c93f91f9d2fc82f4aee8bcf08f40d766ff7c396250a9e84cd9c92f2569384560970586249f197", 0x35}, {&(0x7f0000001d40)="a9239b54d808bd6996b6292efe3d7fbb9cf7266bd3a02abdc0", 0x19}, {&(0x7f0000001d80)="1dfedf67884c06a1fd81fce6d0926b64a9415e86d81f0b725383ebfe1eb8b5f5cf9834e291f84df20c19b01ca23662b7af214493ab02926328ba4270eb181484d96cb7cbc6fda2ca5db7b897231de884d90319690cfc373720f24cf9bf954e5e1ed3bd47f54f7d47c994d24cc3b82857fafe1ad1e0183cbd5ab1635d2557fe75028a28e7d4248fcf6bff6368659186b09c3b89df7d6ed4e79a6c60414fa6", 0x9e}, {&(0x7f0000001e40)="cefbf3cdec598882c7e77292799b70d172d7436f62f36e46b9e06aad9257877473011a5907b444a84f7300", 0x2b}], 0x6, 0x0, 0x0, 0x20000000}, 0x400}], 0x3, 0x80) 2018/05/31 14:42:00 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x6, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x414882, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000140)=""/156) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_netrom_SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000200)) listen(r0, 0x6) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)) 2018/05/31 14:42:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x82, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@hopopts={0x2b, 0x0, [], [@enc_lim={0x4, 0x1, 0x8000}]}, 0x10) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000024c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002500)={'team0\x00', r1}) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r3 = shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r3) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x9}, {r0}, {r0, 0x12}, {r0, 0x1000}, {r0, 0x40}], 0x5, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x3}, 0x8) 2018/05/31 14:42:00 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x2a14, 0x3}, 0x2c) unshare(0x24020400) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x20000, 0x0) ioctl$KDENABIO(r1, 0x4b36) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000000c0)={0x3}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f0000000280)=""/224}, 0x18) 2018/05/31 14:42:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0xfffffffffffffff7}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x7, 0x7411c7de, 0x6, 0x7fff, 0x153}, 0x14) r2 = getpid() sched_getaffinity(r2, 0x8, &(0x7f0000000040)) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x400, 0x1) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x5038, 0x4) shutdown(r0, 0x1) 2018/05/31 14:42:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) [ 312.549520] ALSA: seq fatal error: cannot create timer (-22) [ 312.596737] ALSA: seq fatal error: cannot create timer (-22) 2018/05/31 14:42:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x9, 0x3, [0x4, 0xff, 0x401]}, &(0x7f0000000040)=0xe) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1, 0x7}, &(0x7f00000000c0)=0x8) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x400083) getpeername$ipx(r3, &(0x7f0000000200), &(0x7f0000000180)=0x10) 2018/05/31 14:42:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000200)={@local, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000002c0)={@remote={0xfe, 0x80, [], 0xbb}, 0x2e, r1}) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) getrusage(0xffffffffffffffff, &(0x7f0000000080)) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000140)) 2018/05/31 14:42:00 executing program 6: r0 = socket(0x400800000000013, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"69666230004100ffffffffffff00", 0x201015}) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x2002) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0x3701}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x1, 0x10}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x53}, &(0x7f00000001c0)=0x8) 2018/05/31 14:42:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) rt_sigprocmask(0x2, &(0x7f0000000000)={0x13c}, &(0x7f0000000040), 0x8) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:00 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x7, 0x400102) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f00000002c0)=0x7f24) fchmodat(r0, &(0x7f0000000300)='./file0\x00', 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x400000000000000, &(0x7f0000000240)="c626262c8523") ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'veth1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000780)={@empty, @mcast1={0xff, 0x1, [], 0x1}, @empty, 0xf0, 0x0, 0x0, 0x0, 0x40000005, 0xfa9fe401ac15cc91, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup(r1) r4 = fcntl$dupfd(r3, 0x406, r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='/\x00', r4}, 0x10) ioctl$sock_netdev_private(r3, 0x89fe, &(0x7f0000000340)="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") setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x100, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x624}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x2a46}, @in6={0xa, 0x4e21, 0x76, @empty, 0x5fe4b64b}, @in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'bridge0\x00', 0x10}) 2018/05/31 14:42:00 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) ptrace$cont(0x1f, r2, 0x30d07e5e, 0x1ff) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:00 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x2, 0x10000) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000280)=""/206) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000001c0)=0x40) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xfe, &(0x7f0000000200)="010000d13b6e8d4e7138400000000000000000ffc470f3a7487256701572") r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x1, 0x4b, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x0, 0x0, 0x1, 0x4}}, 0x26) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8003, &(0x7f00000000c0)=0x9cf6, 0x6, 0x5) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) setns(r2, 0x4a000000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000100)={0x93, 0xff, 0xd1, 0x2, 0x100000000, 0x3}) [ 312.843738] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.850543] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/31 14:42:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x18}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x42ad, 0x401, 0x4, 0x3f, 0x600000000000000, 0x4, 0xffffffffffffffa9, 0x7, r2}, &(0x7f00000000c0)=0x20) shmctl$IPC_RMID(r1, 0x0) fsync(r0) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) r3 = semget(0x1, 0x0, 0x421) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000100)=""/163) syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x6576, 0x6a0903) 2018/05/31 14:42:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@ipv4={[], [], @dev}}, &(0x7f0000000040)=0x14) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da1f}}, 0x14}, 0x1}, 0x0) 2018/05/31 14:42:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x1000400201000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:01 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)="2e206367510975700600707500565ec8c11151820ed774c75dd67a4154480b8bbeec8bd7cb18f56267672d0cb9aee78d41f3808053a7420ea642710e68ba9d1d2db4546a6767c53d59adc50558ea838300e644692f4288c15b0c3d1e7bf1796a13f07e58bde84fa84a555c70373b5acbbb7bc45da26dece2e4cb698e5cee7101946fb96901feea4cf1259fc98330ab4f25a7a86dc7ec27d68d5d860a7384ad64470f6681cb20ca7dadacffa25dba742877d16d21aee531ba2fa09b0a7742218b9f658a4707491b30bf503052fb49dedc0d8dbcf97a8b29570f0ed92cee1cb109c0d972059d9ae826ef5e8e997877", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1000006e05352ef8bc9cbc828aed090a94a81c7bb94db2180e7df916a7e5a8e96643cdfd099e58bb43397aabe1556d56d5eb54a03012a77e8871d01e388dc21cc216ec29cf4a765698"], 0x3) write$cgroup_int(r1, &(0x7f0000000200)={[0x3a, 0x2c, 0x3f, 0x39, 0x2b, 0x0, 0x39]}, 0x7) openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) 2018/05/31 14:42:01 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)="80", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback={0x0, 0x1}, 0x1000}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") utimensat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}, {0x0, 0x7530}}, 0x0) sigaltstack(&(0x7f0000ffa000/0x3000)=nil, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) fchmodat(r2, &(0x7f0000000040)='./file0\x00', 0x10) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x1ffe) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0xfffffffffffffffe, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x4) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'ifb0\x00', 0x20}) shutdown(r0, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0x3}, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x402, 0x1000, 0x10001, 0x3}, {0x8, 0x1, 0x1000}, {0x80000000, 0xf2f, 0xfffffffffffff868, 0x1}]}, 0x10) 2018/05/31 14:42:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:42:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) sendto$llc(r1, &(0x7f0000000080)="f5d2a322609ac72a19c01925861c2b4d84c265065c1f3a423c6174d6dd38d963908a53e653defe740afa493b04fae767c669688590902b4aba0f09343f4e1b81a52a5a", 0x43, 0x4000, &(0x7f0000000100)={0x1a, 0x33f, 0x9, 0x3f, 0x3, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) shutdown(r0, 0x2) 2018/05/31 14:42:01 executing program 3: mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f00000001c0)) 2018/05/31 14:42:01 executing program 6: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{&(0x7f0000000100)=@sco, 0x80, &(0x7f0000000180)=[{&(0x7f0000000480)=""/147, 0x93}, {&(0x7f0000000b80)=""/227, 0xe3}, {&(0x7f0000000800)=""/165, 0xa5}], 0x3, &(0x7f0000000fc0)=""/224, 0xe0}}, {{&(0x7f0000000300), 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/87, 0x57}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/19, 0x13}], 0x3, &(0x7f0000000680)}}, {{&(0x7f0000000980), 0x80, &(0x7f0000002480)=[{&(0x7f0000000c80)=""/113, 0x71}, {&(0x7f00000010c0)=""/208, 0xd0}, {&(0x7f00000011c0)=""/190, 0xbe}, {&(0x7f0000002380)=""/249, 0xf9}, {&(0x7f0000001300)=""/99, 0x63}], 0x5, &(0x7f0000000d00)=""/21, 0x15}}, {{&(0x7f0000002500)=@vsock={0x0, 0x0, 0x0, @my}, 0x80, &(0x7f0000001280)=[{&(0x7f0000003680)=""/200, 0xc8}], 0x1, &(0x7f0000003780)=""/188, 0xbc}}], 0x4, 0x0, &(0x7f0000005e80)={0x0, 0x989680}) r1 = dup3(r0, r0, 0x80000) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000000)={0x2, 0x2, 0x4, 0xfffffffffffffffb, 0x7, 0x8}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{&(0x7f0000000680)=@can, 0x80, &(0x7f0000000080)=[{&(0x7f0000000a00)=""/201, 0xc9}], 0x1, &(0x7f0000000240)=""/57, 0x39}}, {{&(0x7f0000000700)=@nl=@unspec, 0x80, &(0x7f0000000b00)=[{&(0x7f00000008c0)=""/55, 0x37}, {&(0x7f0000000d40)=""/139, 0x8b}, {&(0x7f0000000940)=""/14, 0xe}], 0x3, &(0x7f0000000b40)=""/30, 0x1e}}, {{&(0x7f0000000e00)=@ethernet={0x0, @random}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000e80)=""/210, 0xd2}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000f80)=""/48, 0x30}, {&(0x7f0000002580)=""/85, 0x55}], 0x4, &(0x7f0000003840)=""/105, 0x69}}], 0x3, 0x0, &(0x7f0000004c40)={0x0, 0x1c9c380}) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000780)=""/109, 0x6d}}, {{0x0, 0x0, &(0x7f0000000080), 0x2c8, &(0x7f0000000200)=""/40, 0x28}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000002600)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000005d40), 0x0, &(0x7f0000000380)=""/205, 0xcd}}], 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f00000038c0)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000003900)=0x5, 0x4) 2018/05/31 14:42:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x2, 0x70bd27, 0x25dfdbff, {0xc}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback=0x7f000001}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4050}, 0x20000000) 2018/05/31 14:42:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0xfffffffffffffffe, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:01 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="36aae76861c24aed") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x9, 0xa0002) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) write$cgroup_type(r2, &(0x7f0000000040)='threaded\x00', 0x9) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0xe0, "7220aa706cab2ca1a2ca60401300810c176daf263c8c4a7ad04f76f860e0edf8a364f39e8d194b6553eabe25696e4a05ee6db91f544240f9fdf27b37d0353ea71e9bd1c17b06acb315af58a912d17ce7a20193afcc4738e8f711cec74a7a26ed368028aa28bc2e7fd59e9b4c8baab025ace935d9274461358130c1d435c13f416fd0cd45002662f0f9507dd9daefc6e3bd4e401a8c84e403b26e69136cdf2451d8f59603c26c78f6c28fb469ddd06a82e359262d6f9a15dffff7be8990c1304e14b44c575076fe2dbdd6500a59a5bbd8660e40ece89f4774ca79c854fbfbc91d"}, &(0x7f0000000180)=0xe8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x3d}, 0x8) 2018/05/31 14:42:01 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) prctl$getname(0x10, &(0x7f0000000080)=""/21) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:01 executing program 3: semctl$IPC_SET(0x0, 0x0, 0x5, &(0x7f0000000000)={{}, 0x0, 0x1}) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000080)) 2018/05/31 14:42:01 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) shmctl$SHM_LOCK(r1, 0xb) 2018/05/31 14:42:02 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1402) unshare(0x64000400) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000140)=0x1000000000000) 2018/05/31 14:42:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) 2018/05/31 14:42:02 executing program 3: unshare(0x40000800) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) ioctl$KDENABIO(r1, 0x4b36) preadv(0xffffffffffffffff, &(0x7f0000002280), 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000100)="8517242ca45a74d142264e3e510120ea9ff96ed5dcd68163749e3206e95f7b0593c7027ac0dfe39dbd7368cd041e15d4a5170322227742948f4a98aec17d793eefabaec96a5c3251b23be886eb2b6a48df7075123dcb2bddd4d7a2b1bdaae0") ioctl$KDADDIO(r1, 0x4b34, 0x4) 2018/05/31 14:42:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x3, 0x0, &(0x7f0000000040)={r1, r2+10000000}, &(0x7f0000000080)) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x20000000000000) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xd8, r3, 0x0, 0x70bd2b, 0x25dfdbfd, {0xb}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xffffffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1f}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback=0x7f000001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0xffffffffffff7fff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fffffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x3, 0xfffffffffffffffa, 0x80000002902) 2018/05/31 14:42:02 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080)=0xfffffffffffff800, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) r1 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) lchown(&(0x7f0000000000)='./file0\x00', r1, r2) shutdown(r0, 