ba37025a77221d40c164c165497d9b38a986cbd5f0f49b6a769eb6790ae42fe04f0bea4bd3f378f76ce63303be54db6815a0502fb932720d8b5f732a4653e1bf7dcb9f4f19fd0f0f602a8bbc4d64abf1d00f925a6cbca931489d9723fca8f37d418c35f5e80f2d76a2e5940f50302821aa7040e5b581c47d85d08c82aa7e8a9464c79b480e4cd49890a0df757c3e3b1ad09792c67c0fd6626657e73a87e4432eb13979f532704a81dbf3f89dd85636501c1323cbe26bd49f2c0560802", 0x1000, 0x40, &(0x7f0000001100)={0x4, 0x5, 0x7, "0aa686fd46c9", 0x100000000}, 0x10) accept4$inet(r1, &(0x7f0000001140)={0x0, 0x0, @broadcast}, &(0x7f0000001180)=0x10, 0x80000) setsockopt$sock_void(r0, 0x29, 0x24, 0x0, 0x13000000) 2018/04/29 21:24:57 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x14}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af03, &(0x7f0000000080)) 2018/04/29 21:24:57 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00005f4000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000052000)="e5fcb5bf91aa7855fbcdfef1ddb42113", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write(r1, &(0x7f0000ca4000), 0x0) 2018/04/29 21:24:57 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000040ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x9, 0x105080) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000380)={0x0, 0x4, 0x6, &(0x7f0000000340)=0xfffffffffffff2d4}) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x7) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x750, 0x5, 0x8000, 0x400, 0x80}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000280)={r4, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}}, 0x84) shutdown(r1, 0x2) 2018/04/29 21:24:57 executing program 7: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(0xffffffffffffffff, r1, &(0x7f0000000080)=0x29a, 0x40400102) 2018/04/29 21:24:57 executing program 5: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000000)=0x4e7, 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xff, 0x2) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000140)=0x6261) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x4000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000001c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$KVM_NMI(r1, 0xae9a) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0xdb, "239fc0195851f667cf7509ea504cfcc6271daa538db2f7555faca6a6720f820a3c513c16453eb1393299bd542493d661a1d19c837c746a727abf7e20a7cf5c829080a5d72d47c0efec34f636be20419aaa34dc94b4471c353d4ec9a22d168c2c65609db157db4a61846729e27185ce0e46dce82e7a7956e473cfc1ca7ed52ce63b7d6eb0309420fe9758adff4d95df2fc9630f61242da094b71977c0b77dd9ce7302ec178ded6d695d2889c59bc96aec829f98b6d7dcca1161be148033c01dfde60b146009fd7225f82545bafd0d7a5a71d2d6f1cc93b37aea7298"}, &(0x7f0000000340)=0xe3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000380)={r3, @in={{0x2, 0x4e22}}, [0xffffffffffff0000, 0x9, 0x4, 0x80000002, 0x2, 0xfffffffffffffffd, 0x8, 0x8000, 0x44a, 0x7, 0x8, 0x9, 0xfff, 0x2, 0xe5c0]}, &(0x7f0000000480)=0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000004c0)={r3, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x8, 0x80000000, 0x8000, 0x8000, 0x9}, &(0x7f0000000580)=0x98) r5 = dup3(r0, r0, 0x80000) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f00000005c0)={0x1, 0x7fffffff}) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000600)) r6 = syz_open_dev$sndpcmp(&(0x7f0000000640)='/dev/snd/pcmC#D#p\x00', 0x1ff, 0x800) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000680)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000"], 0x58) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000700), &(0x7f0000000740)=0x4) openat$mixer(0xffffffffffffff9c, &(0x7f0000000780)='/dev/mixer\x00', 0x20000, 0x0) r7 = dup3(r1, r6, 0x80000) mkdir(&(0x7f00000007c0)='./file0\x00', 0x5e) ioctl$VT_ACTIVATE(r2, 0x5606, 0x3) delete_module(&(0x7f0000000800)='nat\x00', 0x200) setsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000840)={r4}, 0x8) setsockopt$sock_void(r7, 0x1, 0x3f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000880)={r3, 0x7}, &(0x7f00000008c0)=0x8) r8 = semget(0x3, 0x3, 0x4) semctl$GETNCNT(r8, 0x1, 0xe, &(0x7f0000000900)=""/4096) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000001900)=0x5, 0x4) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) 2018/04/29 21:24:57 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) 2018/04/29 21:24:57 executing program 6: r0 = add_key(&(0x7f0000000540)="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", &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000400)="71c8da3be17ad8cba19aa916964d9f37932158ade070232387b65b1ddc2a137cf1e9e958817cba6db1a4eb52451466c4b8319d09a9429ca7405e357ca3118bb2362779763c5b7b28a351d64a1df1cfb527f90d9f4522b409f823ea8bbfdcb66db11d816395d60a935e13827d5372f647935b3e283073d6d60ffc970c3aa9fa150a5d6fd08f27482a21e4eb6c973c8f31a40495664a06e5f1e07779ad5d47169af3f1fa621b386b217a6e7ce1f99e739b53f145dff911fe472f74d6b95e", 0xbd, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="ef78200ba7daced9f812b6fc72aebadc83d3e51354948c64dc18f4277a92df28ca5456c15dd0442a48e87e20f966b3d8a16569375cc3ed9752adc6fa05e2e836183dd723bfe2e02ba8c52deb7438af74bcab4977a9d8e896c786cdacc49861376147570bb6f7bd9738025d4dda", 0x6d, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000340000/0xc00000)=nil, 0xc00000, 0x1000009, 0x32, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x20, 0x200200) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r1) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000240)={0x8, 0x80000000, 0x4c05, 0x80000000, 0x40, 0x0, 0x6, 0x1, 0x8, 0x8f0, 0xffffffffffff6fa2}, 0xb) r5 = getpid() prctl$setptracer(0x59616d61, r5) write$sndseq(r2, &(0x7f0000000180)=[{0x9, 0x200, 0x7fffffff, 0x2, @time={0x77359400}, {0x4d8, 0xffff}, {0x7ff, 0x6423f55b}, @time=@time={r3, r4+10000000}}], 0x30) add_key(&(0x7f000030fff3)='big_key\x00', &(0x7f00004cb000)={0x73, 0x79, 0x7a}, &(0x7f0000000040)="b8", 0x1, r1) openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vsock\x00', 0x4000, 0x0) 2018/04/29 21:24:57 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) connect$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4000000000000006}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="0cd57b85eba93a96ade37bb5cc779cfa44385cd6bd91acf6", 0x18}], 0x1, &(0x7f0000000080), 0x248}, 0x800) 2018/04/29 21:24:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002700ff0a00000000000000001500000008000100040001006c85aeeed0fc55721c0907d5c60400000026855dee471e4e45"], 0x1c}, 0x1}, 0x0) socketpair(0xf, 0xe, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x2bb) 2018/04/29 21:24:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f00000002c0)="cc615a02f3dd7eb6a76930f9f805464720ed8409b0b6eb4693110ff984217341d426ac310486a781b1c7d5351eed25fbf207f8a4bc8875474b1f89b31658223ca7b4f72d967447ca43754924fb7413457cdc1773e1cbcb13e87567ce98cdd2237aa3882600abba3aaeaf93d3c07d5c0e9c354f8e1509af824518b750b7255f952dcbfa4facdb80d0d86c0f91650250552a2697fe5bacc0c529cf0b47881b0ad4cf3cf1ab6e3050cd5b5e7debc45e5bc785691dd15d8eb65d999bdf171db29cc9dd06", &(0x7f0000000080)='"', 0x1}, 0x20) ioctl$KVM_SET_PIT2(r1, 0x4040ae77, &(0x7f0000000240)) 2018/04/29 21:24:58 executing program 7: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080)=0x29a, 0x40400102) 2018/04/29 21:24:58 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000080)=0x1) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x0) 2018/04/29 21:24:58 executing program 3: r0 = syz_open_dev$random(&(0x7f0000a33ff4)='/dev/random\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040)=0x4) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/91, 0x5b}], 0x1, 0x0) timer_create(0x0, &(0x7f0000580000)={0x0, 0x12, 0x0, @thr={&(0x7f0000f44000), &(0x7f0000ff5fd2)}}, &(0x7f00000c6000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = getpgid(0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x41, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0x80000001) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{}, {r3, r4/1000+10000}}) tkill(r2, 0x1000000000016) 2018/04/29 21:24:58 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000000)={0x0, 0xffffffff, 0x6, 0x204}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x400000b7}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x100000) 2018/04/29 21:24:58 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f00000000c0)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x10800, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000001c0)={0x400, {{0xa, 0x4e24, 0x5, @ipv4={[], [0xff, 0xff]}, 0x1}}}, 0x88) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101100, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_getrule={0x20, 0x22, 0x800, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x81, 0x9, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x14) 2018/04/29 21:24:58 executing program 5: socket$alg(0x26, 0x5, 0x0) mkdir(&(0x7f0000000280)='./file0/file0\x00', 0x3) chmod(&(0x7f000006eff8)='./file0\x00', 0xbfb9ad36a5822467) symlink(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00') getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22}}, 0x8000, 0xff, 0x0, 0x26d, 0x80}, &(0x7f0000000440)=0x98) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6, 0x480200) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@delrng={0x10, 0x14, 0x4, 0x70bd2a, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480)={r0, 0x8001}, 0x7) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40005, 0x0) fallocate(r2, 0x8, 0x0, 0x1000) acct(0x0) 2018/04/29 21:24:58 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x2, 0x0) r1 = accept$netrom(r0, &(0x7f0000001240), &(0x7f0000001280)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff00c}, {0x6}]}, 0x10) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$sock_netrom_SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000012c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000180)) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000001300)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000c5a000)) sendmsg$nl_route(r5, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000020}, 0xc, &(0x7f0000000200)={&(0x7f00000014c0)=ANY=[@ANYBLOB="30000000122001002bbd7000ff5333cef0000000f4aa8dcfdde046cab29ed6f8c7166e49c6e65e1680c827b5c440d551db7fe17b905f053c41f57b4159b8c1e7e1c0e208a243ccafde48486dc4e173ccc22052e260988d8ec9300effd843e67bbdb1c41870eb3b420b0d663428", @ANYBLOB="000201000000000008000f400800d1009c33db5999a966e3c272c4f14db3605a0008000d00010400fbc797925c80757f5c5e87568e1da2e56ad7fbab116e76109df07fa3f364c87d94583b4343e0a6a76013c611201943d6b96e7605ac453f8b7b903d00ed715c02814cf8d7af"], 0x2}, 0x1, 0x0, 0x0, 0x400000000000}, 0x0) write(r2, &(0x7f0000000080), 0x2b1) getcwd(&(0x7f0000000240)=""/4096, 0x1000) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) 2018/04/29 21:24:58 executing program 0: r0 = memfd_create(&(0x7f0000000000)='ip6_vti0\x00', 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000080)=@ethtool_gfeatures={0x3a, 0x3, [{}, {}, {0x0, 0x7}]}}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f00000000c0)={0x7b, 0x0, [0x4, 0x5, 0x93, 0x7]}) [ 336.701485] binder: 24118:24119 transaction failed 29189/-22, size 40-0 line 2856 2018/04/29 21:24:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x28, &(0x7f00000001c0)}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000009fc8)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000000180)={0x14, 0x14, 0x401, 0x0, 0x0, {0x4000a}}, 0x14}, 0x1}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000100)=r3) socket$netlink(0x10, 0x3, 0x10000000000e) 2018/04/29 21:24:58 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup(r1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r3, 0x5, 0x30}, 0xc) dup3(r1, r0, 0x0) 2018/04/29 21:24:58 executing program 7: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:24:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r3 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c, 0x80000) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000140)=0xff, 0x4) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x3, 0x2, 0x8000000000011}, 0x14}, 0x1}, 0x0) 2018/04/29 21:24:58 executing program 5: mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x813, 0xffffffffffffffff, 0x0) [ 336.761349] binder: 24118:24119 transaction failed 29189/-22, size 40-0 line 2856 2018/04/29 21:24:58 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) sched_getaffinity(0x0, 0x8, &(0x7f00000001c0)) 2018/04/29 21:24:58 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000bc0)=@ethernet, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f000000dfc8)={&(0x7f0000019ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="01000000000000000000000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="007a13878a222783c500000000000000405a51f3ac446a3e8034171bf8a464c69d6e885013ad32ae11dc44c52aab5ee037aa810cc8df18dba7d6aae9f3cf0100000000000000da39d309fcb967f740aa7e3ed34098821dd52475af935ff7e85222d9bb95e77a035168de4c876b56521254011b6e34cfddd88ea32d3b8f76d0ab8566"], 0x48}, 0x1}, 0x0) r2 = getuid() quotactl(0xffffffffffffffef, &(0x7f0000000400)='./file0\x00', r2, &(0x7f0000000340)="b35a75a601a1662eb6e10d4ef149ef03cab1cc5b1f19761132061a1bd2ae8c19a05f654c39ded51b04758e8cf499faeb99aa7f06757bbba4908075c50a580b718f6e4fb55381b932") sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x1, 0x0, 0x0, {0x0, 0x7530}, {0x77359400}, {0x4}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "58ea10a2d4df2388"}}, 0x48}, 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000980)={&(0x7f0000000800)={0x1d, r1}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x0, 0x1, 0x3ff, {r3, r4/1000+30000}, {r5, r6/1000+30000}, {0x3, 0x4bfa, 0x0, 0x3}, 0x1, @can={{0x1, 0x7fffffff, 0x4, 0x4}, 0x4, 0x0, 0x0, 0x0, "80f2e8484f517444"}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) creat(&(0x7f0000000480)='./file0\x00', 0x82) execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=[&(0x7f00000001c0)='vcan0\x00', &(0x7f0000000200)='selinuxeth0+[${\x00', &(0x7f0000000240)='vcan0\x00', &(0x7f0000000280)='vcan0\x00', &(0x7f00000009c0)='vcan0\x00', &(0x7f0000000300)='vcan0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000440)='vcan0\x00', &(0x7f0000000a40)='selfsystem\x00'], &(0x7f0000000780)=[&(0x7f0000000540)='$]md5sum{\x00', &(0x7f0000000580)='vcan0\x00', &(0x7f00000005c0)="d32428656d31435d6c6f00", &(0x7f0000000600)='wlan0wlan1{&/nodev!eth1\'\'cpuset)selinux[\x00', &(0x7f0000000640)='wlan1\x00', &(0x7f0000000a00)='systemselinuxlo!\x00', &(0x7f00000006c0)="656d315b2f01", &(0x7f0000000700)='vcan0\x00', &(0x7f0000000740)='vcan0\x00']) r7 = accept(r0, &(0x7f0000000a80)=@pptp, &(0x7f00000002c0)=0x80) recvfrom$ax25(r7, &(0x7f0000000b00)=""/146, 0x92, 0x1, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}, 0x1}, 0x0) 2018/04/29 21:24:58 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f00000001c0)={0x7fffffff, 0x8200, 0xdd74, 0x400, 0x0}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000280)={r1, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x84) r2 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0xf5) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}}, {{@in6}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000100)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x3, [@empty, @rand_addr, @multicast1=0xe0000001]}, 0x1c) r3 = dup3(r2, r2, 0x80000) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)) setsockopt$inet_mreqn(r2, 0x0, 0x25, &(0x7f0000000200)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) [ 336.888239] binder: undelivered TRANSACTION_ERROR: 29189 [ 336.897038] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/29 21:24:58 executing program 5: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = syz_open_procfs(r0, &(0x7f00000002c0)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") fsetxattr(r1, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)="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", 0x137, 0x0) 2018/04/29 21:24:58 executing program 3: 2018/04/29 21:24:58 executing program 2: syslog(0xa, &(0x7f0000000000)=""/201, 0xc9) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000000240)=0xe8) quotactl(0x0, &(0x7f0000000440)='./file0\x00', r1, &(0x7f0000000280)="2ff84f3a03679d3dc9e0a1587e11f6331416ee4419614ee9fa38ea") r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000300)={{0x3, 0x3, 0x6, 0x3}, 0xff, 0x3}) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000380)={0x2, 0x1f77}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000003c0)=r0) fcntl$setsig(r2, 0xa, 0x19) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x1, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000540)) socketpair(0x10, 0x8779c77a265349a2, 0x2, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000005c0)={0x9, 0x7, 0x8000}, 0x4) accept$packet(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000640)=0x14) set_mempolicy(0x2, &(0x7f0000000680)=0x8, 0x9) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f00000006c0)=""/214) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000007c0)={{0xffffffffffffffff, 0x3, 0x60000, 0x3, 0x17f1b558}, 0x800, 0x3, 'id0\x00', 'timer0\x00', 0x0, 0x0, 0x9, 0x2, 0x1}) sendto$llc(r5, &(0x7f00000008c0)="90a1f281de9bccb9ef9b8ea4fac943d5f650bcbb7a832189f063a3a8f623acdf70ad5f61eae5752131eaa62ab3d930a4e11216b7bc11038b9fa2ad54b95c0b6a27ea2990cef441cdd52e522937858bc95a815dd1a01a1a62aecfacb5141221033950385d2ea8baf1165854f0dcc90d0b", 0x70, 0x80, &(0x7f0000000940)={0x1a, 0x317, 0x200, 0x7, 0x9, 0x5, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0xd000) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000980)=0x0) fcntl$setown(r3, 0x8, r6) connect$vsock_stream(r2, &(0x7f00000009c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000a00)={0x0, 0x3}) readlink(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)=""/3, 0x3) keyctl$update(0x2, 0x0, &(0x7f0000000c40)="302b1aea000dbf4aba3409395572ef8174c0ae5ec3233e7d7fc18dd6c633c0e3ba686c278c86c7537841064d536efb4846908976ae6031304ee321b746ec07596b87996aee4f9d6cb70cdd49c83d95a2e2a2fd2919ddeeadda228908f0b758aed089efa5e80d12db0b32b2c671f1cd30789239df4e800fbb1908b93b4614dbdcea42c0646b53899a20950f246179244257e17fabe6d003f6f4575601e31acc48740c7ccc6560b0f532401047d52bdb29020df8a25624afb5ab5566fb8da4875b9831d9c0771312a6a4c68851269a908ce88fc5d2bb25", 0xd6) connect$pptp(r3, &(0x7f0000000d40)={0x18, 0x2, {0x1, @rand_addr=0x44}}, 0x1e) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000e00)={0x0, 0x9}, &(0x7f0000000e40)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000d80)={r7, 0x10000000004000, 0x0, 0x7, 0x8000000000020}, &(0x7f0000000e80)=0x18) 2018/04/29 21:24:59 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x0) 2018/04/29 21:24:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x8, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) ioctl$LOOP_CLR_FD(r1, 0x4c01) 2018/04/29 21:24:59 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb8) getpeername$inet6(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f0000000080)=0x1c) getsockname(r0, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) recvfrom$unix(r1, &(0x7f00000001c0)=""/168, 0xa8, 0x40000000, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000300)={'sit0\x00', {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, r2, 0x410, 0x70bd27, 0x25dfdbff, {0xa}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local={0xfe, 0x80, [], 0xaa}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000500)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10060008}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r3, 0x300, 0x70bd29, 0x25dfdbfb, {0x3}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x7a}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x8084) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000600)=0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000640)=0x7) accept$packet(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000800)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x13, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x10000}, [@alu={0x4, 0x100, 0xd, 0x4, 0x2, 0x100, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xf}, @alu={0x7, 0x30000000, 0x0, 0xa, 0x8, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x63d, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x2d}, @alu={0x7, 0x4, 0xc, 0x7, 0x3, 0xfffffff4, 0xfffffffffffffff4}, @map={0x18, 0x7, 0x1, 0x0, r0}, @jmp={0x5, 0x5, 0xe, 0xa, 0x7, 0x80, 0xfffffffffffffffc}], {0x95}}, &(0x7f0000000740)='GPL\x00', 0x9, 0x0, &(0x7f0000000780), 0x41100, 0x1, [], r5}, 0x48) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000008c0)={0x77359400}, 0x10) mknodat(r1, &(0x7f0000000900)='./file0\x00', 0x8000, 0x7) recvfrom$unix(r0, &(0x7f0000000940)=""/17, 0x11, 0x40000101, &(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000a00)) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xd9) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000a40)) bind$llc(r1, &(0x7f0000000b00)={0x1a, 0x309, 0x100000000, 0x1, 0x6, 0x1d2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) getsockname(r1, &(0x7f0000000b40)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @dev}}}}, &(0x7f0000000bc0)=0x80) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000c00)=0x7eed) renameat(r0, &(0x7f0000000c40)='./file0\x00', r0, &(0x7f0000000c80)='./file0\x00') setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000cc0)=0x6, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r0, &(0x7f0000000d00)="3b55722395c536b2982a0a012bbe5b8711577ce4782f50d2903689139d10862cb31ebd9dcbba6ba7b1e415128b3dc660b4060de3cf31f007daca48fee6e242c333909eb6f87e0601", &(0x7f0000000d80)="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"}, 0x20) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000001dc0)={0x0}, &(0x7f0000001e00)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001e40)={0x29d4, 0x0, 0x8000, 0x10000, 0x2, 0x9, 0xf6, 0x1000000000, r7}, 0x20) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x100000001) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000001e80)={0x303, 0x33}, 0x4) 2018/04/29 21:24:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x6}, 0x1c) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x7ff, 0xffffffffffffff88, 0x400000, {0x77359400}, 0x6, 0x100000001}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xf0002000}) 2018/04/29 21:24:59 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x401}) 2018/04/29 21:24:59 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000443000/0x1000)=nil, 0x1000}, 0x2}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) r1 = epoll_create1(0xfffffffffffffffc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000001000)={@broadcast, @remote}, &(0x7f0000000040)=0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = dup3(r1, r0, 0x0) listen$netrom(r3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000080)={0x10}) 2018/04/29 21:24:59 executing program 7: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x0) 2018/04/29 21:24:59 executing program 2: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xffffffffffff26e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000012c0)={&(0x7f0000000080)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001300), 0x0, &(0x7f00000002c0)=""/4096, 0x1000, 0x6}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=ANY=[@ANYBLOB="300000000000010302000000004d8de40a000007000000000000000008001500070000040c0001000800010007"], 0x30}, 0x1}, 0x0) 2018/04/29 21:24:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x8, 0x1d00) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x1, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x289e6846e27b710d, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x200, 0x0) connect(r2, &(0x7f0000000200)=@in={0x2, 0x4e22, @loopback=0x7f000001}, 0x80) getpeername$packet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x14) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000002c0)={0x4}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x3d1) 2018/04/29 21:24:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f000001cb24)={0x1c, 0x18, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x1}, [@typed={0x8, 0x3}]}, 0x1c}, 0x1}, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') flock(r0, 0xd) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x101800, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x10001, 0x40000) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000240)={r3, 0x7f, 0x401, r4}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='T@\x00\x00', @ANYRES16=r1, @ANYBLOB="00002bbd7000ffdbdf250100000004000500080003003c000000080004000100000008000300ff000000080001004e2400000800040003000000080001004e220000040005000800040001000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 2018/04/29 21:24:59 executing program 7: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x0) 2018/04/29 21:24:59 executing program 1: r0 = gettid() r1 = socket(0x10, 0x80002, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r1, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000c45ff8)={0xffffffffffffffff, 0xffffffffffffffff}) read(r3, &(0x7f0000d48000)=""/1, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x40540) fcntl$setown(r2, 0x8, r0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002fd0)=ANY=[@ANYBLOB="0200000022fff2000000000000000000"], 0x10}, 0x1}, 0x0) fcntl$setsig(r2, 0xa, 0x12) dup2(r1, r3) tkill(r0, 0x14) 2018/04/29 21:24:59 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7fff, 0x400) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000006c0)="240000005a005f19145ac60009037b1595a7f1d6d8210308001000fff708ffbc00000000", 0x24) 2018/04/29 21:24:59 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000f5ff854cf7b77bb21bf886b0628828770728d37347a6859b089ba64a0e931fd6e429e79d65da063491cbd3c07c27e4e005e2ff028bfbd57e0f14578c9688ce0120cf2e20412438dbdb5667785416cd0c2a1d5ddf2d4dd160d1e4983841", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000140)={{0xff, 0x1000}, {0xfffffffffffffff8, 0x1f}, 0x3f, 0x5, 0x2}) 2018/04/29 21:24:59 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2800, 0x0) getpeername$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r1, 0x8, &(0x7f0000000a00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x9, r0, &(0x7f0000000280), 0x0, 0xfffffffffffffff8, 0x0, 0x0, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x100000000, r0, &(0x7f0000000300)="05aaff3b3fcdf1ecce8746f758794af6378d249367009a1f1d3f12601a50f2aa38bdd39efd2f41836e14201125a92ae07e66091feb350b6fe558082d1492d76deda67c9146cf4d8b613fb23899af2cb81ef7f512b8b81eec14c3d2209a5a5ab40a167311f4d9602727f9e861b340b2a1a03beaa4b7707b2d4dea70f503637f9d1d55baabd8c2d312db3386f5aaa3a437dc1d9c1ac4ea12bd3910dc79b98cbc5438cd442a88cb02f14df45604131eec36fb7e519ec311ce38936759d60a8a44645e8c5ae94e36bf7f21b5b4870f017b80eb9552c04d562126331588f85735c31a9c7a214f77c4072a3c9c7fca3d8004e0c3628fd033110bdf", 0xf8, 0x100, 0x0, 0x0, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x9, r0, &(0x7f0000000440)="f2fdecc4d67f8095eff9b33ca5fb8cee66b1ee5d316bd004c7db684d47218012001a309e09b27d28c1d3e7610950a2772ef13a08420ac4855d6e9b88c2", 0x3d, 0x8000, 0x0, 0x0, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x100000001, r0, &(0x7f00000004c0)="d0dce8bc8091f282508213451d98ff14d32a6853faf2c481e3f7a07bb45faa8768dd296dcf6414aac1913cf6e342ed806bbb71926c279b15759b12976569ae48167a3a1b5b011dea964258766924bf8bc13747f500be42d501ca5075b8f7a81d1b88c71edc0cb02f9b6e20ebef5a0c79", 0x70, 0x7, 0x0, 0x0, r0}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0xa, 0xca, r0, &(0x7f0000000580)="2afd30a82d81930fdad16b6b77129be6f851ebe7a4f30ddf72cba67761b1d6bdce8748ea42113602ce236d2199694759bfcda32dfd1c60b517c28421a1c72d30a0fac51b110e9ff643fd7ad47a4284015f2047b27e9dc7bad6e519c1f3cf26f7e5087e4a9277493c23ceb975df02bc07e7a5b30ceeddc1528f0a1409da41f0c5e9169f3930b2534afcdc91", 0x8b, 0x400, 0x0, 0x1, r0}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0xfa, r0, &(0x7f0000000680)="7ab033ebf6fba69f57cf35648dc2f57029a6290b765e87a83ea13303bcb45d9c37e393600edb2f06ef843166f6c2a5559ee8a52f64d06bf02e64fba5d1b654d3d34a3e870a1ef78b5cdb6cffea1c761b9bceda4c9d2bce852fe033696fdc9f8f0a2b0a7c9bf3bafbb9277733a775f5bc77f973523b391d64722f942753b679dd32c2522048954063386a18561bc5565c84e4d4e11c1bf204479d51968dc1a1a5a8f1932fcbf92c1dedc3bfcabc0b09de1f01ffa919d543274278d7faba1aa971bf09fb81fe30d7a9adc2799402f767ddee80de672548", 0xd6, 0x2bf401e2, 0x0, 0x0, r0}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000007c0)="cf0b2ccc66450807a41910fe9f364893592851bbcb03e8707b018586c0c39430fcd0d8d9399ddbf0508324eedc07819d6ca6640de72e6490fa21c5f63f04e0b07d012c6022af596f437e242b77a69df51a9c05d9eb38491a9c3460b97c77e510c92e81758a8ab2fcef48949a0091122d333444fae54149c04b3b34865973e2e880942e3b27b5f143af2736757d76bf0cedb16afb5855a62b910ca1d88252e7fd1db1ad2dc135e2bf5bdb7b407b0cec6a8c5776e59f59854259081b163096d130d2eec4d8f87bc02dc7942a35331ea4c41852eb90bec85107b5447e721ccb", 0xde, 0x7, 0x0, 0x1, r0}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x3, 0x9, r0, &(0x7f0000000900)="c07bac38ca9dbcd047bc70f9b2a0035d9d0cf2d7e63bb83def52df4a030dc3dd8932d2f26f5d407961a69c4d424d249349bbfa66c37f9b18a184e4c7175e2d7f5a982dc91df7468682469e3d9981ae8dd7b37b92ed35e12acc3faf9541f2692f9fa62c82d0f6823c11e2ab53c02b8882bc3d5d7e52f29643b5257c1c29e1823254d5568f71bbb8563faba2828e80eaf34ff8e8e4f5aac57be1a3096b2ea57675151ef91bd215a8b2", 0xa8, 0x9, 0x0, 0x1, r0}]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x40010, r0, 0x800000000000) munmap(&(0x7f000053c000/0x2000)=nil, 0x2000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r2 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) getsockopt$inet6_opts(r3, 0x29, 0x3f, &(0x7f0000000040)=""/212, &(0x7f0000000140)=0xd4) 2018/04/29 21:24:59 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x100) fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)={0x358, 0x27, 0x1, 0x70bd26, 0x25dfdbfd, "", [@nested={0x28, 0x60, [@typed={0x8, 0x48, @fd=r2}, @typed={0x14, 0x86, @str="776c616e3176626f786e6574310500"}, @typed={0x8, 0x62, @fd=r1}]}, @generic="caeffb8107062a8379503ae5ff1d5f5879f28c506861b5c51b099a595e967aefa0addf60a03f0b9860fbdfef7fb2e82153ed55eb78415361ddb29c347f495b86f57fe96eed8966a0255527a98e5d722ba56d3d01d2326951a15ea31bc1cdbf6cbf6c084e49b7f69cdce1ee25a537f76bb296b183ecc103cf0e001eb1536f37347b049ce05429f21571649ca16a08f8cf4a9c98a01de2cd986bf45f1e9c74a2fd6c1fd2fa89789819982eb9563bb36981fff5a206c6ba167ee5cd7253cba5ee337103b05144781a0c56457f9c79bc2458cda780587e91a475e97ada2805b0", @typed={0x10, 0x39, @str="8973656c696e757800"}, @nested={0x230, 0x1f, [@generic="3e6a6d23812eaba77f14ebc0c82f8bd2e293afbe752af446f70ece8b22976f418ad4c3302a19871c0f36f0e962c0a213b175d1ba3ff3f388e4179a921f81b3aeff5e1608e4b241c479ed44c323d9a797d6c69a01c8b6a84b4ac05a2119c18b4a64461b750bb403f72000f0e542f201b7f34e9080e8426f565c134e05e283473f2dccf364398e9a884b559dd7e1372492", @generic="5ebd782d69b0ffa830be89049ad7d7eef96edfb5fa833f2b0ee2178b4118988d57f793d99dbedc3edf123926061d2a2cc3770c8336a8cfe71a83cad7a3857b63eba3403c4e2ac114d2c758408a28001a3bc6a1c1eae2553f8f8943a214fe75d9f5c38879f112e70e916ce26abb3355ec4fee8bd78f1bf421efde945615da661974096022616a3b86a5262faf51f23d0e762cf3611561323632ee3308dbce87884be5231e80f68196ee40df270f8d3495123f71191d3cdcd9704c1676c7d26164eabac2232291b02da845582e2b7a740378ccb7b12a5250eadd9a6afb704a81a573eefd41546082", @generic='K', @typed={0xc, 0x39, @u64=0x2}, @typed={0x8c, 0x4e, @binary="008ca9feb593d359118c6c6e543d629b573a65495613b1ad29354a199fdb1db6cdb6a97caf41bba702e657f916639b27e775d2dabbf4284bac542298760ebd06236ad2b72884e988f6f5b29767a7dc1ca254b429442bf4e1f430f9ea8563396208c523d7fb7da2c1b17318d662e25a737a8b8027299a9bc1f7e6be6d4ee32dde56d60aa0d5"}, @typed={0x10, 0x78, @str='/dev/kvm\x00'}, @typed={0x8, 0x74, @uid=r4}, @typed={0x4, 0x35}]}]}, 0x358}], 0x1, &(0x7f0000000140)=[@rights={0x18, 0x1, 0x1, [r0, r1]}], 0x18, 0x8000}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000180)) 2018/04/29 21:24:59 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x16907e, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000040)={0x5, 0x2}) io_setup(0xb40, &(0x7f0000000000)=0x0) io_submit(r1, 0x0, &(0x7f00000000c0)) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x29a, 0x2, 0x7ff, 0x1, 0xffffffffffffff1d, 0x8, 0x200, 0x101, 0xfffffffffffffc00, 0x0, 0x5, 0xb7b}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x3, 0x4, 0x3, 0x1}) 2018/04/29 21:24:59 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x200000, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f00000000c0)) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000240)="0401000000e3cd682c46090000b24066514d670600c0e180283db150877eac3587ca92a0cc14ab6650782299e6234d243eb9576f4ddb90797d34c3946570ccf83c46", 0x42, 0x2, &(0x7f0000000200)={0xa, 0x800, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0xfffffffffffffffd}, 0x1c) r2 = getpid() timer_create(0x2, &(0x7f0000000000)={0x0, 0x7, 0x5, @tid=r2}, &(0x7f0000000040)) 2018/04/29 21:24:59 executing program 7: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x0) 2018/04/29 21:24:59 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0xa0, "38f0e5ceadfee315fb338544ade1810f2a2d993da22f4786fc8f0aff72b564ca4a0de3af539b095c2e572061245b76773eec28b1f4d5cd7e2351ca6156113724a44908422aaffd3c7bdedba539ec2b572f37dfab7e7775228cee85f2cd88540f5ab3fe1bfd20973365d7b9a64e3dc662bc24ec4f50bff33d757f987d011d99b4ae6fe93012a16138121b53d701239e32161bd306a8cc612a6e71451c16e731b9"}, &(0x7f0000000000)=0xc4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6, &(0x7f0000000200), &(0x7f0000000080)=0x8) 2018/04/29 21:24:59 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f00000001c0)=""/72, &(0x7f00000000c0)=0x48) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040), 0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000140)='schedstat\x00') setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f0000000100)={0x3, 0x2, 0x359746d3, 0x1, 0x896, 0x6}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='vlan0\x00', 0x10) fchmod(r1, 0x0) socket$kcm(0x29, 0x2, 0x0) sendfile(r0, r3, &(0x7f0000301ff8)=0x2000, 0xfffe) 2018/04/29 21:24:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001580)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-generic)\x00'}, 0x3ca) socketpair$packet(0x11, 0xffffffffffffffff, 0x300, &(0x7f0000000040)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003f80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="c484b4a4eff66871b6a98a2275ba15fe", 0x10}], 0x1, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/29 21:24:59 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) r2 = dup3(r1, r0, 0x0) r3 = msgget$private(0x0, 0x40) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r5 = getgid() r6 = getuid() r7 = getgid() r8 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0xc) msgctl$IPC_SET(r3, 0x1, &(0x7f00000001c0)={{0x10001, r4, r5, r6, r7, 0x20, 0x4eb}, 0x8, 0x7ff, 0x5, 0x0, 0x3, 0xae, r8, r9}) 2018/04/29 21:24:59 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) gettid() unshare(0xbffffff) 2018/04/29 21:24:59 executing program 7 (fault-call:2 fault-nth:0): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:24:59 executing program 3: mkdir(&(0x7f0000000080)='../file0\x00', 0x0) chroot(&(0x7f000009a000)='./file0\x00') chdir(&(0x7f0000000040)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x100f}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f79fb8)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}], {0x95}}, &(0x7f0000000000)='GPL\x00', 0xfffffffffffffffc, 0x438, &(0x7f0000000140)=""/251}, 0x48) symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x0) [ 337.976271] FAULT_INJECTION: forcing a failure. [ 337.976271] name failslab, interval 1, probability 0, space 0, times 1 [ 337.987631] CPU: 1 PID: 24289 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 337.994913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.004271] Call Trace: [ 338.006872] dump_stack+0x1b9/0x294 [ 338.010523] ? dump_stack_print_info.cold.2+0x52/0x52 [ 338.015726] ? perf_trace_lock_acquire+0xe3/0x980 [ 338.020579] ? debug_check_no_locks_freed+0x310/0x310 2018/04/29 21:24:59 executing program 5: mkdir(&(0x7f0000000d80)='./file0/file0\x00', 0x8103) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x0, &(0x7f0000fc9000)) syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8, 0x22000) sendmmsg(r0, &(0x7f0000000c40)=[{{&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1=0xe0000001}, 0x4, 0x3, 0x0, 0x2}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)="222bf719f2624a76dfa39dc60b25ef1f2e76b9d84c315acfc5edd04055e065f7b62edccc8aa010e915edc3a19548857253e54acf9c3f834d9b2e97eeb7db9b9229dc5dcffdc7b342447a38f6446b33efa2ba7ac2569e540162669469c8bdac59a4ec141343bc950c07ae2191c68dd364b0b040d7db8718366178d6c16e4f4f53c8aec999b1647fdc5b9a9a263528d5322438b4bcf223c2f781bcf0f8b6b60e6e0b530e71778d2076c99c837afac52585fea81c88b0ced1673a27b9d8e1536f49", 0xc0}, {&(0x7f00000002c0)="566ee37ea316f160880de877ba74a43ffb562fc80603438bf2abf393fefc2623101bd0217bc2566bfb70f6a7de6bdd28b7afca69131edf22dfc143daa29f1c6254714002618a04d56e159ee363cd4dffc85c7388200a4a139b76038c81142ba9e06dbaf415d2583c1d8c759ee25b8f5ff26e7f8736cb46dcf46d034d466e795aeb27e078", 0x84}, {&(0x7f0000000380)="f89d6c4b36fc06127eab913f8cf5da350beba42bcd3b32607c03b04c1730b4322eefc3b5421dbc627ce84c87dfd0508ddefa529f48bf7415eba45000a265d681d817e1f908eba6fbdf2a1aa464cde5db", 0x50}], 0x3, &(0x7f0000000440)=[{0xc0, 0x1ff, 0xb9d, "bd09381fd213703bc90dbab3f8c056258f5f078038b0ccf0cec34e877a33db1afeedf718d11206a06a6e3c4024a63131ac9fc517635aabc01cc179c905111ca72f09052230096a8c37ec25eaf23edde3628bdf5a74e873014eb0efa06dc23667bf7dee2bf5f9f92ca2e39186e4a88ec16ce30c760043c17e7d39f60f1263f26899ee5e1129aa17fcb3a8042af8a9dbced9c0dc77c44009bec8f6b25de36e214d71eec10b5456cad3a5a9439921819c92"}, {0xd8, 0x1, 0xfff, "84a1d66cbad8a9b2af51bc5b60d635dcfd7d72ff791fff301996a815729158b5d628f0ba657ba29ce8e8ce32c8fb3674ec4026b271b06f0599d5a37ed0d73cf9176c18102955de22f225bdbf56730ebb0ee9effe1c17527300dd7e6c1528dd20fe708dcd5dd4b0f0cd0e0c157da10e9a2a0f93693c92d5af65672166ce4e3407eea5a3828ccc46c5fa3f388ccff9d17e6cecc8089e631f02bbd83f7775df465d9c7713b4a67fe605da1f9a6e72a96b38a06e3e2a708f7856cf7f64437db0f951750588be80"}, {0xa0, 0x111, 0x58, "26d8186635f48b9a52a428a73d20c4c4d54c746b3139d531d21fa2abe7e77fa67cc6f78d006f50af05e6f7f5e635f91a849c830ba068c4f3b5fcb19a0a2807d1390cc1e1b6cd731fb53cd2d1860ab6a397f2924557b63d8ca6b87904a4d283c7355d5ebc01426f0fa0362e3cab23e65d55656677ab0f1dbb3b96dbb6fc7b697b860d464d1c15fa09f02d581d3c5a24"}, {0x18, 0x0, 0x6, "b61e99e0e8fd7464"}], 0x250, 0x20000000}, 0x800}, {{&(0x7f00000006c0)=@llc={0x1a, 0x33f, 0xfffffffffffff801, 0x3, 0x8001, 0x1f, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000740)="d4ce497a40829af9555dcd39430586663e8aec8a3d36f7f2b3d34a58295d879028e28504adeced3a761c36b96b20e70b534f997bd42837429537f4bf963ff9", 0x3f}, {&(0x7f0000000780)="5b0eb4de2945aeb6132957cebd192fa6bb93a3fa97d720133ffc5e4d7e5e7ca4ffe02398cac780fe2c2b447784743bf3f9be3018431f16e49cff2a7aa52b84495f53cf842f0ee19c40cd611e1892b550e6c138cc9b84e0aba37fab2def037b63f60001e15567807ed601f8cc89253609085204f47141ee1c5d790025c5c8a95aad88b9f3723622d7463d17422b3cf49f5f330c7241b34a8cf18926954df50f3807bf4b1d3795de50634157c5b1590da45acfdef481f2804584ccb4d406dc6c260d8a4a662f84be060867c3", 0xcb}, {&(0x7f0000000880)="1b9c1c523a5ea31ea39869e22a2b0df4f653744b9f692b4c", 0x18}, {&(0x7f00000008c0)="02473d86ebfe0dedf84a485353e1f3dbdf199ec386b1e5e14a8cdc6974a5a6a32f", 0x21}, {&(0x7f0000000900)="9223b642b5850ad283932586e225cac7d0d6b4c3f34f4029064c65d0778e516a6ceec5d52efb09425ed4911c3d8586ebac666c746929aeb124ee92d346eefd03", 0x40}, {&(0x7f0000000940)="05407d29710790f048f3e32d10abff9bf34965d4f292a81f4c4101a7a331", 0x1e}, {&(0x7f0000000980)="7d9e08625aece737db6feb1c02e1a260907cda32bba35d2cfb437a", 0x1b}, {&(0x7f00000009c0)="3e30ce99e47de62d7e0fc3aa15cd146a8b95ce7fb7e2ac1863d8def509e8a8ebad8a68055d954567446b6f0394ea43b6daec66e36c94a37f10cb5a5efc788e8bd1e8cace10cc9a7f2ac7a48a8a58fda42b93ce6b20d1bbb633235c1783a3682afcd68334452fe0f76da08a1d5b0eb0e75c7fd95fcdc43e06668d4cbcba5f976a98c77d00b235ac3e7ffd3224c2bf0cd6d7063abef51684cf8513062d1edc3ff3030bd65d1a027e3bcb663c4458844bd9aa93ca7556fd10800df04ac2cc9259bc4056cc4d77c8b8c229864c25d5697de3bc9a7417b30bd93725e5ba35f6aa", 0xde}, {&(0x7f0000000ac0)="6879bcb522f02068968c3ff76c5541a4017efe79fa4308437e85b1ff5b6e1748465926d5cb70d3f1ebbca14b122717fa09b9d6fa1e2ddd39fd023fd18bb20ee1ccaaad613507c96d50307463d6b58c2797da796c81c1", 0x56}], 0x9, &(0x7f0000000c00), 0x0, 0x10}, 0x100}], 0x2, 0x81) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/71) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000c00)={'dummy0\x00', 0x7cdd521f}) [ 338.025785] ? debug_check_no_locks_freed+0x310/0x310 [ 338.030993] should_fail.cold.4+0xa/0x1a [ 338.035071] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 338.040197] ? perf_trace_lock+0xd6/0x900 [ 338.044355] ? perf_trace_lock_acquire+0xe3/0x980 [ 338.049207] ? perf_trace_lock_acquire+0xe3/0x980 [ 338.054078] ? find_held_lock+0x36/0x1c0 [ 338.058185] ? check_same_owner+0x320/0x320 [ 338.062525] ? rcu_note_context_switch+0x710/0x710 [ 338.067473] __should_failslab+0x124/0x180 [ 338.071729] should_failslab+0x9/0x14 [ 338.075543] kmem_cache_alloc_trace+0x2cb/0x780 [ 338.080241] alloc_pipe_info+0x16d/0x580 [ 338.084319] ? pipe_read+0x940/0x940 [ 338.088049] ? __fget+0x40c/0x650 [ 338.091543] ? expand_files.part.8+0x9a0/0x9a0 [ 338.096136] ? perf_trace_lock_acquire+0xe3/0x980 [ 338.101004] splice_direct_to_actor+0x6e7/0x8d0 [ 338.105686] ? pipe_to_sendpage+0x3f0/0x3f0 [ 338.110015] ? lock_downgrade+0x8e0/0x8e0 [ 338.114182] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 338.119725] ? do_splice_to+0x190/0x190 [ 338.123710] ? rw_verify_area+0x118/0x360 [ 338.127877] do_splice_direct+0x2cc/0x400 [ 338.132051] ? splice_direct_to_actor+0x8d0/0x8d0 [ 338.136910] ? rw_verify_area+0x118/0x360 [ 338.141075] do_sendfile+0x60f/0xe00 [ 338.144809] ? do_compat_pwritev64+0x1b0/0x1b0 [ 338.149406] ? __might_sleep+0x95/0x190 [ 338.153400] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 338.158949] ? _copy_from_user+0xdf/0x150 [ 338.163114] __x64_sys_sendfile64+0x155/0x240 [ 