0x7fffffff) 2018/05/31 14:42:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) [ 314.576256] IPVS: ftp: loaded support on port[0] = 21 2018/05/31 14:42:02 executing program 1: r0 = socket$inet6(0xa, 0x4, 0x4f8d) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x7, 0x0) 2018/05/31 14:42:02 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x40000000008, 0x20000) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000080)="a5a5a8ae0c288e25"}) write$binfmt_elf32(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) 2018/05/31 14:42:02 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 2018/05/31 14:42:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x20100, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000100)=""/9, 0x9}, &(0x7f0000000140), 0x20}, 0x20) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x9, 0x200000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000080)={0x0, 0x1, 0x3b, 0x1, 0x1}) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000040)={0x0, 0x1}) 2018/05/31 14:42:02 executing program 3: recvmmsg(0xffffffffffffff9c, &(0x7f0000004900)=[{{&(0x7f0000001680)=@nfc, 0x80, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1, &(0x7f00000017c0)=""/116, 0x74}}], 0x1, 0x0, &(0x7f0000004a40)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f616e796361737436ee") setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000040)=0xa00, 0x4) accept(r1, &(0x7f00000000c0)=@vsock={0x0, 0x0, 0x0, @my}, &(0x7f0000000140)=0x80) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x10000, 0x7, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x8}) preadv(r2, &(0x7f0000000140), 0x391, 0x51) 2018/05/31 14:42:03 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:03 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:03 executing program 6: r0 = socket(0x10, 0x2, 0x0) accept(r0, &(0x7f00000000c0)=@in, &(0x7f0000000000)=0x80) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats\x00') sendfile(r0, r1, &(0x7f0000000040), 0x4) 2018/05/31 14:42:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400300, 0x50) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x3, 0x3, 0x3, 0x3}, 0x100000000, 0x100}) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000000)={0x4}, 0x8, 0x80800) 2018/05/31 14:42:03 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x400000) ioctl$SG_SCSI_RESET(r1, 0x2272, 0x709000) 2018/05/31 14:42:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000100)={0x2, 0x1, r2, 0x200, r3, 0x450, 0xff, 0x40}) 2018/05/31 14:42:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000440)={r0}) shutdown(r0, 0x0) 2018/05/31 14:42:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x200) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x8, 0x7, 0x30, &(0x7f0000ffd000/0x3000)=nil, 0x10000}) 2018/05/31 14:42:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) bind$ax25(r2, &(0x7f0000000040)={0x3, {"5211364524642f"}, 0x3}, 0x10) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:03 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1=0xe0000001, 0x3, 0x0, 'lblcr\x00\x00\x00\x00\x00\a\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/05/31 14:42:03 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) bind$alg(r0, &(0x7f0000001680)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="9e1f0006193b5aa73a779e98b837b0afa899f1b7e9bee3e4c5a0a866a922ba", 0x1f) 2018/05/31 14:42:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) socket$rds(0x15, 0x5, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:03 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x6) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000240)={r2, r3/1000+10000}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stat\x00') ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000140)={0x0, 0x3, 0x6, 0x1, 0x7f}) 2018/05/31 14:42:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8, 0x0) r2 = getuid() ioprio_get$uid(0x3, r2) 2018/05/31 14:42:03 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000140)) mmap(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xe87, 0x30}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e20, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x3}}}, 0x84) 2018/05/31 14:42:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e24, 0x10000, @dev={0xfe, 0x80, [], 0x21}, 0xffffffff}, {0xa, 0x4e23, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x4, [0x7f, 0x8001, 0x8, 0x0, 0x5, 0x7, 0x6, 0x81]}, 0x5c) shmctl$IPC_RMID(r1, 0x0) 2018/05/31 14:42:04 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21000008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0xd8, r2, 0xa00, 0x70bd29, 0x25dfdbfc, {0x1}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x723}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3e}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x9}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x814}, 0x800) poll(&(0x7f0000000440)=[{r0, 0x100}], 0x1a1, 0x84) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000003c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) 2018/05/31 14:42:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:04 executing program 4: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r3, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000100), 0x4) 2018/05/31 14:42:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x3, r2}) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:04 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000f67000)="9adc01ce", 0xfffffffffffffc25) clock_nanosleep(0x7, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) write(r0, &(0x7f0000000080)="2200000018000700f40700000900071502040008dd200828060009040005009f004b", 0x22) 2018/05/31 14:42:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) r1 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='em0selinuxcgroup^procmime_typeem0.\x00', 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, r1, 0x0, 0x0, r2) shutdown(r0, 0x2) 2018/05/31 14:42:04 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}, 0x4}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x2d, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa000, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000400)={'team0\x00', @link_local={0x1, 0x80, 0xc2}}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={r4, 0x918a, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r4, 0xc297}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40080, 0x2}, 0xb) 2018/05/31 14:42:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000440)={r0}) shutdown(r0, 0x0) 2018/05/31 14:42:04 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000080)={0x0, 0x7f}) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x2000, 0x6, &(0x7f0000ffe000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000000, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)=""/237) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x8000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) r3 = socket(0x5, 0x807, 0x1) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x7fff, 0x80000000, 0x8, 0x7fffffff}, {0x9, 0x6, 0xffff, 0x6}]}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)) 2018/05/31 14:42:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000002c0)={0xfffffffffffff6cc, 0x8, 0x10001, {}, 0x4, 0x2}) ioctl(r0, 0x8912, &(0x7f0000000340)="0047fc2f07d82c99240970") r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = gettid() ptrace$getregs(0xc, r3, 0x2, &(0x7f0000000140)=""/205) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000100)={0x9, r5}) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x20000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)="5e89447a2a384801cf802948cddda5e500ff3d5dc1bf8a932f946462a98ef91d60ba"}, 0x10) 2018/05/31 14:42:04 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x400000, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c9924097001a22afc0554ac350aef20da6b5f542c6d927e0946fd57") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x105080, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000040)={0x904, 0x3}) 2018/05/31 14:42:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x40000000000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x288000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000180)=0xe8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) r5 = fcntl$getown(r0, 0x9) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000300)={r6, 0x1}) sendmsg$nl_generic(r2, &(0x7f0000001880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80082004}, 0xc, &(0x7f0000000200)={&(0x7f0000002f80)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="dbd8858930388f7a71576a4c4645f624628db66bd9aa3fbeb5ff07000000000000f8604b83ca6e0e03003a356a2a100d395015457bf5f76b1cce074f44e23732bee88cef29a010f573ab8a59ca20eb833108298a5ef03cddb10d7b1f0000007c19da908317cbca8b2d605019334a7267326b", @ANYRES32=r4, @ANYBLOB='\f\x00O\x00cpuset$\x00\b\x00k\x00', @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r0], 0x15f0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x1) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x92500) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x3fff) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 2018/05/31 14:42:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:05 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = dup3(r2, r0, 0x80000) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)) ioctl(r3, 0x96c, &(0x7f0000000240)="0047fc2f07d82c99240970") getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x8, 0x4, 0x3, 0x8, 0x7d}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000280)={r4, 0xc1, 0xc0, "ffd6a96e1e11c451f21b7f28aa3e021676afc205ea54d1129bd2708175860ea1c1f6e13127bdb5709ded04dcd9c84012d5c2e9f357b5df666ec9a58cd0ca62404e1e40400fdc6ac7ae0979e3546c8f53a847131f0d32f7ff0dff7b4a2d22bb8181c413c0395dee166bbac08861e303d0d88d292d73cddd59ed9458a171938803392fc9a70d7365667efbc4f650f9146d2868e3210ed3efcdb5d1daadcef741af91523165092547b316528cba813df34dbfa923ec9d5d317db9050da9a7fb6252"}, 0xc8) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000440)={r0}) shutdown(r0, 0x0) 2018/05/31 14:42:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, 0x2}, 0x1c) shutdown(r0, 0x0) 2018/05/31 14:42:05 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000000)=0x800, 0x4) syz_emit_ethernet(0x2a, &(0x7f000089a000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/31 14:42:05 executing program 6: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r2, 0x0, r1, 0x0) pselect6(0x40, &(0x7f0000000040)={0x101, 0x8, 0x8, 0x5d14, 0xd66e, 0x401, 0x4}, &(0x7f0000000080)={0x200, 0xa, 0x7fffffff, 0x7ff, 0x3, 0x144, 0x6, 0x9}, &(0x7f00000000c0)={0x8, 0x3, 0x3, 0x64, 0x2, 0x7fff, 0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000140)={0xa6fc}, 0x8}) 2018/05/31 14:42:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) 2018/05/31 14:42:05 executing program 6: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, r0, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101) r3 = fcntl$dupfd(r1, 0x0, r2) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000004f40)={0x0, 0x1, 0x10}, &(0x7f0000004f80)=0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000004fc0)={r4, 0x61}, 0x8) 2018/05/31 14:42:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xde17, 0x400800) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f00000001c0)={0x8, 0x7ff, 0x3, 0xac, &(0x7f0000000040)=""/172, 0x11, &(0x7f0000000100)=""/17, 0x7c, &(0x7f0000000140)=""/124}) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) fstatfs(r0, &(0x7f0000000000)=""/131) r2 = msgget(0x1, 0x144) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) r5 = syz_open_dev$admmidi(&(0x7f00000005c0)='/dev/admmidi#\x00', 0x2, 0x10000) recvfrom$packet(r5, &(0x7f0000000600)=""/65, 0x41, 0x40000020, &(0x7f0000000680)={0x11, 0x0, r3, 0x1, 0x5, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$vcsn(&(0x7f0000000540)='/dev/vcs#\x00', 0x8, 0xc000) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r8 = geteuid() ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f00000006c0)) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) r11 = getpid() msgctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{0x9, r4, r6, r8, r9, 0x2, 0x4}, 0xffffffffffffff81, 0x3, 0x2, 0x3, 0xffffffff, 0x7, r10, r11}) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) write$eventfd(r7, &(0x7f0000000580)=0x1f, 0x8) 2018/05/31 14:42:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x1000, 0x2000000000041, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x47, 0x0) 2018/05/31 14:42:05 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0xbb, 0x6, 0x3, 0x8001, 0x2, 0x3874, 0x1, 0xfffffffffffffffc, 0x2, 0x6, 0x2}, 0xb) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8910, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) gettid() getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x7c, 0xffffffffffffffa2}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={r1, 0x1, 0xd, "a4397e3a927835ae64c045633d"}, 0x15) shutdown(r0, 0x2) 2018/05/31 14:42:05 executing program 3: ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000000c0)={0x0, 0x0, 'client1\x00', 0x0, "f5ed21a319570cd1", "e045d97d5eceac58ecf719a704c450715e1b03cdd72304b970a652943eb85adc"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000040)) 2018/05/31 14:42:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc040000009924097088440bb2f7875ae3c9f49f6c0300000000000000caa8982c21b1a6f52043fe499f856843f0d3fc6796eae9cb2445958b506f3a918958283241143de92d802f6ded3b59b506") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 2018/05/31 14:42:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x100, 0x600) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) getsockopt(r0, 0x400, 0x7, &(0x7f0000000280)=""/4096, &(0x7f0000000000)=0x1000) 2018/05/31 14:42:06 executing program 6: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00008deff8)='/\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)="6e66730039ad695ab91f0928267795ce2b07ba848ecc6b7c69", 0x2007a00, &(0x7f0000000140)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000000c0)=0x300008000) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) 2018/05/31 14:42:06 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$netrom(r0, &(0x7f0000000380)=@full={{0x3, {"424e05aa58a890"}}, [{"694d500a2eccc1"}, {"33a8cebc17171e"}, {"6cbe3ed46b1482"}, {"7c23cd9191294e"}, {"507d413b79d161"}, {"147df8a94a27be"}, {"9dc17c06a5c204"}, {"cbaecb1d4288f5"}]}, 0x48) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x7ff, 0x80000) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x6, 0xc6) socketpair$inet6_sctp(0xa, 0x8000000005, 0x84, &(0x7f0000000180)) 2018/05/31 14:42:06 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = memfd_create(&(0x7f0000000080)='-bdev}@,.-ppp0\x00', 0x3) bind$llc(r2, &(0x7f00000000c0)={0x1a, 0x31f, 0x4, 0x8, 0xca8e, 0x100000001}, 0x10) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x1) r1 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x80, 0x80000) sendto$ipx(r1, &(0x7f00000000c0)="94420e", 0x3, 0x800, &(0x7f0000000100)={0x4, 0x9, 0x800, "b7181c6c560e", 0x1f}, 0x10) 2018/05/31 14:42:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:42:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x9, 0x30}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r2, 0x7ff}, &(0x7f00000001c0)=0x8) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) rt_sigqueueinfo(r3, 0x3d, &(0x7f00000000c0)={0x26, 0x5, 0x0, 0x7}) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:06 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x402, 0x0) accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x800) r1 = socket$kcm(0x29, 0x206, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$sock_netdev_private(r1, 0x89fc, &(0x7f0000000280)=':') accept$ipx(r0, 0x0, &(0x7f0000000080)) 2018/05/31 14:42:06 executing program 4: r0 = socket$inet6(0xa, 0xe, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:06 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)="e3", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}, 0x401}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 2018/05/31 14:42:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:42:07 executing program 7: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20000) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000080)) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f00000000c0)=""/71) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:07 executing program 6: socket$kcm(0x29, 0x40000003, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x200000c0, [], 0xbb}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)='G', 0x1}], 0x1}, 0x40) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000140)="a99e938014221122765a26c7f58a6178dde24961d269c526425b4bb4edeb629f3b012bafb34e6151210982c56ca665d07af43c4da0286dff0544a3e02a3566df4bc8dd6b20a2634ae2abaf8756d8d44107d3fe612ab556a9ef963f2aba61017b0c9516639960") 2018/05/31 14:42:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x3fff) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2000, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000780)=ANY=[@ANYBLOB="080000000000000000d00000000000003200000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000500000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000060000000000000e600000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000001700000000000006500000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000f0000000000000ed00000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000d00000000000006500000000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000060100000b8330356021e9977000000c6534ac60f526b77abdf0f211632459986def7428ff9066aa775c088a02c4ce697085c92e5d0db61ed69a4244d369680028b19cc1e591b1ce8235bf43bc0f5303619667d938411340e4b0dd229a2dd1f98f68c9b0fbc85d66951760c586d05305f243cf4fb6ff278e2e41c75ed398277a67fb18c29353957e809329ee9f931b9a8a2260527fb14a4ebef458bbbd303c3623f22d82aee7948cf53a287bf", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000010000000000b100000000000000", @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) flock(r0, 0x1) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 2018/05/31 14:42:07 executing program 3: semop(0x0, &(0x7f0000000080)=[{}, {0x0, 0xfffffffffffffff8}], 0x2) semctl$GETZCNT(0x0, 0x3, 0xf, &(0x7f0000000000)=""/23) 2018/05/31 14:42:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) r2 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x800) getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f00000000c0), &(0x7f0000000100)=0x4) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:07 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x80, 0x0) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f00000000c0)={0x1, 0x800, 0x1}) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockname$ipx(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) connect$netrom(r3, &(0x7f0000000280)=@full={{0x3, {"2cd8c2582a3cd5"}, 0x4}, [{"da86a1fb538e23"}, {"6679888bfade0b"}, {"88353b3e3d4711"}, {"777a83c45325c9"}, {"f36c2e210d3226"}, {"1945125778fb1b"}, {"c8caa4c7d71d98"}, {"8fd4c58b7eb566"}]}, 0x48) 2018/05/31 14:42:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/241) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000100), 0x8, 0x0) 2018/05/31 14:42:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000240)="0401000000c000ddb8460900ffb25b4202938207d9fb3780398d5375c5f73f939029298d7535352cd5a1f575903376b15cddc7d0c6a722a59a7a033b970720a42f2a2bb404e1b50000000000000000f55d4626a880be8b30be0ea8635534f8291d9fb2ce4361", 0x66, 0x4008084, &(0x7f0000000200)={0xa, 0x200000800, 0x20000000005, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 2018/05/31 14:42:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000000), &(0x7f0000000100)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) sendfile(r2, r1, &(0x7f0000f28ff8), 0x100000002) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = getpgid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @remote}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xffffffffffffffb0) quotactl(0x2d878648, &(0x7f0000000100)='./bus\x00', r5, &(0x7f0000000280)="71a8676312049cbc8ae58f8c312b7edb18102025608341240d09ff544a") sendfile(r2, r1, &(0x7f00000000c0)=0x200000000000, 0x9) tkill(r4, 0x1000000000016) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@mcast1={0xff, 0x1, [], 0x1}, 0xbbd8, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x9, 0x5}, 0x78) 2018/05/31 14:42:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffd, 0x200) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host=0x2}, 0x10) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x2) setsockopt$inet6_buf(r1, 0x29, 0x3f, &(0x7f0000000080)="5739e50163517b5ace670a77f15223b2356a41645d66abfecf632734fa223dcdf2d551af6f418ffe7d3a4f93de5a70345002fb06478e4c376e106c0b670703cd01b9187728ea61ff6a21d221d5f6eba378abf712b2e1e8df860aca412829ac96b9e3f1828953fe83750601a63081a784b4cd10bbbd3f6e654d6f23c8bad795563e679c717ac162401c43d6f67427a9f77383e33f2de352e4e53348a86638d28517982d41ba4782b18e067bb24099c54990a88ddbad373dfa1880d042634c1e9a92b0e92df036360e961af8aaf03050793eb4dfd7fcde70941c4086da5457", 0xde) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000180)=r1) r3 = semget$private(0x0, 0x4, 0x400) semctl$SEM_STAT(r3, 0x4, 0x12, &(0x7f0000000280)=""/154) dup2(r1, r1) 2018/05/31 14:42:07 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000440)={0xffffffffffffffff, r0}) shutdown(0xffffffffffffffff, 0x0) 2018/05/31 14:42:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0xf25, 0x4, 0x9, 0x8, 0x10000, 0xffffffff80000001, 0xc0ae, 0x1ff, 0x7, 0x8, 0xb1f8}, 0xb) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) [ 319.989726] Unknown ioctl 1074819273 2018/05/31 14:42:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x216e, 0x0, 0xffffffff00000001, 0x40, 0x2, 0x41, 0x1, 0x2a8, 0x38, 0x132, 0x20005, 0x0, 0x20, 0x1, 0xe1, 0x2, 0x6}, [{0x7474e557, 0x10001, 0x8000, 0x3ff, 0x5, 0x5, 0xfffffffffffffff9, 0x7}, {0x1, 0x2, 0x9, 0x5, 0xffffffff, 0xfe9, 0x7, 0x9}], "183557612016b29e87a94431d68b849ba4b2fad2cc83d2a9f38f4add25b9b817d05b5e3af010c52ac93eb34b06826909f7698b273f83033d805486512b731dce6c3d1766a083c4e5b86de7f6ceac8a3a73f29de0c7ba869dc3a6d1e005c0aa993c2bd89a2b4bbd81c1cb018d4ee53fa7c347d49d056d8c12c7aa59095fa01349651b0095975a97a9db1023ca48ecccbf45745428d1406ad93a09218eaa46f64232b51322f0d002eb0cb04784b54c2ad6cfd6d25511647250ddc5ecf32cd58095168bf15e17752e564dbec8c5fa53cfc931ceceaf57ff15c82b0a3afa707091e80920b8f6b2"}, 0x15d) 2018/05/31 14:42:08 executing program 4: r0 = socket$inet6(0xa, 0x800, 0x285b) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000080)=""/34) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x804, 0x9) [ 320.032114] Unknown ioctl 1074819273 2018/05/31 14:42:08 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20000) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000080)) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f00000000c0)=""/71) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:42:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000040)=""/67) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast2=0xe0000002, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4e22, 0xfff, 0x4e23, 0x1ff, 0x2, 0xa0, 0x80, 0x5e, 0x0, r3}, {0x1, 0x524, 0x51, 0x3, 0x0, 0x5, 0x7, 0x2}, {0x2, 0xb1f2, 0x0, 0xa21}, 0x82d3, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in6, 0x4d2, 0x6c}, 0x2, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x34ff, 0x0, 0x3, 0x9, 0x7, 0x7, 0x3f}}, 0xe8) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:08 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) getsockopt$inet6_udp_int(r2, 0x11, 0x64, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/05/31 14:42:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet_dccp(0x2, 0x6, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0xed8b71ca41fd91f4}, {r1, 0x1000}, {r1}, {r0, 0x48}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={0x80}, 0x8) r2 = shmget$private(0x0, 0x4000, 0x8000000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) getpeername$inet(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x10) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x1a, "6bc30f6db9b0152146772fc46f3d618f9a154dba2638312c2eeb"}, &(0x7f0000000080)=0x3e) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:08 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20000) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000080)) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f00000000c0)=""/71) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:42:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmget$private(0x0, 0x1000, 0x404, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/129) ioctl$TIOCCBRK(r0, 0x5428) 2018/05/31 14:42:09 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20000) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000080)) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f00000000c0)=""/71) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:09 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:09 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000a00000)={0x73, 0x79, 0x7a}, &(0x7f0000facfff)="01", 0x1, r2) r4 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001940)="b3", 0x1, r2) keyctl$update(0x2, r4, &(0x7f00000006c0)="df02754689212dfc3e2acc26fdc3ff864813da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa023895117054ac2f1c00ad642733d9f84eee66d20e0f8b143963541844fee1181e6d50986cd98a5c44ac0ec3755bae750fe9a073eadeb27eafcf10d82f9aa122e7dc2faed85adcd88ca30e07000000002d94defa187e48b89efbbbcc9b9a9aaffce4e9149e5d3aa299f97c682a404ef6b1223b74cf25db091d4322852093d7339acd4513ae985dc321c5cb309de0053b62f9a276", 0xc9) keyctl$dh_compute(0x17, &(0x7f00000019c0)={r3, r4, r4}, &(0x7f0000001a00)=""/157, 0x9d, &(0x7f0000001b40)={&(0x7f0000001ac0)={'tgr128\x00'}, &(0x7f0000001b00)}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r6, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000180)=r8) sendto$ipx(r7, &(0x7f0000000280)="048a3e77bf422f867869ab32415ff0af7ffac8823980025331391f9a507d6ad6529b5634ffb4d14cfa081587ca2274ec300918960fed3e4fe2ef2500cacb37921b916b6f43d85e0db02bbd0555eeff94e175b2e59247b58c8efd1bbef10fc78fe7c2e1317451e55817665997c8f0", 0x6e, 0x4000, &(0x7f00000001c0)={0x4, 0x7d5, 0x3, "09c1d0a517af"}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000080)={0x8000, {{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x88) 2018/05/31 14:42:09 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) epoll_create1(0x80000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'gre0\x00', 0x0}) r3 = socket$inet6(0xa, 0x7, 0xfffffffffffffffa) ioctl(r3, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) sendmmsg(r1, &(0x7f0000003080)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000002500), 0x0, &(0x7f0000000140)=ANY=[]}}], 0x2, 0x0) shutdown(r0, 0x8004) 2018/05/31 14:42:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @multicast1=0xe0000001}, {0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1a}}, 0x0, {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 'ip6gretap0\x00'}) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:42:09 executing program 6: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x141400, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={r0, 0x6, 0x1, 0x8, &(0x7f0000000000), 0x3fffffffffffff05}, 0x2a6) r2 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={r1, 0x6, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0c0583b, &(0x7f0000000280)={0x20000000000002a6, &(0x7f0000000240)}) 2018/05/31 14:42:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="006ffc2f07d82c99240970") r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvfrom$packet(r1, &(0x7f0000000000)=""/159, 0x9f, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 2018/05/31 14:42:09 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20000) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000080)) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f00000000c0)=""/71) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 2018/05/31 14:42:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101001, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x72, "d23d168c3d6a432bb197be2a5f6c09d5795dbd96f35ce4d304d4d2ca67367847a0f71387a2307c0ee686093ef6a48a6ec5f2cf02265525aa0d58ee8f8187427391154696ffb567c6d7038a862d3c7fb939310754a6009a489b6ef07469c86ea4f557013a04d9d90ae139635948ba3dd9e54f"}, &(0x7f0000000100)=0x7a) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000340)={0xfff, {{0xa, 0x4e23, 0x1f, @empty, 0x8}}}, 0x88) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e23, 0x4f, @remote={0xfe, 0x80, [], 0xbb}, 0x8}}, 0x4, 0xd}, 0x90) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r3, &(0x7f0000000180)=0x4) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000040)=0x9) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0xa) socketpair(0x1b, 0x0, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r2, r3, 0x6}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x7, 0x20000) connect$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0x2710, @reserved=0x1}, 0x10) sendfile(r4, r4, &(0x7f00000002c0), 0x5) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000140)=""/233) 2018/05/31 14:42:09 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x20000000000, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, 0x1}, 