338.167630] ? __ia32_sys_sendfile+0x290/0x290 [ 338.172224] ? do_syscall_64+0x92/0x800 [ 338.176215] do_syscall_64+0x1b1/0x800 [ 338.180112] ? syscall_return_slowpath+0x5c0/0x5c0 [ 338.185054] ? syscall_return_slowpath+0x30f/0x5c0 [ 338.189998] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 338.195373] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 338.200232] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 338.205426] RIP: 0033:0x455979 [ 338.208626] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 338.216340] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 338.223595] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 338.230848] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 338.238104] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 338.245370] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000000 2018/04/29 21:25:00 executing program 6: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000001bc0)=[{&(0x7f0000000300)={0x27, 0x1, 0x0, 0x3, 0x80, 0x5, "065105831ec02ecbfddf92f2ee0b3cee46f4ae09b707df794626c26934eb0c705bcea6e76c81093eb4805e3328794d799154ab07a83c8d2bd173c611b193e2", 0x2d}, 0x60, &(0x7f0000001a40)=[{&(0x7f0000000380)="391dac03f5d654555c251e6040f4beff32a799a054a7302a07bbeaf5a0589c2b9e035b6ebe848827d0150348cca4b3a147c1ba762c076d2f8faba8d3f3eccd6bcf733f067b2f244cb41c7785bbcb46b1e107d320d869d49e52ac44065972d168685e8d8f5bd5a3c9f79822b062872f7ee1b4ba2aca747d81e72fd7057994bf557141eea35a5cdaba90caa1c8ff920d023dcf0946b807847a16cd644799d7df47b6ad1b60d93eb3c4737695770f0cb8143332ae358b007cac86884301123c5be5d33ec7aabf3260ed7d6e8aa5bc0ea5fd78fbc2a7ed2190809b2875bd33e5a11c1c756d4965c3f60ce2113371327a65b991", 0xf1}, {&(0x7f0000000480)="ba61809aae9eecca234694653f1fa7404534035e44842bf0e5f5e7a7b91ce91be97fd3b1f98f4950758f77d3697daa1dbb2d422c23f7900ffa4f5456b728be9b8fd4963d2e750ddb6505f09102f207b4f8ecaca0eb30ac445d8262d6fd7d70d578189783fc4ed7bbaa9bd79f4d5aae69fd8e4aaff1b43addfde0310d113e20e3d3d3b6925062ef4a603d", 0x8a}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="f664c997d55ad652b0638d33a3014775961d897d725e183a918c53d3d5b3f37e3251ec536499e5dafbd7c823263e7d87c2dce96169a4c2f91a44fb6f51e1430e296bf60c6e48a87d1bf8d56b17d659817d531272b9ec10a847967c0726a44a36046e100ec41152484caeb071fc4956578ddef686927aa745e1739fb727938e86b0c5bd6bcb6b293d651c039f773654d3e1c2f859b6dbf54137c7e0cde02eb02e3174aacb3bb317ff5bd18748fb8d2c9f5e2a092d20c1530ae62291a4fba421a2b0bd5d44e1bf3dcc51d7a5baf51c17", 0xcf}, {&(0x7f0000001640)="35d9af96c5f19f2832493cfc868c0a17cb3ba392eb9ddd57fd89dcca6447c3a56a591aaace45746fbe57c88fd28d4adcb6a756a5ad119b95d88bd2151070fd023ea2700c4aa390b5b7f9818cc8ec3384aaf00f112502e014e0f252d4aca5ef3c9fa1e24e8813547fef0ad9ba2032a09db9ff7a04403d7b", 0x77}, {&(0x7f00000016c0)="22cfb241652c7dd6beac43b4683e7ea33bddf7c0f374a9fb6edc9ca7383ed36723088fa08283cd24de841d70f38661cfd0359482de9f9e08830db872725d5f6343d774741aeaeb03e5c5ed7552710bcb135d2963aaf8e572a74b55fa5c34b31fda1ef7fe55f012e9ca418ade9873bf30061fff30b0091155168cd5d903282010bb7b225f88e5f41f2bbbe5e862ee6a9b3655afc444132a835033", 0x9a}, {&(0x7f0000001780)="803ee31febb0e3ff80da671987b7dd90f06c78d4888f6c1e663bd0d53a1efe696c8961ade6d2e9f028971aed6bd1d75cc1cbdd21a88690a35eeced2644d2e0c0c2eea8ea77dc5fe24ba81c", 0x4b}, {&(0x7f0000001800)}, {&(0x7f0000001840)="5d7400169a16c6638006ab4ffba9f5fae85981a76fe80605f22ad6bb41e8b0dbfbf09ad0183cd9f4d1115b90466d93071a0719a20cd6dfdf3f3689923278e03ab4e2cacb273bf8bc821eb5d4b977431e024bee5e29f3f774120aa07b886aedb27b6c8da25bd294b9b7834456e210530e96f36e6ae1372a3483e4284cf7e4613866a3a3cb2f2600c241355a5e22f88e52dc27e42270a1036955873de707dca8077d1ee59cc0c7e30eb0e638aab18bf6260f25c70a6d3bad8b039826d522dc070ee88db806c4edcbdf942db14f12", 0xcd}, {&(0x7f0000001940)="6af4904c3e001c831d99bec466d9035bdf527453acf352e2760a92d95478314c91152913a383db9da3a856d521c6d5db98d25fea20f2277462eced63735869b8e16a3bcbfd9f77e02aaa43ac16a81653c3405cc83ffe3877d9923c078d62988e5dec9786735beb51ea65ce139932b779ddaaaabdd19c8e62a7cb72ba3382418a053d95f7aabd790fa562725b54769cc6cb3157cade6803ae17a7b2a8597a026e2deff70f27c52a85d61ee4001a148e540877d57211a5be2eeb27f88e23bad4810970a5", 0xc3}], 0xa, &(0x7f0000001b00)={0xb8, 0x102, 0xffffffff, "16ff466388b4f2a5368647f525466b15951b7ada7e48df983c57299bd23c9077786c788031931dca641136fc7d987d6e32026a1d40d7e0e3e4ca34843f9b19536fa20268507c451f1cb3cda2cf197c66d834e27a9463686e7442fef087f880331735f30393afd9d88a62e8bc815972f9c9261911430a0ca30a73e2c7547cfb0f4649d2d7b3a0852fe3ff90e6148150c615bc2fcabd7626d02268022957f4f93470ea1fb874a71c"}, 0xb8, 0x4008040}], 0x1, 0x8040) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x101, 0x200) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x11, 0x0, 0x7, 0x3, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_x_nat_t_type={0x1, 0x14, 0xe0c}]}, 0x18}, 0x1}, 0x4000045) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000001800)={0x80, 0x8}) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f000015cfd8)={0x0, 0x1000000000001, 0x0, 0x0, "cc450294828d9b0006c7c917d91a496bed9216a6f3af549d6ee1fe23a16ba2a4"}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={r3, 0x8, 0x30, 0x20}, &(0x7f0000000280)=0x18) 2018/04/29 21:25:00 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={r0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}, 0x20) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x2}) fremovexattr(r0, &(0x7f0000000080)=@random={'btrfs.', '\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x80000001, 0x84) write$rdma_cm(r2, &(0x7f0000000140)=ANY=[@ANYPTR64, @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368a81b151113c9dffe379b2f8429abc19"], 0xfffffffffffffd02) write$rdma_cm(r2, &(0x7f0000000040)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000000180)}}, 0xfffffef2) dup3(r3, r2, 0x0) 2018/04/29 21:25:00 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007000)={'vcan0\x00', 0x0}) r2 = dup2(r0, r0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000000)=""/8) bind$can_raw(r0, &(0x7f0000af7000)={0x1d, r1}, 0x10) socket$key(0xf, 0x3, 0x2) ioctl$sock_ifreq(r0, 0x895f, &(0x7f0000000040)={'veth0_to_bridge\x00', @ifru_ivalue}) 2018/04/29 21:25:00 executing program 1: r0 = socket$inet6(0xa, 0x40000080803, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000e8040000ffffffff000000000000000078010000ffffffffffffffff180400001804000018040000ffff000003ff0000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300178010000000000000000000000000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c657230000000000000010000000000000008000000000000000000000007000000001000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000000000000000000000000000000000004800544545000000000000000000000000000000000000000000000000000001e000000100000000000000000000000065727370616e30000000000000000000000000000000000000000000000000000000ffff7f00000100000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000067726530000000000000000000000000726f736530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000010000000000000073797374656d5f753a6f626a6563745f723a64686370635f7661725f72756e5f743a73300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800434f4e4e5345434d41524b0000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x548) r1 = shmget(0x3, 0x4000, 0x54000400, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x2, 0x3c, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x4e20, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 2018/04/29 21:25:00 executing program 3: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) unlink(&(0x7f00003b3000)='./file0\x00') lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="73ffffffff5f19981a31064627c7a841c543b25d110e697479"], &(0x7f0000000300)='jfs\x00', 0x4, 0x0) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)="897c456f4142cb3591e088bc8e65149dc02eaf6db8c7fb7fe77fbaa90c0fd2fddca8959b6d8dd4ad5c5bae6633c5f8f8e8b1992c7cadd43870", 0x1023402, 0x0) lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'btrfs.', '\x00'}, &(0x7f0000000300)='eth1lo\x00', 0x7, 0x0) dup2(r0, r1) 2018/04/29 21:25:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc7539esp(chacha20-simd,md5-generic))\x00'}, 0x58) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000180)={r0}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8000800000000010) semctl$GETZCNT(0x0, 0x0, 0xf, &(0x7f0000000080)=""/177) 2018/04/29 21:25:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x400100) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200)) r1 = accept(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r2, 0x6b, 0x4, 0x800}, 0x10) close(r0) pipe(&(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 2018/04/29 21:25:00 executing program 7 (fault-call:2 fault-nth:1): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) [ 338.921363] FAULT_INJECTION: forcing a failure. [ 338.921363] name failslab, interval 1, probability 0, space 0, times 0 [ 338.932695] CPU: 1 PID: 24321 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 338.939982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.949334] Call Trace: [ 338.951930] dump_stack+0x1b9/0x294 [ 338.955577] ? dump_stack_print_info.cold.2+0x52/0x52 [ 338.960770] ? __save_stack_trace+0x7e/0xd0 [ 338.965101] should_fail.cold.4+0xa/0x1a [ 338.969166] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 338.974271] ? save_stack+0x43/0xd0 [ 338.977894] ? kasan_kmalloc+0xc4/0xe0 [ 338.981779] ? kmem_cache_alloc_trace+0x152/0x780 [ 338.986622] ? alloc_pipe_info+0x16d/0x580 [ 338.990855] ? splice_direct_to_actor+0x6e7/0x8d0 [ 338.995693] ? do_sendfile+0x60f/0xe00 [ 338.999577] ? __x64_sys_sendfile64+0x155/0x240 [ 339.004245] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 339.009615] ? find_held_lock+0x36/0x1c0 [ 339.013699] ? check_same_owner+0x320/0x320 [ 339.018018] ? rcu_is_watching+0x85/0x140 [ 339.022171] ? rcu_note_context_switch+0x710/0x710 [ 339.027105] __should_failslab+0x124/0x180 [ 339.031343] should_failslab+0x9/0x14 [ 339.035142] __kmalloc+0x2c8/0x760 [ 339.038682] ? kmem_cache_alloc_trace+0x616/0x780 [ 339.043529] ? alloc_pipe_info+0x2a0/0x580 [ 339.047765] alloc_pipe_info+0x2a0/0x580 [ 339.051830] ? pipe_read+0x940/0x940 [ 339.055548] ? __fget+0x40c/0x650 [ 339.059009] ? expand_files.part.8+0x9a0/0x9a0 [ 339.063593] ? find_held_lock+0x36/0x1c0 [ 339.067662] splice_direct_to_actor+0x6e7/0x8d0 [ 339.072334] ? pipe_to_sendpage+0x3f0/0x3f0 [ 339.076651] ? lock_downgrade+0x8e0/0x8e0 [ 339.080804] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 339.086346] ? do_splice_to+0x190/0x190 [ 339.090320] ? rw_verify_area+0x118/0x360 [ 339.094473] do_splice_direct+0x2cc/0x400 [ 339.098623] ? splice_direct_to_actor+0x8d0/0x8d0 [ 339.103471] ? rw_verify_area+0x118/0x360 [ 339.107621] do_sendfile+0x60f/0xe00 [ 339.111344] ? do_compat_pwritev64+0x1b0/0x1b0 [ 339.115926] ? __might_sleep+0x95/0x190 2018/04/29 21:25:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000b8fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) socketpair(0xb, 0xaf2956500ecd188c, 0xccd, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x1]}, &(0x7f0000000080)=0x6) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) [ 339.119906] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 339.125441] ? _copy_from_user+0xdf/0x150 [ 339.129597] __x64_sys_sendfile64+0x155/0x240 [ 339.134091] ? __ia32_sys_sendfile+0x290/0x290 [ 339.138675] ? do_syscall_64+0x92/0x800 [ 339.142660] do_syscall_64+0x1b1/0x800 [ 339.146554] ? finish_task_switch+0x1ca/0x810 [ 339.151055] ? syscall_return_slowpath+0x5c0/0x5c0 [ 339.155998] ? syscall_return_slowpath+0x30f/0x5c0 [ 339.160940] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 339.166316] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 339.171175] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 339.176359] RIP: 0033:0x455979 [ 339.179541] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 339.187251] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 339.194516] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 339.201781] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 339.209047] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 339.216319] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000001 [ 339.386483] FAULT_INJECTION: forcing a failure. [ 339.386483] name failslab, interval 1, probability 0, space 0, times 0 [ 339.397912] CPU: 1 PID: 24347 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 339.405183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.414529] Call Trace: [ 339.417121] dump_stack+0x1b9/0x294 [ 339.420753] ? dump_stack_print_info.cold.2+0x52/0x52 [ 339.425942] ? perf_trace_lock_acquire+0xe3/0x980 [ 339.430793] should_fail.cold.4+0xa/0x1a 2018/04/29 21:25:00 executing program 7 (fault-call:2 fault-nth:2): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) [ 339.434860] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 339.439966] ? debug_check_no_locks_freed+0x310/0x310 [ 339.445159] ? print_usage_bug+0xc0/0xc0 [ 339.449217] ? __lock_acquire+0x7f5/0x5140 [ 339.453466] ? find_held_lock+0x36/0x1c0 [ 339.457572] ? check_same_owner+0x320/0x320 [ 339.461913] ? rcu_note_context_switch+0x710/0x710 [ 339.466859] __should_failslab+0x124/0x180 [ 339.471112] should_failslab+0x9/0x14 [ 339.474923] kmem_cache_alloc_node_trace+0x26f/0x770 [ 339.480040] ? find_held_lock+0x36/0x1c0 [ 339.484112] __kmalloc_node+0x33/0x70 [ 339.487916] kvmalloc_node+0x6b/0x100 [ 339.491721] iov_iter_get_pages_alloc+0x7be/0x14e0 [ 339.496654] ? rcu_is_watching+0x85/0x140 [ 339.500811] ? copy_page_to_iter+0xf30/0xf30 [ 339.505226] ? is_bpf_text_address+0xd7/0x170 [ 339.509720] ? kernel_text_address+0x79/0xf0 [ 339.514129] ? __unwind_start+0x166/0x330 [ 339.518277] ? __kernel_text_address+0xd/0x40 [ 339.522777] ? unwind_get_return_address+0x61/0xa0 [ 339.527710] ? __save_stack_trace+0x7e/0xd0 [ 339.532062] ? save_stack+0xa9/0xd0 [ 339.535694] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 339.540709] ? iov_iter_pipe+0xc2/0x2f0 [ 339.544689] default_file_splice_read+0x1c7/0xad0 [ 339.549534] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 339.554913] ? do_splice_direct+0x400/0x400 [ 339.559238] ? debug_mutex_init+0x1c/0x60 [ 339.563389] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 339.568408] ? __lockdep_init_map+0x105/0x590 [ 339.572906] ? lockdep_init_map+0x9/0x10 [ 339.576967] ? debug_mutex_init+0x2d/0x60 [ 339.581116] ? __mutex_init+0x1ef/0x280 [ 339.585094] ? __ia32_sys_membarrier+0x150/0x150 [ 339.589848] ? __lockdep_init_map+0x105/0x590 [ 339.594832] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 339.600371] ? fsnotify+0x415/0xfc0 [ 339.604003] ? fsnotify+0xfc0/0xfc0 [ 339.607632] ? fsnotify_first_mark+0x330/0x330 [ 339.612229] ? security_file_permission+0x1c6/0x240 [ 339.617251] ? rw_verify_area+0x118/0x360 [ 339.621402] ? do_splice_direct+0x400/0x400 [ 339.625724] do_splice_to+0x12e/0x190 [ 339.629530] splice_direct_to_actor+0x268/0x8d0 [ 339.634201] ? pipe_to_sendpage+0x3f0/0x3f0 [ 339.638529] ? do_splice_to+0x190/0x190 [ 339.642506] ? rw_verify_area+0x118/0x360 [ 339.646661] do_splice_direct+0x2cc/0x400 [ 339.650816] ? splice_direct_to_actor+0x8d0/0x8d0 [ 339.655666] ? rw_verify_area+0x118/0x360 [ 339.659816] do_sendfile+0x60f/0xe00 [ 339.663540] ? do_compat_pwritev64+0x1b0/0x1b0 [ 339.668123] ? __might_sleep+0x95/0x190 [ 339.672108] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 339.677644] ? _copy_from_user+0xdf/0x150 [ 339.681797] __x64_sys_sendfile64+0x155/0x240 [ 339.686297] ? __ia32_sys_sendfile+0x290/0x290 [ 339.690884] ? do_syscall_64+0x92/0x800 [ 339.694867] do_syscall_64+0x1b1/0x800 [ 339.698753] ? finish_task_switch+0x1ca/0x810 [ 339.703249] ? syscall_return_slowpath+0x5c0/0x5c0 [ 339.708181] ? syscall_return_slowpath+0x30f/0x5c0 [ 339.713120] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 339.718490] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 339.723338] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 339.728524] RIP: 0033:0x455979 [ 339.731708] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 339.739416] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 339.746684] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 339.753951] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 339.761220] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 339.768486] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000002 2018/04/29 21:25:01 executing program 7 (fault-call:2 fault-nth:3): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:01 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000002c0)={&(0x7f0000ffb000/0x4000)=nil, 0xe28d, 0x7, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8000000000200000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0xfffffffffffffffc}) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='anon_inodefs\x00', 0x10000, &(0x7f0000000140)="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") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000300), 0x4) ioctl$KDMKTONE(r5, 0x4b30, 0x0) socket$kcm(0x29, 0x7, 0x0) 2018/04/29 21:25:01 executing program 2: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x12, r0, 0x0) fallocate(r0, 0x4000000, 0x8, 0x4) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) madvise(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3) [ 339.889621] FAULT_INJECTION: forcing a failure. [ 339.889621] name failslab, interval 1, probability 0, space 0, times 0 [ 339.901019] CPU: 0 PID: 24360 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 339.908300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.917652] Call Trace: [ 339.920257] dump_stack+0x1b9/0x294 [ 339.923897] ? dump_stack_print_info.cold.2+0x52/0x52 [ 339.929107] should_fail.cold.4+0xa/0x1a [ 339.933186] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 339.938303] ? debug_check_no_locks_freed+0x310/0x310 [ 339.943512] ? print_usage_bug+0xc0/0xc0 [ 339.947584] ? __lock_acquire+0x7f5/0x5140 [ 339.951834] ? find_held_lock+0x36/0x1c0 [ 339.955932] ? check_same_owner+0x320/0x320 [ 339.960266] ? rcu_note_context_switch+0x710/0x710 [ 339.965205] __should_failslab+0x124/0x180 [ 339.969453] should_failslab+0x9/0x14 [ 339.973262] kmem_cache_alloc_node_trace+0x26f/0x770 [ 339.978377] ? find_held_lock+0x36/0x1c0 [ 339.982457] __kmalloc_node+0x33/0x70 [ 339.986276] kvmalloc_node+0x6b/0x100 [ 339.990089] iov_iter_get_pages_alloc+0x7be/0x14e0 [ 339.995030] ? rcu_is_watching+0x85/0x140 [ 339.999192] ? copy_page_to_iter+0xf30/0xf30 [ 340.003617] ? is_bpf_text_address+0xd7/0x170 [ 340.008123] ? kernel_text_address+0x79/0xf0 [ 340.012543] ? __unwind_start+0x166/0x330 [ 340.016702] ? __kernel_text_address+0xd/0x40 [ 340.021208] ? unwind_get_return_address+0x61/0xa0 [ 340.026149] ? __save_stack_trace+0x7e/0xd0 [ 340.030500] ? save_stack+0xa9/0xd0 [ 340.034139] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 340.039160] ? iov_iter_pipe+0xc2/0x2f0 [ 340.043150] default_file_splice_read+0x1c7/0xad0 [ 340.047999] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 340.053388] ? do_splice_direct+0x400/0x400 [ 340.057720] ? debug_mutex_init+0x1c/0x60 [ 340.061878] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 340.066901] ? __lockdep_init_map+0x105/0x590 [ 340.071403] ? lockdep_init_map+0x9/0x10 [ 340.075463] ? debug_mutex_init+0x2d/0x60 [ 340.079603] ? __mutex_init+0x1ef/0x280 [ 340.083565] ? __ia32_sys_membarrier+0x150/0x150 [ 340.088308] ? __lockdep_init_map+0x105/0x590 [ 340.092796] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 340.098317] ? fsnotify+0x415/0xfc0 [ 340.101934] ? fsnotify+0xfc0/0xfc0 [ 340.105546] ? fsnotify_first_mark+0x330/0x330 [ 340.110127] ? security_file_permission+0x1c6/0x240 [ 340.115132] ? rw_verify_area+0x118/0x360 [ 340.119270] ? do_splice_direct+0x400/0x400 [ 340.123578] do_splice_to+0x12e/0x190 [ 340.127371] splice_direct_to_actor+0x268/0x8d0 [ 340.132036] ? pipe_to_sendpage+0x3f0/0x3f0 [ 340.136349] ? do_splice_to+0x190/0x190 [ 340.140311] ? rw_verify_area+0x118/0x360 [ 340.144450] do_splice_direct+0x2cc/0x400 [ 340.148590] ? splice_direct_to_actor+0x8d0/0x8d0 [ 340.153424] ? rw_verify_area+0x118/0x360 [ 340.157560] do_sendfile+0x60f/0xe00 [ 340.161267] ? do_compat_pwritev64+0x1b0/0x1b0 [ 340.165835] ? __might_sleep+0x95/0x190 [ 340.169824] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 340.175351] ? _copy_from_user+0xdf/0x150 [ 340.179490] __x64_sys_sendfile64+0x155/0x240 [ 340.183973] ? __ia32_sys_sendfile+0x290/0x290 [ 340.188543] ? do_syscall_64+0x92/0x800 [ 340.192509] do_syscall_64+0x1b1/0x800 [ 340.196382] ? finish_task_switch+0x1ca/0x810 [ 340.200866] ? syscall_return_slowpath+0x5c0/0x5c0 [ 340.205782] ? syscall_return_slowpath+0x30f/0x5c0 [ 340.210700] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 340.216055] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 340.220887] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 340.226061] RIP: 0033:0x455979 [ 340.229239] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/04/29 21:25:01 executing program 6: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x10, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000df8ffc)=0x4, 0x4) sendto$inet(r0, &(0x7f0000de1fff)='U', 0x1, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000defffc), 0x4) sendto$inet(r0, &(0x7f0000000140)="aa", 0x1, 0xc040, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f0000000080)=""/86, 0x56) sendto$inet(r0, &(0x7f0000000980)="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", 0x7f9, 0xc00c, 0x0, 0x0) recvmsg(r0, &(0x7f0000df6fc8)={&(0x7f0000df6f80)=@generic, 0x80, &(0x7f0000df5000)=[{&(0x7f0000df5f6e)=""/146, 0x92}, {&(0x7f0000df6f74)=""/140, 0x8c}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f0000409fa2)=""/94, 0x43}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f0000d76f57)=""/169, 0xa9}, {&(0x7f00009e3000)=""/230, 0x312}, {&(0x7f0000923000)=""/37, 0x25}, {&(0x7f0000554fcf)=""/49, 0x31}], 0x9, &(0x7f0000c27ff9)=""/7, 0xffffff89, 0x8000}, 0x40000100) 2018/04/29 21:25:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000279ffc)=0x6, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000e4d000)=0x7, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback=0x7f000001}, 0x10) 2018/04/29 21:25:01 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)={0x2, 0x100000d, 0x80, 0x0, 0x2, 0x0, 0x70bd28, 0x4}, 0x10}, 0x1}, 0x0) prctl$setfpexc(0xc, 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x99, "dd269a324d4607db573a364b8da6bd61465906cd54a2f5bb5966caff8343e907b550c5773035b30996f6c13df9b453448148ad5aa393d635ad52f9817fffdf06842d0a1e1f2a58fd30305c3fefaefda50295002083afb036ef789495a95ef45c7ca1c21ea001d90987dce6bb4451b46c41d978045eca2adf854cfe06b2dc2ea57dd336b0877c3013de16b3165aac9bb244d21c6875f988eac1"}, &(0x7f0000000100)=0xa1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r2, @in={{0x2, 0x20, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x101, 0x3, 0x6, 0x2, 0x6}, 0x98) 2018/04/29 21:25:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendto$inet(r0, &(0x7f00000001c0), 0xffffffffffffffee, 0x20020003, &(0x7f0000000180)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x3, 0x4) recvfrom$inet(r0, &(0x7f00000001c0)=""/244, 0xf4, 0x40000022, 0x0, 0x0) [ 340.236934] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 340.244192] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 340.251450] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 340.258705] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 340.265960] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000003 [ 340.298148] QAT: Invalid ioctl [ 340.322560] QAT: Invalid ioctl 2018/04/29 21:25:01 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="37fd4875f999bcf580c5194a35c1b2a7ea1a4890e771cfb058c71087087dd91b7452f4db6df1b44ce4850f5fe6ea008048fee8f65e48757ddf"], 0x8) 2018/04/29 21:25:01 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x1c}, 0x7ff}}, 0x3, 0x5, 0x1000, 0x80, 0x8001}, &(0x7f0000000080)=0x98) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000280)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x1, 0x6, [0xe2, 0xaa, 0x4, 0xfff, 0x3, 0x0]}, &(0x7f0000000240)=0x14) r3 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5374e368781b17d98585affe379b2f8429abc1900725c8385efffc6c41b56eb2ad5a1e86e174dd00875693db4124740afff397d4f0641e1576c25b2e5ff2bc6012ee45a5da087ec536080d84e9dab31a94c050be187ee1b276f2eaa4c595a00a81fb028f13f078d4256daf991f6832e57bdf76792baca09a512562f34416c55045841"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r3, r0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x10800, 0x20) 2018/04/29 21:25:01 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1d}, @empty=[0x0, 0x0, 0x14], [{[{0x9100, 0x5bcb, 0x9}], {0x8100, 0x8, 0x3, 0x2}}], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x19}, @dev={0xfe, 0x80, [], 0x21}, @random="c4dcf089d3da", @dev={0xfe, 0x80, [], 0x14}}}}}, 0x0) semget$private(0x0, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40040, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000180)={[0x4, 0xd000, 0x0, 0x7000], 0x1, 0x2, 0x9}) getsockopt$inet_dccp_int(r0, 0x21, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x9) 2018/04/29 21:25:01 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000280)) clone(0x200, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000804000)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getpeername(r1, &(0x7f00000001c0)=@l2, &(0x7f0000000140)=0x80) r2 = open(&(0x7f00000ed000)='./file0\x00', 0x401, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000340)={{0x1000000000, 0x2}, {0x4, 0x9}, 0x8001, 0x2}) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x17f) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000080)={{0xa4e}, 'port1\x00', 0x0, 0x170420, 0x4, 0x5, 0x1fe, 0x4, 0x80000000, 0x0, 0x4, 0x7}) 2018/04/29 21:25:01 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = dup3(r0, r0, 0x80000) getsockname$ipx(r1, &(0x7f00000001c0), &(0x7f0000000200)=0x10) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000140)) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x1f, 0x4, [0x34, 0x5563a04e, 0x6, 0xffffffffffff0001]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r3, 0xcefd, 0xff}, &(0x7f0000000100)=0xc) fallocate(r2, 0x3, 0xfff, 0xcf0) accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000002c0)={@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x7e, r4}) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000300)=@int=0x90d, 0x4) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000184000)={0x2, 0xf, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1=0xe0000001}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, @sadb_x_sec_ctx={0x1, 0x18}]}, 0x88}, 0x1}, 0x0) 2018/04/29 21:25:02 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x0) 2018/04/29 21:25:02 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast=0xffffffff}, 0x1}}, 0x2e) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00000002bb)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast=0xffffffff}, 0x1}}, 0x26) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x1, 0x3, 0x0, 0x2, 0x3ff, 0x7, 0x5760894b}, 0x20) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x4047e, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) 2018/04/29 21:25:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x200010, 0x0, 0x6}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x10200, 0x0, &(0x7f0000016000/0x2000)=nil}) memfd_create(&(0x7f0000000080)='bdevlo![cgroup\x00', 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000400)="baf80c66b8f5e29b8266efbafc0cb04cee0f21a90f22570fe2a2880b230f0f009678002e0f01cbba4300ec0f01cf66b8c63554fa0f23c00f21f86635030006000f23f8", 0x43}], 0x1, 0x0, &(0x7f0000000480), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/29 21:25:02 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x7, 0x2, [0x40, 0x7]}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100)=r1, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0x4141, &(0x7f0000005e0b)) 2018/04/29 21:25:02 executing program 7 (fault-call:2 fault-nth:4): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:02 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000040)={"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"}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rfkill\x00', 0x22000, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x202040, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000004c0)) r3 = getpgid(0x0) r4 = syz_open_procfs(r3, &(0x7f0000000580)='net/rpc\x00') ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000005c0)) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000600)=0x8) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000001800)={0x53, 0xfffffffffffffffe, 0x1000, 0x9, @buffer={0x0, 0xe6, &(0x7f0000000640)=""/230}, &(0x7f0000000740)="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", &(0x7f0000001740)=""/104, 0xfffffffffffffffc, 0x10022, 0x2, &(0x7f00000017c0)}) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f00000018c0)={0x7, &(0x7f0000001880)=[{}, {}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000001a00)={r5, 0x3, &(0x7f0000001900)=[0x3, 0x6, 0x9], &(0x7f0000001940)=[0x7, 0x8, 0x8], 0x14, 0x5, 0x20, &(0x7f0000001980)=[0x2, 0xe2, 0x9, 0xfff, 0x80], &(0x7f00000019c0)=[0x622]}) connect$bt_rfcomm(r4, &(0x7f0000001a40)={0x1f, {0xc8, 0x4, 0x5, 0x100000001, 0x5, 0x27}, 0x7f}, 0xa) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000001a80)=0xfffffffffffffffb) getsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000001b40)={"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"}) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000001f40)={0x7e, @loopback=0x7f000001, 0x4e20, 0x3, 'none\x00', 0x4, 0x401, 0x3c}, 0x2c) write(r0, &(0x7f0000001f80)="19d6ceda2580b53ec62615e6935393cb11184ebe633ea42816e1c7a87c5a2fc712f1914057844bab4b9d9e7cdaea510bd16f668039832e02ceea5e05d22cd97c00b4bdc30af535df872f2ff6ed66e3f57935c199a2323f95c3e4ce4838f47cd43ceb933093e05c1d1db1e24bead0807bea36915e8fa2f2d27596c3", 0x7b) sendmsg$unix(r4, &(0x7f0000002540)={&(0x7f0000002000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000002080)="8d48bfa507311f3e9a9c4e97641660c06d532edcf597845d3089e729565b087664373d6dba7021d5cbb3799337b56863e43ede5062cbf79f16322e2b2e965732633e5e6aeb5210c33f1b85147eace937906e7cf243e7bfe8f4f4da48", 0x5c}, {&(0x7f0000002100)="a41428181aacbd4da238512473dbae5009b5b923873cabf3b5bde61baae84bb310a553894dee2c0516982edf3a22526bf01d37b4dbbb50f61c19907365b25c068f370f63f2181c5d7ece2b1d7baa0d7a3cbf737f89894326abbd1b12787f3b6529841058bba51ab7525a62bbe56978bd7d1e014789d52e62d0b9234b39125d3d6940ffdc85", 0x85}, {&(0x7f00000021c0)="c01fea4c891c8fec6976c26beef1467b0274ea55aeef534f02e31b235581421ca77c03472384464622a29d0804295ef997eda90aa05ab91f22a9e9aa601a83cc7c07d3fe0886f122be2dcb3cb90c968e2825acd51323872fc42e9bb186e9a0f721d2539dda1130307c30d573f1a17861a5bb28fe5b7dc6", 0x77}, {&(0x7f0000002240)="f341f3d7e667d13c796eb1e96f1037c60fcba7b14dff296e83bc33e5d76d416bdfcfb4339e9f0ad0ecb536c257a97d524988149978623357ab02c569b78e55b5660505ce6e14e0b83965381c18c5f330e319d496b128aeefab021aec357d616788132cbf6d0b102a363335d1948218fdbb658d8b729274f4ddd210a0810b7e5e50d1b2cd59a123edc50f5d4b611ada06bac470c6ef762db818a335f7d4ba2e6944611377c061adfb3bf719577cdab254d40ff4a0553600e0b2713826aab4763c100980fd7e5e1f933a20e99f633f88675b9e667f9d0516fc0fe7301b2538d36ea8fe4cb8a34228edb7c89ea888b94bff5dbba1db89203c", 0xf7}, {&(0x7f0000002340)="1c4d8e787a241dd9bd1d3297a8aa81e455c54df2e2dd75b7619421b4dcff5699aaf8", 0x22}, {&(0x7f0000002380)="c56c3f3d7303e51e07704a434e70ad790e23a9", 0x13}, {&(0x7f00000023c0)="0d9384016a017002e765ee863fd485adc7720364b5431aeb1e4a7d363b3eedf77382c1b1fc9fa02d591364174b97440b31ee436f765028fd278dc8e3cd6b1c4236b3fc19fec6e71d4fe0b9e03628a20fefda799f978a8d0bb24ac3d4766f7c88858d88a99840065583c3fdbe20693dc92763df0cd3ac8643c1b0a1e1346a29b8e09d00048759b9570992d6b83fdcd9e468b04570ee533a142c1e902371f45b11500ad3acc1f04d5d6b22b2c17cf1a85a7beb1b14c536e65b714cab12a14a3014ed3dff1f", 0xc4}], 0x7, 0x0, 0x0, 0x40000}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000002580)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000002640)={0x0, @in6={{0xa, 0x4e20, 0x7, @loopback={0x0, 0x1}, 0x800}}, 0x1, 0x400, 0x2, 0x81, 0x1}, &(0x7f0000002700)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000002740)={0xfffffffffffffe01, 0x2, 0x80, 0x101, r6}, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000027c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000002900)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000028c0)={&(0x7f0000002800)={0x94, r7, 0x700, 0x70bd27, 0x25dfdbfc, {0xa}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffffffffff18}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x5) getsockname$packet(r4, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000002980)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000029c0)={'team0\x00', r8}) fcntl$getownex(r4, 0x10, &(0x7f0000002a00)) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000002a40)={0x0, 0x401, 0x3, 0x4, &(0x7f0000ffc000/0x3000)=nil, 0x80000000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002ac0)={r1, 0x7, 0x1, 0x2, &(0x7f0000002a80)=[0x0, 0x0, 0x0], 0x3}, 0x20) 2018/04/29 21:25:02 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x400445a0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x800, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000180)={0x800000000000, 0x8, 0x0, 0x2b720cc0, 0x1, 0x100000001, 0x2, 0x0, 0x0, 0x7, 0x5, 0x10000}) capset(&(0x7f0000000040)={0x20071026, r1}, &(0x7f00000000c0)={0x3ff, 0x0, 0x73, 0x1, 0xffffffffffffffff, 0x9}) 2018/04/29 21:25:02 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7, 0x10000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x80000001}}, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x20}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r1, 0x70, "d804a075f15ab04761b66ce062bbb24d13eaf393ae34462ab562947a8f49c4e56a2a611fd378fce124e6b01692b51488521d92591b34f0fa93ef70cb425a70ffefd1e03b383cf92f3d9e6d2575aa911db06b5c1c1a2e50a22be6e1a412e1bc41165b06a996d41d19be72db0c14e28735"}, &(0x7f0000000200)=0x78) r2 = socket(0x800010, 0x7, 0x0) write(r2, &(0x7f00000006c0)="240000005a005f19145ac60009037b1595a7f1d6d8210308001000fff708ffbc00000000", 0x24) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000300)={'icmp\x00'}, &(0x7f00000003c0)=0x1e) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) getsockname$packet(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000d40)={0x0, @empty, @local}, &(0x7f0000000d80)=0xc) getsockname$packet(r0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, &(0x7f0000000f00)=0x14) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000f40)={@rand_addr, @multicast2, 0x0}, &(0x7f0000000f80)=0xc) accept$packet(r2, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, &(0x7f0000001000)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000012c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001040)={0x218, r3, 0x220, 0x70bd2c, 0x25dfdbff, {0x1}, [{{0x8, 0x1, r4}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xf60}}}]}}, {{0x8, 0x1, r5}, {0x1b8, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x275df8c3}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r8}}, {0x8, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}]}}]}, 0x218}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2018/04/29 21:25:03 executing program 1: r0 = memfd_create(&(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dd5000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) close(r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000022df74)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000100)=[{0x0, 0x3, 0x0, 0x0, @tick=0x4, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {0x5}, {}, @control}], 0x60) write$sndseq(r1, &(0x7f0000062000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffffffffffd}}], 0x30) 2018/04/29 21:25:03 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='timers\x00') ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000001c0)={{0x5a6}, {0x80, 0xc827}, 0xfff, 0x2, 0xff}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r2, 0xca3, 0x8, r3}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000280)={"484c000000400000000000000000000000e6ff00"}, &(0x7f0000000240)=0xf) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{}, {0x1}}) getsockopt$inet_tcp_int(r1, 0x6, 0x1f, &(0x7f00000002c0), &(0x7f0000000300)=0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) [ 341.539885] FAULT_INJECTION: forcing a failure. [ 341.539885] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 341.551816] CPU: 0 PID: 24449 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 341.559092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.568445] Call Trace: [ 341.571043] dump_stack+0x1b9/0x294 [ 341.574689] ? dump_stack_print_info.cold.2+0x52/0x52 [ 341.579890] ? zap_class+0x720/0x720 [ 341.583620] should_fail.cold.4+0xa/0x1a [ 341.587692] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 341.592816] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 341.598020] ? find_held_lock+0x36/0x1c0 [ 341.602112] ? check_same_owner+0x320/0x320 [ 341.606443] ? rcu_note_context_switch+0x710/0x710 [ 341.611389] ? __might_sleep+0x95/0x190 [ 341.615382] __alloc_pages_nodemask+0x34e/0xd70 [ 341.620059] ? default_file_splice_read+0x1c7/0xad0 [ 341.625081] ? do_splice_to+0x12e/0x190 [ 341.629063] ? splice_direct_to_actor+0x268/0x8d0 [ 341.633918] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 341.638956] ? kasan_check_read+0x11/0x20 [ 341.643109] ? rcu_is_watching+0x85/0x140 [ 341.647267] ? rcu_pm_notify+0xc0/0xc0 [ 341.651175] ? rcu_read_lock_sched_held+0x108/0x120 [ 341.656205] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 341.661757] alloc_pages_current+0x10c/0x210 [ 341.666181] push_pipe+0x400/0x7a0 [ 341.669730] ? __kmalloc_node+0x47/0x70 [ 341.673725] iov_iter_get_pages_alloc+0x84a/0x14e0 [ 341.678667] ? rcu_is_watching+0x85/0x140 [ 341.682830] ? copy_page_to_iter+0xf30/0xf30 2018/04/29 21:25:03 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000500)='/dev/snd/seq\x00', 0x0, 0x1eb082) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000400)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376633, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)={0xc1}) getrandom(&(0x7f00000004c0)=""/27, 0x1b, 0x3) write$sndseq(r0, &(0x7f0000000280), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000640)) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000003c0)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) sendmsg$nl_crypto(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=@upd={0x100, 0x12, 0x0, 0x0, 0x0, {{'lrw(camellia)\x00'}}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x8}, {0x8, 0x1}]}, 0x100}, 0x1}, 0x8800) [ 341.687252] ? is_bpf_text_address+0xd7/0x170 [ 341.691757] ? kernel_text_address+0x79/0xf0 [ 341.696175] ? __unwind_start+0x166/0x330 [ 341.700339] ? unwind_get_return_address+0x61/0xa0 [ 341.705286] ? __save_stack_trace+0x7e/0xd0 [ 341.709633] ? save_stack+0xa9/0xd0 [ 341.713270] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 341.718293] ? iov_iter_pipe+0xc2/0x2f0 [ 341.722273] default_file_splice_read+0x1c7/0xad0 [ 341.727123] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 341.732505] ? do_splice_direct+0x400/0x400 [ 341.736838] ? debug_mutex_init+0x1c/0x60 [ 341.740992] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 341.746016] ? __lockdep_init_map+0x105/0x590 [ 341.750524] ? lockdep_init_map+0x9/0x10 [ 341.754581] ? debug_mutex_init+0x2d/0x60 [ 341.758724] ? __mutex_init+0x1ef/0x280 [ 341.762702] ? __ia32_sys_membarrier+0x150/0x150 [ 341.767460] ? __lockdep_init_map+0x105/0x590 [ 341.771972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 341.777513] ? fsnotify+0x415/0xfc0 [ 341.781149] ? fsnotify+0xfc0/0xfc0 [ 341.784784] ? fsnotify_first_mark+0x330/0x330 [ 341.789392] ? security_file_permission+0x1c6/0x240 [ 341.794407] ? rw_verify_area+0x118/0x360 [ 341.798547] ? do_splice_direct+0x400/0x400 [ 341.802855] do_splice_to+0x12e/0x190 [ 341.806654] splice_direct_to_actor+0x268/0x8d0 [ 341.811304] ? pipe_to_sendpage+0x3f0/0x3f0 [ 341.815611] ? do_splice_to+0x190/0x190 [ 341.819575] ? rw_verify_area+0x118/0x360 [ 341.823707] do_splice_direct+0x2cc/0x400 [ 341.827840] ? splice_direct_to_actor+0x8d0/0x8d0 [ 341.832678] ? rw_verify_area+0x118/0x360 [ 341.836815] do_sendfile+0x60f/0xe00 [ 341.840521] ? do_compat_pwritev64+0x1b0/0x1b0 [ 341.845087] ? __might_sleep+0x95/0x190 [ 341.849064] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 341.854584] ? _copy_from_user+0xdf/0x150 [ 341.858727] __x64_sys_sendfile64+0x155/0x240 [ 341.863224] ? __ia32_sys_sendfile+0x290/0x290 [ 341.867796] ? do_syscall_64+0x92/0x800 [ 341.871755] do_syscall_64+0x1b1/0x800 [ 341.875621] ? finish_task_switch+0x1ca/0x810 [ 341.880101] ? syscall_return_slowpath+0x5c0/0x5c0 [ 341.885017] ? syscall_return_slowpath+0x30f/0x5c0 [ 341.889942] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 341.895288] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 341.900116] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 341.905285] RIP: 0033:0x455979 [ 341.908454] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 341.916143] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 341.923405] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 341.930652] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 341.937904] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 341.945156] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000004 2018/04/29 21:25:04 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_targets\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f000025d000), 0x3fc) 2018/04/29 21:25:04 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7fff, 0x2000) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1, 0x4, 0x3dd9, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0xa]}, 0x2c) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000140)={0x26, {{0x2, 0x4e1d, @loopback=0x7f000001}}, 0x1, 0x1, [{{0x2, 0x4e22, @broadcast=0xffffffff}}]}, 0x9a) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000040)=0x3) 2018/04/29 