0xffffffffffffffa9) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8, 0x2) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x2) shutdown(r0, 0x0) 2018/05/31 14:42:09 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1040000000002, 0x3) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:09 executing program 1: r0 = socket$inet6(0xa, 0x1000400000002, 0x37) ioctl(r0, 0x0, &(0x7f00000000c0)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = semget(0x2, 0x0, 0xe1) semop(r2, &(0x7f0000000300)=[{0x3, 0x81, 0x800}, {0x1, 0x8, 0x800}], 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x4, 0x1, 0x9, 0x2, 0x766, 0x3f, 0x200, 0x9, 0x0, 0x3}, 0xb) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000040)=""/45) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000380)=0x4ae859b66a623153) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={r4, r5, r6}, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x800000000800) fcntl$dupfd(r0, 0x0, r0) 2018/05/31 14:42:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:42:10 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r2, 0x4, 0x70bd28, 0x25dfdbfe, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [0xff, 0xff], @rand_addr=0x8}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xcb6f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x44040) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) prctl$setfpexc(0xc, 0x80) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000040)=""/230) shutdown(r0, 0x2) 2018/05/31 14:42:10 executing program 6: r0 = socket$kcm(0x29, 0x200000000020, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x32) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x10001, 0x3f}, &(0x7f0000000280)=0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @rand_addr=0x9}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0xf, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 2018/05/31 14:42:10 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) migrate_pages(r0, 0x9, &(0x7f0000000280)=0x401, &(0x7f00000002c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x7, &(0x7f0000000100)="002c172709701cc20ee6fa5722cf5aaea6f41cb6124445d3fc0da1261d1050cf2b21959a1e7358a893cabaa773a31b933762e49a7d051a") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r3 = semget$private(0x0, 0x1, 0x4) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x29, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e20, 0x3, 'nq\x00', 0x23, 0xde, 0xa}, 0x2c) semctl$GETVAL(r3, 0x0, 0xc, &(0x7f0000000000)=""/192) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x800, 0x0) getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f00000001c0)=0x4, &(0x7f0000000200)=0x1) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:10 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20000) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000080)) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:10 executing program 1: r0 = socket$inet6(0xa, 0xffffffffffff, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x14, 0x80000) accept$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x14) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:10 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x1ff, 0x0, 0xca5, 0x9, "81889a533524c65f65e54373ba6de344035c42f9afdfe0136e0a18e7aff7614d416cc90da0c68b41a95ed799", 0x40}, 0x6c77dbb500, [0x8001, 0x5, 0xfb, 0x6, 0x1ff, 0x5, 0x7, 0xffffffff, 0x0, 0x6, 0x8, 0xaa, 0x5, 0x7ff, 0x4, 0x2, 0x8, 0x7de, 0x2, 0x100000000, 0x565, 0x7ff, 0x100, 0x3, 0x1, 0x5, 0xa245, 0x4, 0x400, 0x20, 0x8, 0x3, 0x9, 0x3ff, 0x5, 0x6, 0x10001, 0x100000001, 0x2c68000, 0x2, 0xfff, 0x3, 0x3, 0x7ff, 0x20, 0xed, 0x0, 0xffff, 0x6, 0x8001, 0x7, 0xc9, 0x2f5, 0x1000, 0x9, 0x6, 0x3, 0x2, 0x8, 0x40000000, 0x101, 0x745c, 0x0, 0x9, 0x5, 0x396d, 0x7, 0x6, 0x8, 0x53d, 0xfffffffffffffff9, 0x27dc, 0x1, 0x0, 0x1000, 0x2d0, 0x7, 0x4, 0x3, 0x280, 0x0, 0xfb61, 0xff, 0x200, 0x2, 0x7, 0x4800, 0x1, 0x6, 0x0, 0x100000000, 0x4777, 0x1, 0x7fffffff, 0x0, 0x800, 0x2, 0x401, 0x5b, 0x2, 0x200, 0x5, 0x80000001, 0x983, 0x2, 0x8, 0x4, 0x0, 0xdc, 0x3, 0x1, 0x2, 0x4, 0x2, 0x7fffffff, 0x8, 0xa1, 0x101, 0x6, 0xffffffff, 0x7, 0x0, 0x9, 0x5, 0x4, 0x0, 0x6, 0x9], {r4, r5+10000000}}) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0xffffffffffffffff, 0x2, 0x1, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3}, 0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000280)=0x5, 0x8) shmctl$IPC_RMID(r1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x40) r3 = accept(r0, &(0x7f0000000000)=@in={0x0, 0x0, @dev}, &(0x7f0000000080)=0x80) bind$nfc_llcp(r3, &(0x7f00000000c0)={0x27, 0x1, 0x0, 0x5, 0x1, 0x3, "0b69df8027966f7adfa66087f5feab1f9d4708094407f02b1d6a1cd8b606228d38ca69c42a5b259cbe68902d93c9fcb6a8f4ad9fb4581d8cb95274dd5c9112", 0x28}, 0x60) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:10 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20000) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000080)) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) shmget(0x2, 0x2000, 0x502, &(0x7f0000ffc000/0x2000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 2018/05/31 14:42:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0247e22f05d02c99240970") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$inet_msfilter(r3, 0xfeffffff00000000, 0x29, &(0x7f0000000280)={@loopback=0x7f000001, @loopback=0x7f000001}, 0x72be01857c492e2a) syz_emit_ethernet(0xffd1, &(0x7f000070aef1)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @broadcast=0xffffffff}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f00000001c0), 0x4) recvfrom(r1, &(0x7f00000000c0)=""/251, 0xfb, 0x0, &(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8df0d47434cdbcd50af760189e41d163f0fc8a3fcd8091d7e462359ba12143866e68a9028c2ccc7c1fc5ae13c3f188e2e7d7b8b4d32be094067b9571df0821"}, 0x709000) 2018/05/31 14:42:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000040)) 2018/05/31 14:42:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x890f, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x2000) 2018/05/31 14:42:10 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x66ce0e59, 0x100) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x9) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:10 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20000) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000080)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:11 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x10000) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x2, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'team_slave_0\x00'}}) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)=0x0) sched_setscheduler(r3, 0x6, &(0x7f00000000c0)=0x6) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:11 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/autofs\x00', 0x30100, 0x0) setsockopt$ax25_int(r0, 0x101, 0x10000020007, &(0x7f00000018c0)=0x3ff, 0x1) syz_open_dev$sndpcmc(&(0x7f00000017c0)='/dev/snd/pcmC#D#c\x00', 0x7ff, 0x40) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="1f0000000203193b000007000000068100023b050900020000f33f00020058", 0x1f}], 0x1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x15, 0x4) socket$nl_crypto(0x10, 0x3, 0x15) readv(r1, &(0x7f00000016c0)=[{&(0x7f0000000100)=""/16, 0x10}, {&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000001c0)=""/247, 0xf7}, {&(0x7f00000002c0)=""/207, 0xcf}, {&(0x7f00000003c0)=""/192, 0xc0}, {&(0x7f0000000480)=""/227, 0xe3}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/3, 0x3}, {&(0x7f00000015c0)=""/247, 0xf7}], 0x9) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001780)=0x0) fcntl$setown(r1, 0x8, r2) 2018/05/31 14:42:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) signalfd4(r1, &(0x7f0000000140)={0x100}, 0x8, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000040)=""/255) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0]) rt_tgsigqueueinfo(r3, r3, 0x10, &(0x7f0000000200)={0x11, 0x4, 0x20, 0x8001}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) r8 = getpgrp(0xffffffffffffffff) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000280)={{0x52, r2, r4, r5, r6, 0x20, 0x6}, 0x2, 0x80000001, 0x6, 0x7, r7, r8, 0x40}) 2018/05/31 14:42:11 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20000) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000080)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:11 executing program 5: r0 = socket$inet6(0xa, 0xecee309c5e0e79ce, 0x1) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair(0xb, 0x316127ada59adfcf, 0x57, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000002c0), 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x7, 0x0, 0xffffffffffffffff, 0x100000000, 0xcf45, 0x1, 0x1f, {0x0, @in6={{0xa, 0x4e22, 0x3, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x4a}}, 0x3, 0x19c, 0x4, 0x8000000000, 0x401}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r4, 0x800}, &(0x7f0000000200)=0x8) 2018/05/31 14:42:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:42:11 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x5ec}, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r1, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'gre0\x00', 0xc0}) 2018/05/31 14:42:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:11 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20000) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000080)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="00ff2f07d82c99240970") r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ff5000/0x2000)=nil) shmget$private(0x0, 0xa000, 0x410, &(0x7f0000ff6000/0xa000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x20}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000140)={r4, r5, 0x9}) ptrace$getsig(0x4202, r2, 0x7fff, &(0x7f0000000040)) 2018/05/31 14:42:11 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x7, 0x20000000008) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:11 executing program 7: r0 = socket$inet6(0xa, 0xa, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xfffffffffffffffd, &(0x7f0000000000)="00a8ee133543f1c9f4ade0bfd34f135edacbae036dfa8a5d07600ecc74397b5e807f29717abe53c2027a318d8bea9fb7c71bc959b3ee7ec2430b1fa69514f788ff1c5b6701d40a5c4b3056f8cdcc99c07166ec9d8968e33c6657f52af76a204cdcb95f51db2a639cf62e1a0b9796c8f9fd8d5b963990965682b7b98d484f98b7511813577975d65be986e710ad4b2ed21fe16e28a25c1d") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x20200, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000100)={0x36, 0x7f, 0xece, 0x9, 0xa, 0x7}) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:11 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20000) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) [ 323.674393] Unknown ioctl -1072667624 [ 323.710088] Unknown ioctl -1072667624 2018/05/31 14:42:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) connect$nfc_llcp(r2, &(0x7f00000000c0)={0x27, 0x1, 0x0, 0x3, 0x8, 0x3, "76d81e9f24e7c4c9515fa2d72b77503a511faedf0b58796d7a789ca049e434537be7570016b8724f6741c12866b9ada864ce3c8e935fdef842cfd2ed2e983c", 0x31}, 0x60) getpeername$ax25(r2, &(0x7f0000000040), &(0x7f0000000080)=0x10) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:12 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20000) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0xfffffffffffffe22, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x3f, 0x8001, 0xfffffffffffffffb}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3, 0x4}, &(0x7f0000000180)=0x8) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) recvmmsg(r0, &(0x7f0000000780)=[{{&(0x7f0000000280)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000400)=""/152, 0x98}, {&(0x7f00000004c0)=""/135, 0x87}, {&(0x7f0000000580)=""/108, 0x6c}, {&(0x7f0000000600)=""/70, 0x46}], 0x5, &(0x7f0000000700)=""/87, 0x57, 0xfffffffffffffffe}, 0x8}], 0x1, 0x1, &(0x7f00000007c0)={0x0, 0x1c9c380}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000004}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xf4, r5, 0x100, 0x70bd29, 0x25dfdbff, {0x9}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xeb}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf296}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1=0xe0000001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6b}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffffffffc01}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000) 2018/05/31 14:42:12 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r2, 0x4, 0x70bd28, 0x25dfdbfe, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [0xff, 0xff], @rand_addr=0x8}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xcb6f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x44040) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) prctl$setfpexc(0xc, 0x80) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000040)=""/230) shutdown(r0, 0x2) 2018/05/31 14:42:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x1000)=nil, 0x4004) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:12 executing program 6: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) unshare(0x220101fc) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000400)=0xfffe) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={r1, 0xbe7, 0x9, [0x3, 0x9, 0x4, 0x7, 0x0, 0xffffffff, 0x1, 0x80000000, 0x3]}, &(0x7f0000000100)=0x1a) 2018/05/31 14:42:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) ioperm(0x400000007, 0x100000000, 0x0) shutdown(r0, 0x2) 2018/05/31 14:42:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, &(0x7f00009ff000)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:42:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0x9}, 0x238) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:12 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20000) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = shmget(0x2, 0x1000, 0x7800000c, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x2000) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0xa0081) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) socketpair$inet(0x2, 0x807, 0xaf, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/05/31 14:42:12 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20000) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:12 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x0) r1 = epoll_create(0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x5, 0x1, 0x9, 0x2000000000000040, 0x7}, 0xc) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e24, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x76}, {0xa, 0x4e21, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xfffffffffffffff9}, 0x100, [0x2, 0x3ff, 0x0, 0x4, 0xb1, 0x8, 0xfffffffffffffffe, 0x80]}, 0x5c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000ae7ff4)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x39ca, 0x41) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x80000001, 0x8, 0x7, 0x2, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x697c}, &(0x7f0000000180)=0x8) 2018/05/31 14:42:12 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2400, 0x0) setsockopt$inet_dccp_int(r0, 0x21, 0x5, &(0x7f0000000040)=0x20000000000000, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7379735afa19528136b49474656d2e00"], &(0x7f00000000c0)='/dev/sequencer\x00', 0xf, 0x2) 2018/05/31 14:42:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000080)) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:12 executing program 3: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20000) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:13 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc08c5114, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x4, &(0x7f00000001c0)="0045fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x101000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40001040}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r4, 0x300, 0x70bd29, 0x25dfdbfb, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfb}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xdca0}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x334}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x40800) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x401, 0x481) ioctl$SNDRV_TIMER_IOCTL_STATUS(r5, 0x80605414, &(0x7f0000000080)=""/197) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @host=0x2}, 0x10) 2018/05/31 14:42:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 2018/05/31 14:42:13 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:13 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2000, 0x0) close(r0) fcntl$setstatus(r0, 0x4, 0x0) 2018/05/31 14:42:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x8c, &(0x7f0000000000)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e20, @multicast2=0xe0000002}, @in={0x2, 0x4e20, @rand_addr=0x1}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, @in={0x2, 0x4e24, @multicast1=0xe0000001}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, @in6={0xa, 0x4e23, 0x100000000, @local={0xfe, 0x80, [], 0xaa}, 0x4}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1, 0x8, 0x30}, &(0x7f0000000180)=0xc) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) 2018/05/31 14:42:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, &(0x7f00009ff000)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:42:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, &(0x7f00009ff000)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:42:13 executing program 6: unshare(0x2000400) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x220040, 0x0) write(r0, &(0x7f0000000140)="d2375e70f3e9e8f5de2ba216c1103947af9e15e5d7e245e626ebeaccbaf23c4525b043ae542bd35286e992283214295ebaedecb7607f05a277b3282e4167663ce68de596fe39a2a296b640c680f1b2d97d4425b439c5fd28129c79a4227875e0393d64920155ad666e78b47e24ba909f486f6b174abf2a2de91d69829ca248035431db2396e284b6322156c8524e98b3cacbc63cec3987bf7476862d3f408348013ee42598b5a5e2aedaf878100291c89fba1e313a875597af22b4faabdec6b409a277", 0xc3) 2018/05/31 14:42:13 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x758000000000) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970510695ba1dbe4404de6553da0b4a08bbd87e1aa665e3a3c9c65ae31caab9941d88a66e5d7a21a644a9899ef016df340e128634f54cd811fd608b8a70059e") r1 = shmget$private(0x0, 0x4000, 0x23f, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:13 executing program 4: unshare(0x24020400) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffff9c}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000100)={0x4, 0x0, 0x10003, 0x3ff}) r4 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x9, 0x20000) ioctl$TCFLSH(r4, 0x540b, 0x3ff) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000140)={0x101, r3}) r5 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f00001e9000)) ppoll(&(0x7f0000000000)=[{r5}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x8) 2018/05/31 14:42:13 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="e78fdd641c084a03ce67652983", 0xd}, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) io_submit(r1, 0x20000000000002d2, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x200000, 0x0, 0x0, 0x0, r0, &(0x7f0000001000)}]) 2018/05/31 14:42:13 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x80) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0xfffffffffffffffc, 0x0, 0x10001, 0x7fffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x9, r1, 0x1, 0x400}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:13 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") readahead(r1, 0x9, 0x400) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, &(0x7f00009ff000)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:42:13 executing program 4: r0 = socket$packet(0x11, 0x5, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) fcntl$setstatus(r2, 0x4, 0x42000) syz_emit_ethernet(0xe, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}}, &(0x7f00000000c0)) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x3) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 2018/05/31 14:42:13 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x4) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000507fd60000000000000000000000e3ffffff000000000007000000007a0bfa5d28f6d2ffa8ab7f0000000000000035317b93ad59d8772749b5d34e2f71c439b7148589cb240cc67b80125da5c1ef69ba32351eb855d6f0ee6f398ccd0100000000000000000ebe349ad2adc97dc7ff8df6e66a6623441eedb1a28f20d4014a5c81e4c4bbd74af0970b4da1d6010b89ac"], 0x97) 2018/05/31 14:42:13 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r2}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x400000) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100, 0x0) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400, 0x0) setsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f0000000040)=0x700, 0x4) 2018/05/31 14:42:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:13 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') connect$llc(r0, &(0x7f0000000040)={0x1a, 0x20, 0x9, 0x1, 0xdd7, 0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000000c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x82) fchdir(r0) 2018/05/31 14:42:14 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000080)='\x00', r0) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000280)={r4, 0x8}, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x34, 0x0, 0x0, 0x9}, {0x6}]}, 0x10) sendto$unix(r2, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 2018/05/31 14:42:14 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:14 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x276}], 0x100000000000039a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/209, 0xd1}, {&(0x7f0000000380)=""/242, 0xf2}], 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @multicast2=0xe0000002}, 0x10) statx(r0, &(0x7f00000001c0)='./file0\x00', 0x400, 0x22, &(0x7f00000004c0)) dup(r0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000180)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) 2018/05/31 14:42:14 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x7fffffff, 0x8000) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x200000000000000, &(0x7f0000000180)={0xa, 0x40000000004e23, 0x0, @dev={0xfe, 0x80, [], 0x21}}, 0x1c) epoll_wait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x7) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x9, 0x1041) 2018/05/31 14:42:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") acct(&(0x7f0000000000)='./file0\x00') r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101000, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000540)={0x7, 0x0, [{0x6000, 0x5b, &(0x7f0000000080)=""/91}, {0xd000, 0x62, &(0x7f0000000640)=""/98}, {0x0, 0xe2, &(0x7f0000000280)=""/226}, {0x102002, 0x23, &(0x7f0000000180)=""/35}, {0xd000, 0xc9, &(0x7f0000000380)=""/201}, {0x1, 0x62, &(0x7f00000001c0)=""/98}, {0x0, 0xb5, &(0x7f0000000480)=""/181}]}) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4001) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:14 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) r3 = dup(r2) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000080)=""/156) r4 = memfd_create(&(0x7f0000000000)='-7vmnet1\x00', 0x1) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000000040)) 2018/05/31 14:42:14 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockname$inet6(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000000c0)=0x1c) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:15 executing program 6: unshare(0x24020400) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1a}}, @remote={0xfe, 0x80, [], 0xbb}, 0x9, 0x227c, 0x5, 0x400, 0x9, 0x800300, r1}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001dc0)=[{&(0x7f0000000000), 0xffffffffffffff86}], 0x1, 0x0) 2018/05/31 14:42:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6174000000000000000000000007b0a946dccd1053ef9c0000000000000000030000000000000000000002000000000000000000000000000000c58a4c040000000000000000000000000000000000005961dd0000001038c0b2cb0000000000000000"], 0x58) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:15 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1032, 0xffffffffffffffff, 0x0) close(r0) socket$inet6(0xa, 0x1000000000002, 0x0) inotify_init1(0x80800) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:15 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) 2018/05/31 14:42:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, &(0x7f00009ff000)=ANY=[@ANYBLOB], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:42:15 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f00000000c0)={0x82, 0x4, 0x1, 0x9, "032830cb5566b105c966c12df87c8d7ea01e0b59378c495e36502abdc840040c75b7b73505b319f484eb639a", 0x101}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0x6) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = getpgid(0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000680)=0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000006c0)=0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20200}, 0xc, &(0x7f0000000640)=[{&(0x7f0000000280)={0x34, 0x3e, 0x400, 0x70bd26, 0x25dfdbfe, "", [@nested={0x10, 0x7c, [@generic="2876ab6daf560750786c"]}, @typed={0xc, 0x75, @u64}, @typed={0x8, 0x8c, @u32=0xff}]}, 0x34}, {&(0x7f00000002c0)={0x1dc, 0x13, 0x400, 0x70bd2b, 0x25dfdbfd, "", [@generic="765b8c5b8e189a6e999ebbd50df1376e7682901f78c4f773a1c2303b4c70c10bf82b7b05aac8daf3a6bd5dc431d02477423f80893a4590f02d5c59ad78ee12d60ef90b4ca09d3cd75906d82a566f9a74eb30773aa194a39614818c381d7c314be50ea218176f94ee05294ce25709294ad89e644c5d23cf7473480f5c136fbfd13f0142dc0b965c081e9fb33048a2a947bf10d0b4ab364548cc4c6263118215e090164450ced73c04b938e7bfe8646d189352670184cca65145ac6f6a42e13751e2b1", @typed={0x14, 0x38, @str='/dev/input/mice\x00'}, @generic="ec3ddff358b413702c27d3774715657ce62e59439018b749a4dacd1a4e984bd7f7c9dc7baa578f719fffe04dbd92b8930717308d3ee2381fe393b2d9e93775a413e77a3412b99c48fbea1b07f937c34e57e5b79454734ea5970395705f98a49e53876a2d63afcf54bcd500f3d527bc93aeeb390b5da78d83e0dc021ad524d47f99b0997eba607709f5ddd80f2f1328175be27b166a3815521f051ba643a62ec3c50789187802a5df80b238f0458ef0d2c519b7619deb2b5a29617effd68bd467310e32714762d28460e129c52f28e8de1b29eb387fa47f1c77202b5286215647ce795581f03088a59c812151bafb1c90eee0a91856"]}, 0x1dc}, {&(0x7f00000004c0)={0x50, 0x1f, 0x800, 0x70bd28, 0x25dfdbff, "", [@generic="ee3cae983818353a769ed6d72e361d19eaec85696bb24d370cb6dd68be2e301c1de2da35b572382553a9e2b6cc34811f15225804ea4fe876ebe32a46a6bb"]}, 0x50}, {&(0x7f0000000540)={0xe8, 0x28, 0x1, 0x70bd2d, 0x25dfdbfb, "", [@generic="f1c21d9d67959a42250285a8f63d4a3a7eec03c15c9ebc61e9d667e3ebdc4b7f60db27c834ec54ff33df03cf107ea695b836d3a6728a0cfa458d6c76ddb13cd2a9c970d0640c1fbf02a4b1835d6787ce715c005f4751cb478407a14f90d6e484dfb4d2ac6e49a168abafb651c3391b585f18bdbe8fcf94250b55949d5d9d6c2ff860e5e8e970f65ad587f38b4a9c929980dd4c04798cc94e56fca009eec61fa78118f97042b5327e0cb77118fcd3415548f4ea2482f764857a984cf8b4b768457b6de7c2", @typed={0x14, 0x22, @ipv6=@dev={0xfe, 0x80, [], 0x16}}, @generic]}, 0xe8}], 0x4, &(0x7f0000000700)=[@cred={0x20, 0x1, 0x2, r6, r3, r4}, @rights={0x28, 0x1, 0x1, [r1, r5, r1, r0, r5]}, @cred={0x20, 0x1, 0x2, r7, r3, r4}, @cred={0x20, 0x1, 0x2, r8, r3, r4}], 0x88, 0x8840}, 0x8040) sendto$inet6(r5, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r9 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r9, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:15 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x4000, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, 0x400}, 0x1c) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8647, 0x400) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="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", 0xfb}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) r2 = getgid() stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) bind$ipx(r1, &(0x7f0000000580)={0x4, 0xaf, 0x8, "a1d441582396", 0x100000000}, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @empty, 0x101}}}, &(0x7f0000000680)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000006c0)={r9, 0xd63b}, 0x8) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000500)={'ah\x00'}, &(0x7f0000000540)=0x1e) setgroups(0x7, &(0x7f00000004c0)=[r2, r3, r4, r5, r6, r7, r8]) shutdown(r0, 0x7fffffffff) 2018/05/31 14:42:15 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "81182e", 0x44, 0x2c, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f0000000000)) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40002, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0)=0x5, 0xfffffffffffffec5) ioctl$sock_ipx_SIOCAIPXPRISLT(r0, 0x89e1, &(0x7f0000000080)=0x9) 2018/05/31 14:42:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:15 executing program 6: r0 = socket$inet6(0xa, 0x80003, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f0000000040)=0x1c) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") close(r1) 2018/05/31 14:42:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = getpid() ptrace$setregset(0x4205, r2, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="d428a35964ff34f15b808f756ee21be6557efd64d664af725aadad284d09a3df5be8c6481466dff45352b3ee1dc55e47cbe0933a3eeff017827b2944a8387faa2132234cf113c9d9961c230aa30c72723acd1af38fc30bbedd5d57c6403edb2bc8abc3e3a1264b4cfb9392cb080a6c59bf6ac25d0e65ee66f0fddbcb1d1c65f6698017216b4a", 0x86}) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:15 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xfea000)=nil, 0xfea000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0xfffffffffffffff7, 