21:25:04 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000020000000000000001008e15e7af00", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time}) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r1, &(0x7f00000000c0)=@vsock={0x0, 0x0, 0x0, @host}, &(0x7f0000000200)=0x80) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) getpeername$ipx(0xffffffffffffffff, &(0x7f0000000440), &(0x7f00000004c0)=0xfe0a) socket$bt_hidp(0x1f, 0x3, 0x6) 2018/04/29 21:25:04 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x1004) 2018/04/29 21:25:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000001280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x20008040) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100)={0x1, [0xff]}, &(0x7f0000000140)=0x6) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000280)=""/4096, &(0x7f0000000000)=0x1000) ioctl$sock_ipx_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'syzkaller0\x00', {0x4, 0x7ff, 0x1, "a6b8dc649704", 0xa9}}) 2018/04/29 21:25:04 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x20000) getsockopt$inet6_dccp_int(r0, 0x21, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000100)={'eql\x00', 0x6}) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0xb5a2, 0x1000, 0x100000001}, 0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'veth0_to_team\x00'}, 0x18) exit_group(0x312) fcntl$getown(r0, 0x9) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000001c0)={0x8, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xca1}}, {{0xa, 0x4e22, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0xffffffffffffffb9}}}, 0x108) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x80, 0x0) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000340)=0x7, 0x4) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000380)=""/119) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mixer\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000002880)={0x0, 0x74, "a6e3b2aa19256cba0aa8c7a87274590878655593b71beacaa50e14f8fba683070ac99a3744954de33e62c8f06ed55e5ef5b2fc41b0de614e4ebe6d9b6694fce1469ac980093b045a3b279c62d3ca78682e629caf2cb79778e0aa4f8e44667a1f7d3caf0f6d1727c4534b1f22b37d4a2012b4b90e"}, &(0x7f0000002900)=0x7c) sendmmsg$inet_sctp(r0, &(0x7f0000002980)=[{&(0x7f0000000440)=@in6={0xa, 0x4e23, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000480)="dd5a8b31f0c677d143ca197cc1307e45be1f4fcc7e0f74eada084aff3d60d747fe05b375d9d9522d2e655d6543e1a78f9020f886bec565140c3191a29cb573f8623829d32080e56a67eecf639692efe947cee1e83b539e34f92ac04ef9978ec08b31bb3d18f94df1199a684c3900ddd7", 0x70}, {&(0x7f0000000500)="2c0b4fa5883144f904a462923c3df7c0dd13b4fc7ef84e6cc67fa996e15361829e27e306455a04ff4b2c3a775e7f78c5c7e672ec8f12924e8a174b8ad3e8a730545ef39249c971df4688623e97c41734e5030b6e8fdd48d2f24f3b8739a4e6588f55d6a582d3d6191e1607a5f2d748c9", 0x70}], 0x2, 0x0, 0x0, 0x40000}, {&(0x7f00000005c0)=@in={0x2, 0x4e24, @rand_addr=0x80000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000600)="88d3aeb1bc42c2145d41af8b80456df4ba2c8089188562cfcd2b6f87bd54", 0x1e}, {&(0x7f0000000640)="02e947d856b9809c6fcdc2e46129df4a5cee30b16a0786dc613a6e13eba9598337e9f26c9e18d8c3504634d5782567f2759f49c05ebd2aae97c6c1eeab340d8064d92be45cc6716eac16d865725c72be", 0x50}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="83d0f19786167e584a118a314035b8b6d2ee6ce4036c08c3af26868913d9b9fada0a536ebc8e52185575f72b9f70103474c18b25fd18bd6d98af94aae2a7d7fc2057c927a4190fd190d66686fb9ed1eabe2ac56447f33324c800b1bcccbf42b0663cec0126ea946510670d6fd0839d547085d45f367847d8a70c5f6abf81f2d85baf2fdb3c6f6b1c36ce74dc244145aabd10ec4cd0020a5689cfd32d5e0c033c26d0f65240e3e22c81f689fe2dc45219f42b2a5ad777c8e3c5c0a57f5393b10bf9c2263be6f93849cb2b9b7b6f0eefa8ba105e5e9eeef45db1b888dd9c98a452fed75060e787df", 0xe7}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="d7fb757a595e01", 0x7}], 0x6, &(0x7f0000002940)=[@dstaddrv6={0x20, 0x84, 0x8, @local={0xfe, 0x80, [], 0xaa}}, @sndinfo={0x20, 0x84, 0x2, {0x400, 0x0, 0xc135, 0x6286, r3}}], 0x40}], 0x2, 0x4000000) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000002a00)={0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000002a40)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000002a80)={r4, r5, 0xc09}) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000002ac0)=0x80000) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000002b00)={r7, r6}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002b80)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000002c80)={&(0x7f0000002b40)={0x10}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x5c, r8, 0x401, 0x70bd29, 0x25dfdbfe, {0x10}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb067}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r9 = add_key$keyring(&(0x7f0000002cc0)='keyring\x00', &(0x7f0000002d00)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r10 = add_key(&(0x7f0000002d40)='.dead\x00', &(0x7f0000002d80)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000002dc0)="ec3555f4dc495c3688c74e745b57f9d62959dd29535138cc6f489089a121fc2d3ccdfc23cb0f4b9d7444098c7cf2999b51258b38289b9ab352098d2867caa93e885ea77865d23e2033844c84c0f4bf0b966f9e1717829071cdb1c07827a96ddf6fbbde5ff884243421ddd6854827456a0ffc679a00ec254aa8b0adb8cc997b17b45b24766b729f735ae9", 0x8a, 0xfffffffffffffffb) keyctl$unlink(0x9, r9, r10) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000002e80)=0x5, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000002ec0)={0x10001, 0x3, 0xbdd, 0x6, "4c25dc0d7ec1f69feb42a306b0a02442bbe545e46e303d42634b4bb6b13c4fb06be338449b93a08ff6df5e6d", 0x7fff}) getsockopt$ipx_IPX_TYPE(r2, 0x100, 0x1, &(0x7f0000002f00), &(0x7f0000002f40)=0x4) 2018/04/29 21:25:04 executing program 7 (fault-call:2 fault-nth:5): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0xfffffffffffffffc, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000003000), 0x0, &(0x7f0000002000)=[{0x0, 0x111}], 0x10}, 0x0) ioctl(r1, 0xc0184908, &(0x7f0000002000)) setsockopt$ax25_buf(r0, 0x101, 0x19, &(0x7f0000000040)="e7d9249a922dc7165d24013472f6e013f9acf92dd48c8b2c93aea066ddce2ffd6075046b94e271ac0532c1aef901e69f4c8f2f19d8c91361b5a84adf2429308171dfc979020c3e741b499408cc6aff6645e963348d897dcd3eb28a1dc926ea2cf615d862", 0x64) 2018/04/29 21:25:04 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffff9c}) socketpair$inet6(0xa, 0x3, 0xffffffff, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000700)={0x3, 0x1, 0x2239, 0x20, 0x100000000}, 0xc) ftruncate(r0, 0x9) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x200000) recvmsg$kcm(r2, &(0x7f00000006c0)={&(0x7f0000000100)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)=""/212, 0xd4}, {&(0x7f0000000280)=""/140, 0x8c}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/45, 0x2d}, {&(0x7f0000000440)=""/119, 0x77}, {&(0x7f00000004c0)=""/4, 0x4}, {&(0x7f0000000500)=""/63, 0x3f}], 0x8, &(0x7f00000005c0)=""/252, 0xfc, 0x9}, 0x2000) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0x1c, &(0x7f00000000c0), &(0x7f0000000040)=0x4) [ 342.557976] FAULT_INJECTION: forcing a failure. [ 342.557976] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 342.569960] CPU: 0 PID: 24490 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 342.577239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 342.586596] Call Trace: [ 342.589196] dump_stack+0x1b9/0x294 [ 342.592838] ? dump_stack_print_info.cold.2+0x52/0x52 [ 342.598040] ? zap_class+0x720/0x720 [ 342.601769] should_fail.cold.4+0xa/0x1a [ 342.605843] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 342.610964] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 342.616159] ? find_held_lock+0x36/0x1c0 [ 342.620232] ? check_same_owner+0x320/0x320 [ 342.624545] ? rcu_note_context_switch+0x710/0x710 [ 342.629470] ? __might_sleep+0x95/0x190 [ 342.633435] __alloc_pages_nodemask+0x34e/0xd70 [ 342.638090] ? default_file_splice_read+0x1c7/0xad0 [ 342.643091] ? do_splice_to+0x12e/0x190 [ 342.647053] ? splice_direct_to_actor+0x268/0x8d0 [ 342.651884] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 342.656898] ? kasan_check_read+0x11/0x20 [ 342.661038] ? rcu_is_watching+0x85/0x140 [ 342.665177] ? rcu_pm_notify+0xc0/0xc0 [ 342.669063] ? rcu_read_lock_sched_held+0x108/0x120 [ 342.674069] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 342.679600] alloc_pages_current+0x10c/0x210 [ 342.683997] push_pipe+0x400/0x7a0 [ 342.687528] ? __kmalloc_node+0x47/0x70 [ 342.691498] iov_iter_get_pages_alloc+0x84a/0x14e0 [ 342.696419] ? rcu_is_watching+0x85/0x140 [ 342.700558] ? copy_page_to_iter+0xf30/0xf30 [ 342.704957] ? is_bpf_text_address+0xd7/0x170 [ 342.709439] ? kernel_text_address+0x79/0xf0 [ 342.713833] ? __unwind_start+0x166/0x330 [ 342.717983] ? unwind_get_return_address+0x61/0xa0 [ 342.722907] ? __save_stack_trace+0x7e/0xd0 [ 342.727230] ? save_stack+0xa9/0xd0 [ 342.730846] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 342.735850] ? iov_iter_pipe+0xc2/0x2f0 [ 342.739818] default_file_splice_read+0x1c7/0xad0 [ 342.744648] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 342.750013] ? do_splice_direct+0x400/0x400 [ 342.754328] ? debug_mutex_init+0x1c/0x60 [ 342.758463] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 342.763739] ? __lockdep_init_map+0x105/0x590 [ 342.768241] ? lockdep_init_map+0x9/0x10 [ 342.772296] ? debug_mutex_init+0x2d/0x60 [ 342.776433] ? __mutex_init+0x1ef/0x280 [ 342.780395] ? __ia32_sys_membarrier+0x150/0x150 [ 342.785137] ? __lockdep_init_map+0x105/0x590 [ 342.789625] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 342.795146] ? fsnotify+0x415/0xfc0 [ 342.798764] ? fsnotify+0xfc0/0xfc0 [ 342.802377] ? fsnotify_first_mark+0x330/0x330 [ 342.806955] ? security_file_permission+0x1c6/0x240 [ 342.811962] ? rw_verify_area+0x118/0x360 [ 342.816099] ? do_splice_direct+0x400/0x400 [ 342.820408] do_splice_to+0x12e/0x190 [ 342.824202] splice_direct_to_actor+0x268/0x8d0 [ 342.828859] ? pipe_to_sendpage+0x3f0/0x3f0 [ 342.833171] ? do_splice_to+0x190/0x190 [ 342.837132] ? rw_verify_area+0x118/0x360 [ 342.841271] do_splice_direct+0x2cc/0x400 [ 342.845409] ? splice_direct_to_actor+0x8d0/0x8d0 [ 342.850245] ? rw_verify_area+0x118/0x360 [ 342.854385] do_sendfile+0x60f/0xe00 [ 342.858092] ? do_compat_pwritev64+0x1b0/0x1b0 [ 342.862663] ? __might_sleep+0x95/0x190 [ 342.866629] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 342.872152] ? _copy_from_user+0xdf/0x150 [ 342.876291] __x64_sys_sendfile64+0x155/0x240 [ 342.880776] ? __ia32_sys_sendfile+0x290/0x290 [ 342.885349] ? do_syscall_64+0x92/0x800 [ 342.889314] do_syscall_64+0x1b1/0x800 [ 342.893185] ? finish_task_switch+0x1ca/0x810 [ 342.897668] ? syscall_return_slowpath+0x5c0/0x5c0 [ 342.902587] ? syscall_return_slowpath+0x30f/0x5c0 [ 342.907506] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 342.912862] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 342.917695] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 342.922871] RIP: 0033:0x455979 [ 342.926045] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 342.933744] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 342.941022] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 342.948282] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/29 21:25:04 executing program 3: r0 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r0, 0x0) r1 = accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x80800) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x8) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x91, 0x4) sendto$inet6(r3, &(0x7f00000002c0)="9b43067f902d1e181970e644b12f8a29e184009a18e6c7047f6cba4c21aa8f4777c9a273899fefe0c25d534aac77e3a740226e2a0bafb79797fdc232342b987b37d974fd927edf7bb2b62d0cf7f2e3c5217a81e8ac3526d5b475d59193a90eb3324664ddc484f0889ba9ffee949368cdebeb4c037083ff84aa780c3da1cfda0bb7fdd8f009c3489e3bd4e74699b7e2f2b862fafaaa891936ff43e1decd92239e8d3c1ad64dd7b5ca68915a082eccbc9dbb7745d209a7f61d45a01a816a77525d2752aadf90708f7b6014c4d900e01f0b7f", 0xd1, 0x4001, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @mcast1={0xff, 0x1, [], 0x1}, 0x8001}, 0x1c) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2, r2}) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$clear(0x7, r4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$l2tp(0x18, 0x1, 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x80000, 0x0) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) getpeername$ax25(r6, &(0x7f00000001c0), &(0x7f00000003c0)=0x10) 2018/04/29 21:25:04 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000002c0), &(0x7f00000003c0)=0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)="2f70726f632f76657273696f6e005aa2ac0000b8b5a28a29aecbf843385a51250398ce12d984f52a149eaf9866f3c33828fe73d4f319528bbd89fcefb625adac46df7522ebb23c98ad69bdc82509df6f43791702000000ca02988905b672c3a20d10f890b9f57724340b384eca6136eae4fd4a015e073076b8f1cde45eea0f0f0c3ca64ebdd0cefc0d9e8ea91d0bbba500000000000000000000000000000000", 0x2, 0x0) ioctl$int_out(r1, 0x2000005467, &(0x7f0000000140)) sendfile(r1, r1, &(0x7f00000000c0)=0x1400000020100, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x15}, 0x2}, @in6={0xa, 0x4e20, 0xfffffffffffffffb, @local={0xfe, 0x80, [], 0xaa}, 0x7}, @in6={0xa, 0x4e21, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}], 0x74) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r2, @in={{0x2, 0x4e20, @rand_addr=0x7ff}}, 0x100000001, 0x50000}, &(0x7f0000000080)=0x90) [ 342.955536] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 342.962791] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000005 2018/04/29 21:25:04 executing program 0: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r0, &(0x7f0000000040)="064da8ae733169c78294db8664f6ef0204fdc944e6f12a734aaf8246aa2dc1a1b138e1730563678d229326878a9b4d0d0dbb204438d83d4081f5191353344581d8dbd3a06a3eff8feae4f948df1dea0746d0708a4268c71b32ab7ddd92812f7fbf91d6681f13661b9ad579d384b78f82fca3b6f2e2071f13c2dd68f58337eb0170989a9c56af6eb835501d03d4d3edccaf33e533dfbe6a52b21c71334eafc7f8d00b7f9270de96ce9e27c9896086fc05938f4abd9b504cff", 0xb8, 0x20004000, &(0x7f0000000100)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x6e, &(0x7f000020ff8a)={@random="cd39f2081b0b", @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x2c, 0x0, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}, [], "80002a0800000000"}}}}}}}, 0x0) lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'os2.', '\x00'}) 2018/04/29 21:25:04 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bcsh0\x00', 0x2001}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ifb0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) sendmsg$nl_route(r2, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd}, @IFLA_GROUP={0x8, 0x1b}]}, 0x30}, 0x1}, 0x0) dup2(r1, r0) 2018/04/29 21:25:04 executing program 2: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) add_key(&(0x7f0000bed000)='encrypted\x00', &(0x7f000080f000)={0x73, 0x79, 0x7a}, &(0x7f00002b2000), 0x0, 0xffffffffffffffff) sigaltstack(&(0x7f000034b000/0x2000)=nil, &(0x7f0000000000)) 2018/04/29 21:25:04 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) r2 = dup3(r1, r0, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000040)) 2018/04/29 21:25:04 executing program 3: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f00000000c0)=0x1e) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg(r0, &(0x7f0000001500)={&(0x7f0000001340)=@in={0x2, 0x0, @rand_addr=0x6}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001280)='J', 0x1}], 0x1, &(0x7f0000001340)}, 0x0) close(r0) 2018/04/29 21:25:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000fa6000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x83f5, &(0x7f00000000c0)=0x0) syz_open_dev$mice(&(0x7f0000001540)='/dev/input/mice\x00', 0x0, 0x0) io_getevents(r1, 0x2, 0x2, &(0x7f0000af2fc0)=[{}, {}], &(0x7f0000fa5ff0)={0x0, 0xfffffffffffff000}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) io_getevents(r1, 0x7, 0x6, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)) clone(0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000000)) io_submit(r1, 0x1, &(0x7f0000c32000)=[&(0x7f000036dfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000d70f92)}]) io_destroy(r1) 2018/04/29 21:25:05 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x3, 0x10001, 0x4, 0xd2, 0x80, 0x100000000, 0x80000001, 0xfffffffffffffff9, 0x0, 0x5, 0x63a7, 0x3}) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x111f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) ioctl$TCSETA(r0, 0x80045439, &(0x7f0000000000)={0x0, 0x80000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x803}) 2018/04/29 21:25:05 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000240)=0x0) r1 = getpgrp(r0) capset(&(0x7f0000000040)={0x20071026, r1}, &(0x7f0000000100)={0x0, 0x0, 0x3ff}) socketpair(0x4, 0x5, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) 2018/04/29 21:25:05 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000040)=0x4e7, &(0x7f00000000c0)=0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4, 0x10000) 2018/04/29 21:25:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x7, 0x8000, 0x101, 0x14, 0x4, 0x101, 0x1, {0x0, @in6={{0xa, 0x4e21, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}, 0x1, 0xc8, 0x8000, 0x81, 0x9}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYBLOB="740087dff49269d27ff26c3e24cc43fa2bbb7efbee463ac3749667507e921c9ffcf5c664f4d89a67f0dcf54fd83021524f25df0293d73da5311db9082615561389124b6ea4e695acb21fba3aee364a54c4d4eca47579518e55f103437b38fa84528e7dd50b5031310000000000000000000000"], &(0x7f00000001c0)=0x7c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="0000000000007dff"], 0x0, 0x0, &(0x7f0000002000)}) 2018/04/29 21:25:05 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e50800000000000000368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x0) prctl$setmm(0x23, 0x6, &(0x7f0000ffc000/0x2000)=nil) close(r1) 2018/04/29 21:25:05 executing program 7 (fault-call:2 fault-nth:6): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:05 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002a40)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=@bridge_newneigh={0x30, 0x1c, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @mcast2={0xff, 0x2, [], 0x1}}]}, 0x30}, 0x1}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x40, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) [ 343.816631] FAULT_INJECTION: forcing a failure. [ 343.816631] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 343.828572] CPU: 1 PID: 24545 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 343.835848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.837868] binder_alloc: binder_alloc_mmap_handler: 24549 20000000-20002000 already mapped failed -16 [ 343.845194] Call Trace: [ 343.845220] dump_stack+0x1b9/0x294 [ 343.845243] ? dump_stack_print_info.cold.2+0x52/0x52 [ 343.845262] ? zap_class+0x720/0x720 [ 343.845283] should_fail.cold.4+0xa/0x1a [ 343.873847] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 343.878972] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 343.884179] ? find_held_lock+0x36/0x1c0 [ 343.888271] ? check_same_owner+0x320/0x320 [ 343.889354] binder: BINDER_SET_CONTEXT_MGR already set [ 343.892606] ? rcu_note_context_switch+0x710/0x710 [ 343.892630] ? __might_sleep+0x95/0x190 [ 343.892652] __alloc_pages_nodemask+0x34e/0xd70 [ 343.892674] ? default_file_splice_read+0x1c7/0xad0 [ 343.892692] ? do_splice_to+0x12e/0x190 [ 343.920453] ? splice_direct_to_actor+0x268/0x8d0 [ 343.925308] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 343.930344] ? kasan_check_read+0x11/0x20 [ 343.934497] ? rcu_is_watching+0x85/0x140 [ 343.938650] ? rcu_pm_notify+0xc0/0xc0 [ 343.941945] binder: 24549:24563 ioctl 40046207 0 returned -16 [ 343.942556] ? rcu_read_lock_sched_held+0x108/0x120 [ 343.942580] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 343.958984] alloc_pages_current+0x10c/0x210 [ 343.963407] push_pipe+0x400/0x7a0 [ 343.966949] ? __kmalloc_node+0x47/0x70 [ 343.970934] iov_iter_get_pages_alloc+0x84a/0x14e0 [ 343.975874] ? rcu_is_watching+0x85/0x140 [ 343.980032] ? copy_page_to_iter+0xf30/0xf30 [ 343.984448] ? is_bpf_text_address+0xd7/0x170 [ 343.988951] ? kernel_text_address+0x79/0xf0 [ 343.993366] ? __unwind_start+0x166/0x330 [ 343.997528] ? unwind_get_return_address+0x61/0xa0 [ 344.002469] ? __save_stack_trace+0x7e/0xd0 [ 344.006789] binder_alloc: 24549: binder_alloc_buf, no vma [ 344.006802] ? save_stack+0xa9/0xd0 2018/04/29 21:25:05 executing program 1: r0 = socket$inet(0x2, 0x80000000003, 0x100000002) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f000024d000)=0x7fe, 0x4) sendto$inet(r0, &(0x7f00002df000), 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000000)={{0x7, 0x3, 0xeb6, 0x7fff, "15ad8ee876db4671798be921a35ed6239b54b83b79c3c18ef455aa9533b6ffddd633aeccf7cdf5f2af6459a4", 0x80000001}, 0x24, [0x1, 0x4, 0x6, 0x3, 0x5, 0x1ff, 0x4, 0x1, 0x1, 0x4, 0x100, 0x6, 0x197d7b3a, 0x5ff, 0xd39, 0xdc3, 0x80000000, 0x6, 0x20, 0x8, 0xfffffffffffffffb, 0x8, 0x4, 0x7f, 0x9, 0x5, 0x9, 0x7, 0x66b, 0x1, 0x6, 0xb40, 0x101, 0x1f, 0x6, 0x100000000, 0x81, 0x1, 0x3ff, 0x2fd, 0x6, 0x1e0, 0x81, 0xffffffff, 0x9, 0x2, 0x8, 0x1, 0xffff, 0x1, 0x7f, 0x4cc, 0x5, 0x8, 0x0, 0x7fff, 0x1, 0x7, 0x100000000, 0x81, 0x8, 0x0, 0xe579, 0x6, 0x1ff, 0x3, 0x2, 0x7fff, 0x3a7, 0x80000001, 0xd6, 0xfffffffffffffffc, 0x2, 0x2, 0x0, 0x10001, 0x6, 0x5, 0x6, 0x5, 0x1f, 0x0, 0x101, 0x6, 0x8, 0x101, 0x5, 0x80000001, 0x80, 0x0, 0x4, 0x4, 0x9, 0xff, 0x9b2, 0x4, 0x820b, 0x2, 0x80000001, 0x71, 0x0, 0x9, 0x5, 0x101, 0x5, 0x6, 0x1f, 0x6, 0xfff, 0x1000000000000, 0x100000000, 0x1, 0x6, 0x6, 0x100000000, 0xfffffffffffff000, 0x4, 0x7, 0x4, 0x100, 0x7ff, 0xffffffff, 0x80000001, 0x80000001, 0x3, 0x5, 0x8, 0xffffffffffffbd1b], {0x0, 0x989680}}) 2018/04/29 21:25:05 executing program 6: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2273, &(0x7f0000000100)="e2fb9fb0") r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x200000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23}}, [0xfffffffffffffffa, 0xffffffffffffffff, 0x1, 0xd6, 0x6, 0x3ff, 0x8, 0x3, 0x20, 0xa9f, 0x1, 0x80000001, 0xffffffffffffffc1, 0x1, 0x3ff]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0xe85, 0x0, 0x204, 0x0, 0x8de, 0xfffffffffffffff8, 0x7, 0x7, r2}, &(0x7f0000000240)=0x20) 2018/04/29 21:25:05 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x12000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000140)='./bus\x00', 0x0, 0x4) syz_mount_image$ntfs(&(0x7f0000000440)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f00000005c0), 0x1000, &(0x7f00000006c0)=ANY=[]) r0 = open(&(0x7f0000002000)='./bus\x00', 0x145042, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x7, 0x20001a, 0x0, 0x8, "5cca227844d4106e1d6ed4233488c7065fcdcc0f8b56a411bf46e7b1b87ec595"}) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180), 0x0, 0x8001}], 0x10, &(0x7f0000000580)=ANY=[]) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x15555555555555bf, &(0x7f00000002c0), 0x0, &(0x7f0000000780)=ANY=[]) 2018/04/29 21:25:05 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000a16000)=[{{}, 0x1, 0x4d, 0x2}, {}], 0x30) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x335, 0x90800) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x91) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x10001, 0x4e38}) [ 344.006821] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 344.012535] binder: 24549:24562 transaction failed 29189/-3, size 0-0 line 2971 [ 344.015954] ? iov_iter_pipe+0xc2/0x2f0 [ 344.015977] default_file_splice_read+0x1c7/0xad0 [ 344.015990] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.016015] ? do_splice_direct+0x400/0x400 [ 344.046888] ? debug_mutex_init+0x1c/0x60 [ 344.051042] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 344.056053] ? __lockdep_init_map+0x105/0x590 [ 344.060543] ? lockdep_init_map+0x9/0x10 [ 344.064592] ? debug_mutex_init+0x2d/0x60 [ 344.068728] ? __mutex_init+0x1ef/0x280 [ 344.072692] ? __ia32_sys_membarrier+0x150/0x150 [ 344.077434] ? __lockdep_init_map+0x105/0x590 [ 344.081925] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.087452] ? fsnotify+0x415/0xfc0 [ 344.091071] ? fsnotify+0xfc0/0xfc0 [ 344.094688] ? fsnotify_first_mark+0x330/0x330 [ 344.099269] ? security_file_permission+0x1c6/0x240 [ 344.104276] ? rw_verify_area+0x118/0x360 [ 344.108414] ? do_splice_direct+0x400/0x400 [ 344.112724] do_splice_to+0x12e/0x190 [ 344.116517] splice_direct_to_actor+0x268/0x8d0 [ 344.121176] ? pipe_to_sendpage+0x3f0/0x3f0 [ 344.125493] ? do_splice_to+0x190/0x190 [ 344.129457] ? rw_verify_area+0x118/0x360 [ 344.133599] do_splice_direct+0x2cc/0x400 [ 344.137742] ? splice_direct_to_actor+0x8d0/0x8d0 [ 344.142581] ? rw_verify_area+0x118/0x360 [ 344.146721] do_sendfile+0x60f/0xe00 [ 344.150432] ? do_compat_pwritev64+0x1b0/0x1b0 [ 344.155001] ? __might_sleep+0x95/0x190 [ 344.158981] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 344.164507] ? _copy_from_user+0xdf/0x150 [ 344.168650] __x64_sys_sendfile64+0x155/0x240 [ 344.173135] ? __ia32_sys_sendfile+0x290/0x290 [ 344.177710] ? do_syscall_64+0x92/0x800 [ 344.181679] do_syscall_64+0x1b1/0x800 [ 344.185552] ? finish_task_switch+0x1ca/0x810 [ 344.190042] ? syscall_return_slowpath+0x5c0/0x5c0 [ 344.194964] ? syscall_return_slowpath+0x30f/0x5c0 [ 344.199885] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 344.205241] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 344.210076] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.215250] RIP: 0033:0x455979 2018/04/29 21:25:05 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400, 0x0) sendto$llc(r2, &(0x7f0000000180)="7e4d00570588244dfa25c51f5ba317330165aa2d1b71838b66e598dd1c91ae5fb0cb04f41262089733df681af9af3a3ef7a31783ed4ca1be0f828f7533c48b6eb6d475dbc558ae44c83cb51f5064a529e50d5f7a7e3f06a701ec5fce35aa9ce251cf5de3f2f281b5dd7e997155d6128de77da14f198a0409f71433f20feb428d5d0f5d256bb34be067a0ca9b0973a5070c0d094bb3cdd19a5a10861a5e8c5862a2c9e7a0370d27386deee912019f819b15304ee3be7e38c8fd06442f56344e9218ceeb7d43203444895611a9be10837792553b801e2d164253a69c9b5c89ed1a4cf6d2b6b4a51e26a99bc8218a88", 0xee, 0x10, 0x0, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x0) [ 344.218423] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 344.226120] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 344.233375] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 344.240633] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 344.247886] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 344.255145] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000006 2018/04/29 21:25:05 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/enforce\x00', 0x20202, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x941) fallocate(r0, 0x20, 0x0, 0x1000) 2018/04/29 21:25:05 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x2000000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x10}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000072f000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) pipe2(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) recvfrom$ipx(r1, &(0x7f0000000540)=""/4096, 0x1000, 0x10000, &(0x7f0000001540)={0x4, 0x7, 0x100000000, "24f5fd56265d", 0x8000}, 0x10) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f000014d000/0x800000)=nil, 0x800000}, 0x200000}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40040, 0x0) recvfrom$ipx(r2, &(0x7f0000000100)=""/132, 0x84, 0x2000, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000080)=""/94) [ 344.312065] binder: undelivered TRANSACTION_ERROR: 29189 [ 344.318542] binder: release 24549:24551 transaction 65 out, still active [ 344.325856] binder: undelivered TRANSACTION_COMPLETE 2018/04/29 21:25:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="147f0000000000000900000000002e6d6826bcf89108006d523b59f8ac20d3b6d73ceaf235ce3ed5130d30b15a55816d55d01f7d00f8441ed610c021fcc3326ea1447386d80788929824c67b7daf6053d72515d19a6e101a17bb4d876c651472b106ccf14a5ad052a39583e7109a650ee15df1087d32a4c3d87d433eed65dc7ee7cb87bfc06987e94be4175bac6d193f4f93e1668fc6d3bedd92f8baea69b265ad147fa237eaeec675d73bbd797da70e5138d4707df75f9a1bbfdddff0e3fc39fdaddbcbfbf280"]}) socketpair(0x9, 0x2, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @multicast2}, &(0x7f0000000180)=0xffffffffffffff6d) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={@loopback={0x0, 0x1}, 0x6, r3}) [ 344.369509] binder: send failed reply for transaction 65, target dead 2018/04/29 21:25:06 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="4918ea7ce815abaaaae26575cb807bd4aaaaaa00300000000000019078ac1414bbac14141103ff907800000000450053370000000000000020ac1414aaac14140000000000"], &(0x7f0000000200)) 2018/04/29 21:25:06 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000774ff6)=@file={0x1, './file0\x00'}, 0xa) perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=@random={'osx.', 'selinux\x00'}) connect$unix(r0, &(0x7f000071eff8)=@file={0x1, './file0\x00'}, 0x1f6a4bb6c20762b5) 2018/04/29 21:25:06 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5404, &(0x7f00009f1000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)) ioctl$TCSETSF(r1, 0x5404, &(0x7f00001e4000)) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xb) ioctl$KDSKBLED(r1, 0x4b65, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)) 2018/04/29 21:25:06 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000040)) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x80000) 2018/04/29 21:25:06 executing program 0: 2018/04/29 21:25:06 executing program 1: mkdir(&(0x7f0000afbff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000b75000)) chdir(&(0x7f0000eea8c3)='./file0\x00') mkdir(&(0x7f0000000080)='./control\x00', 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2000000000, 0x2000) getsockopt$inet_buf(r0, 0x0, 0x37, &(0x7f0000000040)=""/8, &(0x7f00000000c0)=0x8) rmdir(&(0x7f00000001c0)='./control\x00') 2018/04/29 21:25:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00') ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000180)={0x3, 0x4}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480), 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x4e20}, {0xa, 0x4e20, 0x0, @empty, 0xdf}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x19, 0x4000000000000008}, 0xffffffffffffff02) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)={0x5ce8000000000, {{0xa, 0x4e24, 0x553, @mcast1={0xff, 0x1, [], 0x1}, 0x1000}}}, 0x90) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x40, 0x4) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f00000005c0)) add_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240), 0x0, 0xfffffffffffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="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"]}) 2018/04/29 21:25:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c010000170001000000000000000000e0000001000000000000000000000000000000000000000000000000000000000000ffffac1414007f000001000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000e000000100000000000000000000000000000000000000000200edff00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff237b0000000000000000000044000500ff010000000000000000000000000001000000003200000000000000e00000010000000000000000000000000000000000000000000000000000000000000000"], 0x16c}, 0x1}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x10000, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f00000000c0)=0x4) 2018/04/29 21:25:06 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r1, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0xd6b0842, 0x8400) r4 = fcntl$getown(r0, 0x9) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001640)={0x0, 0x0}, &(0x7f0000001680)=0xc) getresgid(&(0x7f00000016c0)=0x0, &(0x7f0000001700), &(0x7f0000001740)) fcntl$getownex(r0, 0x10, &(0x7f0000001780)={0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000017c0)={0x0, 0x0}, &(0x7f0000001800)=0xc) getresgid(&(0x7f0000001a80), &(0x7f0000001ac0), &(0x7f0000001b00)) getgroups(0x4, &(0x7f0000001840)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) r10 = getpid() r11 = getuid() getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900)=0x0) sendmsg$unix(r3, &(0x7f0000001a40)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000200)="29b53c1241a7f1bcc8f8a44d6bb2dcbfcef5f15f02e41483cfb5fe37d815a98e687e303b36256ab79519d9174948cbdbe896fce765fb29c2ecb5202fa5bee48e15b5e0e75296d5f13d8fa3c946c5ad5d647f3222c58038d8c7902a6a256346bf0bbcf91fab5b6769554c17c6a295464563a88757578d61783ba0bfa013e77914f18f2618e2b2256bdc1455f75920daf0420761811bed1ccadd80e6aee5135ae83aa166e993b6acf2e6d57010b1b9d9c03a34b19ac38efa42163f8e50c6deb739bbe5d69455b8ab1e0b7615b96ed5b91e294a08", 0xd3}, {&(0x7f0000000580)="d37de0b6cd953b1982707918964b3cbf1497b8cc1eba53c4cc057f3167ea0f475d82470cc6db446869c00eafd51e238780436155b9b2feed93dea7414caff7ab09a70a781c8605204be743bee6588e599a10124ecebfea696045630d1b64e64821869c61f134676f0d89307167ad", 0x6e}, {&(0x7f0000000600)="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", 0x1000}], 0x3, &(0x7f0000001940)=[@rights={0x38, 0x1, 0x1, [r2, r2, r1, r1, r0, r1, r2, r1, r2, r0]}, @rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r1, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x28, 0x1, 0x1, [r0, r1, r2, r0, r1]}], 0xf8, 0x800}, 0x11) r13 = dup3(r2, r1, 0x0) write$binfmt_elf32(r1, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x3f, 0x7fff, 0x0, 0x3, 0x2, 0x3e, 0xd9, 0x239, 0x38, 0x20c, 0xa0af, 0x6, 0x20, 0x2, 0x5, 0x110, 0x1}, [{0x7, 0xfffffffffffffffa, 0x7, 0x6, 0x3f, 0x100000001, 0xffffffff00000000, 0x7}], "b50deb6131aa5c1a8d57c34165967e16de14a6bb76b97a46f738f1d7e6de2e4fb46f06eb7a0bdc15dbca32e6775010e9590f79d8a1ca45c92966010b6fd316ca711fd72e790e7c40d426d3dc89f29bb22e582892a4991547318c2b72ecf8471b89aeb8d0a1bab745262cc14e4ee43f0602ff0fc989e53bcf2ef72df3ed0da2683a3324ccf5051de485c3ced1534cd6395f4b35e8f92204b75d8bfaa49953622d0d064433788cd5cf981ac2ff344917db9b85e4cc376841598fedf2f750b8fa072a406122b5f0c2565b47007ed3103bd860a4ddff6fb1a1bcc9880431cf766cdcc69e11758b", [[]]}, 0x23d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={r13, 0x6, 0x1, 0xfffffffffffffffc, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}, 0x20) 2018/04/29 21:25:06 executing program 6: rt_sigaction(0x400000000000007, &(0x7f00000000c0)={0x4224ae, {0xffffffbfffbff270}}, &(0x7f0000000600), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[]}, 0x1}, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x9) pause() syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) 2018/04/29 21:25:06 executing program 7 (fault-call:2 fault-nth:7): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0bc5310, &(0x7f0000418f50)={{}, "706f727431000000000000000000000000000000000000040000b9f3ac5600000000000000000000000000000000000000000400"}) prctl$setmm(0x23, 0x2, &(0x7f0000fff000/0x1000)=nil) 2018/04/29 21:25:06 executing program 3: socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqsrc(r1, 0x0, 0x0, &(0x7f0000000040)={@broadcast, @local, @broadcast}, &(0x7f0000000080)=0xc) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x400) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000100)="9efec9e02aefb778f81be06573259d823ded2a13658631abf72e65aa16e715f259405d74226c0eef7bad1b401284010a97e125159b4de8e24382996077d10827f1f432bf3240dbadfef0e770ee811183f2e03a475304ef39") mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x8) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000001c0)='gretap0\x00') syz_emit_ethernet(0x1015, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [{[], {0x8100, 0x9, 0xfffffffffffffffc, 0x1}}], {@x25={0x805, {0x1, 0x10001, 0xff, "1f89f9b7b603021aeec6a9bcca56c84e910359ca60b07424d75bc53fa7ef69de312d508a8c559a81dfea1a3ab8c344d8d177c768b0ac770fe182aa625e3ea51ae5a3730055b4af4858e799b1a58e7d9f9ec9743677887b62824bca152bc83ac6a78ab9cb2e64e7ca2d64bed6718e52189b59a969368ef6f167ecadd3db661d357a661796e7e7a3d6ac496fd37d42efef917d10bcda405cf4f6c9c26e5ab0a94c0282e47f9b337fc226d7dadb51d01948d6287e460ea5cb2de08d885c833ec55d7baaf4b64b64c71b7874ced5892083254189bd4782ac5f8a401cd02836b709692be6c0fbb9980bbceb13cf097c50e091e16cdebd2e979dbc0643de5b6a0be77e4a355232388d7060f8db4f5d82f5a43e6ac7d86ea29b466aa9f82d6d4d71d3ac85daeb407d83c6906b4d527021eead0f7b2dc5f728c591fdbc3d52df9287902f2be6c28c823a33162fa7c25ea57ff5f01c696e970acb1c84387b17dd9bbfe2ef908a251cd4d3fdb8881209404265ea2dfccb7d4c210488e0e600c22d2bc164c97a037b60ff1f28a089a1abd898ea4dd46b8257dfd18e177017a70ff730499613e58fd3371aa32e36aa7dfab5c8ab82dd7db74926763dccbcf451fbf4dd27ba65cc5f357d70192623ccdf56698672f63d56978b5a2971014a59659ee23a10512f1d70ef675e69c152e38179444aa3c6f9e4d902000d3d9a1653cc38e4a5ca38c3d563053f35ffa0c5adfa769e8eabe7957d3a1cc221ba9ef453d81597b186e4ded6d248f1f6ef36311d1826be616089305a3525df65a4c22741ba90b41b687a54184cb7e81b943d7fea1565e28e164d73f3e04a45acb102cd1f20c416587a9b147a1520249a0de50b4ae138e133630e73f3ea5585cd49f8d4134e51b130ab441b5a4c560aa1bc8668ca003a7bf0709a3541416b2b0d762f0a23340309163d043277df82ac9481d66f57b159b485ade935dc5ac54bc09605b1827493267e03722a673783788a5e07f921b2286d832f3f56bf76c96b0b660b8e1079b331cfa3a770a46e2d7241cd47ae93c9391b242900e3ad2e2dc9a8ba5eb81ca6efd4f5f4efc97bc8599d338d00c0ee2da78ab5bf130eec54a914e5002d81523656f9dd5409623f72f16827e9d5176822ad9fb735ac2667931aca9e5579774eee405d766bc9b5161a30df787161ad3a10c30d05fbfa5bc0f709e57fb95043c3c971d0ed769497a9461383d21c12fba86f7e470cfdb806dc5283c3bfe1788f03784e85530610934dde2ad20994da632266bf739fddbbc04920447fcf33b943a61de0cd0281a0c51c03cdee66408d5eb2e692a8890b2e219ce6768d77b0050feb6f8ef473679d79bf01769a1ebe4e8ec38cb5d58c68306ff6e584a47c133eedfae4e0542fe7f9ba593ad7c88a3407942fbc514c1c1c7713f2fb4dff00593e5f55a2c06965bb3ce6728165486cd6f10935175cb88078d26d80c5efd0da004af412ea2284b27024df6e21d21a2d0c24f961a99fdd6bd3915ffacacc1bd928332f7c0604e8b00964c99756fb78345fa85df8c8328b003c64ad8f181b3e1d1288b47972f568d73dbed0bfc6363fe4207efe3e3968ff7cd40c11d2c608353d711065d4be072fcdf1db8fd9244479b2f61395a72a36afe6dd376bc873be9077cbbb1b1db21bdadc1a32d40c010860130db2a4580b006fe350f594a66748799f680dac7e77fceb232520a836bd0a119a5dbc50f02351c25882db9063148644e3169262dd153de581d0838bbc4df02661037b09ee355fd0c5c91c3afbc566e43fba3f2ac933c56789204feff274a7e180d7c89511ae5646174ef0184037cc25de7187737ec83ddabcf2a23aa4033d7a2ee2fa6ba73b57a5b4f1c7e455388ddd80389a347215db6e80124336cd273c0de921d7c7f8b5222911b0ec11f8c41fa4329218c403e89c287ff005e076e8b64fcc1dd376e221fdab28ea4cab2568da1b3f11a1d1349532465385374c83c42e2f1e13887987815ebe647a184323f3efe2cf2b6d6183e887ad1aaf924d86f9523602d879f52ce1c020d6d676f3cb16e688196451766ecadcede578e89edab9eb1b96b163b61cfcbe08e8dc2cfdfbba80caf212edc0c83fa9a4c96916296f8ee790d8bd7ab5c89c88ddc23c91cdab00ccc0591a462127ce026152658e393dc9b3cc24cc18f1105bdc4f73b841ebd568021f9286e6b3059fa3caaeb4c8af19b7d2ebe42d004b00339ec942ec62982028a8ba8e6dd0f44f8790868cadac201e2c01181287cdcaf1c461f78bf82636311b273d6627802d69b91f87e44d965e935d0d8b7a239b4ddc5fa11da0515d85a566b8904f1611e66005a6af1b4ccabbccf7820827640b037ad3729e1ae5e5311750df07585143057f8b690ec8c944af991e6b234278896629b67388e97f5d2166a1376f498a8df368224a975e95a735b90155cba898628fafd7ca58c2f28aba64e2ee288da7173775232b8cfac46b0522403432c006a895eaffee8f8100d4de9c2e1f5e5c93d89768e37764f7f5109dceb360e0cd0cbe9f2d283de5b247f935a086435335327996690c460074936178a8e07a9c7d4ed6d6d75661fc4c89442bc4a0fbb501768fdd603e181f9ac6771ee5104e09bd0a77bf29af585550a9e8a7e6851140d251b296feb62ceb18dbe818abd9fca8142fbd91dcc0ff37d6d566d6965f83ebfd02971a161a3a5d10438c0289e2e1e7734a82b822b7aa5aa1e2301ff35ad50341c2997e185642f3b15e1cb359545dc82830193bbba2b57bbeb4db3c74b9c29eb65a3d8c4fc6dff379ee5fd40a1cf1038c1c00701465cd7282aa40cc9e941c95dd4a699724e21d1eddfa3e0e7f92120d3c16209eb9d4e2900612078ef91122045e2e682c7d72ac093f144e5ad8ef642137d589057928044d3b6ee8dbb3b53b7a441e822d6a0915235e9ae5d3ee8ba1d90498e9969227152fdca0915c3328aa6daf6a0e9f1580fa2a6562b3b4baab31d4727b2c577ae91bdb5b2b93231eb2d0a823042c9e8d2b10aabadee326709951350dea43c2f2db069fa35ac6be81adf88f2efbe3c2317f8aaeeb9e85808e684a6719fe4d984db4e37c4a72dbac2b319c6f54433ed240b23e37084d034f4cf572e78b0f8d8a42794dceecd7944dce8091c4f0a95d82f4db2a9ac955136e9a81453dc152a819ecf0e37f45d774053bc3ad401a9e026075ba14e9bf4c660dc3209d44f9e84de46a96803704c32c555e5e9a6a5f7f1ba02a23e2aa5a4bc1a1ad6435657ce79591e2f1fb96889d36b4fc105eadabc5c8f127c4c062e2e2a3a2dc0980e412a6ad32043462d815e8554ab6ddb42f811cd05eb9beb410f348a6b39c675b6b735800f99e04107c2b39414fe2d90a8d684b13943bf14d13d06bc962d67f929eb4e2a459c6cb11c3f1b41384acb3ed86688780adcf39db7b3304d36e9efb4a76dd04d2ba18937bd73830ca4921891e4cdea8dbaed666d37e43c190c1bc7a3b5a7acb02678198088ee1f0f4e9d55d3545393da68b416f6465a9d4ef3f27cb29a6f4ad3b3a43f412006f2f2ca9ce1e6d433f596cbe33274df3c3d1d9fde71caa208b9d5724182014b5ccf06c5a679824de069266663aad8a3195207685a9bc27c39a78bbd743df9ea15e3587355b7003ebc0b974e458c2e47485e77240d1ed14ebcaac35dd57f436420d22af4136f99e5e2e7b3ed21422523fd354f7d4dcc8eaf145a2ba8a329b4fba22fbd79fc4bf6cb99adb847d6c4b0d4f9079941a3e47fa4263f1508dbd3f3e8981b9477d1712f9d6bc36100e63dcef6f5dd788020f4e8df21f511d13d4e569b81cc46106974968fae1eca3e83a12bee13aebe484f4525d90c80b005597f2412faad7e5af738d225f5fa66a90939243c36dc41665832793432f7d009867470e08bf709370ed205a57a1d76f6dbacea2fd9ef4afba12198586418df1b97217a497659e7d052f848cff64c96f98d757581c03cf40b84fda80b0ee931ca9df877b76092a6e44063b80176df8fbafb26d7967f672a321b7a0aec53d68d361d53b41294bf9edad047e2e2e8acc0cab976bdef58f742f7262d43e97477c60a86895595602ffa95533773349716043e4ad1545a905e49c8504fa24e8a12f6d666f67e196edc72e902a9df4a6072ce377517da2216b255b248698f70b7d6a681443c5b50558b3213ee0c47d0e0ef0b0d7d289f55c01c278fd6ef2b4dc52e1e642ec4b8fe91a7c3ac75dffe0c6dcdc9f3b47e405129b7439bc2e062bd6410300315ca55535778148c31971aefbcbb02acfd242c2420c92de316c3896375b7391870035a6da2e693dd0443065642f1d3bc8204696e759f6603a7f6adf07cb6731f030dfe63a0df7b91516851fb9ed941f5d1844ed254bf86a950f2fe175c5a8323ea4c56de897231b723f24e4ee1eaa260688232f05fb25f7d5caaf9fb9cbe1f125ccac21aae6fbce970b87b3442aaee29a56f2c7ef77798453115a3acec22c3886c44cb6a4de8d19f7f607e5e5a21514c52853dc667e5f07ff7d3e89bf523d093a6c88c0b0441b66921e24f72687bb3c7d36950588594f87fe07cbb6c2b0c87ae37321431758d9623dbddaac4eb7d65e528dfa9a1f62af96790e584143b72d695d7b866e87cbe2f151cf28dde80c5212640e4b14b30cff845811a663cd4ce9c4ffb43bfbde076e99767ad5327724ff5bcc9abe17e0c513ed3223a1c12e6f2f73d2ba617640be3fa5d4c7a1c93ead36f7c58374a254ff235d3d3ca9c94f36ed2d86a5274cad95de6957b56a86824c3415ed0d46c30cdd46dd2e8bc5ab267b1064991d2cbb95a3782a275957ae04823b79c87d25c8247a26b41e718c37a1d84657c222d169d01ae5bd8b8e9272a7c7bddceaf33eb4ad1682afd198a4cc234d7577e9016a7d28606b0d0c7eab6d138b5fe9a1a64a7d4f24748ec9665cbc3ea3e764a51290ec088703a5ba753a142723f3ad27f8b9cb49fbf45e6737e2c24e7e253dcdba6f9087e6903fc11603fe48709ba4bada1ea8daac260677eac6345a527566552ac4506d662e3e641d8fb571bdfcc19688aa98fda17f6b07692fb185580a41481829a7325c00da4b3203689e0a0f6bbab7c07411b4f8fbd3daf2780b41ae67536ad8a91ad647e676aeeaa594ff60bdffc9686959407410d6904ca2e2f6debc1623b321f1751b17215ff02ada43b6d884e0b314148b04b2aa91395e796bb42caaa7635fd61c333bcaa390462535f8a4700610f7b4c9847bcdba6f073750fafc80af61274bd032f4eef67d92ebce747bff0c316f784d5840d8bb1e6439f57c85b54dc7f4644af20b995019a1e6ed8682ba98da8064810c56b615b009d7545b7a7174af5eaad715ec556f1cc7646492ea662197d60ee7ee90bcffa0c2518679d511429aceecf513b8259ce1edbb168ff29deb2f4daabdee2d452fd451653a37e034b8ccc1f0d603bc29e2167e685bb75dcf42b2490ae1f379e8a473461fcb746de74125473ff3a64acafbb7da855d5412769f7f8cb61a5aa0f81c12b8f17ec460723ac54671c7d9ea8babc2c4c6e152ab56d43a93e604634e3ac3201f9a0ab78992e656f4d25331d87a4c5b770caf6279af1f4ab85ef9797178746cdf7c13627f4a9753bd8c9332dc313841f2546c66e709c7736d0492ae617fb4a1a30dfb320e992bc7c713f1787f9a2f6922e7746e4402db16ec6e8afe107c2687bb792d4548a58c01ab9a493f97e5498858d09430466eb0285d742d86e785f93c4014dadb7becd19fbf3779f4fb0e686db34eb06f1a7b5bc0eaf26083dc1f"}}}}, &(0x7f0000001240)={0x1, 