0x9, 0x1}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000040), 0x8) 2018/05/31 14:42:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) socketpair$ax25(0x3, 0x7, 0xf, &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0047fc2f07090099240160") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:15 executing program 6: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfffffffffffffffc, 0x40002) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/65) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @reserved=0x1}, 0x10) 2018/05/31 14:42:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:16 executing program 7: munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x900}, 0xc, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x38, 0x18, 0x311, 0x0, 0x0, {0xa}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x38}, 0x1}, 0x0) ioctl(r0, 0x80000008912, &(0x7f0000000240)="0047fc00878cbd68620682") r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:16 executing program 6: socketpair(0xb, 0x800, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fadvise64(r0, 0x0, 0x28f5, 0x2) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) write$binfmt_elf32(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46000000000000000000000000020000000200000000000000ebfcffff0000000000000000fdff200001000200000008000000000007000000ff7f0000040000000600000001000000080000000800000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0000000000000000000000000"], 0x158) 2018/05/31 14:42:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000480)={{{@in=@rand_addr=0x6, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e21, 0x9, 0x4e22, 0x5, 0x2, 0xa0, 0x80, 0x33, 0x0, r1}, {0x9, 0xcd, 0x2, 0x2, 0x7b76, 0x3, 0x20, 0xff}, {0xb450, 0x9, 0x8, 0x4}, 0xc3, 0x6e6bbd, 0x3, 0x0, 0x3, 0x1}, {{@in6, 0x4d3, 0x32}, 0x2, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x3504, 0x3, 0x3, 0x7fffffff, 0x1a0, 0x0, 0x7c7}}, 0xe8) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xa61c}, &(0x7f0000000040)=0x8) socket$inet6(0xa, 0x800, 0x2ded) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={r3, 0x4, 0x2, [0xffffffffffffff06, 0x8]}, 0xc) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000180)=0xa8) io_setup(0x6, &(0x7f0000000300)=0x0) io_destroy(r6) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={@dev={0xfe, 0x80, [], 0x10}, @dev={0xfe, 0x80, [], 0x17}, @mcast1={0xff, 0x1, [], 0x1}, 0x7fffffff, 0x1, 0xa83e, 0x100, 0x2, 0x2070021, r7}) 2018/05/31 14:42:16 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x402000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000200)) r1 = socket$inet6(0xa, 0x1, 0x5) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000280)=""/214) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000000140)="a164b82377b87ba0df799a87d9904b6bb8a488b7dfeee1364824bb1f7172e022a4267681fc9bc49e7fd60db013f4c269b35912c83f1b2e712b1f128cff75dbb9408f731bee7bd15c148772d46b658b163074808586c227b7776c623ed9972c938fc9f91a3b6fb2973ea8e503c07ff9bf48aaa1ff9933a8cc58b13d3046da9e79cefd305e3035cec58931bd77fd57b87594eb8ebf513060b38772de04f69780822c6cb9758ae94f938cf3f71fd4", 0xad, 0x8c0, &(0x7f0000000080)={0xa, 0x4e24, 0x20, @mcast1={0xff, 0x1, [], 0x1}, 0xd5f1}, 0x1c) listen(r1, 0x6) r2 = socket$inet6_sctp(0xa, 0x3, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x80000, 0x0) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f00000000c0)=0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="fcffffff000000000002000000", @ANYRES32=r1, @ANYBLOB="08000200ac141400"], 0x20}, 0x1}, 0x0) 2018/05/31 14:42:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, &(0x7f00009ff000)=ANY=[@ANYBLOB], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:42:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:16 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000380)='/dev/admmidi#\x00', 0x100000001, 0x42) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f00000003c0)={0x1f, 0x4d7, 0x8000, 0x400, 0x1, 0x549b, 0x1ff, 0x6, 0x0}, &(0x7f0000000400)=0x20) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000440)={r1, @in={{0x2, 0x4e21, @rand_addr=0x9}}}, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r2, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) r3 = memfd_create(&(0x7f00000001c0)='vmnet1/\x00', 0x2) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000200)=0x8001, 0xf9) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x8, 0x38, 0x0, 0x0}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r4, &(0x7f00000000c0)=0x4) r5 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0xe, 0x2001) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000240)={0x100000000, {{0xa, 0x4e23, 0x8, @mcast1={0xff, 0x1, [], 0x1}, 0x5}}, {{0xa, 0x4e23, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0x8000}}}, 0x108) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x20042, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x7f, @broadcast=0xffffffff, 0x4e22, 0x2, 'lblcr\x00', 0x30, 0x8c96, 0x50}, 0x2c) shutdown(r2, 0x2) 2018/05/31 14:42:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="0047fc2f07d82c99240970") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:16 executing program 4: unshare(0x24020400) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/fib_trie\x00') close(r2) 2018/05/31 14:42:16 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4102, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000080)={0x80, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e20, @multicast2=0xe0000002}, {0x2, 0x4e22, @multicast1=0xe0000001}, 0x0, 0xff, 0xe7d, 0x8, 0x0, &(0x7f0000000040)='team_slave_0\x00', 0x2, 0xffff, 0x80000001}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:16 executing program 6: r0 = socket(0x15, 0x80005, 0x0) mmap(&(0x7f0000000000/0x57000)=nil, 0x57000, 0x4, 0x32, 0xffffffffffffffff, 0xfffffffffffffffe) getsockopt(r0, 0x200000000114, 0x0, &(0x7f0000001000)=""/4, &(0x7f0000000000)=0x4) 2018/05/31 14:42:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:16 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:16 executing program 7: r0 = socket$inet6(0xa, 0x100000000000a, 0x6) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/162, 0xa2) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000e9e000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:16 executing program 4: r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'bridge_slave_1\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000897ff4)={0x10}, 0xc9, &(0x7f0000023000)={&(0x7f0000010dfc)={0x14, 0x0, 0x1, 0x1}, 0x14}, 0x1}, 0x0) 2018/05/31 14:42:16 executing program 6: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000000040), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) io_submit(r1, 0x1, &(0x7f0000001540)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r3, 0x3}, 0x8) [ 329.163184] sctp: [Deprecated]: syz-executor0 (pid 20586) Use of int in maxseg socket option. [ 329.163184] Use struct sctp_assoc_value instead [ 329.200360] sctp: [Deprecated]: syz-executor0 (pid 20532) Use of int in maxseg socket option. [ 329.200360] Use struct sctp_assoc_value instead 2018/05/31 14:42:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xfffffffffffffffe, 0x0, 0x0) 2018/05/31 14:42:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:17 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2000, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0xfffffffffffffffc, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x3, 0x9, 0x1, 0x1ff, 0x100000001, 0x401}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="775c78c9a6cd42e750369b09cfb6f82a", 0x10) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000002140)={0x14}, 0x14}, 0x1}, 0x0) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r1, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e22, 0x8, @mcast1={0xff, 0x1, [], 0x1}, 0x10000}}, 0x297a, 0x4, 0x201, "b671fc47490c5dee94e54da8db915988892d3b2a809c280add1bb3a08ae16463fc00cbe7878441cec28c7c5151ceee01dd0c707bdb6e07fb4a83e0305b9b07ee1f1e3c7fc7293deefab4fce609263245"}, 0xd8) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 2018/05/31 14:42:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") recvfrom$inet6(r0, &(0x7f00000000c0)=""/88, 0x58, 0x12100, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, 0x1c) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x10440, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf000, 0x2, &(0x7f0000ff1000/0xf000)=nil) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x80, @tick, 0xffffffffffff7fff, {0xa1, 0x4562}, 0x8, 0x1, 0x6}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, &(0x7f00009ff000)=ANY=[@ANYBLOB], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:42:17 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e1f, 0x100000000000, @remote={0xfe, 0x80, [], 0xbb}}, 0xffffffffffffff10) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x800) r2 = dup2(r1, r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40204000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r3, 0x100, 0x70bd27, 0x25dfdbff, {0x10}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000080)={0xe4, 0x1, 0x0, [{0x1, 0x9, 0x3f, 0x1, 0xffffffffffff11bf, 0x2, 0x7}]}) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x10182) 2018/05/31 14:42:17 executing program 6: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000000040), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) io_submit(r1, 0x1, &(0x7f0000001540)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r3, 0x3}, 0x8) 2018/05/31 14:42:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x1, 0x2) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x80000001, 0x6000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:17 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x2) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x400000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x1f}, 0x10) modify_ldt$read(0x0, &(0x7f0000000280)=""/130, 0x82) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x74073d71, 0x40000) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f00000000c0)) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x0) r4 = openat(r3, &(0x7f0000000180)='./file0\x00', 0x432001, 0x7) ioctl$SG_GET_SG_TABLESIZE(r4, 0x227f, &(0x7f0000000040)) 2018/05/31 14:42:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) 2018/05/31 14:42:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000040)) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:18 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000140)={0x7, 0x0, 0x10001, 0xac}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000180)={0x9, r5, 0x0, 0x6}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r6, 0x8004510a, &(0x7f0000a07fff)) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:18 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") fstat(0xffffffffffffffff, &(0x7f0000000440)) r1 = semget$private(0x0, 0x3, 0x100) semtimedop(r1, &(0x7f0000000000)=[{0x3, 0x5, 0x1800}, {0x7, 0x7f, 0x1000}, {0x0, 0x3, 0x800}], 0x3, &(0x7f0000000040)={0x0, 0x989680}) 2018/05/31 14:42:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:42:18 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) eventfd(0x3f) shutdown(r0, 0x2) 2018/05/31 14:42:18 executing program 4: socket$inet(0x2, 0x3, 0x1c) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00') read(r0, &(0x7f0000000040)=""/230, 0x20000126) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{0x20, '#'}, {0x20, "a875736572"}, {0x20, 'net/raw\x00'}, {0x20, 'net/raw\x00'}], 0xa, "95bc39ef222118ab1ea5da46e104e6e0a70ccbfb2c8b49bf0e7213c1ff2c3d6a6d84eab1610284a46b2ef8edc2c08bc17e31f98727206ea06e440a915b0196840cc1788ab2053ef2bcb3237899bae723b3fd0908eb9d7d671b009bf5a71857c269bd0d13d765a2ea85704589722ca0e0be4d805c3f84ab6f070dc68b3f670d83c7073d8d8c"}, 0xaa) socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r0, &(0x7f0000000000)=""/56, 0x38) 2018/05/31 14:42:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d8") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:18 executing program 6: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x18}, 0x10) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7ff, 0x800) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000100)=0x1, 0xffffffffffffff8e) 2018/05/31 14:42:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x1, 0x200000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x8, 0x4, 0x1ff, 0x3, "f6e1ec47a40e38c3f5adcfdda06f67e13bf2bffbc1ebd4cf349cbcdfa6eca824f68a3cc062f179af4034bfe0", 0x80}, 0x400, [0x8000, 0x80000000, 0x0, 0x1, 0x36, 0xff, 0xfff, 0xf4, 0x0, 0x40, 0x7, 0x6, 0x950, 0x8, 0x1, 0x7, 0x78, 0xbc4, 0x9, 0x6, 0xadf, 0x6, 0x100000000, 0x4, 0x17f, 0x8, 0x2, 0x1, 0xe20, 0x9, 0x5, 0x6, 0x33d, 0x2, 0x72b7, 0x500000000, 0x7240000000000000, 0x401, 0x4, 0x2, 0x8, 0x8001, 0x8001, 0x101, 0x5, 0x6, 0x8, 0x3, 0x7fff, 0x2, 0x2, 0x9, 0xffffffffb4aef9df, 0x2, 0x7ff, 0x2, 0x82b1, 0x7ff8000000000, 0x400000000000000, 0x7ff, 0x1, 0x80000001, 0x800, 0xfff, 0x5, 0x6, 0x81, 0x8, 0x0, 0xf0, 0x10000, 0x7, 0x45cc, 0x4, 0xff, 0x3, 0xfffffffffffffff7, 0xffffffff, 0xe, 0x0, 0x9, 0x1, 0x7f, 0x7, 0x2, 0x38, 0x0, 0x408f, 0xc219b43, 0x3, 0x400, 0xffffffff, 0x7fffffff, 0x0, 0x5, 0x2, 0x7, 0x0, 0x6, 0xffff, 0xc6, 0x9b15, 0x5, 0x8, 0x20, 0x100000000, 0x0, 0x2, 0xe77, 0x1, 0x2, 0xfffffffffffffc00, 0x85, 0x6d, 0x6, 0x10000, 0xffffffffffffff3f, 0xe6c, 0x0, 0xe6d3, 0x80, 0x7, 0x80000000, 0xf5, 0x100000001, 0x8, 0x1, 0x2], {0x77359400}}) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0x80000001, 0x14000) bind$bt_l2cap(r1, &(0x7f0000000580)={0x1f, 0x1f, {0x81, 0xfa4e, 0x40, 0x7, 0x8, 0x7fffffff}, 0xfffffffffffffffe, 0x7f}, 0xe) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000440)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$adsp(&(0x7f0000000540)='/dev/adsp#\x00', 0x4, 0x800) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000280)=0xc) getgroups(0xa, &(0x7f00000002c0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0]) connect(r0, &(0x7f00000004c0)=@rc={0x1f, {0x3, 0x3, 0x1, 0xedc2, 0x4a, 0x7}, 0x20}, 0x80) sendmsg$unix(r3, &(0x7f0000000380)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000140)="5e513695060cb7370be7e5c25fedf66737f63dbbbac4c9dd5fd781ed2108b8af18ebcdca42cd79650cd824974b2c3dfb8dd0d8e1e3c6d587cc20d7d56ef394ce1fd167b45c05c383e40153d3c0d3303ee9ae63b37a78154c25307459d43b703dbac68d7b29ae4d863ccdc144bbea08f6a8666449cae83cdb63031376f96745", 0x7f}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="00000020d38c92d30c22a53028f9525c91c3378786b119e1b59c23db736114b00800000002ad379533", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2], 0x48, 0x4000}, 0x8011) r7 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r7, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000480), 