0x1, [0x7c4, 0x3d0, 0x520, 0x91a]}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001280)={0x5, 0x7, 0x8000, 0x20, 0x8, 0x4780abf3, 0x4, 0xfffffffffffff801, 0x0}, &(0x7f00000012c0)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001300)={r3, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}}, 0xffffffffffffffb5, 0xfffffffffffffe01}, &(0x7f00000013c0)=0x90) sendmsg$nl_generic(r2, &(0x7f0000001580)={&(0x7f0000001400)={0x10}, 0xc, &(0x7f0000001540)={&(0x7f0000001440)={0xfc, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa}, [@nested={0xe8, 0x39, [@typed={0x8, 0xcd, @u32}, @generic="c6c9b40d6cacf072d2b54fb584b6741ec50d525451bfa8ca90b1f6cfd7742ea72274dd028c270e8955da871d41170d8fb9ccb62ccda6a8ca35256843502534e56c1d2d38223f0d162636ccdfad3cbae10419be53891c50d0d459d3884b2eecd3d28ada11d30ac88f78ffa7b015e2221f2cddb430adf44230908172e2d3d5f5081f20ba167deb29bcec61946c889ba9e0129def92d837beadcf7314b4ddc398ebae5c", @generic="c5a3d52ff2dd76ca874de460c752f3854b8a9e165db3679a995b4f1619006b4749c40dcd8e5662147f7fe847d80d321b0b7fa33d429d0df973"]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x44000}, 0x4008000) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000015c0)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001640)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000001740)=0xe8) sendmsg$nl_generic(r2, &(0x7f0000002940)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002900)={&(0x7f0000001780)={0x1168, 0x3a, 0x1, 0x70bd29, 0x25dfdbfb, {0xe}, [@nested={0x10d0, 0x63, [@generic="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", @typed={0x40, 0x7d, @binary="05a6a6b5f6a58f78563eeccf66d26c5dbb45a3afe486d8890a55e967e4ac44498c044d860814424564032253d0da2af6784fe4acc7f1b35c9a8b"}, @typed={0x10, 0x16, @str="9e2f8f6c6f2d6c6f6c6f00"}, @generic="a2e32844458c59df1cf82e3c5499007b7b7d14c948f2b7db184e305ac30f8939b00963318ffa4f60595b3e44d4b8700235adbb9d0fee5f1b9b3bbbb361c02aa3dfeade17d264413ddf9d0911867f2089ef412714a24086ff06618998bae53f9289f8750c422b67941557fb41fdebd09e8a85499d4a2217fcb1c1994a"]}, @nested={0xc, 0x29, [@typed={0x8, 0x6c, @u32=0x400}, @generic]}, @typed={0x4, 0x93}, @typed={0x4, 0x4e}, @typed={0x68, 0x31, @binary="9c94a6125813695463f4856c129c0ec964ab4c5ce8a976cecc8266516de7bdab4c532328dfe5be80c88035a9d6a41a2a9b886ac6f1ae82d0c7426b0580f08168d245b04345255126b4d6643f497b017fe8c395a550a9bcf138c87855efe59c835c094b50"}, @typed={0x8, 0x57, @uid=r4}]}, 0x1168}, 0x1, 0x0, 0x0, 0x8001}, 0x4010) setsockopt$inet_dccp_buf(r2, 0x21, 0xc0, &(0x7f0000002980)="0fd48d7188a01c9ffac1be88f85572a9c2385d6fa301ab9eaa09b794cdb32699", 0x20) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000029c0)=0x86, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000002a00)={r3, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x6, 0x80000001}, &(0x7f0000002ac0)=0x90) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000002b00)) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000002b80)=0xbe26, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000002bc0)={0x8, 0x9, 0xc7, @empty, 'vcan0\x00'}) syz_extract_tcp_res(&(0x7f0000002c00), 0x10001, 0x7c5b) syz_open_dev$sndseq(&(0x7f0000002c40)='/dev/snd/seq\x00', 0x0, 0x20000) getsockname(r2, &(0x7f0000002c80)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f0000002d00)=0x80) write$tun(r2, &(0x7f0000002d40)={@pi={0x0, 0x88fe}, @hdr={0x2, 0x1, 0xff, 0x9, 0xffff, 0x6}, @ipx={0xffff, 0xd4, 0x800, 0x1, {@broadcast=0xffffffff, @current, 0x200}, {@random=0x6, @current, 0x1a}, "cba716174ab8119cc3a529568501913c0703cac521a0981b78d688d1eb0c4dc21169b732b28ae54eb36ce824c70386f29f4fadf6d0f93ab6dfd919ff310fadb58e3521cbe21a8d128da7a2d69f3916fcff3caa36c9e1648f6e2741d4ea65beee33ae882d36da99366d5e888ff4d36d7695fec4ba256e4b9818e1595929d90a24bb903aa3a2c3c8dac44fce413cee98421f78dfd2c9d22abc6928bee2a735809fb92bc8e0bbe0241f035e78c213fd76db438cbfc20959"}}, 0xe2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000002e40)={r5, 0x1, 0x30}, &(0x7f0000002e80)=0xc) r6 = getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000002f00)={{0xffff, 0x5, 0xa1b, 0xffffffffffff8000, "d001469f0c8a9f42866a06c70a685f6a26385832cd26fedbdf5e62468097621efd568121a48726cf6df07789", 0x2}, 0x0, 0x0, 0x1f, r6, 0x4, 0xffff, "9f4a87bf48eb8970c54a5268dc264ef72096469327f74ba25289d8d584a3ed012b3cb68d167ee0b6164cf2a79f6a15082408ec432c859225b22b8ed4669165c8", &(0x7f0000002ec0)="9e2f8f6c6f2d6c6f6c6f00", 0xb, [], [0x9, 0x800, 0x3, 0x8]}) r7 = add_key$keyring(&(0x7f0000003040)='keyring\x00', &(0x7f0000003080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$assume_authority(0x10, r7) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000030c0)) fcntl$notify(r0, 0x402, 0x0) 2018/04/29 21:25:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000000)="2f6465762f708b6d782e70d53274ac1fbea06d4662dca3d2415cd9a888dc6cbe0ab0030cfb2cb7115b2882c0dd82c5de9eca2805ae50225b2b93c62a86acf7661d8f764a9212fdc29839066c49e5195e60d833fd9bc8b1b11cb621390e4795b5b1e966636b1f5f481c4a7d6dad23de79782a2bd3022f909d1680e400c41cc6a5469b50b1624f315cf66058bc49d7d87fe7f0a4751c35b3a14a2ca3a8c603e2", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x28, &(0x7f00000000c0)}, 0x10) [ 345.204508] FAULT_INJECTION: forcing a failure. [ 345.204508] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 345.216505] CPU: 1 PID: 24670 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 345.223779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.233133] Call Trace: [ 345.235726] dump_stack+0x1b9/0x294 [ 345.239365] ? dump_stack_print_info.cold.2+0x52/0x52 [ 345.244567] ? zap_class+0x720/0x720 [ 345.248297] should_fail.cold.4+0xa/0x1a [ 345.252372] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 345.257494] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 345.262696] ? find_held_lock+0x36/0x1c0 [ 345.266790] ? check_same_owner+0x320/0x320 [ 345.271127] ? rcu_note_context_switch+0x710/0x710 [ 345.276073] ? __might_sleep+0x95/0x190 [ 345.280082] __alloc_pages_nodemask+0x34e/0xd70 [ 345.284760] ? default_file_splice_read+0x1c7/0xad0 [ 345.289782] ? do_splice_to+0x12e/0x190 [ 345.293762] ? splice_direct_to_actor+0x268/0x8d0 [ 345.298614] ? __alloc_pages_slowpath+0x2db0/0x2db0 2018/04/29 21:25:06 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) pwrite64(r0, &(0x7f0000001180)="697a8c41e157cfa2825d75e6e78d78fe648d819b453d57c128cfe9493a8d3d8900deccbbd40cbeca405f09356bf55b0c22ebf8c5addd13ad944a5474a75fb46644075359b7882ffc0f3ceb8b23d7637489fafe9dee7beb70ff11f2288f9e2c459f23f347d80d69cce0b5e2375b0a75eb4764b6fd3cbecd0b79bc68f05a8a6e0101babd0ef82f92a96bcab3b50274a8014f0b2cf7c80fc77590422000d381f8540bda009a6529eb73d5c470877682f070220324470481388efc5eadc7f05348013f477f225d85f8be5ff401760e3e7986dbb41e4264a489eda8f49efa2a8ab366d468bae61ff38c24b2017d0086c3c3734261dabc4a88a2fcc41d2340459563a221ebbd060ea26c6d573d7b6556e3f9960282453aa652d1ac92a0b1a359727b4c7b7774b5ebf70cdff24e53dd91f34171ee20e8540d17e11d18fe7e1e7a007427f2ec08245183e46b9369a261e7eec71512827e4028c4cca4d5b731e95e54e2bf322b20454304d620735bdcf33c679cc10a7147e64ad52c55254072184bb1e64e3d061a0391007c08977558b51f8d1d7a257cd5b78d04f6bcdb3498b2c31f9f76fd224fa6539df969b026e02eb980a21357b8aac741abd15c49f8e93c93a1424f713421aa2fd73b23ba0ff2c3c05a7666a68e16a5152f0c4ccf026802986c975d3661c44657f0a15d0200855ea2be1e02bcdd33cde0f59b9110a02a25c027a230a671a4f7259a7c88990228e987c65dc265ec98deba53d9c31d116b8167a9355887d83c8caa4b4bbe91400fb60f1918f37da398e5fc098fe457c7e0e29e6a371d8bd5dc9fd0ccfe503b6486788ed466a160980cbf288fc1dd2b2093140e9604318f9fc35f97f7664f024b9e1976d752464db3c666839bc5fef05ca5168179f19c9fd72c1bf2099f6cb52e76dd0da7be083a35cbc7e0a5ae1153ebe9ff15d3f4628278d58c3fbd0106f9c6c0bc8a27942871fbbf3d223e0ef97aa34e6fcce5c641364a0083d4ab77b1112c2f4447098c89b328325e68fde2b4e023ff4d4d2e5c7721639d0ed5a7d9781683b76b76416de76862588c551f6531a0230159e09b122adcbc7899f6cb6971568028a1a7b097c434cab8a8785d2878e647c9183dd0c89c09e40ef563b31239b81e887abfe12f110ca61ba0313339f3b22f3a3a40c27fed5b388ab7d9892e42e6d5c867a562de797f6691262873c8c26d5fa4cb0ef177878c1e9f1a6195fc181ba786eaf8082d07b4d5d96ab168a4f9f0b3eef78cf224cdbdc268b25d8f7ab84c4439370ac3ebdfbd872c3a32d426b86a344df0de82ceb0f5435a1d4ac510427af54dd0eedde906e500b8fe510c61d6be2aaf1f106ce7c65392400342f85f815456968bd769a6d1b37e314a5800009cf183447bf62d58c990cd2bc45fe506792938d91edb6ba982f4f61b2b12cc64b4adaf367b8b15b76a09b809ac2a4f8815578152bada83af69e38784ba45c727b2693fbdbb42ea0008f95574e880b481e388d90a8973b4366e2b1f8a23257000e23b202021e6573e6672d0ec7390d2913cf4388eddf85fc43cca8f056aac751b3fe311fa898e489384ea235db6c1a4fb61c596492c916cb4dc7424fc596d3b591a2a8628ed942e60b5dff06284b6fd27353aff6afe11a4e5a17155a765bbed73d2802d27d8a141e176b49927fc063125621cf0acdbc544232f49010282ac0ba23c620e0a5b67f20e79a6a96050f6b85c63225c4425f663b2357a1af8c49f07f64fdefa6d1805c80646a9e09a2353f86db6cb67615222b43692ff5b950c690df75a641338eff2cfce2bfac9835be813d25d7a6d6bc0a31f3e2966c9f52cea384802b9a6f01f9fa1c5e6b4e30a5865bc7838de988304c5cf74b3312cb3dde662696106872758b8cf2c58d1c92e5fcafee81665f28c9762543ea7c9cb5d4292f604325ff5926f780b89a1f94328fc3615e671c00bb3a139250dc74ea3ccd614e91de2a88fae87fc5a08bdc0821a600c7f741238b201e7cfc43f6d5bfb9093b7eff0da65743aabc1909140d9fb0c81eeea2f5aa74994cd3b80ba60dd46c04f6fcff393c1c1bcbbcd3cccb04ee81c6418a924bde3e8f9026394f9c24e801312b99ab24c171054d0171a306ff7e2cc55531ac04393183177dbf0a7c4ced51acdf87ab0d7ea18573fd5f1652cd55978dfd1794f714fb2e426ccdbd6b32cb3c8d4674aea9088298d7b2d8ae592bca7cd372549ba9d584f32c78846727864e52e635966596abc231479321d9904815cf013c3eddc939ae0a602c36151204eecf4412b2eb396c69c6e17ad1abe485fd37787911a0b5bb3b2af6cf228746d287dfd6ec45dc84fb07dc7f58c3a2e071cc38c4c8a95cca5bbb319213b33c834dd4ba53fd10c61b03359d4e83e0e2ab23d486e2166492ce512f452320a86cd5ccfdf65b8f60929126ca1d22215ce04a5843afd81f36b30b9290bed4e27811840d44b418aa071c34e440bd68d30c44ad9b3b004ca0fe0cfec4c810f6575fcbca2c59e478842c7ec4170baf1d3b8bc675c5df5d221fe1ddccdc897f41d84f821ae2dd7db25eb74b5b280590d4b19db557c5c8c03be8dc4ae0deccc4f84dee0bf5facb46b6c3f1c999997c56837908f8d1c58ff09825bc61d25d21e76362e69af986017695a20ba4741a6d2cf99d2918d4cead248dd55fe8c2d04315d1136eb44251155ff62c0da1cc502a4d14f0db70e295033d6632a3d96a7e834828cc500ee5f33d0a172aff4f7d32ce30bd1f1678b99fd0baa703eba23c7a2bff1363c7db5f47e9b8a01176a7b8bdaa463cb3e9427c6a0f8db9bcedc7ae91d1f430c47229553495111126b114dd948d792e9a8303ed9c3efac4e091483fc0145f3a5517031a5d54344bcb900ba3561862cd0f6063d959dd12036727221938a04872c53731d44a21e4442f0f2b09e8e8553c15951a86f96493cf4ce0f31999a795c71e0129ea3fd709ebc593f10c51e409d669f0f50b642790abe86005f2db1c83c442737535bf273cd01fc0c9e073e2a5e4b27949584f1d9f63ad3702c97f38af89c75a845b900b2a6b027408e145791ad8a9c1b7e00ccdf8d24ab7a777515346c5a968030730e7f962fca84a753cbfcaeb5a95e056fbc24e4645f8b8792b3d3e5ce334288d986f24cd69ff150e96411d69e51fac515c7f6221c1b23c62f3e8a1156f3b30150449d66a0f9962c2b67e415cf46762ab217d59e9ba837b6098c61f9ce1c70641c24682f7d5b6bc4b656d52d31b37c236fed4464ab05e5e5cd29b3b93756c3630d75038a163f9c848d355c279dfb5818a27ea0a038ae21abd9aa7cd47a4272927dbad8d3dc65915d75a471078c362aec5154013aae9d292c5d472da612635bb115558a014c857241d0e7a29cf5018f94b150c494cb1fd9d9679f3247e2444943c35ccdfee2ae8923acf001d61177ca25a24604713474d54d7be1a6158b6a5b7b2ab4374bcd4045140f3a7d6bfce9239c88721801f2f5e8a979714233dc1f59f66587257e041ea7cc2d64836cb860c18f72abcecfa1d42b1f541bc1220c8a951fd76ac658e3f738e8c8d410da1e0e01dc52831a0191dd903e155fea71dad034d65e83b8474d8f9f0be3ec9733ea36a80a6228cfd96d377f336776470c69af6870a10a78457c168171c0718d7ef7cc7e890306519e59f3ba86a2ad78686fc090ab61f390b20b49fbfaf3b13d667cab814b556c6727ddf1e98e5fbb981659fd68d0c29599bdf4ae575e8de474fd9c19a1f14ee676c074bea706ccd56fcfef681ed336cf950784bdcf7868ecf2f4a033edb8da0d99c1ccf1e022be264d73b724166d2313e5c1ca74859b6bbb7e0db49bba12bda3bef6d2cda072c5d877c193343c7e8efb3f19fefe93f0e8a4d08d5b71b5dde83e7d6052754b3ec0b85d1fe161a67a8f25527ef6e1634076e5c84cbe280895ecb6f8eb045e6eadfdfd416a709e3e74ebd21a49cc1685e309110d9f1a38d5a49282671ca7d91731bfb6d266672dbe82915474a6785f876998794ce55d64757e37982d94619fddb1b04b83e371aacececea16df198ef20e6ed87c248aee5ea43c236912c5a4300058755ab0b82ed109e70bd9be48249b6a0e434e8cac9d520d7be06fa44c3da942488419eac545f7caf6651708c001043353b28fc0dca4781c052d76fceb5a669a922e4c06d3612c56a73b2e176265e4f55c72f2ddaa9e21168c2244e935ef4a0e2e298619071104cd06848a50b7b450f705a68746dc222c8edcf52900b38d7d7fa8f1aebb2d2a4b4783ab53c600edc98f82fc18f6f97ac8748c1949687f3cc2fde211dfb54b71aa4324a2302c52b49727ee87a683d54933ac7e703d30c3fb4c0ff554b45eabe732f3b2bb7016c3b4ea6449643238bc728bd302e6023167ba37fdc84599b596ff2844ce9fef0108b9987a585c025a1f273872152e8a3ffcf282e3545d7f89c18e3bb48c77b7edebbfa4ee3f11f8995412bf872c64097091c027d1e162c4052793246c2e2364c765b444c549615bf9678d2e980b5b8f0c980ba97e6e2b4916bcd5af3e2b3e28a7a18b1a05c5b5f4a3d19b85e1bd6dad9bf6710edae115f4586d711b2d3fd5be24242b6522ec75796fea912019bb6de0819ca224bdb45c93764d5e1f5ffbd655a15c9085040e7820e8ce6bf5c8e86d4760951eeff561e7c344693ae1aaa5ba65561fb78679a9a9f2aafef722c62d60919d493ccbb3757603cfc729112c8c2271dd20ad3a4a8a325d9a05b74511779a91753e1878d66fdf36205ec6da34d5581df1af8dee4f6c24ca65a8178887003e1e9f46ffa4784a2c62a954030e872f36d326f15540c3747537713d5ee874ecb2f9726b7d32c0e9ac486f0c3ffad89c73be60f68a46b159762129eb6eeb07e5a10cbad1538f5fc9f19f9314047a1b72123a989b9a1a0856da4fc3f51b89eb619450ee4bd18b628b2066bcd2b2956ced972bf5c081eb0d2e3f9290e5cf8e970d9f7a0a51dd6dbda6f6503ea5d26c168ed276b082a0d58870442d701ac56a247d62c330fbb32b27324a8ef459fac2ad040674a9d67a144c6854c56de28a416dccfaa39b4559c5b4a32fc309cbf3c4295aa7b149519a33c15a0cbcdff1e3a7ee11b533256aae2ce34c38ed8ab440fec8cccb609262f7a7fbc278c62fab173b664e1ec08d2e627bd0513bda05d7526aad29405a7153ee1792fff0b047f297bf7cf76c77a7124d55362828c3e36870429b306cc9bd3755e17c251bd4f4d198130dbe9ea5162b3e880ef6f33bb82903b3b997d4b2157479dde7bbdc5bbeba5c869f4a0c42278b2e8d7e65c664015220c0166319824cadf0cfba8473b9cacf8239b1c0f707bdb5e863dc6fe244ca341a3bbcca7256efbea6a2b72f02ffb7cbd46a67720def1ecc3c1f33a3b95aea55c9f39562a60a74cc05b8e0dd36fe508fefdc700ab1a26b2ad55505526cbd22defdb781338b1ed7b6aa8ca22a1c9fadaaec1d7f873b394deb8657f82dfd730a3e0143a3c477568fb5efa22b5b6d21abe6ba19e736042bf5b152fd19d385cd2f6a8cc1d120a374e044a4ec257a53e6d90cfa18881dbaeda3be1f919d08f3b0777103b43baf793998444c87ef6885c2c9aaad91ca25c1e207d5a02c415b6b3c33cbbbcce865cc8054a4197de423c158e3dfa18ab3e7b674090528e228142e75afb1c8d3b5c62d23437cdbf1f1f3ad4791503aa5bcd95c9bfdc9d0b1a966ccd2b60aca6ac6358f67fe47fc99cd52910c20291f12116dd72d38434e066ca8ce9613cc45ffec89aca68ab8d644661de38d5ff5dfb55539b", 0x1000, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00005d5ff3)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x10, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x200000000000a, &(0x7f0000df8ffc)=0x4, 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'yam0\x00', r2}) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x184) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendto$inet(r1, &(0x7f0000de1fff)='U', 0x1, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=0x0, &(0x7f0000000380)=0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}, 0xfffffffffffffffc, 0x5}, 0x90) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000defffc), 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0x3, 0x4) accept$packet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000006c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x6, &(0x7f0000000080)=@raw=[@alu={0x7, 0x6e27, 0x6, 0x1, 0xc, 0x0, 0x11}, @jmp={0x5, 0xf3, 0xd, 0xf, 0x1, 0xfffffff4, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}], &(0x7f00000000c0)='syzkaller\x00', 0xff, 0x2e, &(0x7f0000000100)=""/46, 0x41f00, 0x1, [], r5}, 0x48) sendto$inet(r1, &(0x7f0000000140)="aa", 0x1, 0xc040, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000980)="11a58fde7649496403db92ed306004b3d3cbfc195485c3b895d864ab91a3aebde4f70a917a91ec9612d004000a7b43a35bb73249ede41bf5c05ab608fb7b74ffd57f6e8e43cf9cb723fc0d8d8cabbbbae3a5fde8ad6f52d667c512596f50b9962aa2193688d872a7eeca57801742d74d39c4b003a5e292e077ed102e7999329aab95a3d96363505f76c86a6d2352dd8025207ae531701f1ce353d6b017eb64000000bc2e9f8b66fe4a8e64f0fc7a0aa55d4103e1d7d5b0dd5750071e9b3a786021678a86fcbb0b9f9adb52f65da784dc789364ec0f0310306fef9c21b3b20d8b44423b495299cea2c6f40c377a72534453ad7f5af27b1efb2514ace1f9a68cf205a9ddb8fd954e34bde3612e6e05686cf3b968a14bd3a356f7b8d20214c0f7a388ef5ea8d063c65f2aabff685e69f86b4a0b3697f8bfbfe66796f0489ad2e49bdbc1742941c28c88cb93e1f8ccc3db4782cdf9cbd797ddc8d7b1364da50ad48e081a38622280169eba5c6a3bf9b5f15bdf8a8b6483340a3297c31154905db209195c28f15d10153204fbe0586516c714ddc939e0eb68c73969e81fc6f215b476ddf3fcf1a604603360089dadba2779cfed9027ac163067fc0d7592ac8a013b907372a42b242405241ac1f63f85a52fff2d78b30e87a156b5cfa133dabc259bb027bec5eb8c8eb623e9776a13d3ce972a6769de8a78153f498084a244b0146b77be3d1cba7b02fe8906ed8a88f105c763d1772825b986d52823bf38b6f95eca494fd9c64497874b9f450bec65311493cc108b27611eaa6819305a3730d29368f25f7e816d60884a1e0271c3c786ad36391366ac3b65f04c148974f6973005c5ff73d6f0b3f7e44c65da7c4115c4ee543991e4ad26938384cafffffffc8f7e79aaf1b8ef37f627e3c7168ecda2cf224a491bea6129fcd9bcd5378041db67ddc70ee856ae09c1b26b9ada008a7d52bf1a160606865a29794f36b2a3811c66e9fe27af8fc8356374e37f3eca244367fb535dde71fae4683710761b89f18820d4f06065450c3d1f76fa26ef28320edf6c36480af14f4444edb40ebb3f8ea264486ec31c40c7f0007a69c24da10db6f60da3e648f16b5fc6b5a5c6217e46c1f3ff354a8b49beb3b46a69dcb4c5d547a7b7ba8fe22da0173f9fe80f4bd47afbec4d2e0d3c91b1a326d8bb9fded873e87f847032af52bd6d129f3ce3f11ea9d0b4250af7eaa2649d9972b9b8dc773c869b3a431eac7f55d6bb92dc29f08d7d8959e2af7571efb7ec88eac4b62850e8f6b60d4a5d06d66875b4bd260a9014a2eb88621f4c6eb3f9ed2190b48acf0358d8b82fb4794535fcb8dd50ba86d23d230a94f07a768142ff3b4c8558dac21726b6279980c238041f26e86c8e3fa83028345999464e3e37d610ab7c15daaffb744a505a3dd9802b3721f29553ee23e1cf376f12cc3fe6b7ac76bd13da44356855be096155e355c9cad31fcdeedc6679c531bc1a2765dc8777108ec5e31d793005e718a9ced77d6505e44f649128a29f5264fecba132f9f5016eaf690751edd64d903b36ceb2b08042c60e9e97f8bc985476e6088a5ebd3743c2358171b30b16d730a5dd49c92fa19cc267e2c1927f200fc3d23a804f0a12b06a6a88a2685051ab28f1721209ada2c14b557a49423795b07040d510bb21ce5d15acedd18cb7cb7a93389ceb934206e4ffb220048a7a82fb3c251d0a31ba5af9eb0c16e29f33f9d0a78f5e6300cf04d17eb5f67711cafa0d4e99eeaf0f8fdbd34170318879a0d12c01891127ba7b677d204268524c5af1d7dc27176826302e34f9d35d2f2eefad5f22f68929d3456c11d5f00d4a8ce8b784bca8088805731eff2d47024c2da68abc2d2c0f78489f3bffa75cb826bc0809331d89a3255a498b8150d4ae31d03414ab244939455b6377c2917cb2d8a9f9ebf282657e417860e49ac94f4a838aefd34f28960a78da47933252d8cb2fdb27d413ee54502cd1bf75585468b77b8dca627cab29ef0a5297ee3dcb4c987520804e9a5f45e8241019281bab7e30f4b008bf0edf3b6fb5e8d1c2ab619b2eb84293d636a6a37d716cd8e102b7099676693cb7b01031b57ee93fd22cb18229893fd4d4ef87f1596879ac9f61b2f0c35be34cb6e6f75087ff963c188d433cb464a95e956e75559eb1f6f2224fb2ca8f0bdc90ae5c2ce712498ee4026b13b8f3137000aa1545a75e5b48e80da30e6dac5529cac10992448a7e19eb54e79ad542f45dcfbf16c62b5eb63daee8185c5e79ebfa1ca60880f9e2895f54ab95bbae38ae62200c1e439d73fa63cabff75935a8ad2ae73b82132e8d4eb4bd55844b2f55c65d5ffa0c65aaf0cc5bc73925d05cf7c1c4383af074feb3a53919d2a3b5bef96115aab966821dbfc4577d19d85911a485c58a5b87cf44d230cfdc255486bb09d5c16f2164397f0fc5f652a171f0269bdcd98291410c010cc377d2690a6032fe5701117adbd0f6b847c9617a9b3d20529024d8d9749b9c49827694d346d3b1bbe434122331986b9f6e84430dfd75d123f3e307d6f5514f3da09b527408bfb6816da54beeefad160e4b095517f3292c2e17fb3bba47527671d0afe7c35d54d25ab307b15d069a05395a9cddd4b519224fe3c689d14827ede6d91ebace2a80afaad3dcd1f8ce20e92012b8934d7ff3ebdd285cc24202a86d70b96674a6af05a3c29065afa4e38b9c34006cb3eb9c87985cfc511a8c261cdeb0c7a3c7a682c40c5b9f1d7d5ef6f97e32d02fdd3f2ded413f4a36c4db899b96c8e40d91c2743cd1d435013e3c3431c82fc5b3345b66cce79fa49f10baa4ef28535eee8c5c1a4b38bace2fb14ec11d34d620b1cc2396dc1fa857acf25184edd40f8f5c70714f940000000000", 0x7f9, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000df6fc8)={&(0x7f0000df6f80)=@generic, 0x80, &(0x7f0000df5000)=[{&(0x7f0000df5f6e)=""/146, 0x92}, {&(0x7f0000df6f74)=""/140, 0x8c}, {&(0x7f0000df5f18)=""/232, 0xe8}, {&(0x7f00007a7f19)=""/231, 0xe7}, {&(0x7f0000d76f57)=""/169, 0xa9}, {&(0x7f00009e3000)=""/230, 0xe6}, {&(0x7f0000554fcf)=""/49, 0x31}], 0x7, &(0x7f0000c27ff9)=""/7, 0x7}, 0x40000100) 2018/04/29 21:25:06 executing program 1: r0 = socket$inet(0x10, 0x5, 0x9) sendto$inet(r0, &(0x7f0000000000)="116865ecb84a870aeea6b04c5d53bd734c4f79272ca0d352d89899dc88fd16a039bd28e77e511f1be7c08c418095858aa363b9c5ebceb8ffc1a11afcfa573b941702b9b8b8e515bfc7f61650ccdaa5b8875466a83bccc14cc0d5952541", 0x5d, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x199, &(0x7f0000000340)=[{&(0x7f0000000200)="de65d61fbebc34da93cf72137291d90ec5b09f5e050fe77549339d20ce8f5aa1d99004b4", 0xfd1c}, {&(0x7f0000000240)="b71e01dbb036f363a170f12f16bed88e7938ac2eec37bd6a4e3e48e8383148753ea58bb903031503d75cc1f0ed6ebedf00fda1d1520f66f6efa39a8cc9d44f2a37720171a1c60fbd9d8fdbdab0d3e495b0975f65376e3d1f3edee1870fa60ff0c7a006c5b532464cf3659ca07a6dbfa2b69d4462cd716325e8ec4e5e2457b45fe87723398a35126a05577ab88d285faf6ce52d817961781ce7833747e23f53678ee1928f3a87b4e5045dc5e66042d06408d7c4d39241777ac9e53f90e66b520acc1cee47ced876a7ef733fe814f5ca6db050e0ec4da22b2bad87dc73aa25b65ae0d3ae73555229373851fbd8c2c1dc1d5612"}], 0x1}, 0xfffffffffffffffe) 2018/04/29 21:25:06 executing program 0: rt_sigprocmask(0x0, &(0x7f00000000c0)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000021ff8)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1, 0x3, 0x8000, 0x6, r2}) mount(&(0x7f00008bcff8)='./file0\x00', &(0x7f0000a51ff8)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, 0x0) pipe(&(0x7f00004a8000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000080)={{0x80000000, 0x3f, 0x4, 0x8, 0x800, 0x10000}, 0x100}) fcntl$setpipe(r3, 0x407, 0x0) writev(r3, &(0x7f000000b000)=[{&(0x7f0000c01f96)="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", 0x1001}], 0x1) dup2(r0, r1) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 345.303653] ? kasan_check_read+0x11/0x20 [ 345.307812] ? rcu_is_watching+0x85/0x140 [ 345.311965] ? rcu_pm_notify+0xc0/0xc0 [ 345.315868] ? rcu_read_lock_sched_held+0x108/0x120 [ 345.320900] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 345.326452] alloc_pages_current+0x10c/0x210 [ 345.330874] push_pipe+0x400/0x7a0 [ 345.334427] ? __kmalloc_node+0x47/0x70 [ 345.338416] iov_iter_get_pages_alloc+0x84a/0x14e0 [ 345.343356] ? rcu_is_watching+0x85/0x140 [ 345.347522] ? copy_page_to_iter+0xf30/0xf30 2018/04/29 21:25:06 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) r2 = dup3(r1, r0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x0, 'rdma', 0x20}, {0x0, 'io', 0x20}, {0x2d, 'pids', 0x20}, {0x200000000, 'memory', 0x20}, {0x2d, 'cpu', 0x20}]}, 0x1d) [ 345.351951] ? is_bpf_text_address+0xd7/0x170 [ 345.356459] ? kernel_text_address+0x79/0xf0 [ 345.360877] ? __unwind_start+0x166/0x330 [ 345.365040] ? unwind_get_return_address+0x61/0xa0 [ 345.369986] ? __save_stack_trace+0x7e/0xd0 [ 345.374327] ? save_stack+0xa9/0xd0 [ 345.377966] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 345.382990] ? iov_iter_pipe+0xc2/0x2f0 [ 345.386980] default_file_splice_read+0x1c7/0xad0 [ 345.391828] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.397213] ? do_splice_direct+0x400/0x400 2018/04/29 21:25:06 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xffffffffffffff80, 0x400041) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0xa90}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x1, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240)={r3, 0x1}, &(0x7f0000000280)=0x8) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x80) renameat(r1, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000180)='./file0\x00') r5 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="02003d000000000048463af6cfed58e5dc7d96b2e5372f4e368781b351113d9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r5, r0, 0x0) [ 345.401547] ? debug_mutex_init+0x1c/0x60 [ 345.405699] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 345.410720] ? __lockdep_init_map+0x105/0x590 [ 345.415221] ? lockdep_init_map+0x9/0x10 [ 345.419286] ? debug_mutex_init+0x2d/0x60 [ 345.423438] ? __mutex_init+0x1ef/0x280 [ 345.427419] ? __ia32_sys_membarrier+0x150/0x150 [ 345.432178] ? __lockdep_init_map+0x105/0x590 [ 345.436693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.442231] ? fsnotify+0x415/0xfc0 [ 345.445866] ? fsnotify+0xfc0/0xfc0 [ 345.449504] ? fsnotify_first_mark+0x330/0x330 2018/04/29 21:25:07 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x0) [ 345.454116] ? security_file_permission+0x1c6/0x240 [ 345.459140] ? rw_verify_area+0x118/0x360 [ 345.463293] ? do_splice_direct+0x400/0x400 [ 345.467625] do_splice_to+0x12e/0x190 [ 345.471436] splice_direct_to_actor+0x268/0x8d0 [ 345.476111] ? pipe_to_sendpage+0x3f0/0x3f0 [ 345.480429] ? do_splice_to+0x190/0x190 [ 345.484403] ? rw_verify_area+0x118/0x360 [ 345.488561] do_splice_direct+0x2cc/0x400 [ 345.492717] ? splice_direct_to_actor+0x8d0/0x8d0 [ 345.497561] ? rw_verify_area+0x118/0x360 [ 345.501709] do_sendfile+0x60f/0xe00 2018/04/29 21:25:07 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r2, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="aa2de20a3a91040002001300ffb0cd79cd6c2ee61c834aa09330ae69a0b7ceef91dd0f28acc862e459971b"], &(0x7f0000000380)=0xc) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000700)={0x200, 0x6}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="0d0000000000000048463ab2e5372f4e368781b151113c9dffe379b2f8429abc190000000000000000"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="fcffff62ffffe5fa", @ANYRES32=0xffffffff, @ANYBLOB="03000000"], 0x31b) r6 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8, 0x2) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{r7, r8/1000+10000}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{r9, r10/1000+10000}, 0x4, 0xe08, 0x9}], 0xa8) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000000740)=""/239) dup3(r5, r0, 0x0) [ 345.505440] ? do_compat_pwritev64+0x1b0/0x1b0 [ 345.510028] ? __might_sleep+0x95/0x190 [ 345.514021] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 345.519564] ? _copy_from_user+0xdf/0x150 [ 345.523722] __x64_sys_sendfile64+0x155/0x240 [ 345.528224] ? __ia32_sys_sendfile+0x290/0x290 [ 345.532815] ? do_syscall_64+0x92/0x800 [ 345.536800] do_syscall_64+0x1b1/0x800 [ 345.540690] ? finish_task_switch+0x1ca/0x810 [ 345.545191] ? syscall_return_slowpath+0x5c0/0x5c0 [ 345.550126] ? syscall_return_slowpath+0x30f/0x5c0 [ 345.555069] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 345.560444] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 345.565296] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.570477] RIP: 0033:0x455979 [ 345.573654] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 345.581345] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 345.588600] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 345.596106] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/29 21:25:07 executing program 3: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x5) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @dev={0xac, 0x14, 0x14}, 0x4e21, 0x0, 'lblc\x00', 0x0, 0x0, 0x4}, 0x2c) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/04/29 21:25:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000340)="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") ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="c403450e2e0a440f20c03505000000440f22c066b834010f00d848b88f4f0000000000000f23d80f21f835800000e00f23f8c4e14d72f22336440f01ca2e430f0fe01c66ba2100ecf344aa66ba610066b8ae8466ef", 0x55}], 0x1, 0x10, &(0x7f0000000200)=[@efer={0x2}], 0x1) bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x4, {0x9863587, 0x200, 0x10000, 0x401, 0xc675, 0x4}, 0xfffffffffffffffa, 0x7}, 0xe) socket$key(0xf, 0x3, 0x2) read(r0, &(0x7f0000000080)=""/208, 0xc1) 2018/04/29 21:25:07 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001c40)={0x0, 0x10000, 0x200, 0x0, 0x4, 0xea, 0x7, 0x1, {0x0, @in6={{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x80000000, 0x1, 0xffffffff, 0x9, 0x100000000}}, &(0x7f0000001d00)=0xb0) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000001d40)=@assoc_id=r2, 0x4) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000080)={{0x2, 0x1, 0x1, 0x0, 0x3}, 0x2a10, 0xffffffffffffffff}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmmsg$nfc_llcp(r3, &(0x7f0000001b80)=[{&(0x7f0000000180)={0x27, 0x0, 0x1, 0x1, 0xffffffffffff2d8b, 0x100, "c948de609a7f0117e9a6856105dee6e606cd71928823cc3fb2e26b0497d735addc2e8a5e8ad84e50e8229e3c1f96af4d30fd057e74ac4eb8cbdb67bb356d56", 0x22}, 0x60, &(0x7f00000002c0)=[{&(0x7f0000000200)="871600eafdcb4104aa8d0b72ab4c44520531551addc497be1c6ec0a70fd2579df03eceaa21fe57a1685263a9b106aad76061db0aff7ab87cf5b00bbccaecdf21a7005ef4de0e619f070a621bc66e1044f05fb4b40fea9b50cf144ca30da3f098e9a6ee6693aef4d1bef9976c34fdc23c741ed69b6e068a7a53184e598d6745798238372ab97abcfaa340d81ac023a504fcb738e01f94385856236292cf9335da28bde2481465eb", 0xa7}, {&(0x7f0000000340)="1b081d09c8178a65f7fd0be82b490dc6369805380cfcb1d087456c035e45309a01a5d5ed1f3644ad86733fd5646c6cc2067b6d3afd9ba032cc267554c6fc2988e8b8bd2d2c950db9163479cf45b526a070bbcb2fb612fef263db", 0x5a}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="01f2db2db2c4e704eb8d515f58fc545def9a6217314aca5eb2595336af030bdee2ab87cd2832350b1f21fc49fdebe97c78dfac35d53360de580e57d766803d00ab08e7b6077570f94f50e82f402bcbc4a2227a33134c22c2a1aef89a02dcb9ffb3b9cf062de902a7fecf9ab4a438e167fedf6df9231310ee6648a825af9288746b446be5f5230f9584cb41f21b455bd9c9cea62ed2e1b40e3da1ae69ece20d1d25b18904ea58aecc67af53889fd18db8a6657afabad12b48a2b8eb547cbfd689cd8c49631b0850b0d3e317fb032043dc420268557659dbe478abc1e26b42", 0xde}], 0x4, &(0x7f00000014c0)={0x110, 0x10b, 0x3ff, "0fd206bc1168d529aad3f58ebac71f8d4baedb4f9f7f750d35bbad9ec75fc2182337730525ca120f447652cf6d9b29e1c933a04cb2bd26e1bcde0e8db15984caf0f62eed0d1a78a85f70925748f45233d13861eb9c854bdddc2fde20ea1c7e03734c5a2f89178b4d086e6e9e7dfce11a4d21ec7f7a135a9d993f11bd98d9367ecb6ebd0cab9b185ef369e912acf66af149d104f8d9bd55b6c03a70a0154030bc13078d0c276db428679854360a16cbc82bbb248f253794efa998c0d6393bcca969925826fe29af8cfc741e18dedfaacd2cdc929d9f4fa2efe2dc8735aedc23a2558a8b49ea017c1b2d8f000ac554716cf51b58b277169dae80cc"}, 0x110, 0x20008000}, {&(0x7f0000001600)={0x27, 0x0, 0x0, 0x2, 0x7, 0x67, "f85606816775e298d97e0c4624ce5fcd5dcc02cc8d46863dd12bc9267f4540c3a05e5a8f369473a13494e2a4250b87feb37217a0a9081e5f2f368c48f19be5"}, 0x60, &(0x7f0000001a40)=[{&(0x7f0000001680)="62fed8fca3debfc204028627e60e8b09667bbb3356a36889327aa61d40dd69adbcb5cb89dc1c4b3389b57b71c8ea8e46a02b1c9c1f1ecc17663b46bced75529d02eb966ed07f6e4f87947987ca0dd2759cdf6f0ec4305967b3f86be7f053c8590e23bce4e398daeac5446c6e1226b1e37e932a5d21c0dcae4482d11574059e2e0fe806ef97231425cbc7041d13be5646e80022b20f9f4a1fb35e1061b38b41e443dd52ae8c0e62e9df2c17da", 0xac}, {&(0x7f0000001740)="303b6c0b8b416b6842100287ef2b491009f3ba8bbc65d016ccaaeb4dd3c558f0436ee13d991496d4a143e558cf220f6a8889a527a1220164beeb8483c99d953297d303e9afdcf85602810d8578d4b112de4709032b1a03b8bb7321d8713d531687bfe21eab76c302a0d8e63b768b4db1219a4eddce8ba0f2cc4a53651af2cffe044b6a9bc3583a35a116237fe4697ee36336a610be74e4137000e89f9d315972c02f7a31cab658edfe71c3d4eea911e299207e0b4e0d8bc11174b5d4e4eb6103ad66f34d347a7dbdce59b53301791aad3f10d7e87c3c0a172acef71686caef315a54ef4958a605d854d139d254114481737fae805559bd266a134b6f83", 0xfd}, {&(0x7f0000001840)="eb20308ddc9d28e7c8db0c5371853ed8b7adbd38e02aa4204b12103cdf1a8dca99b3f8d69712f114ad396fff76d81cb05a6d5e9b703da4daeb460e3800b1819a2607370a72ffa247499481177d04aaa81f149e75eda64bb7590502d16841d03740526e499da8f945f4b9b4c9275ad9b336af613dee64d04523d0fea5e80703d2d4eef3c51703", 0x86}, {&(0x7f0000001900)="e0b56da8aef45186439f38e04c3fe964c13454883b208e729c42926c3259af0fc9e99b95d65334440b1e232d522e6d9418af027449fcd5b89ceb009c393ea5b1f44a44ee5bf225c9cbb16a1bbed71197c8f0580f31a5c963a9f4df3bf3849b5ad62f91093ed2733f41cf5d4086b729267327dc66b35a1f1f17f60f5e1d8e1a89168d1e0bb75673f24e442f534ac081c0c2b2a150c0e097658a9a2b50623e4b64fdf956920ef58e9268c8c2e1dc87aa1429d205370493ecdb06a0555fbe234c43240bf96c4862650ddb0a4b145c208cb0", 0xd0}, {&(0x7f0000001a00)="73ad2e5792a7d95b81aa012e11b3fa690789c0938be141340dfa05037810119ea5019cecb3caf6a4919ed702fba4e666b55774", 0x33}], 0x5, &(0x7f0000001ac0)={0x88, 0x13d, 0xde1, "4b8a831e16a3228f28373f664342da000fd2a050e44c96984d5c68cb3d0a730714a74bcbcb0141d9c9f27035f1953eead54986da373add6ac4de977d3e9da9094dc223ce171b05df16114738df13d8f49a24acc6df9af0fa6769afcbd61830a66f2be600714a8e0b3c101624e5ebb0545c6b"}, 0x88, 0x20000000}], 0x2, 0x4000) socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000040", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="af6c07a7e7ae5efd", @ANYRES32=0xffffffff, @ANYBLOB], 0x31b) r5 = dup3(r3, r4, 0x80000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f0000001c00)={0x2, 0xf000}) ioctl$LOOP_SET_FD(r1, 0x4c00, r5) [ 345.603369] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 345.610629] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000007 2018/04/29 21:25:07 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r2, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="aa2de20a3a91040002001300ffb0cd79cd6c2ee61c834aa09330ae69a0b7ceef91dd0f28acc862e459971b"], &(0x7f0000000380)=0xc) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000700)={0x200, 0x6}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="0d0000000000000048463ab2e5372f4e368781b151113c9dffe379b2f8429abc190000000000000000"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="fcffff62ffffe5fa", @ANYRES32=0xffffffff, @ANYBLOB="03000000"], 0x31b) r6 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8, 0x2) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{r7, r8/1000+10000}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{r9, r10/1000+10000}, 0x4, 0xe08, 0x9}], 0xa8) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000000740)=""/239) dup3(r5, r0, 0x0) 2018/04/29 21:25:07 executing program 5: semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0xffffffff}, {}], 0x2, &(0x7f0000000100)={0x77359400}) r0 = semget(0x1, 0x3, 0x40000003fc) pselect6(0x40, &(0x7f0000000180)={0x5, 0x3f, 0x4f7, 0x2, 0x1000, 0x1, 0x3, 0x7ff}, &(0x7f00000001c0)={0xfffffffffffffff9, 0x80000001, 0x220f, 0x101, 0x7, 0x6, 0x1ff, 0x8}, &(0x7f0000000200)={0x9, 0x100000000, 0x3, 0x9, 0x270, 0xf5, 0x2, 0x10000}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={0x3ff}, 0x8}) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x10000, 0x1000}, {0x1, 0x7, 0x1800}, {0x0, 0x6}], 0x3, &(0x7f0000000040)={0x0, 0x989680}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000003000)=[0x0]) get_mempolicy(&(0x7f0000000080), &(0x7f0000000140), 0x742c0c70, &(0x7f0000ffd000/0x2000)=nil, 0x4) 2018/04/29 21:25:08 executing program 7 (fault-call:2 fault-nth:8): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:08 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000003e00)={0x2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv\x00', 0x3) shutdown(r0, 0x0) 2018/04/29 21:25:08 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000000000fa", @ANYRES32=0xffffffff, @ANYBLOB='\b\x00\x00 '], 0x31b) r2 = dup3(r1, r0, 0x0) getsockopt$netlink(r2, 0x10e, 0x7, &(0x7f0000000040)=""/132, &(0x7f0000000180)=0x84) 2018/04/29 21:25:08 executing program 3: r0 = socket(0x10, 0x3, 0x0) writev(r0, &(0x7f0000011ff0)=[{&(0x7f00000000c0)="390000001300090465070075af30b500000000400a00000046000107000000141900040004000000000311b2e5bacc540d02b7282198ccb91a", 0x39}], 0x1) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='irlan0\x00') 2018/04/29 21:25:08 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f000062fff8)={0x0, 0x2000000001}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000b94ff8)={0x0, 0x0, 0x10001}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00005c0fe0)={0x3}, 0x20) write(r0, &(0x7f0000ce6ffe)="da", 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x8) 2018/04/29 21:25:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net.icmp6\x00') r1 = socket$kcm(0x29, 0x2, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x10) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)='net/icmp6\x00', 0xfffffffffffffffd) getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000280)=""/97, &(0x7f0000000300)=0x61) socket$inet6_icmp(0xa, 0x2, 0x3a) keyctl$reject(0x13, r3, 0x7, 0xa80, r4) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 2018/04/29 21:25:08 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r2, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="aa2de20a3a91040002001300ffb0cd79cd6c2ee61c834aa09330ae69a0b7ceef91dd0f28acc862e459971b"], &(0x7f0000000380)=0xc) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000700)={0x200, 0x6}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="0d0000000000000048463ab2e5372f4e368781b151113c9dffe379b2f8429abc190000000000000000"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="fcffff62ffffe5fa", @ANYRES32=0xffffffff, @ANYBLOB="03000000"], 0x31b) r6 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8, 0x2) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{r7, r8/1000+10000}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{r9, r10/1000+10000}, 0x4, 0xe08, 0x9}], 0xa8) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000000740)=""/239) dup3(r5, r0, 0x0) 2018/04/29 21:25:08 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b0a000)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x66, 0x2) r3 = fcntl$getown(r1, 0x9) r4 = socket$inet6_sctp(0xa, 0x80000000005, 0x84) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000180)=""/144, &(0x7f0000000080)=0x90) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000200)={{0xc3, 0x5, 0x1, 0x1ff, "091bc1437443d960d603550f512b5edbfff80131c188f0334e1fca76cd77feeb72247e479eccd32864d457d7", 0x80000000}, 0x0, 0x0, 0x0, r3, 0x100000001, 0x6, "2c6321f0fa49b0d27580193e27c9c0267c96966258bee5237df2938e4eb82e60e546612553faaa4d90163f601145c73a27e8be060732ce7e86d0d6540aca5059", &(0x7f00000000c0)='/vmnet1@\x00', 0x9, [], [0x200, 0xa48, 0x9, 0xb8c]}) recvmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000100)=@un=@abs, 0x80, &(0x7f0000000680)=[{&(0x7f0000000340)=""/179, 0xb3}, {&(0x7f0000000400)=""/199, 0xc7}, {&(0x7f0000000500)=""/60, 0x3c}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/72, 0x48}], 0x5}, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000740)=@assoc_value={0x0}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000007c0)={r5, @in6={{0xa, 0x4e23, 0x2, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0xabb}}, 0x800, 0x4, 0x5, 0x1, 0x19}, 0x98) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000900)) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000ac0)={r5, 0x3, 0x2, [0x64ba3a2c]}, 0x4de74a97bb20f998) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000001c0)) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x401, 0x5c, 0x0, 0x0, 0x1, 0x0, 0xbd8, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000009c0)=[@textreal={0x8, &(0x7f0000000940)="ec0f1fd166b99e02000066b835b9000066ba000000000f30f30f59ab4b2e66b9810b00000f32ba200066b80a00000066ef66b9390b00000f320f233dbaf80c66b8f6e6fe8866efbafc0cec643e64d5d2", 0x50}], 0x1, 0x18, &(0x7f0000000a00)=[@cr0={0x0, 0x40000}, @cr0={0x0, 0x10000}], 0x2) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000880)={{0x2, 0x4e20, @broadcast=0xffffffff}, {0x1, @link_local={0x1, 0x80, 0xc2}}, 0x4, {0x2, 0x4e24, @loopback=0x7f000001}, 'syzkaller0\x00'}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/mixer\x00', 0x400, 0x0) r7 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r8 = memfd_create(&(0x7f0000000ffd)='[,\x00', 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r8, 0xfffffffffffffffd) ioctl$TIOCGSOFTCAR(r8, 0x5419, &(0x7f0000000040)) write(r7, &(0x7f0000000300)='5', 0x1) [ 346.656274] 9pnet_virtio: no channels available for device ./file0 [ 346.718322] netlink: 'syz-executor3': attribute type 4 has an invalid length. [ 346.731779] FAULT_INJECTION: forcing a failure. [ 346.731779] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 346.743653] CPU: 1 PID: 24772 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 346.750929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.760285] Call Trace: [ 346.762884] dump_stack+0x1b9/0x294 2018/04/29 21:25:08 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r2, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="aa2de20a3a91040002001300ffb0cd79cd6c2ee61c834aa09330ae69a0b7ceef91dd0f28acc862e459971b"], &(0x7f0000000380)=0xc) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000700)={0x200, 0x6}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="0d0000000000000048463ab2e5372f4e368781b151113c9dffe379b2f8429abc190000000000000000"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="fcffff62ffffe5fa", @ANYRES32=0xffffffff, @ANYBLOB="03000000"], 0x31b) r6 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8, 0x2) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{r7, r8/1000+10000}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{r9, r10/1000+10000}, 0x4, 0xe08, 0x9}], 0xa8) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000000740)=""/239) dup3(r5, r0, 0x0) [ 346.766257] netlink: 'syz-executor3': attribute type 4 has an invalid length. [ 346.766521] ? dump_stack_print_info.cold.2+0x52/0x52 [ 346.778961] ? zap_class+0x720/0x720 [ 346.782692] should_fail.cold.4+0xa/0x1a [ 346.786768] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 346.791890] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 346.797090] ? find_held_lock+0x36/0x1c0 [ 346.801183] ? check_same_owner+0x320/0x320 [ 346.805520] ? rcu_note_context_switch+0x710/0x710 [ 346.810467] ? __might_sleep+0x95/0x190 2018/04/29 21:25:08 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x1ff, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000080)={{0x3, 0x0, 0x100000001}}) 2018/04/29 21:25:08 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r2, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="aa2de20a3a91040002001300ffb0cd79cd6c2ee61c834aa09330ae69a0b7ceef91dd0f28acc862e459971b"], &(0x7f0000000380)=0xc) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000700)={0x200, 0x6}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="0d0000000000000048463ab2e5372f4e368781b151113c9dffe379b2f8429abc190000000000000000"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="fcffff62ffffe5fa", @ANYRES32=0xffffffff, @ANYBLOB="03000000"], 0x31b) r5 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8, 0x2) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{r6, r7/1000+10000}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{r8, r9/1000+10000}, 0x4, 0xe08, 0x9}], 0xa8) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000740)=""/239) [ 346.814460] __alloc_pages_nodemask+0x34e/0xd70 [ 346.819136] ? default_file_splice_read+0x1c7/0xad0 [ 346.824164] ? do_splice_to+0x12e/0x190 [ 346.828145] ? splice_direct_to_actor+0x268/0x8d0 [ 346.832999] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 346.838029] ? lock_downgrade+0x8e0/0x8e0 [ 346.842193] ? kasan_check_read+0x11/0x20 [ 346.846349] ? rcu_is_watching+0x85/0x140 [ 346.850501] ? do_raw_spin_unlock+0x9e/0x2e0 [ 346.854916] ? rcu_pm_notify+0xc0/0xc0 [ 346.858824] ? rcu_read_lock_sched_held+0x108/0x120 [ 346.863850] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 346.869402] alloc_pages_current+0x10c/0x210 [ 346.873827] push_pipe+0x400/0x7a0 [ 346.877370] ? __kmalloc_node+0x47/0x70 [ 346.881359] iov_iter_get_pages_alloc+0x84a/0x14e0 [ 346.886308] ? rcu_is_watching+0x85/0x140 [ 346.890468] ? copy_page_to_iter+0xf30/0xf30 [ 346.894886] ? is_bpf_text_address+0xd7/0x170 [ 346.899387] ? kernel_text_address+0x79/0xf0 [ 346.903806] ? __unwind_start+0x166/0x330 [ 346.907965] ? unwind_get_return_address+0x61/0xa0 [ 346.912903] ? __save_stack_trace+0x7e/0xd0 2018/04/29 21:25:08 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r0, 0x0) 2018/04/29 21:25:08 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r2, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="aa2de20a3a91040002001300ffb0cd79cd6c2ee61c834aa09330ae69a0b7ceef91dd0f28acc862e459971b"], &(0x7f0000000380)=0xc) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000700)={0x200, 0x6}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="0d0000000000000048463ab2e5372f4e368781b151113c9dffe379b2f8429abc190000000000000000"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="fcffff62ffffe5fa", @ANYRES32=0xffffffff, @ANYBLOB="03000000"], 0x31b) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8, 0x2) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{r5, r6/1000+10000}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{r7, r8/1000+10000}, 0x4, 0xe08, 0x9}], 0xa8) [ 346.917239] ? save_stack+0xa9/0xd0 [ 346.920869] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 346.925886] ? iov_iter_pipe+0xc2/0x2f0 [ 346.929868] default_file_splice_read+0x1c7/0xad0 [ 346.934707] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.940087] ? do_splice_direct+0x400/0x400 [ 346.944423] ? debug_mutex_init+0x1c/0x60 [ 346.948581] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 346.953604] ? __lockdep_init_map+0x105/0x590 [ 346.958107] ? lockdep_init_map+0x9/0x10 [ 346.962171] ? debug_mutex_init+0x2d/0x60 [ 346.966326] ? __mutex_init+0x1ef/0x280 [ 346.970308] ? __ia32_sys_membarrier+0x150/0x150 [ 346.975069] ? __lockdep_init_map+0x105/0x590 [ 346.979580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.985120] ? fsnotify+0x415/0xfc0 [ 346.988756] ? fsnotify+0xfc0/0xfc0 [ 346.992387] ? fsnotify_first_mark+0x330/0x330 [ 346.996990] ? security_file_permission+0x1c6/0x240 [ 346.997138] binder: binder_mmap: 24795 2000c000-2000e000 bad vm_flags failed -1 [ 347.002007] ? rw_verify_area+0x118/0x360 [ 347.002025] ? do_splice_direct+0x400/0x400 2018/04/29 21:25:08 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r2, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="aa2de20a3a91040002001300ffb0cd79cd6c2ee61c834aa09330ae69a0b7ceef91dd0f28acc862e459971b"], &(0x7f0000000380)=0xc) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000700)={0x200, 0x6}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="0d0000000000000048463ab2e5372f4e368781b151113c9dffe379b2f8429abc190000000000000000"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="fcffff62ffffe5fa", @ANYRES32=0xffffffff, @ANYBLOB="03000000"], 0x31b) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8, 0x2) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{r5, r6/1000+10000}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) [ 347.002042] do_splice_to+0x12e/0x190 [ 347.002063] splice_direct_to_actor+0x268/0x8d0 [ 347.002077] ? pipe_to_sendpage+0x3f0/0x3f0 [ 347.002095] ? do_splice_to+0x190/0x190 [ 347.034679] ? rw_verify_area+0x118/0x360 [ 347.038830] do_splice_direct+0x2cc/0x400 [ 347.042989] ? splice_direct_to_actor+0x8d0/0x8d0 [ 347.047845] ? rw_verify_area+0x118/0x360 [ 347.051999] do_sendfile+0x60f/0xe00 [ 347.055730] ? do_compat_pwritev64+0x1b0/0x1b0 [ 347.060319] ? __might_sleep+0x95/0x190 [ 347.064103] binder: binder_mmap: 24795 2000c000-2000e000 bad vm_flags failed -1 [ 347.064300] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 347.077250] ? _copy_from_user+0xdf/0x150 [ 347.081413] __x64_sys_sendfile64+0x155/0x240 [ 347.085934] ? __ia32_sys_sendfile+0x290/0x290 [ 347.090511] ? do_syscall_64+0x92/0x800 [ 347.094478] do_syscall_64+0x1b1/0x800 [ 347.098350] ? finish_task_switch+0x1ca/0x810 [ 347.102846] ? syscall_return_slowpath+0x5c0/0x5c0 [ 347.107766] ? syscall_return_slowpath+0x30f/0x5c0 [ 347.112688] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.118209] ? retint_user+0x18/0x18 [ 347.121915] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 347.126753] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.131925] RIP: 0033:0x455979 [ 347.135102] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 347.142810] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 347.150065] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 347.157318] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 347.164572] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 347.171824] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000008 2018/04/29 21:25:08 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x301) sendmsg$netlink(r2, &(0x7f0000000200)={&(0x7f0000000080)=@kern={0x10}, 0xc, &(0x7f0000000180)=[{&(0x7f00000000c0)={0x30, 0x20, 0x200, 0x70bd26, 0x25dfdbfd, "", [@typed={0xc, 0x95, @u64=0xfffffffffffffffc}, @typed={0x8, 0x3a, @ipv4=@dev={0xac, 0x14, 0x14, 0x13}}, @typed={0x8, 0x6b, @u32=0x100000001}, @typed={0x4, 0x3d}]}, 0x30}], 0x1, &(0x7f00000001c0)=[@rights={0x28, 0x1, 0x1, [r1, r1, r0, r1, r0, r0]}], 0x28, 0x50}, 0x40) r3 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r1, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r3, r1, 0x0) 2018/04/29 21:25:08 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000080)=0x8001, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000000c0)={{0x6, 0x7}, 'port0\x00', 0x0, 0x400, 0x8, 0x9, 0x3ff, 0x3ff, 0xfffffffffffffff7, 0x0, 0x6, 0x6}) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) dup2(r0, r2) 2018/04/29 21:25:09 executing program 7 (fault-call:2 fault-nth:9): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:09 executing program 1: ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x80047453, &(0x7f0000000000)={0x18, 0x0, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], '\x00\x00\x00\f\x00'}}) r0 = socket(0x2, 0x3, 0x40000000000000ff) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x54, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xfffffffffffffff8, 0x200) r1 = getpgid(0x0) ptrace(0x4217, r1) 2018/04/29 21:25:09 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)=0x0) timer_gettime(r2, &(0x7f0000000200)) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r4 = syz_open_procfs(0x0, &(0x7f0000001f00)="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") fgetxattr(r4, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) fgetxattr(r4, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/249, 0xf9) r5 = syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0x40, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000003c0)=0xff) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) dup3(0xffffffffffffffff, r1, 0x0) readahead(r4, 0x2, 0x4) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x101000, 0x0) accept$nfc_llcp(r4, &(0x7f0000000400), &(0x7f0000000280)=0x60) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) 2018/04/29 21:25:09 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r2, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="aa2de20a3a91040002001300ffb0cd79cd6c2ee61c834aa09330ae69a0b7ceef91dd0f28acc862e459971b"], &(0x7f0000000380)=0xc) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000700)={0x200, 0x6}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="0d0000000000000048463ab2e5372f4e368781b151113c9dffe379b2f8429abc190000000000000000"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="fcffff62ffffe5fa", @ANYRES32=0xffffffff, @ANYBLOB="03000000"], 0x31b) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8, 0x2) write$evdev(r2, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:09 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) dup3(r0, r1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f000088c000)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x2000ff, 0x41, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote={0xfe, 0x80, [], 0xbb}, 0x800, 0x0, 0xff}, 0x20) 2018/04/29 21:25:09 executing program 0: r0 = memfd_create(&(0x7f00000001c0)='dev ', 0x0) write(r0, &(0x7f0000000000)="164690f1125c77a60000000000310109c3a850c34a4b43dc09f054a5c55a27fb5a46fbcb764f1ae1d4eb5bfd035171c5355a90f81b773e281c3af820b0fabb8d46d97f3e34583903815cf376f16fe8c47d8044423ba2b0", 0xe5) sendfile(r0, r0, &(0x7f0000000080), 0xffef) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x103001) ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140), 0x8) 2018/04/29 21:25:09 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r2) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) r3 = dup3(r1, r0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000340)='cpuacct.usage_all\x00', 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000380)=0x5, 0x4) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f00000003c0)=""/102, &(0x7f0000000440)=0x66) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x6) io_setup(0xfffffffffffffffa, &(0x7f00000001c0)=0x0) io_getevents(r5, 0x2, 0x5, &(0x7f0000000200)=[{}, {}, {}, {}, {}], &(0x7f00000002c0)={0x0, 0x1c9c380}) 2018/04/29 21:25:09 executing program 6: syz_open_dev$dspn(&(0x7f00000004c0)='/dev/dsp#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x2000) read(r0, &(0x7f0000001a00)=""/4096, 0x1000) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000040)={0x8001, 0x32, 0x1, 0x1}) ioctl$int_in(r0, 0x8000008010500d, &(0x7f0000003ff8)) [ 347.878237] FAULT_INJECTION: forcing a failure. [ 347.878237] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 347.890176] CPU: 0 PID: 24847 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 347.897456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.906810] Call Trace: [ 347.909417] dump_stack+0x1b9/0x294 [ 347.913090] ? dump_stack_print_info.cold.2+0x52/0x52 [ 347.918309] ? zap_class+0x720/0x720 [ 347.922038] should_fail.cold.4+0xa/0x1a [ 347.926114] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 347.931235] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 347.936439] ? find_held_lock+0x36/0x1c0 [ 347.940529] ? check_same_owner+0x320/0x320 [ 347.944866] ? rcu_note_context_switch+0x710/0x710 [ 347.949806] ? __might_sleep+0x95/0x190 [ 347.953800] __alloc_pages_nodemask+0x34e/0xd70 [ 347.958482] ? default_file_splice_read+0x1c7/0xad0 [ 347.963504] ? do_splice_to+0x12e/0x190 [ 347.967488] ? splice_direct_to_actor+0x268/0x8d0 [ 347.972342] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 347.977371] ? lock_downgrade+0x8e0/0x8e0 [ 347.981534] ? kasan_check_read+0x11/0x20 [ 347.985692] ? rcu_is_watching+0x85/0x140 [ 347.989853] ? do_raw_spin_unlock+0x9e/0x2e0 [ 347.994274] ? rcu_pm_notify+0xc0/0xc0 [ 347.998176] ? rcu_read_lock_sched_held+0x108/0x120 [ 348.003187] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 348.008715] alloc_pages_current+0x10c/0x210 [ 348.013116] push_pipe+0x400/0x7a0 [ 348.016640] ? __kmalloc_node+0x47/0x70 [ 348.020608] iov_iter_get_pages_alloc+0x84a/0x14e0 [ 348.025549] ? rcu_is_watching+0x85/0x140 [ 348.029692] ? copy_page_to_iter+0xf30/0xf30 [ 348.034092] ? is_bpf_text_address+0xd7/0x170 [ 348.038592] ? kernel_text_address+0x79/0xf0 [ 348.042987] ? __unwind_start+0x166/0x330 [ 348.047126] ? unwind_get_return_address+0x61/0xa0 [ 348.052044] ? __save_stack_trace+0x7e/0xd0 [ 348.056365] ? save_stack+0xa9/0xd0 [ 348.059982] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 348.064985] ? iov_iter_pipe+0xc2/0x2f0 [ 348.068954] default_file_splice_read+0x1c7/0xad0 [ 348.073781] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.079144] ? do_splice_direct+0x400/0x400 [ 348.083451] ? debug_mutex_init+0x1c/0x60 [ 348.087599] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 348.092602] ? __lockdep_init_map+0x105/0x590 [ 348.097087] ? lockdep_init_map+0x9/0x10 [ 348.101134] ? debug_mutex_init+0x2d/0x60 [ 348.105267] ? __mutex_init+0x1ef/0x280 [ 348.109229] ? __ia32_sys_membarrier+0x150/0x150 [ 348.113971] ? __lockdep_init_map+0x105/0x590 [ 348.118461] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.123984] ? fsnotify+0x415/0xfc0 [ 348.127605] ? fsnotify+0xfc0/0xfc0 [ 348.131220] ? fsnotify_first_mark+0x330/0x330 [ 348.135799] ? security_file_permission+0x1c6/0x240 [ 348.140824] ? rw_verify_area+0x118/0x360 [ 348.144961] ? do_splice_direct+0x400/0x400 [ 348.149272] do_splice_to+0x12e/0x190 [ 348.153064] splice_direct_to_actor+0x268/0x8d0 [ 348.157720] ? pipe_to_sendpage+0x3f0/0x3f0 [ 348.162036] ? do_splice_to+0x190/0x190 [ 348.165997] ? rw_verify_area+0x118/0x360 [ 348.170140] do_splice_direct+0x2cc/0x400 [ 348.174277] ? splice_direct_to_actor+0x8d0/0x8d0 [ 348.179111] ? rw_verify_area+0x118/0x360 [ 348.183249] do_sendfile+0x60f/0xe00 [ 348.186955] ? do_compat_pwritev64+0x1b0/0x1b0 [ 348.191523] ? __might_sleep+0x95/0x190 [ 348.195490] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 348.201021] ? _copy_from_user+0xdf/0x150 [ 348.205163] __x64_sys_sendfile64+0x155/0x240 [ 348.209644] ? __ia32_sys_sendfile+0x290/0x290 [ 348.214217] ? do_syscall_64+0x92/0x800 [ 348.218185] do_syscall_64+0x1b1/0x800 [ 348.222060] ? syscall_return_slowpath+0x5c0/0x5c0 [ 348.226976] ? syscall_return_slowpath+0x30f/0x5c0 [ 348.231894] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 348.237250] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 348.242084] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.247258] RIP: 0033:0x455979 [ 348.250432] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 348.258128] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 348.265385] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 348.272640] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/29 21:25:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, &(0x7f00000004c0)}, &(0x7f0000000140)="0440005cf000", &(0x7f0000000500)=""/158, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) connect$ipx(r1, &(0x7f0000000100)={0x4, 0x400000000, 0x80000001, "86a2443eafec", 0x3}, 0x10) 2018/04/29 21:25:09 executing program 0: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000bf6000)=0x177, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f00005e6000)=0xffffffffffffff91, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000080)={{0x7, 0x8, 0x80000001, 0x40, 0x3ff, 0x2}, 0x9}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0xd4, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000f61000)=[{{&(0x7f0000f62ff0)=@ipx, 0x10, &(0x7f0000002080), 0x220, &(0x7f0000f62000)=""/89, 0xfffffffffffffe1e, 0x1}}], 0x1, 0x2041, 0x0) 2018/04/29 21:25:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$inet(0x2, 0x80805, 0x1, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="66ba6100ec0f20d835080000000f22d86566adb8e10000000f23c00f21f835000009000f23f86467640f01720566b836000f00d00f71d0ca67679c36660f388078f966bad10466b8000066ef", 0x4c}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/29 21:25:09 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='memory.swap.current\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f00000001c0)=""/137) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="d9790000000000000000000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) r3 = dup3(r1, r0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x7fff, 0xff, 0x8208, 0x7, 0x1000, 0x10001, 0x7, 0x1ff, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000000c0)={r4, 0x1133}, 0x8) 2018/04/29 21:25:09 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r2, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="aa2de20a3a91040002001300ffb0cd79cd6c2ee61c834aa09330ae69a0b7ceef91dd0f28acc862e459971b"], &(0x7f0000000380)=0xc) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000700)={0x200, 0x6}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="0d0000000000000048463ab2e5372f4e368781b151113c9dffe379b2f8429abc190000000000000000"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="fcffff62ffffe5fa", @ANYRES32=0xffffffff, @ANYBLOB="03000000"], 0x31b) write$evdev(r2, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) [ 348.279894] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 348.287150] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000009 2018/04/29 21:25:09 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) signalfd(r0, &(0x7f0000000040)={0xa9}, 0x8) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x0) 2018/04/29 21:25:09 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) dup2(r0, r0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x4, 0x0, 0x8, 0x3}, {0x7fffffff, 0x1000, 0x401, 0x4}, {0x7fffffff, 0x5f, 0x4}]}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') epoll_pwait(r4, &(0x7f0000000180)=[{}, {}], 0x2, 0x6, &(0x7f0000000140)={0x1000}, 0x6568c1b1655c7e36) fcntl$setsig(r1, 0xa, 0x20) inotify_add_watch(r4, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x2100, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) 2018/04/29 21:25:10 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r2, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="aa2de20a3a91040002001300ffb0cd79cd6c2ee61c834aa09330ae69a0b7ceef91dd0f28acc862e459971b"], &(0x7f0000000380)=0xc) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000700)={0x200, 0x6}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="0d0000000000000048463ab2e5372f4e368781b151113c9dffe379b2f8429abc190000000000000000"], 0x39) write$evdev(r2, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:11 executing program 7 (fault-call:2 fault-nth:10): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:11 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xfffffffffffffff7) read$eventfd(r0, &(0x7f00000000c0), 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="412f27ce939436692254d57e4da9d8ef82b8ace24780ba9864adbe9931772ba21a38523c3ec5a1ee85d491792637b568a24e78ca5a180db35e189dfd51f86d092698390a4f2be8e0878f628b8ee7347b16a5a10e16e73e44d743f7758d4f8262fa9d59b7280c4bcbdddad283ac419285ca97243d09eba75b9b", 0x79) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000240)={r2, 0xde}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x6000000, 0x5, 0x2, 0x6, 0x7, 0x4, 0x7, 0xfffffffffffffff8, r2}, &(0x7f0000000200)=0x20) 2018/04/29 21:25:11 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r2, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="aa2de20a3a91040002001300ffb0cd79cd6c2ee61c834aa09330ae69a0b7ceef91dd0f28acc862e459971b"], &(0x7f0000000380)=0xc) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000700)={0x200, 0x6}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="0d0000000000000048463ab2e5372f4e368781b151113c9dffe379b2f8429abc190000000000000000"], 0x39) write$evdev(r2, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:11 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = getpid() perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x399, 0x7710, 0x9, 0x9, 0x0, 0x70, 0x80000, 0x4, 0x5, 0x9, 0x3, 0x1ff, 0xfab, 0x80, 0xc8f, 0xfffffffffffffffd, 0x8000, 0x1, 0xfffffffffffffffd, 0x800, 0x5, 0xe00, 0x2, 0x400, 0x3, 0x80000000, 0x8000, 0x7f, 0x9, 0x4, 0x8, 0x0, 0x7ff, 0x1ff, 0x3, 0xfff, 0x0, 0xff, 0x5, @perf_config_ext={0x51e9}, 0xf804, 0x3, 0x2, 0x6, 0x4, 0xffffffffffffebbc, 0x80000000}, r2, 0x4, r0, 0x9) r3 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r1, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r3, r1, 0x0) 2018/04/29 21:25:11 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000200)="3e0014001a47ae94846c33741fee99620401911ff22e1a28000804bf0009a74dcf99ea5ae4433501e7c63bc54223dd119dd6950fe2970ee0c10679000000000000e973ff0f00001af9e0efe114f9be8da0e9bbe018c1336dcfd4a8f406264a1f1778caae3b43732170d0470595f77fd1524feaef22d0b0908200000000", 0x7d) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 2018/04/29 21:25:11 executing program 6: unshare(0x20000) r0 = syz_open_procfs(0x0, &(0x7f0000044000)='ns/mnt\x00') ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x9, 0x8, &(0x7f0000000180)}) time(&(0x7f0000000080)) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000240)={0x2b, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e23, 0x0, 'rr\x00', 0x10, 0x0, 0x13}, 0x2c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000140)=0xfffffffffffffffa, 0x4) set_mempolicy(0x8003, &(0x7f00000000c0), 0x93c) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x3, 0xfffffffffffff801}) setns(r0, 0x0) unshare(0x200000000000) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) read$eventfd(r0, &(0x7f0000000000), 0x8) connect(r0, &(0x7f0000000400)=@un=@file={0x0, './file0\x00'}, 0x80) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x5, 0x4}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYBLOB="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"], &(0x7f00000003c0)=0x97) prctl$seccomp(0x16, 0x2, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0x2, 0x9, 0x200, 0x5}, {0x5, 0xffff, 0x1, 0x81a}]}) clone(0x0, &(0x7f00002c9000), &(0x7f0000d70ffc), &(0x7f00001cc000), &(0x7f0000154000)) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000200)) 2018/04/29 21:25:11 executing program 1: socketpair$ax25(0x3, 0x3, 0xc3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x28800, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x7fffffff, 0xff, 0x6, 0x3, 0x7, 0x93, 0x9}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', r2}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100), 0x4) 2018/04/29 21:25:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$eventfd(r0, &(0x7f0000000040), 0x8) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.advise\x00', &(0x7f0000000100)=""/50, 0x32) [ 349.541319] FAULT_INJECTION: forcing a failure. [ 349.541319] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 349.553275] CPU: 0 PID: 24924 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 349.560555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.569898] Call Trace: [ 349.572482] dump_stack+0x1b9/0x294 [ 349.576103] ? dump_stack_print_info.cold.2+0x52/0x52 [ 349.581281] ? zap_class+0x720/0x720 [ 349.584989] should_fail.cold.4+0xa/0x1a [ 349.589048] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 349.594159] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 349.599341] ? find_held_lock+0x36/0x1c0 [ 349.603412] ? check_same_owner+0x320/0x320 [ 349.607725] ? rcu_note_context_switch+0x710/0x710 [ 349.612654] ? __might_sleep+0x95/0x190 [ 349.616623] __alloc_pages_nodemask+0x34e/0xd70 [ 349.621281] ? default_file_splice_read+0x1c7/0xad0 [ 349.626285] ? do_splice_to+0x12e/0x190 [ 349.630245] ? splice_direct_to_actor+0x268/0x8d0 [ 349.635079] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 349.640094] ? kasan_check_read+0x11/0x20 [ 349.644229] ? rcu_is_watching+0x85/0x140 [ 349.648365] ? rcu_pm_notify+0xc0/0xc0 [ 349.652252] ? rcu_read_lock_sched_held+0x108/0x120 [ 349.657257] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 349.662787] alloc_pages_current+0x10c/0x210 [ 349.667193] push_pipe+0x400/0x7a0 [ 349.670723] ? __kmalloc_node+0x47/0x70 [ 349.674695] iov_iter_get_pages_alloc+0x84a/0x14e0 [ 349.679613] ? rcu_is_watching+0x85/0x140 [ 349.683755] ? copy_page_to_iter+0xf30/0xf30 [ 349.688156] ? is_bpf_text_address+0xd7/0x170 [ 349.692642] ? kernel_text_address+0x79/0xf0 [ 349.697043] ? __unwind_start+0x166/0x330 [ 349.701185] ? unwind_get_return_address+0x61/0xa0 [ 349.706103] ? __save_stack_trace+0x7e/0xd0 [ 349.710425] ? save_stack+0xa9/0xd0 [ 349.714044] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 349.719051] ? iov_iter_pipe+0xc2/0x2f0 [ 349.723030] default_file_splice_read+0x1c7/0xad0 [ 349.727864] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.733229] ? do_splice_direct+0x400/0x400 [ 349.737538] ? debug_mutex_init+0x1c/0x60 [ 349.741698] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 349.746703] ? __lockdep_init_map+0x105/0x590 [ 349.751184] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 349.755939] ? lockdep_init_map+0x9/0x10 [ 349.759999] ? debug_mutex_init+0x2d/0x60 [ 349.764141] ? __mutex_init+0x1ef/0x280 [ 349.768105] ? __ia32_sys_membarrier+0x150/0x150 [ 349.772850] ? __lockdep_init_map+0x105/0x590 [ 349.777340] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.782861] ? fsnotify+0x415/0xfc0 [ 349.786479] ? fsnotify+0xfc0/0xfc0 [ 349.790093] ? fsnotify_first_mark+0x330/0x330 [ 349.794677] ? security_file_permission+0x1c6/0x240 [ 349.799686] ? rw_verify_area+0x118/0x360 [ 349.803821] ? do_splice_direct+0x400/0x400 [ 349.808136] do_splice_to+0x12e/0x190 [ 349.811932] splice_direct_to_actor+0x268/0x8d0 [ 349.816591] ? pipe_to_sendpage+0x3f0/0x3f0 [ 349.820908] ? do_splice_to+0x190/0x190 [ 349.824875] ? rw_verify_area+0x118/0x360 [ 349.829033] do_splice_direct+0x2cc/0x400 [ 349.833179] ? splice_direct_to_actor+0x8d0/0x8d0 [ 349.838018] ? rw_verify_area+0x118/0x360 [ 349.842161] do_sendfile+0x60f/0xe00 [ 349.845874] ? do_compat_pwritev64+0x1b0/0x1b0 [ 349.850447] ? __might_sleep+0x95/0x190 [ 349.854417] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 349.859944] ? _copy_from_user+0xdf/0x150 [ 349.864083] __x64_sys_sendfile64+0x155/0x240 [ 349.868567] ? __ia32_sys_sendfile+0x290/0x290 [ 349.873137] ? do_syscall_64+0x92/0x800 [ 349.877105] do_syscall_64+0x1b1/0x800 [ 349.880979] ? finish_task_switch+0x1ca/0x810 [ 349.885463] ? syscall_return_slowpath+0x5c0/0x5c0 [ 349.890383] ? syscall_return_slowpath+0x30f/0x5c0 [ 349.895304] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 349.900662] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 349.905497] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.910677] RIP: 0033:0x455979 [ 349.913852] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 349.921549] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 349.928806] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 349.936063] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 349.943318] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 349.950576] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000000a 2018/04/29 21:25:11 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r2, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="aa2de20a3a91040002001300ffb0cd79cd6c2ee61c834aa09330ae69a0b7ceef91dd0f28acc862e459971b"], &(0x7f0000000380)=0xc) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000700)={0x200, 0x6}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="0d0000000000000048463ab2e5372f4e368781b151113c9dffe379b2f8429abc190000000000000000"], 0x39) write$evdev(r2, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:11 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}, 0xfffffffffffff0da, 0x8, 0x9, 0x0, 0x80000000}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e21, 0x10001, @loopback={0x0, 0x1}}}}, &(0x7f00000002c0)=0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f00000000c0)}) 2018/04/29 21:25:11 executing program 1: mkdir(&(0x7f0000a09000)='./file0\x00', 0x160) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00') 2018/04/29 21:25:11 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000000000fa", @ANYRES32=0xffffffff, @ANYBLOB="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"], 0x31b) dup3(r1, r0, 0x0) 2018/04/29 21:25:11 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x264, 0x0) r2 = accept4(r1, &(0x7f0000000040)=@in, &(0x7f0000000100)=0x80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000280)={r3, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f00006edffb)=@file={0x0, './file0\x00'}, 0xa) 2018/04/29 21:25:11 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f000091b000)={0xffffffffffffffff}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) r2 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x4, 0x2000) r3 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000280)={{0x3, 0x1, 0x97, 0x7fff, "9fe28cb1be8f90d2dce1c826f9d264b9364a322ffcd0570619ad089ce7f8b7492eedff31603543c123e586ed", 0x4}, 0x0, 0x0, 0x7, r3, 0x2, 0x40, "c97de8d52fb9c246682ac66725cf31152909e6d0546e662f1a3149e461049f71a1780cd84b470aa4186dc8e61b9e4141a9a0db174e215e40abbae3c8cf687db7", &(0x7f0000000200)='/dev/audio#\x00', 0xc, [], [0x8, 0x6, 0xffffffffffffff0c, 0x7999]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000240)=ANY=[@ANYBLOB="0e00000070bbe3aadd07ebbf0c0006005b108a6722945fa3b38b0000"]) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x119, 0x22, &(0x7f0000c7d000)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f0000fa0ffc)=0xe8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x39d1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r5, 0x1}, &(0x7f0000000180)=0xc) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @local={0xfe, 0x80, [], 0xaa}, 0x0, 0x2, 0x0, 0x500, 0x1f, 0x0, r4}) 2018/04/29 21:25:11 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x100000000805, 0x0) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x80000) listen(r0, 0x800006) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00007dc000)=0x1, 0x4) 2018/04/29 21:25:11 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl(r1, 0x2275, &(0x7f0000fe7000)="0080") r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200300, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x4a4, 0x22, 0x8, 0x70bd27, 0x25dfdbfe, {0x14}, [@typed={0xe8, 0x14, @binary="f7e9662c41f1bff421675e5e3c5eece229aa062d9a7e768f0540af19f383cd6abfaee1b13cfabaec9e345d23709fc06f5dab04d226a7f6f31057e62fbd5023e45546dcafb5fdce014d3252907a47c97a8c5682a345fc0b9ab9f34787aa7b7cdc37985a16de0601c8710a706a48dd51b4476911a5907e242f7fc32563a8ceee66b0ad17065d321cbf79671e728ea2c256461caaed346727ceda96310e5dd7e5582fd0b9339e6adceb87082c52751b83caa630d1aba411b248af7aab34a544108d843b4e646a444667dac2ff0c286088154132733c66322cfa9125be539c5146716f"}, @nested={0x11c, 0x38, [@typed={0x30, 0x60, @binary="c5e6e433456a77f8ff0ab84e1195e7daa4fb477be5259c02655af8f9a21ee526067fbb187dae2b1604a5697d"}, @generic="6640c34fdbd5d55b6257211102b8346dd3778471fa0c0fd0355fe1cc58454d089dc4248dd6276022bbb25cb3232196006c00f780cae7a2d64c7face0b42c4be88db558e4364550e754987420a5728760677f4d3a461becd403db1441f6562f66712576bf35c8e95f2d", @typed={0x8, 0x6b, @fd=r0}, @typed={0x74, 0x0, @binary="711b3b16b89b5a4d4869ab74db81db2ef4ef601d76b2bf2338d85721bf5d7982f85de886fad339662e42870d54aaac32defe9200ff70dcf7a9c84cc3ed80f385110bd58adaa4aad3761863c019964cb8ed4dd3e3bc9fbb077607844ed81676d911024d735c6dcd62b0acd4774c"}]}, @nested={0x168, 0x10, [@generic="322f6848a88bc3d5ca868dc2577c3629391f9c955d305aa84804e66c715be80b8f0a75b4e694da38d0ea3e99f16f89514a4b389b53503904249eefb579d28ae89caa4519506287bf60215fdf282401c32fa957e6e2", @generic="1cbb98945038d4b5bf57230156af821b531d82986a8b8c947239c046c87dd65c6536cea665863a8312cb0e3be2969941e8b09ae16214cbc52f53e179fa186a7db5f409002304c8c446e30d3598b934f6b7d228e71d0701898d9e8ad10309", @generic="68492036e1351da937ba6bb10a64fabe0c681ee26a996b1f92e0986e28ec38daaf210cb208ab5b719290d3c9eb22ca385bebe8f23122fad12b7fa9c11beac34afced08a173a7c13959b29bdf1eeb517276839b863890c06b7461db840fbdefd05bab4c15f3cd7c9ba8890ce86af1da390262a36591dd115cf77af24049c19f1fb51e84036868895b03994931", @generic, @generic="d5db16d4f04294a4e83835898e3f1b3adc8d543a056898276895", @typed={0x8, 0x14, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}]}, @typed={0x14, 0x18, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @nested={0x90, 0x20, [@typed={0x8c, 0x5f, @binary="41ecdfc5ee2fd2e2029939697a828338614b720f070dc5e2a61fd69a2b4f510b586139668880bdf821b344f11843d3f10bdd9ecf94e100697b26934c9d1209950eaae5076a9b0624f1c7624dde02a2de1f60f616e9b306df43274e934b7b59fb7157d04d146c01beda83e8af0dab0c2b097a1b9088f92bba78d34a45cf276ecfb52ecf8e035fcd"}]}, @generic="5171e75f922f01dc8459f55560961a927aabff56208c0c313cb53ed6c5d6b7c4bdf5a21eabdb986260340df1cb524b0e127b22ece6b4143d01a87e4df03b45c69e9ce62a05126b071fabdc4c73fb0b5314ccde9259c47e7324052d8499f0f4760f08d808c951b72a354b85407010fd53e4de5e08fe318c0c37aedbe555cd"]}, 0x4a4}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) 2018/04/29 21:25:12 executing program 7 (fault-call:2 fault-nth:11): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet(0x2, 0xa, 0xfffffffffffffff9) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_dellink={0x28, 0x11, 0x319, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x3}]}]}, 0x28}, 0x1}, 0x0) 2018/04/29 21:25:12 executing program 0: perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$unix(0x1, 0x7, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) listen(r0, 0xfffffffffffffff9) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) 2018/04/29 21:25:12 executing program 1: io_submit(0x0, 0xffffffffffffff03, &(0x7f00003cb000)=[&(0x7f0000a07fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000a57000), 0xfffffffffffffcd7}]) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4558, 0x8001) r1 = open(&(0x7f0000000080)='./file0\x00', 0x200000, 0x120) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x4000, &(0x7f0000000040), 0x0, r1, 0x2}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000240)={0x7, 0x5, 0x6, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}]}) 2018/04/29 21:25:12 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x400000) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x100000000}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0x1}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000001c0)) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000180)={r3, r4}) dup3(r1, r0, 0x0) 2018/04/29 21:25:12 executing program 3: mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0xfffffefffffffffd, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000a54ff8), &(0x7f000022affc)=0x8) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)={0x1000, 0xd8, 0xc2b1, "836faf36c596310881581ed07c961ee78264c90fb88e1364619c715ef40fabf4565b0065cb832f5281e0d0a3d8a800032e330933746bdcaab2a8495ce1b5d050579edfabc8812742d50ce70d519a892dc5ebfed8008afd9e3fe49a0a33f6b5bb4378b136202f7e644aa664b9cdb3abb5f0acf93361e988a0d22784565a3576b4d8f3e968f417f8e68ed1e91f824d04e301ca926c9322f6628721e84937be17da80c0accca34a6c14fa9f121c63907cc97c98be999a5171c8079f9f75d3f5f1913ce29d81566d42a1eb16d27f5009f9f767b88a4a00bc49e88e16a163d2e58830cd3a12538bca394a3c7dbf2072266a22f97b45f3958984394cf678e4687ce7ea8ce0ffef531d0af7e420e25bd235fde49a1ff5527b04451d50c08fb655d46b1aa7e61f84ee2e33791447797511cef5b1e908e1187488ad744ad7fa8c939cf22acefda6346865894594a2faa00699f6c3af9393927532b7a0009cf5014007f174a49bab3b2084a02040da028f81aefb0996a68597f9d9f29c9aa745a7997a7a398a2f4d0a7723f37e9f0ef23bbab657e8eb23b19f3db17e4e808e6c079c979f762428a92645e549dfaca301a81708160b37ba09123e6300bc3f5268f0c305c2058aa024812ffae719968e6b270442a186fc60a8ac2425611ad04fe42eeeeeeedd969a440e1761121581cec85aef2b544e6e47b3ed049c645a2205c9f6eaff23641e28f1b749a787390849a8b3e82efd19829071669ef229e493a6fd944592fa90b5a18575291b1e86d5ead9b4e1475114ec1cfef12b6847f42fe78f8b4e8ca596d5ae70085d19514fb1f2d76358d4c2af7079da8b7c3fb50428722a4457102079325fca5928a63a38f91f6d71985fee73d86daa64ca34e801bdb238f69f2ca25264960b511b292c747d6b4a1d509a7ea86c9463c17553cda526e86ad3f18a07af87cacf792165f3535b679bbda225c564622201a9b1438389c446ae349fccc45a83e8f02941bdc74b62a30b36a36fbab2b184d3866bb79bba411ae4c55c7af77979e6c99dc41d0cefecb96e677bf3d2f0a82907d7310ec39a376a1800180606d40f1b13573871b15ffa35222c8667c89ffdddc18b08ba6f8ed9a8bf7ba8d9bf3afc2012c8d4e19414fa66254e9d3f89614940eb85327303ad9d764dab9a69771f4ffe708abb64b38471ef0801b2b9ae9e111ba20692e2529e4529d63fe040bf4f9070682da8873799240bcdfc7954f5bb9927b1465d6dc48bf889d5c2450379955af8f29992feaefc4837274ac494dd8c5b46af80dac89d764b77f7deba43c44ca613c9cb26fe9861482089716ce74eb6421a5c44abd806f4ef5069dcc5939a69000e5e212d5164c363c6d52fe29ad65a000980ea03345a62f2a84ba5b01da845e2fe8e4aa95f353ac833559f7cb463e29d2a86074e426c8c7d58c10bff1b69f61952504dbc7aee6f3d38122f082f113d8f192d52ba392ef0b16225e531496d533f225ff186efd4051d44cfc3be4960bc9ba4cd36ed35fb6463df94143c8c1d20fc8d4e02e64588847c65d03cd7eeb8e66603eb75271fbfd6893ae5f201d51dcdc603d3ebad1a1b5ae7eddcbf6ede5941df01d70720d26cca3f229f138e73e5aa5d1e9ddb617cf49975d13db60a971866b258e91d02daf2dee3d8c376d66a2bb33acc4f0c9a2b174e6823db50b27df234c5809e450bdb03c1d47265e0818d6180150d7384ebe610ff135cc2013bb40773d7ab722956165321769cbd755b85ed3af10c5b9b132fa8d7cd3cc59c3f2ec614da46bf049e77045c233307462a8363eaac6da3a76d4196c7f419166431c480cb191afb01903f04b2b5eb6cb1fccd8995267f426e1082849194bd98c954ecfc1ed713a9cba921a9161f020a2c3eb5c3d9a364419154fa25e81ed24610070e7dc64903647f11aadfc0ee9465e842ddc3c7017a5a24e6d87eb90bac676c5ac9751bab888edba61da8f403a66985982e185562f1c9abe8b4e7663165703d5218d42feb49a4d04e652a910fc27dd81f81b6676423e3a481b65e64cdebda752f85083dcfddd2e1efecca5d773f63bb9072cc83a52eae47cd427528cca16fde357749faa8c753d0f2af720888e91f0704b54a616bc944042704129c599de6810939114981a08c3563b0a5f44ec51b80df047a6c27a311e60336d94d7daca4742e783aa60408b24f7f733685175df5dbf8cb2e80d9773c2953f40367798b1a4f4cd227899fa66945a26ae57639e06249e7fc32df1d655e522ade5b724975a187e0a1976104296c8fd3c087a340e0dd462c71059618995021faff191cf801c46e17541b52e02ecd155d14c9301c309199b5c71db53d0a7914cb7a23c639d26a27cef8eab3fa2f28b7e1e4184a46c679adca7038d0bd394c8b15d7e9a6f7dfff55c6d7681d6b50980ac4408ce89eb2dedb4b4c53cf40a2c880fb0b47b14b54fed19aeab3ac847c35ce1a390db54a6cb4fe511b22a61946a2b54de648e7dac69f2a9f1d1bfdba54e747de19e2f6741c13bdeb35ed4c15d0ad26617bff0e172a15cefdd23840edc6e91dc206f7adc0e28d260290f850b4778d9d368f7349e2da5f3090ff3e052b4ca0923fa6167904370076d43a0d1995fa427c754a41b3b3ff7ca278ad110d25dd6afcca2f3b7fa551bccb0a448c43cfa8d0d9d169877bbc56440e0aac3d1eb1149ae160feb2cf0765b3c13ba1ea42d1239ddd97e1a55dedb5f9e685b1e6f4c8e6d52235759042c844ffa9dd92d28e183bc07cb106cc371d8dd680bc483681d422b95d35f497d83b5dc842338a9f6998c5747ee243f99794051f39a5c067fe58ce7e6e9da4ff4b58b5da97ffb240159d4e281e8201a03e1abba90716254a0defbd16f11a787857aa589ebfab56857f209df968fd3d7db0e24e924242f472bd29e8b19c132bd8774e7be5a540ca55de6e9c0eb65f372ec34f30c0c39d4b8aa01707487f4ca898fc3202e164e5db61aacf7050c79652426f17eab80ab0e6838eb92130a52d1b3e9078ce7f5ca6f31a39b037c36d32a37cb82c49c5ea4345eb904c81f7504c07ef9fd9b2323cda382d1696ed3deed563662b5a22b40093632a89e83a693f477d58de3e50fee1e3b891035a2639ff0191e7dab869cbe04b74f4d6b784ca943c38a90c17fbd303f2c1df4e1b2443b35c4e1090d9ffcbe0964edc809865dad293ab7316c8269fd401c275a508d2e349e8c16a391ec3dca890ea663a44c50509029b4ce604936874784ff607473c482bc9041e6f37a9ad65971374f0d0b8a7bea989251c63c12add8f95c4b35ff269ada75bdd23cb4d4c8090f476da5aa46a28f06dec792f042e11dec0f2a4e7babc9666949073c2d22c818101d81cffb6b72fe17948b78c2aa7a4409e33995e664891202c2956bb8d9d7d2fdf3308ff9a5486732a513d9ab970c77b3b959f07d91f2ee0bf51d27938e2c23c193d5962367f7d94ecdd6a635b99893aa17cc0842bb7de8a89300bdebaf2768ef4c5b6e1c423032f3c108d2b7434d625d7b8c37f885d9cfec4b366635c0addb02fe09063b605a3b10e1d18f58dc007818190aea4354372b4390961cbc20c2586e8b73e8bdef519bf7903327e1d6cba3b63787e750542b610cfd36973db1425bcaed1ca2900997e2060dc59ccffebe0f0367d0cb545368a01a221b92282facf9ef7941d82de600751a7a636d9a5e44c32d00a142882c3ed2990ab0735d90b443729cde261fdacd70edeec3acc6191d8d70780f8baf91eb56d5f292b061e6dea99b25b5d8210035cbdf9a378d1a133de4784bda2a40d51b4bea2eea06d5a7d0e1305dcada750596bd779bb83d45b9dc89d9ec30dcab3fe16cfd75bf4541b664a70be2f36e2b4d1e4fac91aa8da5d17986aa92e76eda43256a7abf53cd7f15f781b1067044577d9a9a3ed638d189599e416dd46767da0a4db07183a783ba98d546bac0a79e90d758aef0c1847b1caa3f0dd17ec1165c5def7aaa653bc9b49fdb72e2f3a300240997fefbadcea6446de06e69bfdecef6cb3f5cc30f0b65998df822fccb615729017ca3575b8eadfc156fc92149c9cf0652849c8bbe1c4f9b64e7536980b4eda2e8cc6887576b09a9e4e84942e30151eaa2975db2c4e23e37ac728ec4bf751b062b7c73e927b8cec30fcfd7f5e66bb50ebbeabb79b1d6fc51e21c3d2be5f18470f354121aa1c1da49b6c5bce06aac36864e6bf0067ec7e5601dc1ec975bbc3c382e3e08f188ee81ffcc0a6e8a4588e9c2a46f2102320d53577db46789db22d11412ba680f8e98ff647b9dab4b1b06fde64a5b969f4c0ddc6fb57d6fe5337a8adfd1e39c7e4829dd4d433c7f5e76c8fa4a0ec00141f17f602a44132e4a2cdcdd688c90d34ba337f31d01f238ee6f2b9b860dc9743a3203f476f248e35c72c60a2f4106503ea49e6431a9f6003bf7b5b4bb502cb033fd784adece6dde44952287be57ee7c3ccee5fe265708ad8af1780541ce49c955bdee98cafc30b3265f85a15b72849d6b7861b22cf5bb75f6958ad96e7ecb96a604c9e0ee7009bf5137be89ab1f20f525ed1f615a96a5394dcd2879a0afc5fd2cdb252f7b0e0a4849ce80bc1143bf49deda1b8e0e8dab4264a6d75bce2375040b94395068de65a594402da9f9f8604ebb49cf276695523cb3540563b62f5e9496e9857ea7355cde0905f57bf37d07c322578953863c4f574c261015cac13ed1123d9d7b93a1fa386251e4e437584e6ca2fc7f154193dabdc1319bb7208de70b929f70a7190483b33f6eb373092097f85a73039d4e0543a6c7b3ea90147d0187e3e63848fd06e0b0d0e396468c140f2d71b87894e51dcc3f5d15bb7ee59dc288d178889a9e01d9eb912e019c1ed9bd457724643306ab6aaa73052e7c7c9adf579c76de0b302518a84167fcb3dadb1222f234a2c6065e392af91b06b4dc2fbbacb3422caac641ea1ec9f2bacb527d185d4487d4cf0463475d2b5b107b6ea8a1621ec108532a711c6001d9b1ed774aa75e3bc452fc5038a65b8bf0052c55d4a3e9f09236110972d28e12a4d876671a41694658c3cf357cf24d38a54c8bba5f6d0e31fa3cf9615828e6a30852483408da3069f0bf8d379e00847deb4ba798a67950aea04fd692f60b5488e402afd9dae5e69a3b9ee522a6bfcede365c99cd54b73744584f6352cb7528ea424eca61f8197fd00db3759c39864f3799ddd0455c25511ee11892d8f83c166c39e313fb76710e3c196b959c903ac85accb99799d85df7778b18eb254f9ec71d391f5dcd82fb1e0c3adb1fa5363554aff71cb804078b46107a8f8184643c8dc01ba2c51cba9be86b99404301ceef75104207fc99ac467e1b33209fcb35166dacb10c7bedf3360cea70733548d5f703059ca3105c42e15d6305a5417c69e7f7934a79a03b86d9d9c70ff390a7bebc204b4b2e89262d076e346b784ecd4fb54c0bb9616ddf69994be85d884b770c9a8d8d8a54207ba91cd5c49341185b9d4394c49b8535a008f5349a6dc7b66bf522bea88e57c8df286f7cd02faa461a7f84c8d4d3b24006c527e98eddabd5af9212b14efa58198ba0d92bad6d7947278661f8911c8e153893c8c84d9e065a36a3a60d4807e103a1e28203adbcc084aa20436a271e4fc2b831d0a86a8b1866f068f6667b07c933cacf0adef43483d82685e70638364da8dc13250cfe990f649f50a389937b9a9862ef437d50f433de44ebba80a311de26d656f1bd927f76274b25ef8972db2d8906cd4ad273c87bb36a618e387b02408dfb6e65d38215cbabafb594d112aa0f4"}) 