0x10) sendfile(r3, r7, &(0x7f0000000080), 0x7f) sendfile(r3, r7, &(0x7f000000a000), 0x200000000000002) 2018/05/31 14:42:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) fcntl$setown(r0, 0x8, r2) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) socketpair(0x10, 0x4, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000100)={0x6, 0xfffffffffffffff8, r4, 0x6c, r5, 0x3f, 0x1, 0x5}) 2018/05/31 14:42:18 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x85bc, 0x4000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000480)=@assoc_value, &(0x7f00000004c0)=0x8) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0x6) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x20000, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f00000000c0)={@remote, @multicast1, @dev}, &(0x7f0000000140)=0xc) r4 = getpgid(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000300)={{0x20, 0x3, 0x5, 0x1, "5474968d5dc441f8fba62e040462e6f427ef1f3164a36f74245a566cb6caddbbd49e36d52cc121281b0a89fd", 0x1}, 0x0, 0x0, 0x10001, r4, 0x0, 0x8001, "7f8f6f111678539a22192cfef81bb9ff2d5582922f6438bdba098339d08e715319d17b1e2f244746d9341e13e660d501764b0f7725e83c5c5700543312f47b5d", &(0x7f00000002c0)='/dev/mixer\x00', 0xb, [], [0x5, 0x8, 0x1, 0x7fff]}) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000180)=""/150, &(0x7f0000000280)=0x96) ioctl(r5, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x67}, 0xb) 2018/05/31 14:42:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x40081) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x10) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:18 executing program 6: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r0) 2018/05/31 14:42:18 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffffffffffd, @mcast1={0xff, 0x1, [], 0x1}, 0xd}, 0x1c) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'irlan0\x00', {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}) sendmsg(r0, &(0x7f000001b000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="f67f986af9dc33a1a19f79f8bdd4546287209739ae649266f062bcd978b94585b9bf1100ed8bc3b5", 0x28}], 0x1, &(0x7f0000000000)}, 0x0) 2018/05/31 14:42:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000003, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r1) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x40000004000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:19 executing program 6: set_mempolicy(0x8003, &(0x7f0000000e00)=0x9, 0xffc) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='%mime_type\'\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x102002f01) 2018/05/31 14:42:19 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet(0x2, 0x3, 0xfa) sendmmsg$inet_sctp(r1, &(0x7f0000009b00)=[{&(0x7f00000002c0)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f0000001780), 0x0, &(0x7f0000001840)=[@init={0x18, 0x84}], 0x18}], 0x1, 0x0) 2018/05/31 14:42:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:19 executing program 5: r0 = socket$inet6(0xa, 0x7, 0x6) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x20004e23, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0xfffffffffffffe75) listen(r1, 0x6) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000280)={0xffffffff80000000, {{0xa, 0x4e23, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}, {{0xa, 0x4e24, 0x200, @local={0xfe, 0x80, [], 0xaa}, 0x1}}}, 0x108) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x4, 0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x402100, 0x0) inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x80) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="004708c50000000000000070ca97a69702ea96059179bf46751fc32059e17baa710cb329d46ef2245c0f2ef51b05729ab2fd12a885b3e8a22b5aff27a7f5cfc0bbfebb86f8eebc88c74c10fced4e1c0f6e62e8955d6c8d65595fa759a680a164f9e8e5a1cf91ef4c8ecf7cc180793f1dbbfa4748db494d86aa0972a35476f65e8e756cac8b8f90648eaebd19596c7dd4f9bfec14cd46215c0eb4d7e0c855deead71c36970000") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x4}) io_setup(0x4, &(0x7f0000000040)) accept$inet6(r0, 0x0, &(0x7f0000000080)) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:42:19 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) r3 = socket(0x2, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840)='/dev/uinput\x00', 0x101081, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000008c0)={0x6, &(0x7f0000000880)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000900)={r5, 0x1}) clock_gettime(0x0, &(0x7f0000000140)={0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000180)={r6}, &(0x7f00000003c0)) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x80000) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000800)) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000040)="aadeb6b158110eba4794afdbffbed932549a38f6d71aac6cc9cd409ea2b661d4ea554883dfe072692f357195a76bd8ee1f4ce9b87604fe7c0bbb472984b2030c66250907432508be794622870254ee84e23858190963fed93a6dcef60f41a895688031530892cd837651562cf06290879a74d40f4ba8689f420b1e9b69fac74df3db02c748146f774a1d24466b9892eef2041ea8b6bfdcd67a0dc1229064288fab353ff2887502c1eba58acbe0dd45289f64", 0xb2) write$binfmt_elf64(r8, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x7ff, 0x8d, 0x9, 0x413, 0xf5, 0x3, 0x3e, 0x30, 0x1ca, 0x40, 0x2bc, 0x80, 0x5, 0x38, 0x1, 0x4, 0x8001, 0xfffffffffffffffe}, [{0x60000006, 0x22f, 0x4, 0x3f, 0x9, 0x1, 0x7, 0x8}, {0x1, 0x7, 0x7, 0x8, 0x760, 0xffffffffffffffff, 0x80000000, 0x400}], "a1b1069db817eddf162027d2e8c93233e801813875ee9cf8230a53eac6ca870b6f02e299870fd375", [[], [], [], [], [], []]}, 0x6d8) connect$inet6(r7, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r7, 0x2) 2018/05/31 14:42:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:19 executing program 1: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000001c0)=0xfffffffffffffc01, 0x4) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x400, 0x0) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000280)="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") shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000000c0)={@dev, @remote, 0x0}, &(0x7f0000000100)=0xc) sendto$packet(r4, &(0x7f0000000080)="338ccdd10a910fa3ea678699b7ec4f43200aaf36c19833d5b08b0eba15295d980f6446f3db547239844f25b3046df48ade13bdb7b146fd87c35b6a4dbe", 0x3d, 0x41, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:19 executing program 4: 2018/05/31 14:42:19 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x18) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180), 0x10) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffd, 0x40000) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) 2018/05/31 14:42:19 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) write$binfmt_elf64(r0, &(0x7f00000018c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000722f660f260295982d0195d0832626f9327c81bed7bdc60062df11586e83a50d941909e9a4d7adcd71f3a1978571f43f1e88b22574fa9b"], 0x3af) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xc5b) 2018/05/31 14:42:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x2, r2, r3, 0x786, 0x2c) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x7, 0x88003) 2018/05/31 14:42:19 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') socket$inet6_icmp(0xa, 0x2, 0x3a) accept$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000000c0)={r2, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) 2018/05/31 14:42:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x94, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r2, r3/1000+30000}, {0x77359400}}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x410200, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'rose0\x00', 0x2}, 0x18) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:19 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x7c}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={r3, 0x1}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) 2018/05/31 14:42:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:42:19 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) write$binfmt_elf64(r0, &(0x7f00000018c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000722f660f260295982d0195d0832626f9327c81bed7bdc60062df11586e83a50d941909e9a4d7adcd71f3a1978571f43f1e88b22574fa9b"], 0x3af) getsockopt$inet6_dccp_int(r0, 0x21, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0x4) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x89e5}, @void, @ipv4={{0x15, 0x4, 0x5, 0x0, 0xf3, 0x64, 0x3, 0x918, 0x0, 0x0, @rand_addr=0xc34, @local={0xac, 0x14, 0x14, 0xaa}, {[@lsrr={0x83, 0x13, 0x10001, [@rand_addr=0x5, @multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}]}, @ssrr={0x89, 0x17, 0xfffffffffffffffe, [@loopback=0x7f000001, @multicast1=0xe0000001, @rand_addr=0x3, @multicast1=0xe0000001, @multicast1=0xe0000001]}, @end, @ra={0x94, 0x6, 0x1f}, @ra={0x94, 0x6}, @ra={0x94, 0x6, 0x1}]}}, @dccp={{0x4e22, 0x4e20, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, "1288e0", 0x3, "473c84"}, "25b5d5214cd1b7fbfe3babe8b24ccf61e496bcf8a2c65acf563e55592cf1293bcee10b5af4c455a8c621f7b04fe8909ea798c242678166c71c4bf04e8ec8ffd6b6c5c49fa5ab08e8ef223022a655e5ff0a726bb692f5b56f489361fa51ed76b45d045d3f5df981cc43d79bf0ec1984d7808b34365c03069e5903f20aa47defdf7febd3795c48e5ccc0dbf12c98d0a9"}}}, 0xf7) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xbc1) 2018/05/31 14:42:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:20 executing program 1: r0 = socket$inet6(0xa, 0xb, 0xfffffffffffffffd) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@loopback, @in6=@local}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000100)=0xe8) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:20 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7, 0x2000) accept4$inet(r3, &(0x7f00000000c0)={0x0, 0x0, @multicast1}, &(0x7f0000000140)=0x10, 0x0) 2018/05/31 14:42:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c992409") shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/71) 2018/05/31 14:42:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_free(r1) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") msgrcv(0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0xa4a3ad41a879dddd) 2018/05/31 14:42:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fadvise64(r0, 0x0, 0x8, 0x4) ioctl(r0, 0x8912, &(0x7f0000000000)="003add81fb12e8e18c3275") r1 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = getpgid(0xffffffffffffffff) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/if_inet6\x00') ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000040)={0x3, 0x1, 0x6, 0x1}) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:20 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2000) close(r0) 2018/05/31 14:42:20 executing program 7: r0 = socket$inet6(0xa, 0x806, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 2018/05/31 14:42:20 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) write$binfmt_elf64(r0, &(0x7f00000018c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000722f660f260295982d0195d0832626f9327c81bed7bdc60062df11586e83a50d941909e9a4d7adcd71f3a1978571f43f1e88b22574fa9b"], 0x3af) getsockopt$inet6_dccp_int(r0, 0x21, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0x4) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x89e5}, @void, @ipv4={{0x15, 0x4, 0x5, 0x0, 0xf3, 0x64, 0x3, 0x918, 0x0, 0x0, @rand_addr=0xc34, @local={0xac, 0x14, 0x14, 0xaa}, {[@lsrr={0x83, 0x13, 0x10001, [@rand_addr=0x5, @multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}]}, @ssrr={0x89, 0x17, 0xfffffffffffffffe, [@loopback=0x7f000001, @multicast1=0xe0000001, @rand_addr=0x3, @multicast1=0xe0000001, @multicast1=0xe0000001]}, @end, @ra={0x94, 0x6, 0x1f}, @ra={0x94, 0x6}, @ra={0x94, 0x6, 0x1}]}}, @dccp={{0x4e22, 0x4e20, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, "1288e0", 0x3, "473c84"}, "25b5d5214cd1b7fbfe3babe8b24ccf61e496bcf8a2c65acf563e55592cf1293bcee10b5af4c455a8c621f7b04fe8909ea798c242678166c71c4bf04e8ec8ffd6b6c5c49fa5ab08e8ef223022a655e5ff0a726bb692f5b56f489361fa51ed76b45d045d3f5df981cc43d79bf0ec1984d7808b34365c03069e5903f20aa47defdf7febd3795c48e5ccc0dbf12c98d0a9"}}}, 0xf7) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xbc1) 2018/05/31 14:42:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x2, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000001000000000000000000000009500"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={r0, r1}) shutdown(r0, 0x0) 2018/05/31 14:42:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x4, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0xfffffffffffffe2e) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x101000, 0x0) shutdown(r0, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x300, 0x0) accept$ax25(r1, 0x0, &(0x7f0000000040)) 2018/05/31 14:42:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:20 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x2) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f00000000c0)={0x2, 0x7fffffff, 0xffffffffffffffff, 0x75, 0x5b0, 0x9}) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0xb) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140)="133a336b240441a656a62bbc99734f7529d0785bf92ef7234567dbabe7b46bf7194de0d2d1441ff33ae6dca4d4433ada8f44b760c75052427fb2637dfcece94270c37b3e7220f5bfdd67a8bbafb7b31795a862bf6af23e6862ef7076dc1dbfb596d77607d4afbf944905de4be83beb660e0d76cad46c70e41e5014e69c", &(0x7f0000000280)="2574f89e270631ebca0a933ba4fb8976e1555672df8e8c5fdc191542c2754e13e558f4354322e515025e2299837557c02a8c9855dc8676e2dc166372005652233892598a2200a3789e02a20cc3d80bb6fe0313919d81e10a70f5cef5cb20737da49303c2d5c06c70c72e87c39dae4bb85f03e55c6ec44008bd3d3c59a339da2a7791ee90753f"}, 0x20) 2018/05/31 14:42:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)) 2018/05/31 14:42:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000006c0)=@broute={'broute\x00', 0x20, 0x1, 0x228, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, &(0x7f0000000000), &(0x7f0000000740)=ANY=[@ANYBLOB="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"]}, 0x2a0) 2018/05/31 14:42:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x0) 2018/05/31 14:42:21 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000540)='%', 0x1}], 0x1) 2018/05/31 14:42:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = shmget$private(0x0, 0x4000, 0x400000004, &(0x7f0000ff9000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 2018/05/31 14:42:21 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x800, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000280)=0xc) r5 = eventfd2(0x3, 0x800) sendmsg$nl_generic(r0, &(0x7f0000001640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001600)={&(0x7f00000002c0)={0x133c, 0x10, 0x220, 0x70bd27, 