2018/04/29 21:25:12 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00008b4ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x10000, 0x10202) connect$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @host=0x2}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184908, &(0x7f0000000100)) 2018/04/29 21:25:12 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r2, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="aa2de20a3a91040002001300ffb0cd79cd6c2ee61c834aa09330ae69a0b7ceef91dd0f28acc862e459971b"], &(0x7f0000000380)=0xc) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000700)={0x200, 0x6}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$evdev(r2, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) [ 350.975584] FAULT_INJECTION: forcing a failure. [ 350.975584] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 350.987511] CPU: 1 PID: 24993 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 350.994791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.004153] Call Trace: [ 351.006752] dump_stack+0x1b9/0x294 [ 351.010391] ? dump_stack_print_info.cold.2+0x52/0x52 [ 351.015585] ? find_held_lock+0x36/0x1c0 [ 351.019655] should_fail.cold.4+0xa/0x1a 2018/04/29 21:25:12 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f000076c000)='pagemap\x00') lseek(r0, 0x0, 0x0) getpeername$llc(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10) [ 351.023721] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 351.028836] ? kasan_check_read+0x11/0x20 [ 351.032995] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 351.038190] ? find_held_lock+0x36/0x1c0 [ 351.042275] ? check_same_owner+0x320/0x320 [ 351.046610] ? rcu_note_context_switch+0x710/0x710 [ 351.051556] ? __might_sleep+0x95/0x190 [ 351.055632] __alloc_pages_nodemask+0x34e/0xd70 [ 351.060309] ? default_file_splice_read+0x1c7/0xad0 [ 351.065334] ? do_splice_to+0x12e/0x190 [ 351.069313] ? splice_direct_to_actor+0x268/0x8d0 2018/04/29 21:25:12 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000f7db7f), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback=0x7f000001}, 0x10) readv(r0, &(0x7f0000000000)=[{&(0x7f0000dd0fe6)=""/26, 0x1a}], 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x0, @broadcast=0xffffffff, 0x4e22, 0x0, 'none\x00', 0x2d, 0x10001, 0x29}, {@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e24, 0x0, 0x9, 0xf70000, 0xfffffffffffffffd}}, 0x44) 2018/04/29 21:25:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14}}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000180)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="09000700770d010000000000000080ff0000"], &(0x7f0000000080)=0x16) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r2, 0x7fffffff, 0x200000000000000, 0x6, 0xb16, 0x69}, &(0x7f0000000140)=0x14) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) [ 351.074168] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 351.079201] ? kasan_check_read+0x11/0x20 [ 351.083354] ? rcu_is_watching+0x85/0x140 [ 351.087507] ? rcu_pm_notify+0xc0/0xc0 [ 351.091409] ? rcu_read_lock_sched_held+0x108/0x120 [ 351.096436] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 351.101987] alloc_pages_current+0x10c/0x210 [ 351.106404] push_pipe+0x400/0x7a0 [ 351.109954] ? __kmalloc_node+0x47/0x70 [ 351.113944] iov_iter_get_pages_alloc+0x84a/0x14e0 [ 351.118884] ? rcu_is_watching+0x85/0x140 [ 351.123042] ? copy_page_to_iter+0xf30/0xf30 [ 351.127471] ? is_bpf_text_address+0xd7/0x170 [ 351.131974] ? kernel_text_address+0x79/0xf0 [ 351.136390] ? __unwind_start+0x166/0x330 [ 351.140549] ? unwind_get_return_address+0x61/0xa0 [ 351.145488] ? __save_stack_trace+0x7e/0xd0 [ 351.149833] ? save_stack+0xa9/0xd0 [ 351.153465] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 351.158475] ? iov_iter_pipe+0xc2/0x2f0 [ 351.162444] default_file_splice_read+0x1c7/0xad0 [ 351.167276] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.172641] ? do_splice_direct+0x400/0x400 [ 351.176949] ? kasan_check_read+0x11/0x20 [ 351.181084] ? debug_mutex_init+0x1c/0x60 [ 351.185220] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 351.190224] ? __lockdep_init_map+0x105/0x590 [ 351.194707] ? lockdep_init_map+0x9/0x10 [ 351.198751] ? debug_mutex_init+0x2d/0x60 [ 351.202884] ? __mutex_init+0x1ef/0x280 [ 351.206858] ? __ia32_sys_membarrier+0x150/0x150 [ 351.211599] ? __lockdep_init_map+0x105/0x590 [ 351.216089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.221610] ? fsnotify+0x415/0xfc0 [ 351.225230] ? fsnotify+0xfc0/0xfc0 [ 351.228843] ? fsnotify_first_mark+0x330/0x330 [ 351.233423] ? security_file_permission+0x1c6/0x240 [ 351.238449] ? rw_verify_area+0x118/0x360 [ 351.242585] ? do_splice_direct+0x400/0x400 [ 351.246894] do_splice_to+0x12e/0x190 [ 351.250684] splice_direct_to_actor+0x268/0x8d0 [ 351.255345] ? pipe_to_sendpage+0x3f0/0x3f0 [ 351.259656] ? do_splice_to+0x190/0x190 [ 351.263618] ? rw_verify_area+0x118/0x360 [ 351.267755] do_splice_direct+0x2cc/0x400 [ 351.271892] ? splice_direct_to_actor+0x8d0/0x8d0 [ 351.276728] ? rw_verify_area+0x118/0x360 [ 351.280863] do_sendfile+0x60f/0xe00 [ 351.284571] ? do_compat_pwritev64+0x1b0/0x1b0 [ 351.289142] ? __might_sleep+0x95/0x190 [ 351.293112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 351.298635] ? _copy_from_user+0xdf/0x150 [ 351.302774] __x64_sys_sendfile64+0x155/0x240 [ 351.307260] ? __ia32_sys_sendfile+0x290/0x290 [ 351.311833] ? do_syscall_64+0x92/0x800 [ 351.315801] do_syscall_64+0x1b1/0x800 [ 351.319674] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 351.324503] ? syscall_return_slowpath+0x5c0/0x5c0 [ 351.329422] ? syscall_return_slowpath+0x30f/0x5c0 [ 351.334345] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 351.339702] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 351.344535] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.349710] RIP: 0033:0x455979 [ 351.352883] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 351.360578] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 351.367832] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 2018/04/29 21:25:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x3a99906d) getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') sendfile(r1, r0, &(0x7f0000000140), 0x80040000110) 2018/04/29 21:25:12 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000700)={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, {}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'vlan0\x00'}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x9, 0xffffffffffffffff, 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f0000000040)) open$dir(&(0x7f000001bff4)='./file0/bus\x00', 0x88040, 0x0) mount(&(0x7f0000033ff4)='./file0/bus\x00', &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) open(&(0x7f00000002c0)='./file0/bus\x00', 0x40, 0x0) [ 351.375087] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 351.382344] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 351.389598] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000000b 2018/04/29 21:25:13 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000200)={0x2, 0x0, [{}, {}]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r2, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) r4 = dup3(r3, r2, 0x0) dup3(r0, r4, 0x80000) getsockopt$inet_buf(r4, 0x0, 0x23, &(0x7f0000000040)=""/166, &(0x7f0000000180)=0xa6) 2018/04/29 21:25:13 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x4000) sendfile(r0, r1, &(0x7f0000000000), 0x101f7fffd) 2018/04/29 21:25:13 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x80000000004) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000040)=""/8) write(r1, &(0x7f000058bfe4)="29000000140003b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) 2018/04/29 21:25:13 executing program 7 (fault-call:2 fault-nth:12): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:13 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r2, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="aa2de20a3a91040002001300ffb0cd79cd6c2ee61c834aa09330ae69a0b7ceef91dd0f28acc862e459971b"], &(0x7f0000000380)=0xc) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000700)={0x200, 0x6}) write$evdev(r2, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:13 executing program 0: msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000b6e4ef7e25b7c6e557f973a2a6604cd3a38a664aac8ca95fdc3d46968be094602c4d63aa6e02ee33d503f7c44299d1fe45e8762ac8ffe01db04f895fbb5d939dce32b5eb0ed26e0a8be0fcce2a315f7fc0e15437a433052f39ec229d884a0118ffb417f53a57f83a915eeffa8e09834189969d3f05df9d832fca7d5dedc6cf0063607f5896dbd00f3fcefc917c94fb288c64b563bdf3ae000000000000000000000000000000000000000000000000"], 0x8, 0x0) msgrcv(0x0, &(0x7f0000001700)={0x0, ""/144}, 0x98, 0x3, 0x2800) 2018/04/29 21:25:13 executing program 3: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) mq_timedreceive(r0, &(0x7f000009d000)=""/224, 0xe0, 0x0, &(0x7f0000e6eff8)={0x77359400}) setpriority(0x0, 0x0, 0x8) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000c04f55)=""/171, 0xab, 0x0, &(0x7f0000f76000)={r1, r2+10000000}) mq_timedreceive(r0, &(0x7f0000a2e000)=""/40, 0x28, 0x0, &(0x7f0000b6bff0)) 2018/04/29 21:25:13 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r1, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r2, r1, 0x0) accept4(r0, 0x0, &(0x7f0000000040), 0x80000) prctl$seccomp(0x16, 0x2, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x9, 0x4, 0xffffffff, 0x3}, {0x8, 0x6ea8, 0x2, 0x9}, {0x2, 0x5, 0x56, 0x51}, {0x6, 0x4, 0x8001, 0x3}]}) 2018/04/29 21:25:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x800, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000380)=0x101) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x49}]}) socketpair$inet(0x2, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000140)={@local={0xac, 0x14, 0x14, 0xaa}, @broadcast=0xffffffff, 0x0, 0x2, [@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}]}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x3, 0x0, [{0xda7ccdb8869071e9}, {0xb77, 0x0, 0x7fffffff}, {0x400008f7}]}) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000180)={0x9, {{0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0x16}, 0x7415}}, {{0xa, 0x4e24, 0x7, @empty, 0x8}}}, 0x108) accept$packet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001740)=0x14) sendmsg$can_raw(r5, &(0x7f0000001880)={&(0x7f0000001780)={0x1d, r7}, 0x10, &(0x7f0000001840)={&(0x7f00000017c0)=@canfd={{0x0, 0x3, 0x7, 0xab3}, 0x16, 0x1, 0x0, 0x0, "b868ae36e5fa0fb0b702d6b065373e0d57f2e5d687fb836c339cc29bf3c10e0a578192b62041a890ae61126ed7fde0b051984655bd5d0fbe5284de798db8d425"}, 0x48}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000) ioctl$sock_SIOCGIFCONF(r6, 0x8910, &(0x7f00000002c0)) 2018/04/29 21:25:13 executing program 1: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x20, 0x1, 0x1d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000880], 0x0, &(0x7f00000000c0), &(0x7f0000000880)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000090000000000000000006772657461703000000000000000000065716c000000000000000000000000006263736630000000000000000000000900000000000000000000000000000000aaaaaaaaaaaa000000000000000000000000000000000000000070000000f000000040010000434c415353494659000000000000000000000000000000000000000000000000080000000000000000000000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000004c45440000000000000000000000000000040000000000000000000000000000280000000000000073797a31000000000002000000000000000000000000000000000000000000000000000000000000"]}, 0x248) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x1, 0x200, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'nr0\x00', 'irlan0\x00', "73797a80616c6cf58400", 'eql\x00', @link_local={0x1, 0x80, 0xc2}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x108, 0x140}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x278) r1 = dup(r0) sendto$unix(r1, &(0x7f0000000400)="9727235197e813389ea4b239b439e95431be914bfbbda863a92e797247d36957f989db30f8e66323152f34399f43f280b37979b9175dbbe656c77190339347a8e579d883f91fc35e40a547e9f8836e54691bbeea5366ae8762f57e536a51d9a66f9c174dd266d12501d85bfa1b2969bc33a8e98d92375917f742c1741d878d1610add022b8cbd73a8ac69c6c889f2d54eac05a48f1fb16d90a89858960dcd928f29415bc45dd9913111b8859de282581ca9c6372563070d6e7f776c46687ae16397f92577dcf5a85d7eca64f87231b9057193209c2482fa20a17d63fc2", 0xdd, 0x85, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x5, 0x30, 0x8, 0x7}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r2, 0x3a5}, &(0x7f0000000140)=0x8) 2018/04/29 21:25:13 executing program 6: r0 = gettid() exit(0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2000, 0x0) setpriority(0x0, r0, 0x0) [ 352.175417] FAULT_INJECTION: forcing a failure. [ 352.175417] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 352.187324] CPU: 0 PID: 25064 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 352.194600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.203956] Call Trace: [ 352.206557] dump_stack+0x1b9/0x294 [ 352.210199] ? dump_stack_print_info.cold.2+0x52/0x52 [ 352.215403] ? find_held_lock+0x36/0x1c0 [ 352.219485] should_fail.cold.4+0xa/0x1a 2018/04/29 21:25:13 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000013ffc), 0x0) 2018/04/29 21:25:13 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000ac3000)=@raw, &(0x7f0000000080)="47505d04", 0x8017, 0x31, &(0x7f00000000c0)=""/103, 0x0, 0x3}, 0x48) poll(&(0x7f0000000200)=[{r0, 0x8000}, {r0, 0x10}, {r0, 0x60}, {r0, 0x80}, {r0, 0x80}, {r0}, {r0, 0x84}, {r0, 0x308}, {r0, 0x10}, {r0, 0x40}], 0xa, 0x9) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, &(0x7f00000001c0)=ANY=[], &(0x7f000000a000)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000011f3d)=""/195}, 0x48) r2 = dup(r1) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000280)) socket$l2tp(0x18, 0x1, 0x1) [ 352.223557] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 352.228672] ? kasan_check_read+0x11/0x20 [ 352.232826] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 352.238024] ? find_held_lock+0x36/0x1c0 [ 352.242112] ? check_same_owner+0x320/0x320 [ 352.246447] ? rcu_note_context_switch+0x710/0x710 [ 352.251394] ? __might_sleep+0x95/0x190 [ 352.255380] __alloc_pages_nodemask+0x34e/0xd70 [ 352.260059] ? default_file_splice_read+0x1c7/0xad0 [ 352.265082] ? do_splice_to+0x12e/0x190 [ 352.269061] ? splice_direct_to_actor+0x268/0x8d0 [ 352.273917] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 352.278950] ? kasan_check_read+0x11/0x20 [ 352.283107] ? rcu_is_watching+0x85/0x140 [ 352.287263] ? rcu_pm_notify+0xc0/0xc0 [ 352.291171] ? rcu_read_lock_sched_held+0x108/0x120 [ 352.296201] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 352.301751] alloc_pages_current+0x10c/0x210 [ 352.303279] binder: 25080:25081 ioctl 8004ae98 20000280 returned -22 [ 352.306164] push_pipe+0x400/0x7a0 [ 352.306182] ? __kmalloc_node+0x47/0x70 [ 352.306205] iov_iter_get_pages_alloc+0x84a/0x14e0 2018/04/29 21:25:13 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x4a003, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f0000f65000)=[{&(0x7f000024ffb9)="80fd0f883b16", 0x6}], 0x1, 0x0) [ 352.306223] ? rcu_is_watching+0x85/0x140 [ 352.306242] ? copy_page_to_iter+0xf30/0xf30 [ 352.306260] ? is_bpf_text_address+0xd7/0x170 [ 352.306279] ? kernel_text_address+0x79/0xf0 [ 352.342547] ? __unwind_start+0x166/0x330 [ 352.346703] ? unwind_get_return_address+0x61/0xa0 [ 352.346885] binder: 25080:25083 ioctl 8004ae98 20000280 returned -22 [ 352.351628] ? __save_stack_trace+0x7e/0xd0 [ 352.351654] ? save_stack+0xa9/0xd0 [ 352.351670] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 352.351685] ? iov_iter_pipe+0xc2/0x2f0 2018/04/29 21:25:13 executing program 1: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) r3 = accept$inet(0xffffffffffffffff, &(0x7f00000036c0)={0x0, 0x0, @multicast1}, &(0x7f0000003700)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fanotify_init(0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000003740)='/dev/snd/pcmC#D#p\x00', 0x5, 0x20000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000003780)=0x0) r8 = getuid() r9 = getgid() r10 = fcntl$getown(0xffffffffffffffff, 0x9) fstat(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003840)={0x0, 0x0, 0x0}, &(0x7f0000003880)=0xc) r13 = getpid() r14 = geteuid() getgroups(0x7, &(0x7f00000038c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) r16 = syz_open_procfs$namespace(0x0, &(0x7f0000003900)='ns/cgroup\x00') r17 = syz_open_dev$sndmidi(&(0x7f0000003940)='/dev/snd/midiC#D#\x00', 0x2, 0x40000) r18 = openat$vcs(0xffffffffffffff9c, &(0x7f0000003980)='/dev/vcs\x00', 0x80000, 0x0) r19 = accept$netrom(0xffffffffffffffff, &(0x7f00000039c0)=@full, &(0x7f0000003a40)=0x48) r20 = accept4$llc(0xffffffffffffff9c, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000003ac0)=0x10, 0x800) r21 = bpf$PROG_LOAD(0x5, &(0x7f0000003c40)={0xf, 0xd, &(0x7f0000003b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3fd, 0x0, 0x0, 0x0, 0x3}, [@exit={0x95}, @exit={0x95}, @jmp={0x5, 0x5, 0xf, 0x3, 0x8, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x16}, @alu={0x4, 0x40, 0xf, 0x9, 0x7, 0xffffffff, 0x10}], {0x95}}, &(0x7f0000003b80)='GPL\x00', 0x0, 0x6d, &(0x7f0000003bc0)=""/109, 0x41100, 0x1}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003cc0)={0x0}, &(0x7f0000003d00)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003d40)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000003e40)=0xe8) stat(&(0x7f0000003e80)='./file0\x00', &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r25 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003f40)='/dev/hwrng\x00', 0xc0300, 0x0) r26 = socket$inet(0x2, 0x5, 0xfff) [ 352.351705] default_file_splice_read+0x1c7/0xad0 [ 352.351720] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.351742] ? do_splice_direct+0x400/0x400 [ 352.351760] ? kasan_check_read+0x11/0x20 [ 352.393713] ? debug_mutex_init+0x1c/0x60 [ 352.397868] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 352.402890] ? __lockdep_init_map+0x105/0x590 [ 352.407391] ? lockdep_init_map+0x9/0x10 [ 352.411459] ? debug_mutex_init+0x2d/0x60 [ 352.415610] ? __mutex_init+0x1ef/0x280 [ 352.419587] ? __ia32_sys_membarrier+0x150/0x150 [ 352.424341] ? __lockdep_init_map+0x105/0x590 [ 352.428835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.434358] ? fsnotify+0x415/0xfc0 [ 352.437972] ? fsnotify+0xfc0/0xfc0 [ 352.441585] ? fsnotify_first_mark+0x330/0x330 [ 352.446158] ? security_file_permission+0x1c6/0x240 [ 352.451162] ? rw_verify_area+0x118/0x360 [ 352.455296] ? do_splice_direct+0x400/0x400 [ 352.459603] do_splice_to+0x12e/0x190 [ 352.463392] splice_direct_to_actor+0x268/0x8d0 [ 352.468045] ? pipe_to_sendpage+0x3f0/0x3f0 [ 352.472351] ? do_splice_to+0x190/0x190 [ 352.476308] ? rw_verify_area+0x118/0x360 [ 352.480443] do_splice_direct+0x2cc/0x400 [ 352.484578] ? splice_direct_to_actor+0x8d0/0x8d0 [ 352.489408] ? rw_verify_area+0x118/0x360 [ 352.493541] do_sendfile+0x60f/0xe00 [ 352.497243] ? do_compat_pwritev64+0x1b0/0x1b0 [ 352.501807] ? __might_sleep+0x95/0x190 [ 352.505770] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 352.511290] ? _copy_from_user+0xdf/0x150 [ 352.515423] __x64_sys_sendfile64+0x155/0x240 [ 352.519903] ? __ia32_sys_sendfile+0x290/0x290 [ 352.524473] ? do_syscall_64+0x92/0x800 [ 352.528437] do_syscall_64+0x1b1/0x800 [ 352.532305] ? finish_task_switch+0x1ca/0x810 [ 352.536783] ? syscall_return_slowpath+0x5c0/0x5c0 [ 352.541695] ? syscall_return_slowpath+0x30f/0x5c0 [ 352.546611] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 352.551959] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.556786] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.561955] RIP: 0033:0x455979 [ 352.565124] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 sendmsg$unix(r0, &(0x7f0000004080)={&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003600)=[{&(0x7f00000002c0)="828b041ca406dab69f88230229db", 0xe}, {&(0x7f0000000300)="4cfe99", 0x3}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="6076d3de87feb58fc18ccc88fd161d584b5e1db9c101b1381ac5644b10dde7c8eb683f868f9df402cfe5b5ffc804de9767e6c54d0f2878991eb4ab6a22ad06e1c908a84981a3cb95368c8b3e24d6c0b0429a2cc99e50cb3b863f754c9f07889e6379ebd313090221762ab85b0f", 0x6d}, {&(0x7f00000013c0)="9175681400089048cbbc17b3ca16d124ec15fbaa182c76b47959a646d2d4c8af1656f34429be71ca55ec0777e5b55fbf80900e7990a58b7eeb5e19ae02365ef6b9b5eb14178fcc287675c8ad6f5efec2dd959674fc3b671e1ec63412b49cb3a4b624163f2a93f356e395e69eb673c5626450f9bc4b1b539f2d355815cb4fdfbff0db40a4d41f4b311478f2e3b6ac6859df50ae1962d4e3599b1426c0355438baf93a05eb0083ee4dd15cc8192ada1978a533c03c107b5036c0704f003ef28cf24cad8e68c412cc83f2e7", 0xca}, {&(0x7f00000014c0)="959a99d178a401cb4757e2750b0a742615831c077667359c50f904149d3ec0499adb7c0e9d7148ebcf54d9e7a007950728800f58973e18066dddb7f5d881fac12f77032b", 0x44}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="784f909e7aeecb481beec371bedcbff6e019bfa2c759e78563642d5efc660b0ed96fd3b9f6357ce774e08a39c7e2f6535230d28c20d900dadaa027248653e5adce5e4cf72b2319b7114e527413fa8808ceaa72f6d1a6589cbae6a9d8f40fb76e8320814041828a4a36687168b79b52036527eb8f00f1df8916a8f04ce77d5fbd3db5341b186b1c2f8c3eb2be8bcd581aa1a9e2a90079784aa6ff99fad95b4c813615d33d83857e5399899ecf453ae0fcc23bd074a5dd7eae63a044b73615fc27fa5da3add05b38e5ecfb7217d16b4632c4c9c7a266b59fa3f68b467b1365389476507618e56db29e435589dbec2c1fc4026e2b7fda7564210ee883ceb61cf70e1dc3d7a8856539c9f86a1024f5f8f95539f35b04655dc7b22a3c5a620015bbe8cafdaea05f7a9f0f2f597866d1ee5c74827f47203e8fc2220d749428ee992d1652df65115b1df01a40c349cc93dfc29d6a67cf839fa709ec4fc83b7a7d21b61ecd2582245894e9e6ffe55137eb2659ad3d60ce4fff38bac72f203686be3a6aeea07c4608eeee36e1a034a06d4c252769b86db8efccfd6b536bb50502e085a5e6a24bcf22576d7098607a491a6f05463fd19674d0bb867aacd42287bddd1bd3c1a4633bebb6753003a618e4f30238f544c960529603748cf35e46f1dba382bbc8875f3151934575956bbb33f17ba7d31f67a4738487c42e42f53c50398a1ba46af1f49d1d22fb58e633019a6ad9cd476ae0634fe388894bfffec048aa89f03a50db06294ef508928c96fc914d35b7bf811bcc6cb4b84410f93a1c75b863791377935999c384210a105d630f60fe9eacc64a1aa57d85f24b52ac16e32ae710a63aedfb054a726bf025db123afa573d1797388cc84a7e3f1a4c4a2c434e9ef734321c101ac4857b1f2ea7ba59fd69b48ebd1e720966e2eec91081c75826c132d2f6c80565e312e6b57da2bd2a18fd698d74901441a0c8af0a2a7f09523e292773c96053d6b65345d1b015468b3f58301f39e98ff23bdc95ff47ab9764cc7161f532fafd7c6a021fa4183210057ca9fb9d5d71690932cb0c8f1c9505b50c4cc82909353be1f6090617c7cb930c96736b1867a6c26843fba0aabc8678b9d17fd5f441c784101f3fc16f38fa71d71a16cf23fe19a3a8900395ac8918dc78a5b26e4c35d291e452216be2544fc4f862e5823e16e5bed97438e84319f9e031c57cf6adca8921c32ae2bfbc44bcbc3ad823e065df2d48006ba73a1e1b6235753b0f1325e294e62d28c51e4f49a6c393143cfa6cb6b264305853489e2ca23ce2479796cae09c83836584d2090ad4ca93ec0683cf3d5d9788058b1cd20445de38a839b4885b9a13399a34b1950a10d1403d6483d4b02a2ea3d5ee0d0d00d04bcd4979c31ebfb62f98e02a13779f7b4b04b1f198cbaea0b2ed49686d730fce3713e6024ee23fa8408c60a03ba4f096de1f25129308fb9faa0b9c7d83b2ecea5351e9b1472cbccae1ad1fb82ba351d46b6cbc09751abda21a1a1494cbb4ce7fec4d7b9cd198aa5e4bf43bd6792a18454bcdf34c858eb3d945156c1750add890a0fd827e8aed2f0b83dbfb7090ce761a944a0a93c3608d2dd9054cb42ebebb040467c4c95e3041e55796f6733ac6b417f382abf2cf9440ae019ae66cd5178a661c7cf68e5072ff104b27b5795e58fc8fb19ce1e6445c15fb42010858cf24b520b7f47bfcadbebd3863e1fb707b41ad1780d88fe5514bc0e7625db8da4ffee037531fde3599b5f1c144f328510e3cb4bb2a4936fe08803d32bf967acff324f866d472c6e3c48f93b30595ff2f1dea15cdf950104f8fc37254eae05410ab6623f9e81c494d855d684e75605fe24f34c7327692aa1ad180164cbd1d8ab4b7724fe93937dd1dffa714bb1e841c3338e4e6de8469f7763a2e0914677ec0486695c01dfb581abc768fc3eebb3c1f722e17796c9d3671ed96f193f273c6d79c1a4c55efd465cae0870528113ef8440d2366b92cdb1e7d94ec5c4ae48ee89a8b20c4de908f98351a3f0467d29354bc524f29664e5e7e6179cc6757beeac0609dbc7752dcc17618d7930ee637be6de4c71413e0725b90185b618dec0539ce89358f97a4e38dbbe8a20b33e0a6158a22d62999a5a3ca685bd9a1506855f29d4670f03adef09d72e0ccc9e81dc1b5241a4cd9fdf8c2fac17849b301ed2b3c0b211c022130f305a18ac4d8ea5d858d841505a5b576f43a2681cc22368797f14b4e6def4f051300c00c6d38913646e59e479d2b57ee9aedeb2976e9ae48c7a967ec8aa647b31ef26a6c465979d749a0c71ffbec562c9f3d216aaec5712f6dfa58baa3251b02ccbd86e7b91a52bc74a0937f023f6c21c05c906e3ffa45a7422c528d10c1f1e5a67a56bb4f2d96ba96d9cabe13b6380a2a5e83e5bba9f2deade7ff6c0c0027ba064ce1fcec66fc72da9ae530f06c3392e627cc09dc37213cbf3c0a211286d017e5d92059768ca373449c2f42c3fb43af976638aeb7374be2e241fcf7f8eeb4ffc220c0f7ac4ba160b37ca717a5c9ecca908c7e582529dee360c2be7de9718f1eb0b775bd2508703a500d377b9d5db039b0cc9587dc0f98d2bfe3465e640486ecca14195c1a8213f8cc8a1a9d5ca9a40b2f5c37be14ee75c3f6dc5f6d3ac124bdc30db4ceed067d614e5da8970975bc15ac6f03bafb09cbcdc12af4d7ca62105015bc866eef0b2dbfa5cd593b09d7ed4e785e67a0b939319f79912a4837758f555bf839ae6ee70f01c5c64886c5f5a8d06a0f71cdf57e36aa2215991224a97656058278405b4a6ce19aea07729b237993573dbecf93ddfaeee6a071824b3dc223674cf1ac91e160337bb8811745793ffcf30456b546d3d788012c36ba6288dad43f309c53edbc9f1d7536fd4e462155035e41823ac313a35f4a73dc45d41d1cc98c07a556ec341015a1cda68691fc51017a41cfd11fb3f576741e966c0b340193c66cb5389210f03ee849061c88fdaa2ab73370f3fd6aea69ea69d18b8e978894a9a13d0487fc0c37791bf6ac4738bae6b88485fd82eff3a89e597ec4992ba5b01a4df9c792e666515b453ffa7d80d9058b3b3d53902692c4b1f01cc62b59dd004e386bd5d94b70778417d9c7748e6329434621b0971c2fd6aa2db3d22d0da8c7c3d47bb7266f55804be93495ff7bd5159326ec2605cc79dadcf3a4ab97b6264551de2577eae6996f8e792073c2b75f827ff7bb31a7d788a35fce4691d9375ee5774ac0a6e2dd8e6d61cceb4a709b920532c31557fcdf9a4c0575a2094e6edc5c503f3d6ea1bf867df930a4cdb108b003f05911828e0d71d052acefb80c611437db9b9a455dc2263913a3605a684ee399faff1a6c6fddf2d27fe441fe0a3cfd6c4a772b1c3e9ecb9ee5928076557b62182128fa622d66e06df93798e01ed6576a9e2e41ab06f32a43b5d6d51b224964567cafd4d6d72bb92534a1a4a4ff036da41aa49758d6a41e5f4fcc8e7970cf640c5c85f780c44f0e6754e4841489984c2737f7150fb6147e7d3353c4bc47e9225436c68f77c0f23c17aa3fc1fff710ccead21a94dc32338c1ea8362ead8384049ea4b87fdeb11b851301b9c157e9510cba7bb9a52918b6d94e6aa8540b878207c8f5e818b5241988b082fbde10f3e7f19787ab0371a169c135360de73e2dc80233990e0fd14c9bae6d1e6bb3ef0b732b174fe205a363ee40ec89d4c435314b5e073b3251e118354a2766495dc3e2432322c9965207280efb68097d3287205f405cadccb2ee30e2fd1612c2d754947144ef20c77ee6973e7c823a9fbd2add70d8d2ac6dff605efb6a9e624c43e04f24dd2bc331e766e6c769a16f3abd2ca2a92d24d78a9795c3c10d08c820571d11f8640dae99897e7cd08687824b90cb4d437e04abbcf597feaabd1dd6b2185ee8ed993da1308d225e2644975dea393e7fd11657260f6e2502c5f83e0fc5fd5907608553d70f8d58292293092ada8135e54d7b50019c6a3d45488d837c1d7a81192f49ca9d719f3e247999d399b790de8bc8fc85be73d2093e1b439d28dbb87ff4530d5312be86f9b7e50b3de63edf75a76bf6ab0e0a13ad7aec92a0bacf669d6c9031d551fbd833bea6a2acf35193ce5e744856e5dfed4fe7c35b01ddac8681f6fcbb909beb3a53aeb65ff747b690895c4474354831490cf3080ecf2e2a58ca8bf1a7b36d47b35d2384357d42c3a6ab2f33bed72bdd9e5744d89ae986b139c869a015789c02a6d6338e60f39b4897ac9874118636a8fcb7e55c3e7fbf1b2baea2a4ae1d32ed68fb8b29ed72f3abcd3ba84d4416ed7606654d184c7839018f3942ed7530fbbe6745c92024470a9e3e6d296b6de2d8ce8f51a83889e7edafee0acd3174b24716ac2152c4c5c0d741dac26b3c8380912de86031619144135bb688ef57b3cea0524f053cca3aecd457883b04f8f2b20c919c38153cf80cf6a895c8c7b3257265b4342c63533bfc480fdbed20745926be69b1fc4d465725a7d26187b54f0cd002e9508fb8a9f9910fc5eab449f930549fabbc86ef5c247e62faa69cfd885bc4174dd4adfb34f597a3f25f8a15eaf9e3e5be28cc926eac9bc7a08688ef5256886d7ee4c7664040a366b9385928aafcc2444ef1d7b831a572b5729d2b1edc63314db48f93f561df791f7d45081e7a775a8a324ec7f7f5c850bf368b1d6085780747d5dded2db7babcb3f72e31e270114dba93532b06d629ec6762bb50658d791b7b624d0c222ec00c327e7b3c4e4c36206f3caeaacb0fe19c72ef9fc2b0047925b11f4f478775f9ee2e4d99365905aed9de0e7852ca350949b1d1b1909c894cc9c199e9c65aa84623e777de7b154203270ecff27974f0d7b71ac391f41c693ff7975da8d676e619f1dc38b1ed4fb2d5ca44d4f28eaafc47226cc744de07574d421326a4736cfa990bbd41704d07f4346acf2bfb4f998ed4af670990cb1b47bf4bdfbdf2e673351aa0ed5b6ee4fd37a83c675bcdcc8bc1421e4fed3b2f55e43a98ad7fa29f8e1829ec2946fcf9709312ab6296c1829c04300da37847d0fac62de5a13d90714c2c730a1365e2bb501e5da3e5e62c21c5c7a1406decbf98d1f7e8ae4f616a87b967c9c435fe0f54c47613afc4781a326960ae7f275e2d1de1fd69690dd83739d4b982d448402b470ff51b669cb8849d5fd4ee32efbd86dc23ce35aa9746544172ee7c14e8f03fdafc096b249851eb91fee49034d2d682acad89f44b3dbaf1443d3ab1aff8f486fc30a0ead02480beda37072a2c4c93c0a0440381751d94d92f59e5e91b79f50348d7fa0959d3b05eb9b0650790b3530a37002d66991f03575ea3d58a1dbf42f6b140746d7db590ba402dca5ac2724fe224340a08aa25b8ea8675845351e339a185288639da436a0692fcb2968ce6cfe2fa82cc5729f93643bcb7919cd30003025dbbf3a913a3ca0a22dff9c83aaa99eed10da7a6ca22caad9362066a08faa645e842cdba2cfc413823b95fd97f37d22a2d3128a86064530c109448d9cefc6d674c975857f49c5c9f2e2f9c09410bd45d8bcd88fc623b79a5b2541a91a2291def684c341bef3eeb715a179bdbe476a441a5677524e787e55e0dc0bef0c2b34e12d0f9e4aa6487ec65bc541fd7249f98b73601a9c59bef74c8455031f55979e6c91aa5f3dd608495e6a464622e9aec2a859fd223c3cbf3bd76b961f789ee0891ce1f7904547569117dcc4f7a8ca4e05037131a7f6b05db5e67312647bb37fa243c32d709d44c7f18469483bca6bf192718a9dc75c84c00e7dd728c96bd54", 0x1000}, {&(0x7f0000003540)="1ceaeeb6362755f486dd4b8c4103dd91ce1da47a3f88d196b17d58fa99b595197eeb09b6e30d25ef963854a425baf535d69bcc7d6567ac9fe1c63be24b03c534cc9ac043d40af725d6a814c4567d46433e6112c53df9", 0x56}, {&(0x7f00000035c0)="cdec5ba2a61ca7ed8faea92a2ce149689b6b79f55afe8ee9b6c05f34e26b51a8722bc2e06010e285f8061c7b", 0x2c}], 0xa, &(0x7f0000003f80)=[@rights={0x28, 0x1, 0x1, [r1, r2, r3, r4, r5, r6]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @rights={0x30, 0x1, 0x1, [0xffffffffffffff9c, r16, r17, r18, r19, r20, r21]}, @cred={0x20, 0x1, 0x2, r22, r23, r24}, @rights={0x18, 0x1, 0x1, [r25, r26]}], 0xf0, 0x24000040}, 0x20000010) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r27 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r27, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001800090600000000000000000a000000e84730c383d7008e9667a1fb000000000000000008001536cf9b3e070000000842c85fd4aacce4c99e2d1e23d01605f9c04431c02310691601e47ad31b03fa53bb39972079da633281a51885114c79660fb108e5f7278ee46dc6348379"], 0x28}, 0x1}, 0x0) [ 352.572816] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 352.580065] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 352.587313] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 352.594566] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 352.601815] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000000c 2018/04/29 21:25:14 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x0) [ 352.663977] netlink: 12 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/29 21:25:14 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r2, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="aa2de20a3a91040002001300ffb0cd79cd6c2ee61c834aa09330ae69a0b7ceef91dd0f28acc862e459971b"], &(0x7f0000000380)=0xc) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) write$evdev(r2, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x800) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x420000) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f00000000c0)=""/122, 0x7a, 0x2, &(0x7f0000000180)={r2, r3+10000000}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000001c0)={0x7, [0x7fffffff, 0x1, 0x1d3, 0x3, 0x2fa, 0x4, 0x0]}, 0x12) r4 = accept$alg(r0, 0x0, 0x0) recvmsg(r4, &(0x7f00001f5000)={&(0x7f0000074000)=@alg, 0x80, &(0x7f0000612f80)=[{&(0x7f0000f81000)=""/4096, 0x1000}], 0x1, &(0x7f0000f7ffca)=""/87, 0x57}, 0x0) [ 352.728332] netlink: 12 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/29 21:25:14 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000000000fa66209d", @ANYRES32=0xffffffff, @ANYBLOB="03000000"], 0x31b) dup3(r1, r0, 0x0) 2018/04/29 21:25:14 executing program 7 (fault-call:2 fault-nth:13): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000001c0)=0x2, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c7465720000000000000800000000000000000000000000000000000000920000001c059c3fc2c2c7182d1a7bb476e84f6645739444a97875b9a7a87fd873693481c853385d1b3e422f4fa1979ef38a7c709e75f3810d7f8e4f070ed69f25ccf0a7736c02ced3af1214c67166c5837ec3e940c9891e8916e1c849f87c9bc0eb836ffed87d0ac9b37665a05b9daa6f77b9c6c84304701b85d344f5cf547ea872b3d2ede71db685715a425b7f72a7d5c015ca279a"], &(0x7f0000000040)=0xb6) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000440)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={0x0, r1, 0xd, 0x2}, 0x14) pipe2(&(0x7f0000000080), 0x4000) ioctl$KVM_GET_PIT2(r2, 0xc048ae65, &(0x7f0000000300)) accept4$unix(r1, 0x0, &(0x7f0000000280)=0xffffffffffffff8e, 0x7fd) 2018/04/29 21:25:14 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r2, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="aa2de20a3a91040002001300ffb0cd79cd6c2ee61c834aa09330ae69a0b7ceef91dd0f28acc862e459971b"], &(0x7f0000000380)=0xc) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) write$evdev(r2, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:14 executing program 5: unshare(0x2001fffd) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x141400, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x7, 0x0, 0x5, 0x9, 0x40}, &(0x7f0000000040)=0x98) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={r0, 0x2, 0x1, 0x5, &(0x7f0000000240)=[0x0], 0x1}, 0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r1, 0x73, "9a1971418246a6314c7804caf05341325e09111fb7bba721f2e917a5c1a4ff85556faff8621ae5fcb592b7eb53d2d03aeec041d8166c17f1c0371e743b65e652e65e4bab05793068ddfb5a9dfa9729ae53687e4dd99521815eb6bcb005900081ef7c0c8066d085d2aa4ab72f2d51d21a9e28ad"}, &(0x7f0000000200)=0x7b) r2 = socket$netlink(0x10, 0x3, 0x16) writev(r2, &(0x7f00005e5ff0)=[{&(0x7f0000a5f000)="29000000200019fff63d0014000000060200001615f50005000000040d0010000000000200f9000008", 0x29}], 0x1) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) 2018/04/29 21:25:14 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') sendfile(r1, r1, &(0x7f0000000080)=0x1000, 0x6) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYPTR64, @ANYBLOB="02000000ee0175d348463af6cfed58e5372f4e368781b151113c9dffe379b2f8429abc19000000000043e981c33f10973489bd339c471f173ec6de0a412b1a81e8ee6c738f065208398332f8e541407dada168b6cb7bfd121033621af0c63087f5c2d6f59b4f40b247b6fd8ef0768114d73f50b52c"], 0x24) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x24d) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bcsh0\x00', 0x9800}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 2018/04/29 21:25:14 executing program 0: perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4100, 0x3, 0x0, 0x20000000000005, 0x7, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0xd565, 0x1, 0x1ffffffffffffffd, 0x0, 0x0, 0x1, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000005}, 0x0, 0x0, 0xffffffffffffffff, 0x0) membarrier(0x50, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') 2018/04/29 21:25:14 executing program 3: r0 = socket(0x10, 0x200000000002, 0x8000000000000c) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0xa802, 0x0) write(r0, &(0x7f0000d1a000)="1f0000000306fd00010000f60000ff0180fff80009000180060041ec000000", 0x1f) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x100, 0x4) 2018/04/29 21:25:14 executing program 6: perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_bp={&(0x7f0000000140)}, 0x2000003fc, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00007fc000)='nfs\x00', 0x3, &(0x7f000000a000)) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) socketpair(0xa, 0x6, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) fanotify_mark(r0, 0x1, 0x8010000, r1, &(0x7f0000000100)='./file0\x00') [ 353.291114] QAT: Invalid ioctl [ 353.300417] FAULT_INJECTION: forcing a failure. [ 353.300417] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 353.312393] CPU: 0 PID: 25144 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 353.319672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.329024] Call Trace: [ 353.331607] dump_stack+0x1b9/0x294 [ 353.335225] ? dump_stack_print_info.cold.2+0x52/0x52 [ 353.340404] ? zap_class+0x720/0x720 [ 353.344111] should_fail.cold.4+0xa/0x1a [ 353.348163] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 353.353271] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 353.358449] ? find_held_lock+0x36/0x1c0 [ 353.362509] ? check_same_owner+0x320/0x320 [ 353.366827] ? rcu_note_context_switch+0x710/0x710 [ 353.371745] ? __might_sleep+0x95/0x190 [ 353.375710] __alloc_pages_nodemask+0x34e/0xd70 [ 353.380367] ? default_file_splice_read+0x1c7/0xad0 [ 353.385369] ? do_splice_to+0x12e/0x190 [ 353.389326] ? splice_direct_to_actor+0x268/0x8d0 [ 353.394157] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 353.399168] ? kasan_check_read+0x11/0x20 [ 353.403300] ? rcu_is_watching+0x85/0x140 [ 353.407433] ? rcu_pm_notify+0xc0/0xc0 [ 353.411312] ? rcu_read_lock_sched_held+0x108/0x120 [ 353.416315] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 353.421840] alloc_pages_current+0x10c/0x210 [ 353.426240] push_pipe+0x400/0x7a0 [ 353.429764] ? __kmalloc_node+0x47/0x70 [ 353.433730] iov_iter_get_pages_alloc+0x84a/0x14e0 [ 353.438644] ? rcu_is_watching+0x85/0x140 [ 353.442778] ? copy_page_to_iter+0xf30/0xf30 [ 353.447177] ? is_bpf_text_address+0xd7/0x170 [ 353.451660] ? kernel_text_address+0x79/0xf0 [ 353.456052] ? __unwind_start+0x166/0x330 [ 353.460192] ? unwind_get_return_address+0x61/0xa0 [ 353.465108] ? __save_stack_trace+0x7e/0xd0 [ 353.469424] ? save_stack+0xa9/0xd0 [ 353.473040] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 353.478039] ? iov_iter_pipe+0xc2/0x2f0 [ 353.482004] default_file_splice_read+0x1c7/0xad0 [ 353.486833] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.492189] ? do_splice_direct+0x400/0x400 [ 353.496497] ? debug_mutex_init+0x1c/0x60 [ 353.500629] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 353.505627] ? __lockdep_init_map+0x105/0x590 [ 353.510110] ? lockdep_init_map+0x9/0x10 [ 353.514157] ? debug_mutex_init+0x2d/0x60 [ 353.518296] ? __mutex_init+0x1ef/0x280 [ 353.522255] ? __ia32_sys_membarrier+0x150/0x150 [ 353.526992] ? __lockdep_init_map+0x105/0x590 [ 353.531478] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.536996] ? fsnotify+0x415/0xfc0 [ 353.540612] ? fsnotify+0xfc0/0xfc0 [ 353.544222] ? fsnotify_first_mark+0x330/0x330 [ 353.548794] ? security_file_permission+0x1c6/0x240 [ 353.553798] ? rw_verify_area+0x118/0x360 [ 353.557930] ? do_splice_direct+0x400/0x400 [ 353.562235] do_splice_to+0x12e/0x190 [ 353.566031] splice_direct_to_actor+0x268/0x8d0 [ 353.570685] ? pipe_to_sendpage+0x3f0/0x3f0 [ 353.574994] ? do_splice_to+0x190/0x190 [ 353.578955] ? rw_verify_area+0x118/0x360 [ 353.583091] do_splice_direct+0x2cc/0x400 [ 353.587225] ? splice_direct_to_actor+0x8d0/0x8d0 [ 353.592069] ? rw_verify_area+0x118/0x360 [ 353.596210] do_sendfile+0x60f/0xe00 [ 353.599916] ? do_compat_pwritev64+0x1b0/0x1b0 [ 353.604486] ? __might_sleep+0x95/0x190 [ 353.608451] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 353.613972] ? _copy_from_user+0xdf/0x150 [ 353.618106] __x64_sys_sendfile64+0x155/0x240 [ 353.622586] ? __ia32_sys_sendfile+0x290/0x290 [ 353.627155] ? do_syscall_64+0x92/0x800 [ 353.631119] do_syscall_64+0x1b1/0x800 [ 353.634988] ? finish_task_switch+0x1ca/0x810 [ 353.639473] ? syscall_return_slowpath+0x5c0/0x5c0 [ 353.644386] ? syscall_return_slowpath+0x30f/0x5c0 [ 353.649302] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 353.654651] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 353.659481] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.664654] RIP: 0033:0x455979 [ 353.667829] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 353.675524] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 353.682775] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 353.690027] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 353.697280] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 353.704532] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000000d [ 353.731172] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 353.731703] QAT: Invalid ioctl 2018/04/29 21:25:15 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r2, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="aa2de20a3a91040002001300ffb0cd79cd6c2ee61c834aa09330ae69a0b7ceef91dd0f28acc862e459971b"], &(0x7f0000000380)=0xc) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) write$evdev(r2, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:15 executing program 0: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@random='AFm{$W', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@arp={0x806, @ether_ipv4={0x1, 0x803, 0x6, 0x4, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @loopback=0x7f000001, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, 0x0) lookup_dcookie(0x3, &(0x7f0000000000)=""/34, 0x22) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8, 0x2000) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0xc7b) [ 353.761069] netlink: 'syz-executor3': attribute type 1 has an invalid length. 2018/04/29 21:25:15 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x4c1) ioctl$void(r0, 0x5451) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xfff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r2, 0x2}, 0x8) r3 = dup3(r1, r0, 0x0) sendto$inet6(r3, &(0x7f00000001c0)="41982d228feba85de98f7936402e561df4834e6c2117", 0x16, 0x80, &(0x7f0000000200)={0xa, 0x4e20, 0xfffffffffffffe01, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, 0x1c) 2018/04/29 21:25:15 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="2f0000001800030007fffd946fa283bc8020000000040005031d8568080003000500000000006ab0161cae083c737e", 0x2f}], 0x1}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x88000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000180)={0x2, 0x0, 'client0\x00', 0x6, "c168565ced391a73", "09e7a0de105ba8f5a7927b778081b54e2fdcae388972f4f7e95a47b24e81eaca", 0x367, 0x6}) 2018/04/29 21:25:15 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00004aefee)="120000005e00654bebaf8be28e62ae4acf46", 0x12, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x1, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x101000, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000080)=@pic={0x401, 0x9, 0x6, 0x6, 0x10000, 0x4, 0x1, 0x80000001, 0x6, 0x5e, 0x8000, 0x800, 0x2, 0xff, 0x0, 0x9}) 2018/04/29 21:25:15 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/6, 0x6}], 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_settime(0x932d3f0689119723, &(0x7f0000e75ff0)={0x77359400}) 2018/04/29 21:25:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fea000)=[{&(0x7f00008c2ef5)="290000002000190001063524e02200ff020000168000e718f20000040d000f00000000f20d00088f1f", 0x29}], 0x1) 2018/04/29 21:25:15 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r2, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="aa2de20a3a91040002001300ffb0cd79cd6c2ee61c834aa09330ae69a0b7ceef91dd0f28acc862e459971b"], &(0x7f0000000380)=0xc) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) write$evdev(r2, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) [ 354.037192] netlink: 'syz-executor5': attribute type 15 has an invalid length. 2018/04/29 21:25:16 executing program 7 (fault-call:2 fault-nth:14): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f0000000200)=' '}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x7, 0x7) getsockopt$inet_mreqsrc(r2, 0x0, 0x2e, &(0x7f0000000000)={@dev, @remote, @loopback}, &(0x7f0000000080)=0xc) sendmsg$nl_generic(r1, &(0x7f0000002180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000002140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002d00ffff000000000000000000000000100000008000000000000000"], 0x24}, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x7}}, 0x7, 0x7, 0x9, 0x5, 0x2de0}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r3, 0x5}, &(0x7f0000000280)=0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x500, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f00000002c0)={0x2, "5789"}, 0x3) 2018/04/29 21:25:16 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0xfffffffffffffff3) write$rdma_cm(r0, &(0x7f0000003140)=@create_id={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000003100), 0x111, 0xb}}, 0x20) write$rdma_cm(r0, &(0x7f0000005a80)=@create_id={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000005a40)={0xffffffff}, 0x13f, 0x7}}, 0x20) write$rdma_cm(r0, &(0x7f0000003180)=@disconnect={0xa, 0x4, 0xfa00, {r2}}, 0xc) dup3(r1, r0, 0x0) 2018/04/29 21:25:16 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r2, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="aa2de20a3a91040002001300ffb0cd79cd6c2ee61c834aa09330ae69a0b7ceef91dd0f28acc862e459971b"], &(0x7f0000000380)=0xc) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) write$evdev(r2, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:16 executing program 5: mkdir(&(0x7f0000e29000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='nfsd\x00', 0x0, &(0x7f0000000140)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='efs\x00', 0x1104801, 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000680)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000780)=0xe8) getgroups(0x6, &(0x7f00000007c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000ac0)={'bcsh0\x00', 0x1}) r4 = getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000800)={{{@in=@rand_addr, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f0000000900)=0xe8) fstat(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000009c0)=0x0) lstat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000000bc0)={&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000440)="fec5da1786d58481d5111d8c894d4370fec16ec78789444f22d9797dc62f74cddc05609ea4de06c5f957a31972524cbc1f4c4a4f11fcd5a5800ded13b897ddb77883f20d4b3a30c314b9c039a884667402a570e2442068f4b2a29e5de33977f84732f10cb4353399a864c8ba691dd319ef400f9482e95dea5c6c6bd360313d8c4ceb07456da673ba50f531794c4f912bb543ebec0199507e2b3588b0c51b4bc2153c2d22289995150c607236d08d6d4ef037a54dea4d5c15a2c3d0f5a2968d03efab1c950b170f61bc8ea1985ce960955d1c46b4b0afe64bca6194a09c33a282add48c525f3497714286a6e21a7fa169b4fe1726b2c0d588", 0xf8}, {&(0x7f0000000540)="19779afcc69166bda39c888b7423ff5dd174d85784f1a9f55e2d34fcb888046803319019687aaef1e4f8901a77a11c82b2e3417fbdb53c713fbe81464156f708855e0a7c1089d09e2caaf61deda7cd1a123fe1401a656d76acb26c902ff32065821b892da4281e1a804edc781e0ddab45f0b", 0x72}, {&(0x7f00000005c0)="5b6fb9b0884ef9ed4fa78a8425d2a209fce4759835b727fd61de6b11bb9bb00f69c6ff41e3f1a0b558c23b3abf9aef5c1e8a7f123e79225d5d14a965e0890b86056bf37deeb95e5487b9d55ee4ed960cda5afd5c", 0x54}], 0x3, &(0x7f0000000b40)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x60, 0x80}, 0x4000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) ptrace$setsig(0x4203, r4, 0x6, &(0x7f0000000940)={0x3c, 0x51d, 0xc827, 0x9}) setxattr(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="62747266862e2d00080000626f030065743073656c662e707070302500"], &(0x7f0000000380)='\x00', 0x1, 0x1) waitid(0x2, r10, &(0x7f0000000340), 0xa0000008, &(0x7f0000000240)) 2018/04/29 21:25:16 executing program 6: r0 = socket(0x40000000015, 0x5, 0x480fb4dd) setsockopt(r0, 0x114, 0x800000000001ff, &(0x7f0000000000), 0x16a) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x4e0, 0x400080) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x800, 0x0) 2018/04/29 21:25:16 executing program 3: r0 = perf_event_open(&(0x7f00000bf000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = perf_event_open(&(0x7f0000014f88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) 2018/04/29 21:25:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f35000)={0x26, "68617368000000000000000200", 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="40eca1c3b192d804d4464de00c14391f087a6cde6287b7b6daef0c88f445bcb14f373108ff68ed69fffffffe3b6cb7628ed50ef5b6b51ef5ed718d16c63113afeaf4be7fdab3915b6690fc11e474fa1b9696934c8dd56051251eeb00e2cecca51256fbcf2f939f7dac2af928ae16081f1743f1f2598e0a19cc811271d520f2f6", 0x80) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7, 0x100) setsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f0000000280)="55aa20c44ecdccb6bfaf73d78459f2504449b254e1a4f91da551ffce912fec62b525dd01b1c3a7f3d1230653a3bcad2d5eed19164cf2971feb85faa60c9accf14ae8ac68f0ec6eb5efd97bb8a5a8c117d7", 0x51) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x4, 0x76, [], 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000100)=""/118}, &(0x7f0000000200)=0x78) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000240)={'bond_slave_0\x00', 0x50e4}) fanotify_init(0x20, 0x40002) [ 354.599741] FAULT_INJECTION: forcing a failure. [ 354.599741] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 354.611664] CPU: 1 PID: 25232 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 354.618941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.628300] Call Trace: [ 354.630901] dump_stack+0x1b9/0x294 [ 354.634546] ? dump_stack_print_info.cold.2+0x52/0x52 [ 354.639750] ? zap_class+0x720/0x720 [ 354.643485] should_fail.cold.4+0xa/0x1a [ 354.647559] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 354.652681] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 354.657884] ? find_held_lock+0x36/0x1c0 [ 354.661977] ? check_same_owner+0x320/0x320 [ 354.666314] ? rcu_note_context_switch+0x710/0x710 [ 354.671257] ? __might_sleep+0x95/0x190 [ 354.675249] __alloc_pages_nodemask+0x34e/0xd70 [ 354.679929] ? default_file_splice_read+0x1c7/0xad0 [ 354.684951] ? do_splice_to+0x12e/0x190 [ 354.688937] ? splice_direct_to_actor+0x268/0x8d0 [ 354.693796] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 354.698838] ? kasan_check_read+0x11/0x20 [ 354.702997] ? rcu_is_watching+0x85/0x140 [ 354.707155] ? rcu_pm_notify+0xc0/0xc0 [ 354.711065] ? rcu_read_lock_sched_held+0x108/0x120 [ 354.716093] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 354.721645] alloc_pages_current+0x10c/0x210 [ 354.726070] push_pipe+0x400/0x7a0 [ 354.729617] ? __kmalloc_node+0x47/0x70 [ 354.733604] iov_iter_get_pages_alloc+0x84a/0x14e0 [ 354.738542] ? rcu_is_watching+0x85/0x140 [ 354.742695] ? copy_page_to_iter+0xf30/0xf30 [ 354.747094] ? is_bpf_text_address+0xd7/0x170 [ 354.751575] ? kernel_text_address+0x79/0xf0 [ 354.755971] ? __unwind_start+0x166/0x330 [ 354.760118] ? unwind_get_return_address+0x61/0xa0 [ 354.765036] ? __save_stack_trace+0x7e/0xd0 [ 354.769353] ? save_stack+0xa9/0xd0 [ 354.772968] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 354.777968] ? iov_iter_pipe+0xc2/0x2f0 [ 354.781931] default_file_splice_read+0x1c7/0xad0 [ 354.786760] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.792116] ? do_splice_direct+0x400/0x400 [ 354.796422] ? debug_mutex_init+0x1c/0x60 [ 354.800554] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 354.805557] ? __lockdep_init_map+0x105/0x590 [ 354.810039] ? lockdep_init_map+0x9/0x10 [ 354.814083] ? debug_mutex_init+0x2d/0x60 [ 354.818217] ? __mutex_init+0x1ef/0x280 [ 354.822189] ? __ia32_sys_membarrier+0x150/0x150 [ 354.826931] ? __lockdep_init_map+0x105/0x590 [ 354.831414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.836932] ? fsnotify+0x415/0xfc0 [ 354.840547] ? fsnotify+0xfc0/0xfc0 [ 354.844161] ? fsnotify_first_mark+0x330/0x330 [ 354.848740] ? security_file_permission+0x1c6/0x240 [ 354.853746] ? rw_verify_area+0x118/0x360 [ 354.857881] ? do_splice_direct+0x400/0x400 [ 354.862188] do_splice_to+0x12e/0x190 [ 354.865977] splice_direct_to_actor+0x268/0x8d0 [ 354.870633] ? pipe_to_sendpage+0x3f0/0x3f0 [ 354.874944] ? do_splice_to+0x190/0x190 [ 354.878906] ? rw_verify_area+0x118/0x360 [ 354.883042] do_splice_direct+0x2cc/0x400 [ 354.887179] ? splice_direct_to_actor+0x8d0/0x8d0 [ 354.892018] ? rw_verify_area+0x118/0x360 [ 354.896157] do_sendfile+0x60f/0xe00 [ 354.899863] ? do_compat_pwritev64+0x1b0/0x1b0 [ 354.904432] ? __might_sleep+0x95/0x190 [ 354.908397] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 354.913921] ? _copy_from_user+0xdf/0x150 [ 354.918055] __x64_sys_sendfile64+0x155/0x240 [ 354.922538] ? __ia32_sys_sendfile+0x290/0x290 [ 354.927107] ? do_syscall_64+0x92/0x800 [ 354.931069] do_syscall_64+0x1b1/0x800 [ 354.934941] ? finish_task_switch+0x1ca/0x810 [ 354.939420] ? syscall_return_slowpath+0x5c0/0x5c0 [ 354.944335] ? syscall_return_slowpath+0x30f/0x5c0 [ 354.949253] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 354.954603] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 354.959434] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.964606] RIP: 0033:0x455979 [ 354.967779] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 354.975473] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 354.982723] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 354.989980] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/29 21:25:16 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r2, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r3, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="aa2de20a3a91040002001300ffb0cd79cd6c2ee61c834aa09330ae69a0b7ceef91dd0f28acc862e459971b"], &(0x7f0000000380)=0xc) write$evdev(r2, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) [ 354.997245] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 355.004496] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000000e 2018/04/29 21:25:17 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x1e) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000080)={0x3, 0x401, 0x100000002000, 'queue0\x00', 0x3ecc}) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x24, 0x2c, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x10, 0x0, [@typed={0xc, 0x1, @binary="085454a7a1"}]}]}, 0x24}, 0x1}, 0x0) 2018/04/29 21:25:17 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r1, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r2, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) write$evdev(r1, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f0000d16ffc), &(0x7f00002a5ffc)=0x4) tee(r0, r0, 0x2, 0x8) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x4100) accept$unix(r1, 0x0, &(0x7f0000000040)) 2018/04/29 21:25:17 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)="6664001f66d0") r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000000c0)='\x00', r1) execveat(r0, &(0x7f0000018ff8)='./file0\x00', &(0x7f000001aff0)=[&(0x7f0000018fed)='-]selfvmnet0\x00'], &(0x7f000001a000), 0x0) 2018/04/29 21:25:17 executing program 0: perf_event_open(&(0x7f0000000740)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x400, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x3a21, 0x40000) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000140)=0xfff) ioctl$sock_ipx_SIOCAIPXPRISLT(r2, 0x89e1, &(0x7f0000000240)=0x8) futimesat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x7530}}) accept4$unix(r2, &(0x7f0000000180), &(0x7f0000000200)=0x6e, 0x0) 2018/04/29 21:25:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x0, &(0x7f0000ffd000/0x3000)=nil) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) keyctl$chown(0x4, 0x0, 0x0, 0x0) sysinfo(&(0x7f0000000280)=""/176) 2018/04/29 21:25:17 executing program 7 (fault-call:2 fault-nth:15): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:17 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x140, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080)) dup3(r1, r0, 0x0) 2018/04/29 21:25:17 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz1', "38d18e1e02a5342b74bbbd031c687dfcda2f33afa3d1eb2b"}, 0x1c) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40) getsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000400)=""/145, &(0x7f0000000080)=0x91) openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x2, 0x0) r2 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101000, 0x0) connect$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x6, {0x87a0, 0x40, 0x4, 0x5, 0x7fff, 0x7fff}, 0x6f, 0x2}, 0xe) mq_getsetattr(r3, &(0x7f0000000280)={0xdd, 0x1, 0x4, 0x2, 0x1c1, 0x80000001, 0x9, 0x1}, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="4c000000ce783288ecf66e40f8def24c7a04461cbd1e95bca34137966330d0af16515fa7d19fccdcf07cf7252c04e46edffe00b99160601704aacb9c92d727c0baca2c80a594336330d3414be2587f0e116a2424d48fa6e9a655618277ad0c4aad862983094f421490623bc8f1f9af63957f3651b2b175d19f2cfe3047a05c8183e200a68951d0c5bb8b954b55dfb2ff0c34606679de1dc266e08cf43d18dd3e95fd8805971f42651b09c584d84e9d128ee6454787a5"], &(0x7f00000000c0)=0x54) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000080000)="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") ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000200)={0x9, 0x7, 0x5, 0x5, 0x4, 0x7, 0x3, 0x20, 0x4, 0x9}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000240)=0x102000) [ 355.698093] FAULT_INJECTION: forcing a failure. [ 355.698093] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 355.710094] CPU: 0 PID: 25284 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 355.717378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.726730] Call Trace: [ 355.729330] dump_stack+0x1b9/0x294 [ 355.732976] ? dump_stack_print_info.cold.2+0x52/0x52 [ 355.738179] ? zap_class+0x720/0x720 [ 355.741904] should_fail.cold.4+0xa/0x1a [ 355.745978] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 355.751100] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 355.756303] ? find_held_lock+0x36/0x1c0 [ 355.760395] ? check_same_owner+0x320/0x320 [ 355.764730] ? rcu_note_context_switch+0x710/0x710 [ 355.769677] ? __might_sleep+0x95/0x190 [ 355.773667] __alloc_pages_nodemask+0x34e/0xd70 [ 355.778347] ? default_file_splice_read+0x1c7/0xad0 [ 355.783373] ? do_splice_to+0x12e/0x190 [ 355.787352] ? splice_direct_to_actor+0x268/0x8d0 [ 355.792207] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 355.797245] ? kasan_check_read+0x11/0x20 [ 355.801395] ? rcu_is_watching+0x85/0x140 [ 355.805532] ? rcu_pm_notify+0xc0/0xc0 [ 355.809416] ? rcu_read_lock_sched_held+0x108/0x120 [ 355.814426] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 355.819957] alloc_pages_current+0x10c/0x210 [ 355.824354] push_pipe+0x400/0x7a0 [ 355.827880] ? __kmalloc_node+0x47/0x70 [ 355.831850] iov_iter_get_pages_alloc+0x84a/0x14e0 [ 355.836768] ? rcu_is_watching+0x85/0x140 [ 355.840908] ? copy_page_to_iter+0xf30/0xf30 [ 355.845308] ? is_bpf_text_address+0xd7/0x170 [ 355.849789] ? kernel_text_address+0x79/0xf0 [ 355.854185] ? __unwind_start+0x166/0x330 [ 355.858321] ? unwind_get_return_address+0x61/0xa0 [ 355.863240] ? __save_stack_trace+0x7e/0xd0 [ 355.867558] ? save_stack+0xa9/0xd0 [ 355.871180] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 355.876181] ? iov_iter_pipe+0xc2/0x2f0 [ 355.880148] default_file_splice_read+0x1c7/0xad0 [ 355.884980] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.890342] ? do_splice_direct+0x400/0x400 [ 355.894654] ? debug_mutex_init+0x1c/0x60 [ 355.898793] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 355.903795] ? __lockdep_init_map+0x105/0x590 [ 355.908279] ? lockdep_init_map+0x9/0x10 [ 355.912323] ? debug_mutex_init+0x2d/0x60 [ 355.916455] ? __mutex_init+0x1ef/0x280 [ 355.920415] ? __ia32_sys_membarrier+0x150/0x150 [ 355.925171] ? __lockdep_init_map+0x105/0x590 [ 355.929663] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.935183] ? fsnotify+0x415/0xfc0 [ 355.938799] ? fsnotify+0xfc0/0xfc0 [ 355.942411] ? fsnotify_first_mark+0x330/0x330 [ 355.946988] ? security_file_permission+0x1c6/0x240 [ 355.951998] ? rw_verify_area+0x118/0x360 [ 355.956140] ? do_splice_direct+0x400/0x400 [ 355.960451] do_splice_to+0x12e/0x190 [ 355.964242] splice_direct_to_actor+0x268/0x8d0 [ 355.968900] ? pipe_to_sendpage+0x3f0/0x3f0 [ 355.973213] ? do_splice_to+0x190/0x190 [ 355.977176] ? rw_verify_area+0x118/0x360 [ 355.981316] do_splice_direct+0x2cc/0x400 [ 355.985457] ? splice_direct_to_actor+0x8d0/0x8d0 [ 355.990290] ? rw_verify_area+0x118/0x360 [ 355.994424] do_sendfile+0x60f/0xe00 [ 355.998131] ? do_compat_pwritev64+0x1b0/0x1b0 [ 356.002703] ? __might_sleep+0x95/0x190 [ 356.006672] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 356.012200] ? _copy_from_user+0xdf/0x150 [ 356.016339] __x64_sys_sendfile64+0x155/0x240 [ 356.020822] ? __ia32_sys_sendfile+0x290/0x290 [ 356.025393] ? do_syscall_64+0x92/0x800 [ 356.029358] do_syscall_64+0x1b1/0x800 [ 356.033233] ? syscall_return_slowpath+0x5c0/0x5c0 [ 356.038154] ? syscall_return_slowpath+0x30f/0x5c0 [ 356.043074] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 356.048428] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 356.053260] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.058435] RIP: 0033:0x455979 [ 356.061611] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 356.069310] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 356.076563] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 356.083829] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 356.091082] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 356.098338] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000000f 2018/04/29 21:25:18 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r1, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r0, r1, 0x80000) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)="b3be9da36c409d1ad25e3893acac16c98c611941843cd61cbb34a929efa3601c0a47ad0016478e8c43f988638e139ea7a4b2bf9773fe1b86bcf5588b5fdf3d9babdb6121a127eff55d18f41afe0eb303f76804d36a84a334d37a1b07f2ef00ae74512957bcfcbaa303c1721901", 0x6d, 0xfffffffffffffffd) keyctl$invalidate(0x15, r2) 2018/04/29 21:25:18 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) io_setup(0x9, &(0x7f0000000180)=0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0xa00, 0x0) io_cancel(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x2, r0, &(0x7f00000001c0)="f690c1b39099c1a0e89f361e42da9f5ca61368ff56ebe80721a2aebda9ed6115dd2bc1f7848c866df8f3ed638bfbbb76c173e29c85606501dc1be453f3ba5d66d75464e28dcdf8b6912541fb0e67ee53043d09e72e0a0bd491386e34e04a94bd972ac62b022b3f562c3bec24f4907f2bc8f9e0d3526d0caf0e34dec150fec4855fed1a663a5662b2e2b4f26cdb9a1d1f471628bf2d8bf17a48a317890e79b4c575133f0b1e9cb239d2f51b9dfdcb8f451025b146d3068048bc5f3ba16d0cf8b9126feb6d0a5ee647d308667ba83b31f4d7626a0b355d6c0875dc20b53e920935a3a8b985", 0xe4, 0x9, 0x0, 0x1, r2}, &(0x7f0000000340)) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x50000) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000080)=""/241) 2018/04/29 21:25:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)) 2018/04/29 21:25:18 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r1, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)={0xffffffff}, 0x2, 0xa}}, 0x20) write$rdma_cm(r0, &(0x7f00000023c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r2, 0x1}}, 0x18) write$evdev(r1, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:18 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x8000000001, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = open(&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x1) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x77359400}}], 0x1c) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000080)='./control/file0\x00') getdents(r1, &(0x7f0000000000), 0x1f0) dup2(r0, r2) 2018/04/29 21:25:18 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x4000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f00000001c0)={0x7, 0x2, 0x8, 0x1, &(0x7f0000000140)=[{}, {}]}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000000c0)={{}, {0xe}}) 2018/04/29 21:25:18 executing program 7 (fault-call:2 fault-nth:16): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x108ffe, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000100)) personality(0x6000003) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x3, r2}) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000200)=0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[{0x0, 0xfffffffffffffffd}, {0x8}, {}, {0x1000000}], 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x6, 0x4, 0x400, 0x4}, {0xffffffffffffffff, 0x2, 0x1, 0x2}]}, 0x10) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000001c0)={0x1, r1}) 2018/04/29 21:25:18 executing program 1: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x400, 0x0) sendmsg$unix(r0, &(0x7f0000ca1fc8)={&(0x7f00008dd000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000032eff0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000000000e398709171f4800900", @ANYRES32=r1, @ANYBLOB="00000000b9896701eee62b92260afa9bb449cd9e149306156cbf2b7c6aabf54cf43bef1cefc8733ee2f8017f423ada0b510af90b9be5b99f0c4d4ac1e4"], 0x51}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000580)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) close(r4) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000380)={&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/126, 0x7e}, {&(0x7f0000000100)=""/195, 0xc3}, {&(0x7f0000000200)=""/120, 0x78}], 0x3, &(0x7f00000002c0)=""/148, 0x94, 0x80000000}, 0x40012000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x6, 0x7}, &(0x7f0000000400)=0x8) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000480)={'filter\x00', 0x79, "58b55058ff20d17785a134c8b32d076abf26792397751eb96ed2e8b7bd58445b0f485113b30fe0b463e1d73ae59dd38cb83f8872c2e90fb9180c88e46bb432b97d5db0c73c45875c3836fe8b10bc62c0bdcfd30784fccb44a9a6358ba37b5d193a95aa472a233ec4f08df99171ded3851503d22953f255f76d"}, &(0x7f0000000540)=0x9d) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'lo\x00', 0x204}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000440)={r6}, 0x8) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000004000)) unshare(0x400) pwritev(r4, &(0x7f0000000200), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') close(r2) close(r0) bind$ipx(r8, &(0x7f0000000080)={0x4, 0xa26e, 0x3ff, "a590900a5719", 0x3}, 0x10) [ 356.740510] ucma_write: process 1886 (syz-executor4) changed security contexts after opening file descriptor, this is not allowed. [ 356.756522] FAULT_INJECTION: forcing a failure. [ 356.756522] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 356.768455] CPU: 1 PID: 25323 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 356.775734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.785089] Call Trace: 2018/04/29 21:25:18 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:18 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, r0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080), 0x10) write(r1, &(0x7f00000002c0)="4c95ce8472224fc3e4c3993773a5f81e5da9b4d8d0736e56aa52838ba814347796b95d69de65a1a470fcfe9806b54ef33559f6a5babf5cc39ad2fe17fd95c47eef3bb03ed2fbb897", 0x48) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000001c0)=""/194) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000000c0)={0x3b, @broadcast=0xffffffff, 0x4e24, 0x2, 'none\x00', 0x32, 0x6, 0x3a}, 0x2c) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000001ff8)={0x0, 0xffffffffffffffff}) getsockopt$inet_mreqsrc(r2, 0x10f, 0x28, &(0x7f0000000100)={@empty, @multicast1, @broadcast}, &(0x7f0000000180)=0xc) [ 356.787689] dump_stack+0x1b9/0x294 [ 356.791333] ? dump_stack_print_info.cold.2+0x52/0x52 [ 356.796536] ? zap_class+0x720/0x720 [ 356.800268] should_fail.cold.4+0xa/0x1a [ 356.804344] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 356.809477] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 356.815168] ? find_held_lock+0x36/0x1c0 [ 356.815213] ? check_same_owner+0x320/0x320 [ 356.815236] ? rcu_note_context_switch+0x710/0x710 [ 356.815258] ? __might_sleep+0x95/0x190 [ 356.815280] __alloc_pages_nodemask+0x34e/0xd70 [ 356.837200] ? default_file_splice_read+0x1c7/0xad0 [ 356.842227] ? do_splice_to+0x12e/0x190 [ 356.846215] ? splice_direct_to_actor+0x268/0x8d0 [ 356.851075] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 356.856120] ? kasan_check_read+0x11/0x20 [ 356.860279] ? rcu_is_watching+0x85/0x140 [ 356.864436] ? rcu_pm_notify+0xc0/0xc0 [ 356.868345] ? rcu_read_lock_sched_held+0x108/0x120 [ 356.873376] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 356.878932] alloc_pages_current+0x10c/0x210 [ 356.883354] push_pipe+0x400/0x7a0 [ 356.886896] ? __kmalloc_node+0x47/0x70 [ 356.890873] iov_iter_get_pages_alloc+0x84a/0x14e0 [ 356.895795] ? rcu_is_watching+0x85/0x140 [ 356.899936] ? copy_page_to_iter+0xf30/0xf30 [ 356.904337] ? is_bpf_text_address+0xd7/0x170 [ 356.908818] ? kernel_text_address+0x79/0xf0 [ 356.913212] ? __unwind_start+0x166/0x330 [ 356.917350] ? unwind_get_return_address+0x61/0xa0 [ 356.922266] ? __save_stack_trace+0x7e/0xd0 [ 356.926585] ? save_stack+0xa9/0xd0 [ 356.930198] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 356.935198] ? iov_iter_pipe+0xc2/0x2f0 [ 356.939164] default_file_splice_read+0x1c7/0xad0 [ 356.943993] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.949354] ? do_splice_direct+0x400/0x400 [ 356.953663] ? debug_mutex_init+0x1c/0x60 [ 356.957797] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 356.962797] ? __lockdep_init_map+0x105/0x590 [ 356.967281] ? lockdep_init_map+0x9/0x10 [ 356.971325] ? debug_mutex_init+0x2d/0x60 [ 356.975458] ? __mutex_init+0x1ef/0x280 [ 356.979417] ? __ia32_sys_membarrier+0x150/0x150 [ 356.984158] ? __lockdep_init_map+0x105/0x590 [ 356.988646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.994165] ? fsnotify+0x415/0xfc0 [ 356.997780] ? fsnotify+0xfc0/0xfc0 [ 357.001390] ? fsnotify_first_mark+0x330/0x330 [ 357.005967] ? security_file_permission+0x1c6/0x240 [ 357.010971] ? rw_verify_area+0x118/0x360 [ 357.015104] ? do_splice_direct+0x400/0x400 [ 357.019413] do_splice_to+0x12e/0x190 [ 357.023203] splice_direct_to_actor+0x268/0x8d0 [ 357.027862] ? pipe_to_sendpage+0x3f0/0x3f0 [ 357.032172] ? do_splice_to+0x190/0x190 [ 357.036137] ? rw_verify_area+0x118/0x360 [ 357.040273] do_splice_direct+0x2cc/0x400 [ 357.044409] ? splice_direct_to_actor+0x8d0/0x8d0 [ 357.049241] ? rw_verify_area+0x118/0x360 [ 357.053378] do_sendfile+0x60f/0xe00 [ 357.057086] ? do_compat_pwritev64+0x1b0/0x1b0 [ 357.061657] ? __might_sleep+0x95/0x190 [ 357.065624] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 357.071158] ? _copy_from_user+0xdf/0x150 [ 357.075297] __x64_sys_sendfile64+0x155/0x240 [ 357.079781] ? __ia32_sys_sendfile+0x290/0x290 [ 357.084350] ? do_syscall_64+0x92/0x800 [ 357.088315] do_syscall_64+0x1b1/0x800 [ 357.092185] ? finish_task_switch+0x1ca/0x810 [ 357.096678] ? syscall_return_slowpath+0x5c0/0x5c0 [ 357.101596] ? syscall_return_slowpath+0x30f/0x5c0 [ 357.106513] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 357.111868] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 357.116701] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.121874] RIP: 0033:0x455979 [ 357.125057] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 357.132752] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 357.140006] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 357.147263] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 357.154518] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 357.161771] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000010 [ 357.181511] device lo entered promiscuous mode 2018/04/29 21:25:18 executing program 3: io_setup(0x4cc3, &(0x7f00000000c0)=0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000180)={0xc35d, 0x0, 0x1, 0xffffffffffffffff}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000006c0)={0x0, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e20, @multicast1=0xe0000001}, {0x2, 0x4e22, @multicast1=0xe0000001}, 0x8, 0x1, 0x4, 0x1, 0x3, &(0x7f0000000300)='gretap0\x00', 0x8, 0x3ff, 0x6}) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) connect(r3, &(0x7f0000000280)=@ax25={0x3, {"549255712ce5c7"}, 0x3}, 0x80) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000340)=0x7) r4 = dup(0xffffffffffffffff) accept4$ipx(0xffffffffffffffff, 0x0, &(0x7f0000000780), 0x800) syz_open_dev$sndmidi(&(0x7f00000005c0)='/dev/snd/midiC#D#\x00', 0x4f3, 0x400) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x5, r1, &(0x7f00000001c0)="a83f05cf4e45", 0x6, 0x8, 0x0, 0x0, r2}]) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000001ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x300000c, 0x32, 0xffffffffffffffff, 0x0) setsockopt(r5, 0x114, 0x3, &(0x7f0000000000)="2a8e339cbc4a24cbdd2186b32c816dac", 0x10) r6 = socket$inet6(0xa, 0x2000000802, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r6, &(0x7f0000000380)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000001c0)}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self/net/pfkey\x00', 0x82000, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r4, 0x4040ae72, &(0x7f00000003c0)={0x9d, 0x6, 0x6, 0x2, 0x7fc0000000000000}) r7 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) ioctl$sock_ipx_SIOCIPXCFGDATA(r7, 0x89e2, &(0x7f0000000080)) 2018/04/29 21:25:18 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x100, 0xc0300) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0x88, "fdd26062e13c3577985413e4bff0f29886e7ed34fcc998406250f414a695d6f0db8c90dd9351ef5ecb1339ada109b0d5458dc1edf93eefd657d504fcf938997436656c855b977dc9de21b01c4f1b2c48ee48e6409b13a4290c7b95a08a29d983b3b96c37e2556f9d6e8f5bc96a137f4a629161b4d287dbbe0e293d8247445b9910787912cd623d70"}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={r1}, &(0x7f00000002c0)=0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r2, &(0x7f0000000080)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x13f, 0x1}}, 0x20) write$rdma_cm(r2, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r3, r2, 0x0) 2018/04/29 21:25:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="e599b5bf0800000000000000fb542113", 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='rdma\tcurrent\x00', 0x0, 0x0) timerfd_gettime(r2, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000180)) ioctl$TIOCSBRK(r2, 0x5427) r3 = accept(r0, 0x0, &(0x7f00000000c0)=0xfd38) sendmsg$key(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)={0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4}]}, 0x30}, 0x1}, 0x0) 2018/04/29 21:25:18 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:18 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x24040000, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x87, 0x181082) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000100)={0x3, "51ae74"}, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x8, 0x6, 0x0, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r2, 0xfffffffffffffbff}, 0x8) 2018/04/29 21:25:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000cb9ffc)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0xffffffffffffffd6) bind$inet(r0, &(0x7f0000c16ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x20020007, &(0x7f0000e97fcf)={0x2, 0x1, @loopback=0x7f000001}, 0x10) 2018/04/29 21:25:20 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:20 executing program 7 (fault-call:2 fault-nth:17): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:20 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000080)=0x3, &(0x7f00000001c0)=0x4) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000180)=@create_id={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffff}, 0x13f, 0x3}}, 0x20) write$rdma_cm(r0, &(0x7f0000000100)=@notify={0xf, 0x8, 0xfa00, {r3, 0x1b}}, 0x10) dup3(r1, r0, 0x0) 2018/04/29 21:25:20 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ppp\x00', 0x8000, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) getsockname$netlink(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) fchmod(r0, 0xd3) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000140)=@ioapic={0xf000, 0x20, 0x8, 0x6, 0x0, [{0x9, 0x7fff, 0x5, [], 0x6}, {0x81, 0x536, 0x8, [], 0x41}, {0x0, 0x6, 0x80000000, [], 0x1}, {0x0, 0x140000, 0x40, [], 0x8001}, {0x5, 0x5, 0x9, [], 0xfffffffffffff6d5}, {0x4, 0x5, 0x0, [], 0x8001}, {0x400, 0x4, 0x9f, [], 0x8}, {0x7, 0x4, 0x3}, {0x400, 0x1, 0x876}, {0x4, 0x3f, 0x9, [], 0x6}, {0x0, 0x7fff, 0x3, [], 0x5}, {0x40, 0x9, 0x400, [], 0x7}, {0xcfa, 0x0, 0x5e2, [], 0x9}, {0x4, 0xd8, 0x1, [], 0x2000000000000000}, {0xaf8, 0x101, 0x8, [], 0xbc}, {0x3270d3ef, 0x0, 0x1000, [], 0x100000001}, {0xa7, 0x0, 0x367c, [], 0x2}, {0xffffffffffffff31, 0x9, 0xe6, [], 0xfff}, {0x0, 0x7, 0x5, [], 0xffffffffffffff7f}, {0x3e, 0x0, 0x8, [], 0xff}, {0x6, 0x3, 0x6}, {0x5, 0xe6f3fae000000, 0x1, [], 0x1}, {0x2, 0x2c1e, 0x4, [], 0xe}, {0x7, 0x9, 0x6, [], 0x401}]}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) r1 = geteuid() ioprio_set$uid(0x3, r1, 0x48c) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000480)={0x0}) r4 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0xa0010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x110, 0x0, &(0x7f00000004c0)=[@decrefs={0x40046307}, @request_death={0x400c630e, 0x1, 0x1}, @enter_looper={0x630c}, @acquire={0x40046305, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18, 0x38, &(0x7f0000000280)=[@flat={0x77682a85, 0x10a, r2, 0x2}], &(0x7f00000002c0)=[0x18, 0x0, 0x0, 0x48, 0x0, 0x78, 0x38]}}, @reply={0x40406301, {0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x10, &(0x7f0000000340)=[@ptr={0x70742a85, 0x1, &(0x7f0000000300), 0x1, 0x0, 0x21}, @fda={0x66646185, 0x4, 0x4, 0x4}], &(0x7f00000003c0)=[0x0, 0x78]}}, @reply={0x40406301, {0x3, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000400)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x2}], &(0x7f0000000440)=[0x28, 0x18]}}, @acquire_done={0x40106309, r3, 0x2}, @free_buffer={0x40086303, r4}], 0x1000, 0x0, &(0x7f0000001100)="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"}) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000000000)=""/174) 2018/04/29 21:25:20 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x3, 0x240000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, r0, 0x8) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r2) r3 = memfd_create(&(0x7f0000000080)='\x00', 0x3) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fcntl$addseals(r2, 0x409, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="05", 0x1}], 0x1) close(r1) 2018/04/29 21:25:20 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x100, 0x50000) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000080)=0xa7c3) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000400)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}]}, 0x310) 2018/04/29 21:25:20 executing program 3: r0 = socket(0x11, 0x100000800, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x2000000000004013}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) 2018/04/29 21:25:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2}}, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x98) socket$inet6(0xa, 0x0, 0x8) [ 358.507657] FAULT_INJECTION: forcing a failure. [ 358.507657] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 358.519586] CPU: 1 PID: 25389 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 358.526863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.536217] Call Trace: [ 358.538812] dump_stack+0x1b9/0x294 [ 358.542460] ? dump_stack_print_info.cold.2+0x52/0x52 [ 358.547658] ? zap_class+0x720/0x720 [ 358.551390] should_fail.cold.4+0xa/0x1a [ 358.555467] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 358.560593] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 358.565794] ? find_held_lock+0x36/0x1c0 [ 358.569888] ? check_same_owner+0x320/0x320 [ 358.574226] ? rcu_note_context_switch+0x710/0x710 [ 358.579173] ? __might_sleep+0x95/0x190 [ 358.583164] __alloc_pages_nodemask+0x34e/0xd70 [ 358.587844] ? default_file_splice_read+0x1c7/0xad0 [ 358.592866] ? do_splice_to+0x12e/0x190 [ 358.596829] ? splice_direct_to_actor+0x268/0x8d0 [ 358.601661] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 358.606677] ? kasan_check_read+0x11/0x20 [ 358.610814] ? rcu_is_watching+0x85/0x140 [ 358.614953] ? rcu_pm_notify+0xc0/0xc0 [ 358.618836] ? rcu_read_lock_sched_held+0x108/0x120 [ 358.623841] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 358.629369] alloc_pages_current+0x10c/0x210 [ 358.633772] push_pipe+0x400/0x7a0 [ 358.637296] ? __kmalloc_node+0x47/0x70 [ 358.641263] iov_iter_get_pages_alloc+0x84a/0x14e0 [ 358.646181] ? rcu_is_watching+0x85/0x140 [ 358.650319] ? copy_page_to_iter+0xf30/0xf30 [ 358.654722] ? is_bpf_text_address+0xd7/0x170 [ 358.659208] ? kernel_text_address+0x79/0xf0 [ 358.663603] ? __unwind_start+0x166/0x330 [ 358.667742] ? unwind_get_return_address+0x61/0xa0 [ 358.672660] ? __save_stack_trace+0x7e/0xd0 [ 358.676983] ? save_stack+0xa9/0xd0 [ 358.680598] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 358.685600] ? iov_iter_pipe+0xc2/0x2f0 [ 358.689565] default_file_splice_read+0x1c7/0xad0 [ 358.694396] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.699761] ? do_splice_direct+0x400/0x400 [ 358.704071] ? debug_mutex_init+0x1c/0x60 [ 358.708209] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 358.713211] ? __lockdep_init_map+0x105/0x590 [ 358.717697] ? lockdep_init_map+0x9/0x10 [ 358.721742] ? debug_mutex_init+0x2d/0x60 [ 358.725875] ? __mutex_init+0x1ef/0x280 [ 358.729835] ? __ia32_sys_membarrier+0x150/0x150 [ 358.734575] ? __lockdep_init_map+0x105/0x590 [ 358.739067] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.744589] ? fsnotify+0x415/0xfc0 [ 358.748207] ? fsnotify+0xfc0/0xfc0 [ 358.751822] ? fsnotify_first_mark+0x330/0x330 [ 358.756418] ? security_file_permission+0x1c6/0x240 [ 358.761432] ? rw_verify_area+0x118/0x360 [ 358.765570] ? do_splice_direct+0x400/0x400 [ 358.769879] do_splice_to+0x12e/0x190 [ 358.773674] splice_direct_to_actor+0x268/0x8d0 [ 358.778333] ? pipe_to_sendpage+0x3f0/0x3f0 [ 358.782643] ? do_splice_to+0x190/0x190 [ 358.786779] ? rw_verify_area+0x118/0x360 [ 358.790918] do_splice_direct+0x2cc/0x400 [ 358.795059] ? splice_direct_to_actor+0x8d0/0x8d0 [ 358.799895] ? rw_verify_area+0x118/0x360 [ 358.804036] do_sendfile+0x60f/0xe00 [ 358.807745] ? do_compat_pwritev64+0x1b0/0x1b0 [ 358.812317] ? __might_sleep+0x95/0x190 [ 358.816286] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 358.821808] ? _copy_from_user+0xdf/0x150 [ 358.825945] __x64_sys_sendfile64+0x155/0x240 [ 