0x25dfdbff, {0x8}, [@generic="dc289da5580721bd93d3e3168a2f1e25490589dc33f40aa6253107b8a585c62aa8f128a456772237a4024d98d83ef44fe5685acc7dd3f9f5126ab623221da670fdbd67ef37ad86dd8e568d42c17b16624c742e9e3bc14832b50e5d9feff407fc61961265a2961a2589c3134c1680ecfe7aa6df4016714e86c2ae8d53617eaece403c20d448a4ce1a9141c31dffc2e83db8753560e482fdc3d20a20c2aa02d244c98f4b870c3ba24dc59a3dddf932639864d5bdd8004a52dc9db761dc63408b30aded8fb16251f12fa4993762d6b3f068e8bc79d3fbc9cc2f44", @nested={0x116c, 0x39, [@generic="9a32c7b2d2c79a54a0f93c204eab7c99fe60190f10237dacd3be8671fb226a00f9c14ce3b9d5853bc84e2bb587e5fb57fd3dba2d7588e1fc849469905e9acd3e4cf236", @typed={0x4, 0x53}, @typed={0x8, 0x27, @pid=r1}, @typed={0x8, 0x48, @pid=r2}, @typed={0x8, 0x89, @fd=r3}, @generic="08593cd1ebbc0161222b69fc91f13ccd9a75c6d8c17d0f5fa478be451d54fb550a885a8d31e43ad37ec5b9834f3b9d0997d5d6434a799dec6e3d8514184aae01c60176beddb7a385f351cf371fa57c0522ce9954d123ba1b016d04bd3296efdc6aab49a1a41e14d405ba2540a14ab4bd39dcfbdc3e495229d3f222a67bc01071ab71e50ccd1bc2bff9c866c09dba793487e54f7a03880c3bf77b0aae17fee8b834c576b68e513606b24889a073ce30a2d6f811cfa1bdb0de44e265944d39d644c8bb18a67166fc48c9f8b203fb6de5e75c3f4da6ff149d2f1a97fda669f2d3ba02944f10b5bd15584efd6c4292239d46c47bc86c8baf1af6a9f35f0b84bc52bcf81d8d3e8b2082b0bc87482c42c8fdf2f112ff6102f274a7e7e95612edb9959344bdac6bda0e16e89d98c7a4ae78217829047e6df8e7085df02436b641b72ad5b61db2659ad8bb5f68859fd18946e9e9c30e342bcc3a569279fb4d31ce320a1e9c3df42218e46fd19bee6c7f6311d7064eb8310b5031727552b389657dc21ffd6107f78c1e026652ecbb30db1cb120f4f4a834b817edde6dc2cb0c2f50e84185702a3315154165066e5a146f83d4d7e90387a1136eef2e99473d79368d028092f4c727b568d9208691354a4d50c70dd10e95eb5d3d285e08fbda37f0be3bb0801a23f11f6d9a683e2857b84b52e68cd11a1ba35f333269e817d56f6865fd239607105e814110eae244d5a8e6f1801350f9b34b02c76c1c06452518a6c70f064ae528cfb7e2d5d26e300df1ae5e326e835989027d554b3598c99f234e4fad092062c355069fb15592e31f805464a4a826a562d5f0d1c06525814cc1def24843f143ffdf1fe7ce9c79bee3f7de230bffa5946316b5a0284314495a338ad45e67e18fa84563f08b05f03b0b37d9a11acbb6d2384a4205bceed58f71d04825cab3e6f56a67116fba73d2be92032cd4ccee64540a7f0438cf5c67737317460673b041954d29453283c333546c7e1b8041c0b96ff0a465ffbb02f379b4dbc50d6138b842f4a1b979ffe857d1619bd5ab377038656a9df5a77ad65fba3305cf4a3b9fc09691d231b06a391b31a075e337959ffa8e19e0003ff2ee2ec4a969f620c7c4db0c125abc69c4b4e6fff7291314acf7628933cecfcb8004ed062eb45ba031ec7017a89ab83a6aa4849636e1b571ecf3cd9b2a2fe1b5b9a7ff85422a0511b761a14333a16010547121adc97803a7ef3b34044260e1125c75836214f5e598b99e446241cef1c4b610e1ad10fee102f5d791e60d163e4af8e8f51471c27990ccef82d4859ee41ac01b575b2f42598e0eb476f52996334cc64dedcd0cc3d25edeeb8ba2482c97e8a8a0f855dff37b58dd79fef9c7587977a4f916e7ddd2fbdd9f3f22c1667cc368660deeafa98ff7772e552d6176acb9a7576daa23dd90ebbdedbde063987fb2360d8045bacfa389a42124a34838a44121df048159aad603e6b72894c2b6cf48d95f787f630ef7babd2d98d271f77097e5c8cdb0c137e8e74fc52c12867a533b6934be2d44bf7907412c03078cbb07cdeaa453bb59069e46b29583fbddfaac71f19f9bebd42d281c8524075b548e3669cd2d5bb647c5704013ae39205cd3fa42b7e5caa69154c25318063cf7cd65be243cf94fda80d05f4e8f0b1639553c13b5efa08acb1595c6261e38f295e4a9756fa47fe69da31c0e35a2d200f775d4497d02e83f0bd0c5ebe7dd5d847feeb9fecdbf2cbce9528969c7dac0bf08a73f2a49057c9434211fb77315a955115b0ba98280563b9c607ff1b5c12a144b98c8881c731a292b3c270a65b8ac5211eae29cb8819274f4b8d115a9fc5563b9f0717ed7c4e41258edd7c55744a6719785671cce04dc53f2333fd4051bf6e6dac712b0e997ce1f9e115d0c931ec0fd927d246ffbb63f9478604a8fc442e1ed99995fedb83824c0855ccfe9d5dc528f1215bdfaeb63dfce5f953e2349e34900136daf4b9f2d82145aae70d984ec0b10c2542ba3c5c3bbd2d1d445af6385057754a0671df98ee07ee5116285d13a83d8b164841dc86f96a00f0e409ad7dd7fd935c8850a85c416a193671c20b524dd070439d5b65cd9776ca21fc6aa83a07ba1e7c1bcaac284d00d69fa506b6bbdb251a516bd7d7541ed72a9a5e398473f052b2a96f9f0c3429bae96cba2d980c476a00a752efbd5e2c107f73800f96844a337f45917798560228acad4ac4d6e8676535c8148ebf67bbdfafa36c0d2a3f783c832fe012a843411cb029bc3374b337123475173cc57400478437ca248ca80dca0602afcd6a60836844e4703d333e6678435d23da10e973ca5193033d2cf8d04e652c8e506d44bdc5f316e8cf9e1777b1c710bdd473168fa32d59296582949191e973da7660dfa81e917904e4df18f880c040fa735089de29cd7ebafa93766be7fb5ac10f60e680a82753d365c1ffbe5da2ec4feeed7b31fcce858d75c34635efe64d834186e42a41efdf7e21ac28add736f4c7fe0e6bcd3ab8e3a599ffa77d3eca6e129736d15cbb9873e6b0ab680319a10d30c699542283951b3dad77b53c56d16debfacfdbe22ccd8bc23e7d6c5c82226ad57e539b21d0bdc533e74272e457ffb9cab92f07310f21c19ed33e84c4d95233ea783abdb70ad2b828d79f97648bdbc0fda8f3f726a30b56a86070176d2ed8b43c7b458387d2b3d205dacd088492074a7511566f3aa9493f1f58a1775fe9c6cb9e4b30ab19ece9371429215d75d56e484bbc6dfff889843329e2a77e947ab9bbbada21d4d8efa49611f138fd27d22a563fc606d2c5e67f9a6d5858589f6d09473a7fc59ee366a17b461803f69fbf848de109e1c59c77a7a58315c49407420528f7bfadb2a1476f343a7459fc7013113d769796fc73ab8bcf1bf2ada7e4f85502bfff2e204b6dbc7c8d942e73659676296de912dabe4bca06dd48ffc585ac9a7eb951c86752ac5ec9f66a7885267afe4e2581a690ac087062dbea931da80eb95b91920d3dee5ba9700b23572ed77772c1c2f6bc646890779ce5b0e3e6f175232eb0baf7200796168b563ee4ba4aec747a2bc4c157bc247ffea6dcc3347dca6a2bd92479123eea5cb53c499829b3d319b6de468e81b7da16a56a88ec687fba5a857501307e478cb14e67b68aa5389a8d6979253ab54d2dc424d3553f9f657b2f4e3040af7a9d277972c79a4128a70489979797b48354d68d8a4ad42f8ba866d0326254106168c9c0c11b05aa5635e0b5ef9f689f45d132c06419099d527d40540bb0c7116516412a46c9af79198fd053161210d5bed862b18fe24f93ecc11882c6185b5444c78cc1477ca08f35a56bea1db04035e2b9428bcceb9293165c5d6fb63c33ed73cb64ec160ccb82005c627ccbf2c87369f986df8030a69b5a488884b3886c5aeef80dbba53a6d66103dc2d31f297096d94cd521d8c9d39b413c7d4759e87f6fe32879f9a3d5e95fa79c6d7424d4f82baa1150abfb886ace5cf30617043f18f4459c9a823f7d0a1040e44b7b482e7908571142d369bed7cdf7d4015eb9d4cea8c287f0ffda0fa06db4317cb5945f96afda23e65698db7901a1127dc027e2d832de704e1d91a37c21a56116bf1bfed05408eafd0cfaa3b2843ed0ef9c70c9c13d683585c8d2655206c524a7a693d1b7a9e74b85db979f1208188699178d85e7bfc91589edf797f636339c559663cffa10f0cc6f32546d31349677ba94e1dd5e02d72a1876b631459f03397d9ad65dd320611f5723f818ba637708a1753cbb20f8bed7a5f35d145f29f0f0beb1e29cab37192ab20488ee3a32fbbcc8319c60e1e7e9859b9f18433268b1bc3abb7cdb9f100beb98dcd59e7906f7a645c915c6e2261a05cad0b71eef99a5d465d7e9faeb7d6cd6042777f050e101c6177a2c0315a90ffd37de3998938208e4487b7a7e962654f707ffa6a6c2d4db8eab988ec8d8a8eec4709b92d26392b5842c24ae6e7159faa886e3882a9fd4915fbb9c341d2f4e9b95ac4b64a13e67bcd95e59159604767a85f9aaac3794e16c3053e5e6e47132470ec5089321e03aaf2d1020bf154a6b14afa31438dbb771ee9a6c9808c7d06b89ca9d204d6a17976a773daa244a6c93d409fa7c9fcfdea80c539d795bad6f3846b249adeda781c3f3475bc7874d90dfc1118925e5aca84bfb097374ca3df0fffe95ec0981297d6fd867a6e5f1dc96c4a13c01688abad648b51f2bf0f7a0c902eb60d7aed9a12089535a2311cbde3a5c1f90e54b015daa39d22e5919504645ca756a81b961e556712ed4a92693ac99fee5e51f10981d33e4ce762ba263f9ee894ecee0bbd58ff67a614902c07d76f472ca4f606c240da0b085cb9b3063b752b6e6853ac660823ad0c8ecdb03baad15866fee6905fa3c7f263bbe28082de43ec6fe7b85c3ba4c955922e8e5f8457d945b563d656dd41c23815d2cfd3803875818db52bd34c7a50d6cd305598896d91be95676c787d3ffee56685a03ae63e587d4c959d2cce1e1c693ccb3fa215b03574683cc8dd13d0fbfaa5a8c6ed94d7f0d69f55b0f80bddbd2dbd840afe744c45ee1bc6dc83066c26e03e782fc98c34fdf7dfeb9a2c7a9d049e98222ba024ecad12a223294dfc784049791f4df5fccecc6e923c594426f6077ab3a80e04ba5fb7d6ee5276f1aa79c18522de71635978594837481743753ca75f5a10931a87e0319fa64e7abc64a5e86fe10b71218975fad0e888520177b03975684eb93752b4f34bf8cfabcb2b6c1734ca6d0570706d046257397bca2ae9dce780a8439a286b40a93be066b2c7a7d2170d7ce7164c12e16832fc6d8f83037aee9058941aba684e152c16246356f5789aecc9e918d95c627b77ef2b22c3902579b3fc6a32934685c025ac3047f0476d332c420a9d115cc35ae5558d520f32d4a6ec76abd1dfe97da1209986f485c755dc17644e8b8bf252fd8bc499e159a8e59c88b253d10e32fe3b377e93642877878563d1fac05bfbe0317dc6bd08277495807deedcc56ad6dcc980abceb79ef17ac62b4ae05aa8996eb7bf4d130e044150be0b9d4dd08123e4a35bf85fa0ee23a132b14ccfa29593715f55b4c9685676ae7ea5843c8ddf6c1bbcc9f6dd03175254d7984ee04f3cb7119ba1a0ea42e981d3292114006fab390df3c0a92a854bfd2728cfe3626adac654d5962aeb240ac70e782c9ea9efeebb590e0c28032fd05e0f834a490b9b562f93bd7e7fc28b6c79a38428b97a25c3abb4c8795e7f8bc68a828935957cec10d733f5a7dd096cebba9dff61baa28ef5eaa279bdbbab6a93d26ae978bc4a2c0a556b0b564c6dd36ed59e230c6cfcd7f81cb0e764f73c1621578d4c2229ec391066af4bd1d5ab618244e0c450a2740f709070486e46a3d1d8236f3a2843dc709d5aac7b1f31a3da955b1f384b354954a6ed888a7e9cd1197a2a228e373a67d9047f1ac48ff624da3df2c23a55dcedf48e42a613827f01c5e097bf279df279395cacdbadf8223a03fa1fcc0780a6529baef48d00ee189294bcaa06f60892775ae70581443cd8eda0c1f25d813962fdea4a0b65fb2310e64fc9f336f0849ec03264e88b42965f2a7be00ad378d204815e504a7b8c8c2a4aedf783ad6df22e2aea93c80e0b02f428aa74a27103317830a55851816fd50e90d113bed2ab7c49d1eea0d752d4762b4b2f6e0ec0fa420dd60494586a97217bb0c3c8e7708aedf585d6345b9728d79019ffa647d140488c5b80809627d5f7011c9ba9ef780d065a40866c34eb559efb98b303acc95cb1d415bc5a", @typed={0x8, 0x21, @pid=r4}, @generic="ea134e177d2ac160c7ab408a0c750c03ba5242225a4c51c477250b509c48f06f7424da4087293a75173c167ab8e30f39765c58c6dad8f575e6f7526000fa351dab4d4e012796d50c6911945562f97dcba8dd3c9c78dbc463250fce0905927dbb6abbafed783cc67871db74c02c9f9f80a45439736242cd35e16cc6b253be1561e51d2c766c346ecaadce81f39dd524a0bbceb52d7973a89bcb41e694e20a6cac261899c0339b982236fe492538c0a9fae55ffd795a1b8e7e910b444da82c342716e917e4061c3d6b6c9843671b4882e8231187571bdf8a29d006d6c5796c58b38bceb3016d085546efd9c8a9e936700faea9114a662b856e96", @typed={0x8, 0x81, @fd=r5}]}, @generic="4f0b8b2d9e824fade9d42dc41ddcbc4e8c28ed84dc913288c8c880600dd960b8e36a7e12604ca9b04080f2eb553dbcb5958dfca16f3414ad322d9bb5a7e8bda729e91f1ba2c1f89aa14cfb2f6778988f38d36176b5ce869d7bebbcfd94d524cfed3bb0b359d3859f0fceeef9894b7a2d9d7773775c619a3d6112194d02b2a362d335bf0a28df75c1b561f94d84dba6e5f8a6a2cd3b66051d04a4e47e2d16d2a74a297f10fd8ecf13bb9d09589da9353d7bbe28f43b2662f66310c6abf876b0b3a31362d2fda0ead95ec66e51af1090f42605af018f82fb2c027f066bd1bdd92361"]}, 0x133c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r7 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r7, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000080)={r8, 0x70, 0x100000, 0x3}, &(0x7f00000000c0)=0x10) [ 333.201013] ================================================================== [ 333.208441] BUG: KMSAN: uninit-value in ebt_stp_mt_check+0x24b/0x460 [ 333.214934] CPU: 0 PID: 20854 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #103 [ 333.222286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.231626] Call Trace: [ 333.234209] dump_stack+0x185/0x1d0 [ 333.237842] ? ebt_stp_mt_check+0x24b/0x460 [ 333.242158] kmsan_report+0x149/0x260 [ 333.245963] __msan_warning_32+0x6e/0xc0 [ 333.250011] ebt_stp_mt_check+0x24b/0x460 [ 333.254148] ? ebt_stp_mt+0x24c0/0x24c0 [ 333.258105] xt_check_match+0x13fb/0x1610 [ 333.262238] ? mutex_unlock+0x15/0x80 [ 333.266030] ? xt_find_match+0x72a/0x7e0 [ 333.270089] translate_table+0x4bb5/0x60f0 [ 333.274312] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 333.279765] do_replace_finish+0x1258/0x2ea0 [ 333.284173] do_replace+0x719/0x780 [ 333.287799] do_ebt_set_ctl+0x2ab/0x3c0 [ 333.291764] ? rcu_all_qs+0x32/0x1f0 [ 333.295465] ? mutex_lock+0x31/0x90 [ 333.299094] ? ebt_cleanup_entry+0xb10/0xb10 [ 333.303498] nf_setsockopt+0x476/0x4d0 [ 333.307370] ip_setsockopt+0x24b/0x2b0 [ 333.311239] ? ipv4_pktinfo_prepare+0x650/0x650 [ 333.315889] tcp_setsockopt+0x1bb/0x1f0 [ 333.319856] ? tcp_disconnect+0x15a0/0x15a0 [ 333.324166] sock_common_setsockopt+0x136/0x170 [ 333.328815] ? sock_common_recvmsg+0x270/0x270 [ 333.333382] __sys_setsockopt+0x4af/0x560 [ 333.337520] __x64_sys_setsockopt+0x15c/0x1c0 [ 333.341996] do_syscall_64+0x152/0x230 [ 333.345887] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 333.351061] RIP: 0033:0x455a09 [ 333.354232] RSP: 002b:00007f5060804c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 333.361923] RAX: ffffffffffffffda RBX: 00007f50608056d4 RCX: 0000000000455a09 [ 333.369178] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000014 [ 333.376430] RBP: 000000000072bea0 R08: 00000000000002a0 R09: 0000000000000000 [ 333.383692] R10: 00000000200006c0 R11: 0000000000000246 R12: 00000000ffffffff [ 333.390939] R13: 00000000000005f4 R14: 00000000006fdf80 R15: 0000000000000000 [ 333.398190] [ 333.399793] Local variable description: ----mtpar.i@translate_table [ 333.406169] Variable was created at: [ 333.409868] translate_table+0xbc/0x60f0 [ 333.413911] do_replace_finish+0x1258/0x2ea0 [ 333.418294] ================================================================== [ 333.425645] Disabling lock debugging due to kernel taint [ 333.431070] Kernel panic - not syncing: panic_on_warn set ... [ 333.431070] [ 333.438436] CPU: 0 PID: 20854 Comm: syz-executor4 Tainted: G B 4.17.0-rc5+ #103 [ 333.447168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.456500] Call Trace: [ 333.459078] dump_stack+0x185/0x1d0 [ 333.462703] panic+0x39d/0x940 [ 333.465887] ? ebt_stp_mt_check+0x24b/0x460 [ 333.470198] kmsan_report+0x260/0x260 [ 333.474779] __msan_warning_32+0x6e/0xc0 [ 333.478842] ebt_stp_mt_check+0x24b/0x460 [ 333.482970] ? ebt_stp_mt+0x24c0/0x24c0 [ 333.486935] xt_check_match+0x13fb/0x1610 [ 333.491082] ? mutex_unlock+0x15/0x80 [ 333.494876] ? xt_find_match+0x72a/0x7e0 [ 333.498952] translate_table+0x4bb5/0x60f0 [ 333.503191] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 333.508645] do_replace_finish+0x1258/0x2ea0 [ 333.513067] do_replace+0x719/0x780 [ 333.516694] do_ebt_set_ctl+0x2ab/0x3c0 [ 333.520664] ? rcu_all_qs+0x32/0x1f0 [ 333.524363] ? mutex_lock+0x31/0x90 [ 333.527982] ? ebt_cleanup_entry+0xb10/0xb10 [ 333.532380] nf_setsockopt+0x476/0x4d0 [ 333.536252] ip_setsockopt+0x24b/0x2b0 [ 333.540131] ? ipv4_pktinfo_prepare+0x650/0x650 [ 333.544785] tcp_setsockopt+0x1bb/0x1f0 [ 333.548742] ? tcp_disconnect+0x15a0/0x15a0 [ 333.553053] sock_common_setsockopt+0x136/0x170 [ 333.557724] ? sock_common_recvmsg+0x270/0x270 [ 333.562300] __sys_setsockopt+0x4af/0x560 [ 333.566452] __x64_sys_setsockopt+0x15c/0x1c0 [ 333.570947] do_syscall_64+0x152/0x230 [ 333.574826] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 333.579999] RIP: 0033:0x455a09 [ 333.583183] RSP: 002b:00007f5060804c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 333.590882] RAX: ffffffffffffffda RBX: 00007f50608056d4 RCX: 0000000000455a09 [ 333.598132] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000014 [ 333.605394] RBP: 000000000072bea0 R08: 00000000000002a0 R09: 0000000000000000 [ 333.612654] R10: 00000000200006c0 R11: 0000000000000246 R12: 00000000ffffffff [ 333.619908] R13: 00000000000005f4 R14: 00000000006fdf80 R15: 0000000000000000 [ 333.627618] Dumping ftrace buffer: [ 333.631148] (ftrace buffer empty) [ 333.634834] Kernel Offset: disabled [ 333.638446] Rebooting in 86400 seconds..