358.830430] ? __ia32_sys_sendfile+0x290/0x290 [ 358.835001] ? do_syscall_64+0x92/0x800 [ 358.838972] do_syscall_64+0x1b1/0x800 [ 358.842848] ? finish_task_switch+0x1ca/0x810 [ 358.847332] ? syscall_return_slowpath+0x5c0/0x5c0 [ 358.852251] ? syscall_return_slowpath+0x30f/0x5c0 [ 358.857172] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 358.862524] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 358.867359] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.872531] RIP: 0033:0x455979 [ 358.875705] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 358.883405] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 358.890658] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 358.897910] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/29 21:25:20 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:20 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000040)={0xfffffffffffffffa, 0x200000000000000}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = dup2(r0, r0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4004af07, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x2, 0x100000, 0x0, 0x0, 0x10001, 0x1, 0x7f, 0x8, 0x7f, 0x6}, 0x10) [ 358.905163] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 358.912421] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000011 2018/04/29 21:25:20 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4000, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x0) 2018/04/29 21:25:20 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x200000) r1 = socket$rds(0x15, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x30002012}) r2 = socket(0x100000000000010, 0x3, 0x0) write(r2, &(0x7f0000000480)="26000000130047f1eb0300f8590022ff001000e30100000001000000000000fe050010000400", 0x26) 2018/04/29 21:25:20 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000500)={'n\t\x00', 0x0, 0x3, 0xd3, [], 0x121c, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/211}, &(0x7f0000000280)=0x78) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0xa000, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f00000002c0)={[], 0x7fffffff, 0x8, 0x7fffffff, 0x0, 0x8000000, 0x14000, 0xd000, [], 0x10000}) r1 = socket$inet6(0xa, 0x4, 0x6) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000480)={{0x2, 0x4e23, @multicast2=0xe0000002}, {0xa79450e811d76ea1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x16}}, 0x10, {0x2, 0x4e24, @multicast2=0xe0000002}, 'gre0\x00'}) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f000099fffc)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x1b, "bab100d163d2c97ab6d044aa1ef5ef1a143692764c1c110f27cab6"}, &(0x7f0000000240)=0x23) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000580)={r2, 0xdb, "61051cf299163a2b67a6b84002c26b433f42c5727ca20b64fb594b61109734f49937fda4e90410073e4a3c871d712f6fc616a6efc3d367297b8020b8aa83413932ce25fb5c57a5fe2332bc3b40d026f65f331b6e2a829520f88696470e998c18500c1ee3ed247da1c3ee90d7f2e210d3cf20b6dfec6bf3b1815dce70d3050852a2b80bffdd290d712b7e02db9ebc6b19e781f610118aef0806a38398cad98ba5b523b15700a7d7764ec50fc7b081d4a535032c1df7e48844754081c7bec3c32f13b7a73a458953ddd58c62e1df6810959e892ff1dfd32a445b6968"}, &(0x7f0000000680)=0xe3) 2018/04/29 21:25:20 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x2}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000279000/0x1000)=nil, 0x1000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) write$selinux_validatetrans(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f72007574656d707465725f657865635f743a7330201573797374656d5f753a6f626a6543745f723a6370755f6f6e6c696e655f753a7330200000202f7362696e2f6468636c69656e74005223f46adc1a48421ca39cf5f68c941bd16d7de4a8c9ddfd39a4edb9a46c132f0000000000000008dd931c6c701d7f8f1bd7735a128ab8bff45f47b003577dbee71ca4b25c2f217d3096d501d6ca5f8e37ffd2d2a98fb3c789f76992e40ed459832ea6fa0b4ce08adf4973dba3890bb552c5046c53d2001451b993ede1dd1e70a8e041789fae4f4f506e1a"], 0xffe2) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/9, 0x9) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x1, 0x0, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @connect}], 0x30) read(r0, &(0x7f000022e000)=""/74, 0x4a) r3 = dup2(r0, r2) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) r5 = dup2(r3, r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80002, r1}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000140)={r4, r6, 0x100000000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={r6, 0x80000, r5}) 2018/04/29 21:25:20 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:20 executing program 0: r0 = socket$unix(0x1, 0x3ffffd, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r0, r1, &(0x7f0000000000)=0x900, 0x6) 2018/04/29 21:25:20 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x2, 0x0) ioctl$sock_bt(r1, 0x8907, &(0x7f0000000200)="5d2469413606e3a60a04682c06adbc98a1dcc7242d14337a2d562cb04a63c587d1c75a2c45c92cc9452af2ad5e6ce2f990cee9b03d46d56f7dc559e04a6a63e99bb01c5f244d4e1f2fe8b4") r2 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x81) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000280)={0x5, 0x10000, 0x9593, 0x3, 0x4}) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000010dfc)=ANY=[@ANYBLOB="1400005dc00100bb5352a552d71769b700000000"], 0x14}, 0x1}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcs\x00', 0x8400, 0x0) recvmsg$kcm(r2, &(0x7f0000000a40)={&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000980)=[{&(0x7f0000000380)=""/40, 0x28}, {&(0x7f00000003c0)=""/233, 0xe9}, {&(0x7f00000004c0)=""/122, 0x7a}, {&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/186, 0xba}, {&(0x7f00000007c0)=""/225, 0xe1}, {&(0x7f00000008c0)=""/145, 0x91}], 0x8, &(0x7f0000000a00)=""/25, 0x19, 0x2}, 0x40000000) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)="e0d77c45e370dad01e8eefce31a4c4a7f95efbe07d2346b5688b917d32ed7edc21d4d8150854e6573d287c6ff436dcc68134cecee3c459e30af432ec9dd0ee1d830571cd79fa2e91") getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000ac0), &(0x7f00000002c0)=0x8) 2018/04/29 21:25:20 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc190910107b04b23922bf364525085301a638e9c5cd9a6ad7921d46262df6139b520c7d71ac65ab02bedf677c5e9207c1e958fbe6f13e34a6ca7f1523de5fe4b845f806a397392151b8ebe0977410a367a3d27225a5b938b9bb652d5dda986bf7dd4a4400dd5df9889710a101f5bafc2866ea307714b66495b06226b7c4f8866087439b66c8c8"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x0) 2018/04/29 21:25:21 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0xe8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000008000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x9, 0x0, 0x0, '\x00', '\x00', '\x00', '\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0x160) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000000)={0xfffffffffffffffc, 0x7000}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x480240, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000001c0)={0x5, 0x2}) 2018/04/29 21:25:21 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x5, 0xfff, &(0x7f0000000380)={0x9}, 0x8) r2 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r1, &(0x7f00000003c0)="3fb528a8bb0d13974eee6d7dd526f6b24f198fadde2f6bfe1c186e113a7f892e8138f5cc81c2a3072bd2b907f6474e5737c8358832acc8fa3d5f54be965c077f827a7d3a585b525de513a42085b5bb269b812488587d41d62bbbc5a849af589cb121fac575c54763eff087ccbcb22af9334f8b39ff3cbd6bde9aa071a6b849c96e692fcb56a980832ccac58c3ba2d188e1b781aa79991f4e9007d599689570ff60c3f922b2285d8f4b94daeb3c3c1dfb0ed37d6c3a1adf43bf6a49ca781c16392140672144f4ebde2fd92c2738860bc6cd0ab14b3d72a5504deb2576fb4a82ec589a75af9ef1414cf6de53fac02e8497e7ba", &(0x7f00000004c0)="c8961590703a11c645a5f5bfdb180934d55a5eef4cf862c3b354ae11b62d46009a9d1ee7666fa44c6a4119a734ace80081e337bda0d4236dee638cfa5a003ad06a3e2ebceeadc9ca188037565eda", 0x1}, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000140)={0xfff, 0x9, 0x7ff, 0x3f, 0x8001, 0x5}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000040)=0x7fffffff, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x50, &(0x7f0000000b80)={{{@in6=@loopback, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x8001, {{0xa, 0x4e21, 0x6, @empty, 0x872}}, {{0xa, 0x4e24, 0x1, @empty, 0xffff}}}, 0x108) 2018/04/29 21:25:21 executing program 0: r0 = socket$inet(0x2, 0xc0008, 0x3) setsockopt$inet_int(r0, 0x0, 0xd1, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8912, &(0x7f0000000000)) 2018/04/29 21:25:21 executing program 6: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000ec6000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000358fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000a5dfe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f0000080000)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000909feb)='/proc/self/net/pfkey\x00', 0x0, 0x0) readv(r2, &(0x7f000065dfc8)=[{&(0x7f00000cc000)=""/67, 0x43}], 0x1) fadvise64(r1, 0x0, 0x1, 0x3) 2018/04/29 21:25:21 executing program 7 (fault-call:2 fault-nth:18): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:21 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="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"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x5, 0x280) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) r3 = dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x5, 0x7, 0x5, 0x1f81d56e, 0x9, 0xedb9, 0x5, {0x0, @in6={{0xa, 0x4e22, 0x94, @local={0xfe, 0x80, [], 0xaa}, 0x3}}, 0x2bc, 0x1f80000000, 0x9, 0x8, 0x3}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000280)={r4, 0x2}, 0x8) 2018/04/29 21:25:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f6465765f6d6361737400c087ea55011e14c9e347dd1f55a6026a1cb7e067f3c577981c0994a1e80d90d49d68bdbc91fab9c1c7f063e676e83c740e2d647534a1045850a23665d81ca07270193f5d003c10e34239844c5b6e8d1721c0b53a91c2f6ec1e5484645db3df") r1 = syz_open_procfs(0x0, &(0x7f0000865ff5)='clear_refs\x00') sendfile(r1, r0, &(0x7f0000000080)=0xf, 0xd) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x10000, 0x7, 0x8, 0x2, 0x2, 0x7, 0x6cde, 0x56, 0x38, 0x2ca, 0xffffffff, 0xfffffffffffffc00, 0x20, 0x1, 0x18, 0x6b}, [{0x2, 0x8, 0x101, 0x401, 0x4, 0x8, 0x4, 0x7ff}, {0x2, 0x4, 0x4cb, 0x10001, 0x363, 0xffff, 0x9, 0x2}], "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", [[], [], [], [], []]}, 0x1578) 2018/04/29 21:25:21 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(0xffffffffffffffff, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) [ 359.613890] kernel msg: ebtables bug: please report to author: No valid hooks specified [ 359.615939] FAULT_INJECTION: forcing a failure. [ 359.615939] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 359.634055] CPU: 1 PID: 25490 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 359.641332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.650691] Call Trace: [ 359.653291] dump_stack+0x1b9/0x294 [ 359.654384] kernel msg: ebtables bug: please report to author: No valid hooks specified [ 359.656929] ? dump_stack_print_info.cold.2+0x52/0x52 [ 359.656948] ? zap_class+0x720/0x720 [ 359.656972] should_fail.cold.4+0xa/0x1a [ 359.656993] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 359.657021] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 359.657037] ? find_held_lock+0x36/0x1c0 [ 359.657069] ? check_same_owner+0x320/0x320 [ 359.696756] ? rcu_note_context_switch+0x710/0x710 [ 359.701700] ? __might_sleep+0x95/0x190 [ 359.705689] __alloc_pages_nodemask+0x34e/0xd70 [ 359.710370] ? default_file_splice_read+0x1c7/0xad0 [ 359.715393] ? do_splice_to+0x12e/0x190 [ 359.719372] ? splice_direct_to_actor+0x268/0x8d0 [ 359.724222] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 359.729261] ? kasan_check_read+0x11/0x20 [ 359.733417] ? rcu_is_watching+0x85/0x140 [ 359.737572] ? rcu_pm_notify+0xc0/0xc0 [ 359.741475] ? rcu_read_lock_sched_held+0x108/0x120 [ 359.746501] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 359.752050] alloc_pages_current+0x10c/0x210 [ 359.756472] push_pipe+0x400/0x7a0 [ 359.760023] ? __kmalloc_node+0x47/0x70 [ 359.764006] iov_iter_get_pages_alloc+0x84a/0x14e0 [ 359.768933] ? rcu_is_watching+0x85/0x140 [ 359.773072] ? copy_page_to_iter+0xf30/0xf30 [ 359.777476] ? is_bpf_text_address+0xd7/0x170 [ 359.781957] ? kernel_text_address+0x79/0xf0 [ 359.786350] ? __unwind_start+0x166/0x330 [ 359.790483] ? unwind_get_return_address+0x61/0xa0 [ 359.795402] ? __save_stack_trace+0x7e/0xd0 [ 359.799714] ? save_stack+0xa9/0xd0 [ 359.803330] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 359.808333] ? iov_iter_pipe+0xc2/0x2f0 [ 359.812297] default_file_splice_read+0x1c7/0xad0 [ 359.817126] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.822483] ? do_splice_direct+0x400/0x400 [ 359.826792] ? debug_mutex_init+0x1c/0x60 [ 359.830926] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 359.835925] ? __lockdep_init_map+0x105/0x590 [ 359.840407] ? lockdep_init_map+0x9/0x10 [ 359.844450] ? debug_mutex_init+0x2d/0x60 [ 359.848584] ? __mutex_init+0x1ef/0x280 [ 359.852544] ? __ia32_sys_membarrier+0x150/0x150 [ 359.857283] ? __lockdep_init_map+0x105/0x590 [ 359.861766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.867284] ? fsnotify+0x415/0xfc0 [ 359.870898] ? fsnotify+0xfc0/0xfc0 [ 359.874511] ? fsnotify_first_mark+0x330/0x330 [ 359.879085] ? security_file_permission+0x1c6/0x240 [ 359.884086] ? rw_verify_area+0x118/0x360 [ 359.888217] ? do_splice_direct+0x400/0x400 [ 359.892523] do_splice_to+0x12e/0x190 [ 359.896310] splice_direct_to_actor+0x268/0x8d0 [ 359.900968] ? pipe_to_sendpage+0x3f0/0x3f0 [ 359.905277] ? do_splice_to+0x190/0x190 [ 359.909236] ? rw_verify_area+0x118/0x360 [ 359.913371] do_splice_direct+0x2cc/0x400 [ 359.917506] ? splice_direct_to_actor+0x8d0/0x8d0 [ 359.922339] ? rw_verify_area+0x118/0x360 [ 359.926472] do_sendfile+0x60f/0xe00 [ 359.930186] ? do_compat_pwritev64+0x1b0/0x1b0 [ 359.934754] ? __might_sleep+0x95/0x190 [ 359.938718] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 359.944250] ? _copy_from_user+0xdf/0x150 [ 359.948387] __x64_sys_sendfile64+0x155/0x240 [ 359.952868] ? __ia32_sys_sendfile+0x290/0x290 [ 359.957439] ? do_syscall_64+0x92/0x800 [ 359.961401] do_syscall_64+0x1b1/0x800 [ 359.965271] ? finish_task_switch+0x1ca/0x810 [ 359.969751] ? syscall_return_slowpath+0x5c0/0x5c0 [ 359.974665] ? syscall_return_slowpath+0x30f/0x5c0 [ 359.979584] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 359.984934] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 359.989767] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.994938] RIP: 0033:0x455979 [ 359.998109] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 360.005800] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 2018/04/29 21:25:21 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x20100) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x200000000010, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000006e00)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000006dc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000013000308000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c00", @ANYRES32, @ANYBLOB="1400e900626f6e6430000000000000000000000046757b23f366eca81b672d9cff8930ab09433546c603a2da4739bb33de9ea39ae90914fd95ee9f4790a73fa14b96139211afc1449ade9a36beaf96419a52db"], 0x3c}, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x6}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e21, 0x800, @loopback={0x0, 0x1}, 0x5}}}, 0x84) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe0000, 0x1) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) r4 = socket$inet6_sctp(0xa, 0x400002, 0x84) ioctl$sock_ifreq(r4, 0x89f3, &(0x7f0000000240)={'ip_vti0\x00', @ifru_mtu=0x100000001}) 2018/04/29 21:25:21 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f000000dfc8)={&(0x7f0000014000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10, &(0x7f0000000000), 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="580000000000000014010000090000000000000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="00f60000b703a90102a5ac2800000000000000002634e6fab02fd051b68df8e974222823e8ee0a558582332fc5fb7ae1657280377ff4b4a881dff2b8e88503a9e4715d6b979f18a1033cdd09497ab45931ff96dc0c32ffafc3a564381ce8f76e26e124df4cb3829eb1e8ff6b25c7fe394686ac37a9812be4f0ed64cbb85ba6b52742eff7c15e6fe7f2e702ced826051d9e6b47a7a21fb1e8a522a6a197f445cd234ed5be7a6ff3f0cc8f60ce68f1c53c37bad2f9900d87d5a279fb3680acea192469035ee13796ec26313a6ed70d5c1ec00db54a44993a6f64a077b87c087fcf5a"], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="2a05d25a80cd97c1ea9ad038b92d1a579b7340e6550cd9a9658ad10210acbb31685d07024bf54625ac95d88a38e045e5cfcd61ca18846ff86e51ca311e4e6cc07e4ed6688d7e366472c16c3964f73c7e103ddca57b4567d3706407001a76d3c82f1d08a0177609f171617e38c213af0cb8e38e97f9087ec1c508af1bc26a897e6fdba147be670215fbd54e30646069bdc6c2b24eb75fd25d825c5e6f5b91d853352ccae83aa5693442d0e210fb167d0a43c6b16b80d793eb03125431f9f17c67065b2e66270a3a07"], @ANYBLOB="00000000000000005000000000000000000000000000000000eaffffff00000000000000000000000000"], 0x52}, 0x4000000) open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x80) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 2018/04/29 21:25:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bridge0\x00\x00\x00\x00\b\x00', {0x2, 0x0, @loopback=0x7f000001}}) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x200401) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000280)={0x53, 0xffffffffffffffff, 0x85, 0x80, @buffer={0x0, 0x54, &(0x7f0000000080)=""/84}, &(0x7f0000000100)="5aa29db7a4e2abe3adbc58e4f7750b8aeeac7e1f05ff58058993aea0e604e5f474500bae99c5d3d7f47fab9b02b8e70f13ec6bd8062bcbe63699d174010be9bd934570ff04f43ca098e194bc48d213b722f4a3d0bf462feee1f74ffc95c4669f7bb4a511284b77506e1ec601ffa33478caefdc8a7bec999da59f212f780ad3ecca53094a87", &(0x7f0000000200)=""/24, 0x2, 0x4, 0x5, &(0x7f0000000240)}) write$binfmt_aout(r1, &(0x7f0000000300)={{0x10b, 0x8, 0x7411, 0x28c, 0x3a4, 0x24bd, 0x283, 0x7ff}, "ac7caa46", [[], [], []]}, 0x324) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={'bridge0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) [ 360.013053] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 360.020307] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 360.027558] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 360.034810] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000012 2018/04/29 21:25:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = shmget(0x3, 0x1000, 0x0, &(0x7f0000017000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0xb) close(r1) r4 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r4, 0x0) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000000)='ipddp0\x00') syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="0f2147660f7fd466b92f0200000f32ba610066b80000008066ef3e660f3a0e663e9f0f0865660f71f1c60f01df670fae43fa65646765660f15e3", 0x3a}], 0x1, 0x0, &(0x7f0000000140), 0x0) 2018/04/29 21:25:21 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(0xffffffffffffffff, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:21 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r1, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f00000000c0)=0x1ff) dup3(r2, r1, 0x0) 2018/04/29 21:25:21 executing program 3: r0 = epoll_create1(0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f000041bff4)) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0x0) 2018/04/29 21:25:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) flistxattr(r0, &(0x7f0000000640)=""/193, 0xfffffffffffffdf3) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0), 0x0) 2018/04/29 21:25:21 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(0xffffffffffffffff, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:21 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0xfffffffffffffd1d, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000040)=0x2) 2018/04/29 21:25:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_targets\x00') ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x9, 0x9], 0x3, 0x1f, 0x9, 0x4, 0x100, 0x100, {0x3, 0x6, 0xffffffff, 0x3, 0x34386cca, 0xfffffffffffffffa, 0x1, 0x3, 0x401, 0x4, 0x9, 0xdfa, 0xfffffffffffffff9, 0x8, "c46f9a95c55bd56e282aeb1fa6af175791e72cc609f95fbc01a4f3621a26811b"}}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0xfffffd50) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f000025d000), 0x3fc) 2018/04/29 21:25:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f000093eee8)=[{&(0x7f00001f6000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f0000000000), 0x0, &(0x7f00000c3000)=ANY=[@ANYBLOB="20000000000000008440000002000000000042020000000000000000", @ANYRES32=0x0], 0x20}], 0x1, 0x0) 2018/04/29 21:25:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') sendfile(r0, r0, &(0x7f0000301ff8)=0x800040000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) 2018/04/29 21:25:22 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x4) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000080)) write$rdma_cm(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000001800fa030000000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc1939332d7e08a0f47ff05806906ffaac4222b8890d3b15cb371e91d1051700d1b665facd47ce4970cf"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x0) 2018/04/29 21:25:22 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0), 0xb9, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000640)={&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f00000000c0), 0x6}, 0x0) 2018/04/29 21:25:22 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = fcntl$dupfd(r0, 0x0, r0) sendmmsg$inet_sctp(r1, &(0x7f00000050c0)=[{&(0x7f0000000580)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000001f40), 0x0, &(0x7f0000001fc0)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}], 0x1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/04/29 21:25:22 executing program 7 (fault-call:2 fault-nth:19): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:22 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f00000002c0)="b805000000b9000000000f01d98f8958010967420f0966ba410066b8030066ef83b90d0000000d440fc71d00000000654a0f01c80fd42e660fd4556fb9730200000f32"}], 0xaaaaaaaaaaaab20, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 360.718213] FAULT_INJECTION: forcing a failure. [ 360.718213] name failslab, interval 1, probability 0, space 0, times 0 [ 360.729514] CPU: 0 PID: 25578 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 360.736790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.746143] Call Trace: [ 360.748748] dump_stack+0x1b9/0x294 [ 360.752393] ? dump_stack_print_info.cold.2+0x52/0x52 [ 360.757603] should_fail.cold.4+0xa/0x1a [ 360.762012] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 360.767133] ? rcu_is_watching+0x85/0x140 [ 360.771290] ? rcu_pm_notify+0xc0/0xc0 [ 360.775187] ? find_held_lock+0x36/0x1c0 [ 360.779277] ? check_same_owner+0x320/0x320 [ 360.783615] ? rcu_note_context_switch+0x710/0x710 [ 360.788554] ? kasan_check_read+0x11/0x20 [ 360.792711] ? rcu_is_watching+0x85/0x140 [ 360.796876] __should_failslab+0x124/0x180 [ 360.801124] should_failslab+0x9/0x14 [ 360.804935] __kmalloc+0x2c8/0x760 [ 360.808486] ? rcu_read_lock_sched_held+0x108/0x120 [ 360.813512] ? rw_copy_check_uvector+0x31e/0x3a0 [ 360.818278] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 360.823819] rw_copy_check_uvector+0x31e/0x3a0 [ 360.828400] import_iovec+0xc3/0x420 [ 360.832106] ? dup_iter+0x270/0x270 [ 360.835726] vfs_readv+0xe2/0x1a0 [ 360.839175] ? compat_rw_copy_check_uvector+0x420/0x420 [ 360.844526] ? is_bpf_text_address+0xd7/0x170 [ 360.849012] ? kernel_text_address+0x79/0xf0 [ 360.853409] ? __unwind_start+0x166/0x330 [ 360.857543] ? unwind_get_return_address+0x61/0xa0 [ 360.862456] ? __save_stack_trace+0x7e/0xd0 [ 360.866772] ? save_stack+0xa9/0xd0 [ 360.870384] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 360.875386] ? iov_iter_pipe+0xc2/0x2f0 [ 360.879351] default_file_splice_read+0x514/0xad0 [ 360.884180] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.889535] ? do_splice_direct+0x400/0x400 [ 360.893845] ? debug_mutex_init+0x1c/0x60 [ 360.897982] ? __lockdep_init_map+0x105/0x590 [ 360.902463] ? lockdep_init_map+0x9/0x10 [ 360.906505] ? debug_mutex_init+0x2d/0x60 [ 360.910637] ? __mutex_init+0x1ef/0x280 [ 360.914596] ? __ia32_sys_membarrier+0x150/0x150 [ 360.919335] ? __lockdep_init_map+0x105/0x590 [ 360.923818] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.929336] ? fsnotify+0x415/0xfc0 [ 360.932964] ? rw_verify_area+0x118/0x360 [ 360.937098] ? do_splice_direct+0x400/0x400 [ 360.941403] do_splice_to+0x12e/0x190 [ 360.945193] splice_direct_to_actor+0x268/0x8d0 [ 360.949850] ? pipe_to_sendpage+0x3f0/0x3f0 [ 360.954162] ? do_splice_to+0x190/0x190 [ 360.958121] ? rw_verify_area+0x118/0x360 [ 360.962255] do_splice_direct+0x2cc/0x400 [ 360.966389] ? splice_direct_to_actor+0x8d0/0x8d0 [ 360.971221] ? rw_verify_area+0x118/0x360 [ 360.975354] do_sendfile+0x60f/0xe00 [ 360.979058] ? do_compat_pwritev64+0x1b0/0x1b0 [ 360.983624] ? __might_sleep+0x95/0x190 [ 360.987586] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 360.993106] ? _copy_from_user+0xdf/0x150 [ 360.997242] __x64_sys_sendfile64+0x155/0x240 [ 361.001727] ? __ia32_sys_sendfile+0x290/0x290 [ 361.006295] ? do_syscall_64+0x92/0x800 [ 361.010260] do_syscall_64+0x1b1/0x800 [ 361.014130] ? finish_task_switch+0x1ca/0x810 [ 361.018614] ? syscall_return_slowpath+0x5c0/0x5c0 [ 361.023531] ? syscall_return_slowpath+0x30f/0x5c0 [ 361.028446] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 361.033796] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 361.038625] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.043795] RIP: 0033:0x455979 [ 361.046967] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 361.054662] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 361.061916] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 2018/04/29 21:25:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x8c) r1 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)="fd2be7a069f064ffa38dedbd1bbe5661a21b7375991c3de1db11ebc5642aa72b7e4a36ae61ec88acf9db8188971f8b8803145f016eea3280d4b14c979feae0eccafbd0faf1f516dc637900d66e68fdf2687a5cccf0c769e31be9ca2783", 0x5d, 0xfffffffffffffffb) keyctl$get_keyring_id(0x0, r1, 0x2) socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0xff, 0x200800) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f00000002c0)={0x8001, 0x6000}) 2018/04/29 21:25:22 executing program 0: set_mempolicy(0x8004, &(0x7f0000000540)=0x3, 0x2) r0 = memfd_create(&(0x7f00000000c0)='\x00', 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000000)) [ 361.069177] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 361.076439] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 361.083701] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000013 2018/04/29 21:25:22 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000590fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0xffffffffffffffff, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) r3 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x100000000, 0x4c400) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000200)=0x8, &(0x7f0000000240)=0x2) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000040)=0x100000001) getsockopt$bt_hci(r1, 0x0, 0x100200000000, &(0x7f0000000100)=""/127, &(0x7f00000002c0)=0x7f) bind$alg(r4, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(authenc(sha1-ssse3,lrw-cast6-avx))\x00'}, 0x58) 2018/04/29 21:25:22 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x800, 0x0) read(r0, &(0x7f0000000080)=""/171, 0xab) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf0, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffffffffff80}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x13}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80000001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xb8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3c}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x13}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffff001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e21, 0x20, @loopback={0x0, 0x1}, 0x6}, {0xa, 0x4e24, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0x7fff, [0x6, 0x3956, 0x2838c0, 0x3, 0xee, 0xfc67, 0x9e, 0x1]}, 0x5c) 2018/04/29 21:25:22 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x0) 2018/04/29 21:25:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') sendto$ax25(r0, &(0x7f0000000040)="fe73fa04ff8933d4eda44d3e18223e5edc4044423305f3f607b2ab91f9911f8e19009950597e45501620", 0x2a, 0x800, 0x0, 0x0) socket$inet6(0xa, 0x80000000000007ff, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, 0xfffffef7, &(0x7f00000000c0), 0x218, 0x0, 0x19, 0x400007ffc}, 0x8004) close(r0) modify_ldt$read_default(0x2, &(0x7f0000000100), 0x0) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x2, @multicast2=0xe0000002}}, 0x1e) 2018/04/29 21:25:22 executing program 5: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0xffffffffffffff9c, 0x3, 0x1, 0x8001, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl(r0, 0x5, &(0x7f0000000140)="e22665e5dabeb5fa8be385d9802c5da10cd6a85c94aea8e752ed1e44bc905ad69d20d94af67f6bc938b17938c58ab81acc70df8b63a365e91a75cd72d93f4842e09e263d99f82ad11e0ece15bb5197d595bf70c20d0d911f773ee1d37e7767fe17541b1353da948b40e6a079f68ae272e6d7ed8a4dd05602b4513a022b0bc55370ba32adc6e3010c715d84a8377442cd04d4ae78869896f75045ef845877f6802a51ff1609bb2bf5a999ad2e0fd61135fb5f4a057b391063fcc066218d690d15ab657c8ab4e7a06536cd06e3bd118e238ceaa5f760e8e005f81a5eef6fdd763962fd4d9c0fd927e2565dba0022b781581036d2831ed64e") perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$fuse(r1, &(0x7f00009eb000)={0x28, 0x2000000000003, 0x0, @fuse_notify_inval_inode_out}, 0x28) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) 2018/04/29 21:25:22 executing program 7 (fault-call:2 fault-nth:20): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:22 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) [ 361.443591] FAULT_INJECTION: forcing a failure. [ 361.443591] name failslab, interval 1, probability 0, space 0, times 0 [ 361.454991] CPU: 0 PID: 25639 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 361.462266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.471602] Call Trace: [ 361.474179] dump_stack+0x1b9/0x294 [ 361.477793] ? dump_stack_print_info.cold.2+0x52/0x52 [ 361.482966] ? find_held_lock+0x36/0x1c0 [ 361.487015] should_fail.cold.4+0xa/0x1a [ 361.491064] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 361.496152] ? rcu_is_watching+0x85/0x140 [ 361.500285] ? rcu_pm_notify+0xc0/0xc0 [ 361.504159] ? find_held_lock+0x36/0x1c0 [ 361.508219] ? check_same_owner+0x320/0x320 [ 361.512527] ? rcu_note_context_switch+0x710/0x710 [ 361.517440] ? kasan_check_read+0x11/0x20 [ 361.521575] ? rcu_is_watching+0x85/0x140 [ 361.525707] __should_failslab+0x124/0x180 [ 361.529927] should_failslab+0x9/0x14 [ 361.533713] __kmalloc+0x2c8/0x760 [ 361.537239] ? rcu_read_lock_sched_held+0x108/0x120 [ 361.542241] ? rw_copy_check_uvector+0x31e/0x3a0 [ 361.546979] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 361.552501] rw_copy_check_uvector+0x31e/0x3a0 [ 361.557072] import_iovec+0xc3/0x420 [ 361.560768] ? dup_iter+0x270/0x270 [ 361.564385] vfs_readv+0xe2/0x1a0 [ 361.567828] ? compat_rw_copy_check_uvector+0x420/0x420 [ 361.573174] ? is_bpf_text_address+0xd7/0x170 [ 361.577656] ? kernel_text_address+0x79/0xf0 [ 361.582054] ? __unwind_start+0x166/0x330 [ 361.586190] ? unwind_get_return_address+0x61/0xa0 [ 361.591104] ? __save_stack_trace+0x7e/0xd0 [ 361.595428] ? save_stack+0xa9/0xd0 [ 361.599045] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 361.604043] ? iov_iter_pipe+0xc2/0x2f0 [ 361.608004] default_file_splice_read+0x514/0xad0 [ 361.612836] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.618191] ? do_splice_direct+0x400/0x400 [ 361.622498] ? kasan_check_read+0x11/0x20 [ 361.626627] ? debug_mutex_init+0x1c/0x60 [ 361.630761] ? __lockdep_init_map+0x105/0x590 [ 361.635239] ? lockdep_init_map+0x9/0x10 [ 361.639283] ? debug_mutex_init+0x2d/0x60 [ 361.643415] ? __mutex_init+0x1ef/0x280 [ 361.647371] ? __ia32_sys_membarrier+0x150/0x150 [ 361.652108] ? __lockdep_init_map+0x105/0x590 [ 361.656590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.662107] ? fsnotify+0x415/0xfc0 [ 361.665731] ? rw_verify_area+0x118/0x360 [ 361.669863] ? do_splice_direct+0x400/0x400 [ 361.674170] do_splice_to+0x12e/0x190 [ 361.677958] splice_direct_to_actor+0x268/0x8d0 [ 361.682610] ? pipe_to_sendpage+0x3f0/0x3f0 [ 361.686917] ? do_splice_to+0x190/0x190 [ 361.690878] ? rw_verify_area+0x118/0x360 [ 361.695017] do_splice_direct+0x2cc/0x400 [ 361.699155] ? splice_direct_to_actor+0x8d0/0x8d0 [ 361.703982] ? rw_verify_area+0x118/0x360 [ 361.708112] do_sendfile+0x60f/0xe00 [ 361.711812] ? do_compat_pwritev64+0x1b0/0x1b0 [ 361.716381] ? __might_sleep+0x95/0x190 [ 361.720342] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 361.725861] ? _copy_from_user+0xdf/0x150 [ 361.729995] __x64_sys_sendfile64+0x155/0x240 [ 361.734477] ? __ia32_sys_sendfile+0x290/0x290 [ 361.739044] ? do_syscall_64+0x92/0x800 [ 361.743008] do_syscall_64+0x1b1/0x800 [ 361.746882] ? syscall_return_slowpath+0x5c0/0x5c0 [ 361.751794] ? syscall_return_slowpath+0x30f/0x5c0 [ 361.756707] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 361.762059] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 361.766889] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.772058] RIP: 0033:0x455979 [ 361.775227] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 361.782917] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 2018/04/29 21:25:23 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000031cff7)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x3, {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x200, 0x378, 0x8, 0x1, 0x6, &(0x7f00000000c0)='team_slave_0\x00', 0x3, 0x1, 0xafe2}) ioctl$PIO_UNIMAPCLR(r0, 0x40247007, &(0x7f0000000040)={0x1000000000000000, 0x6, 0xfffffffffffffffe}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x4, &(0x7f0000000080)=0x2) 2018/04/29 21:25:23 executing program 3: msgctl$IPC_RMID(0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x2b) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="001b00000000000000d6343716de5a373cf615d1fddc6e3469c454c7d11117acee83ae421194141d32ca5c391250656f1b312891736c5633c5b52a18282a7ab88dfad582bbbb84acf8563c1a6bafb72cf4c793fd6b0548b62c2dc89df111f27fb79baf5cf49ca2801354302bfdfd180e54bbab21aee76fd07eff9915a6a713f48c242f0bc443434d665ea2ca5e15779c0495d8936751c1ab4b5260c2af9c6744996099c71d5a1dad1bfc8b51c469c8afa5cd41c36ebc499b3f24f651d28f7dbf655e60bff7a2554af3cf8572a508c4eb1ef6f329d3fef7cf85a19b75422b14c6"], 0xe0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0xc7, 0x10000000, 0x3ff, 0x7ff, 0x0, 0x9, 0x81, 0xdff, 0x80, 0x90, 0x6}, 0xb) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x2000000000009}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="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", 0x4a5}], 0x1, &(0x7f0000000780), 0xfffffffffffffea6}, 0x0) 2018/04/29 21:25:23 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0xb) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x0) 2018/04/29 21:25:23 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)={0x1, 0xfffffffffffffffc, 0x0, 0xf8, "cc450294828d9b0006c7c917d91a496bed9216a6f3af549d6ee1fe23a16ba2a4"}) 2018/04/29 21:25:23 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:23 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)="2e2f6367726f7570000478d081", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='pids.max\x00', 0x2, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x65, 0x40000) getsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000040)=""/249, &(0x7f0000000180)=0xf9) write$cgroup_int(r1, &(0x7f0000000140)={[0x39]}, 0x1) 2018/04/29 21:25:23 executing program 7 (fault-call:2 fault-nth:21): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:23 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000180)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000040)={{}, {0xe}, 0x0, 0x3}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000140)={0xf002, 0x1000}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x8001000000000000}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000002c0)={r3, 0x4ee}, &(0x7f0000000300)=0x8) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000400)={0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"822627722100e963abb3000000000005", 0x4012}) r4 = socket$inet(0x2, 0x2, 0x9a) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000), 0x10) mmap(&(0x7f0000014000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x2aaaaaaaaaaaac18}) [ 361.790166] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 361.797419] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 361.804673] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 361.811925] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000014 [ 361.896854] FAULT_INJECTION: forcing a failure. [ 361.896854] name failslab, interval 1, probability 0, space 0, times 0 [ 361.908484] CPU: 1 PID: 25645 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 361.915779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.925152] Call Trace: [ 361.927751] dump_stack+0x1b9/0x294 [ 361.931393] ? dump_stack_print_info.cold.2+0x52/0x52 [ 361.936607] should_fail.cold.4+0xa/0x1a [ 361.940681] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/04/29 21:25:23 executing program 1: r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bcsh0\x00', 0x2403}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'eql\x00', 0x200}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000080)={'bcsh0:\x00', 0x1101}) 2018/04/29 21:25:23 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) [ 361.945794] ? rb_erase+0x3530/0x3530 [ 361.949610] ? graph_lock+0x170/0x170 [ 361.953420] ? find_held_lock+0x36/0x1c0 [ 361.957495] ? find_held_lock+0x36/0x1c0 [ 361.961572] ? __lock_is_held+0xb5/0x140 [ 361.965662] ? check_same_owner+0x320/0x320 [ 361.969999] ? rcu_note_context_switch+0x710/0x710 [ 361.974944] __should_failslab+0x124/0x180 [ 361.979191] should_failslab+0x9/0x14 [ 361.983002] kmem_cache_alloc_trace+0x2cb/0x780 [ 361.987682] ? debug_check_no_locks_freed+0x310/0x310 [ 361.992884] ? mutex_trylock+0x2a0/0x2a0 2018/04/29 21:25:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000340)="9a0b0000001601c4c27d0e0544c90000f20f102c8c66b85b000f00d80f23e3b9020900000f32c4e31d5c3afc2e660f388232b81769f1070f23c00f21f835030008000f23f80f0176e2"}], 0x59, 0x0, &(0x7f0000000280)=[@vmwrite={0x8}, @cstype3={0x5}], 0x100001b9) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f00000000c0)={0x8, 0x2, 0x5, 'queue1\x00', 0x2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 361.996962] snd_pcm_oss_change_params_locked+0x1f9/0x3c70 [ 362.002608] ? perf_trace_lock+0xd6/0x900 [ 362.006772] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.012323] ? __perf_event_task_sched_out+0x2e8/0x1a30 [ 362.017702] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 362.023595] ? zap_class+0x720/0x720 [ 362.027330] ? perf_event_update_userpage+0xd10/0xd10 [ 362.032526] ? graph_lock+0x170/0x170 [ 362.032807] : renamed from bcsh0 [ 362.036334] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 2018/04/29 21:25:23 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x100000008}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f000067c000)=@fragment, 0x8) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x9, 0x40000) ioctl$sock_ipx_SIOCIPXNCPCONN(r1, 0x89e3, &(0x7f00000000c0)=0x8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000100)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x4f93}, 0x130) sendmmsg(r0, &(0x7f0000ad9000)=[{{0x0, 0x0, &(0x7f0000bff000), 0x0, &(0x7f0000cc3fe8)=ANY=[@ANYBLOB="10000000000000000000000000001000"], 0x4}}], 0x1, 0x0) [ 362.036390] ? __perf_event_task_sched_in+0x247/0xb80 [ 362.036403] ? perf_trace_lock+0xd6/0x900 [ 362.036427] ? find_held_lock+0x36/0x1c0 [ 362.036450] ? lock_downgrade+0x8e0/0x8e0 [ 362.062990] ? finish_task_switch+0x182/0x810 [ 362.067503] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 362.072708] snd_pcm_oss_write+0x516/0xa20 [ 362.076951] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 362.081980] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 362.086826] ? preempt_notifier_register+0x1e0/0x1e0 [ 362.091925] __vfs_write+0x10b/0x960 [ 362.095632] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 362.100463] ? kernel_read+0x120/0x120 [ 362.104339] ? __schedule+0x809/0x1e30 [ 362.108217] ? default_file_splice_read+0x888/0xad0 [ 362.113233] ? check_same_owner+0x320/0x320 [ 362.117546] ? rcu_note_context_switch+0x710/0x710 [ 362.122468] __kernel_write+0x10c/0x380 [ 362.126438] write_pipe_buf+0x175/0x220 [ 362.130405] ? default_file_splice_read+0xad0/0xad0 [ 362.135412] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.140936] ? splice_from_pipe_next.part.8+0x296/0x340 [ 362.146294] __splice_from_pipe+0x38e/0x7c0 [ 362.150605] ? default_file_splice_read+0xad0/0xad0 [ 362.155631] splice_from_pipe+0x1e2/0x320 [ 362.159769] ? default_file_splice_read+0xad0/0xad0 [ 362.164773] ? splice_shrink_spd+0xd0/0xd0 [ 362.169012] default_file_splice_write+0x3c/0x90 [ 362.173761] ? generic_splice_sendpage+0x50/0x50 [ 362.178509] direct_splice_actor+0x128/0x190 [ 362.182909] splice_direct_to_actor+0x310/0x8d0 [ 362.187566] ? pipe_to_sendpage+0x3f0/0x3f0 [ 362.191880] ? do_splice_to+0x190/0x190 [ 362.195844] ? rw_verify_area+0x118/0x360 [ 362.199982] do_splice_direct+0x2cc/0x400 [ 362.204130] ? splice_direct_to_actor+0x8d0/0x8d0 [ 362.208965] ? rw_verify_area+0x118/0x360 [ 362.213102] do_sendfile+0x60f/0xe00 [ 362.216817] ? do_compat_pwritev64+0x1b0/0x1b0 [ 362.221390] ? __might_sleep+0x95/0x190 [ 362.225359] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 362.230882] ? _copy_from_user+0xdf/0x150 [ 362.235028] __x64_sys_sendfile64+0x155/0x240 [ 362.239518] ? __ia32_sys_sendfile+0x290/0x290 [ 362.244090] ? do_syscall_64+0x92/0x800 [ 362.248060] do_syscall_64+0x1b1/0x800 [ 362.251934] ? finish_task_switch+0x1ca/0x810 [ 362.256420] ? syscall_return_slowpath+0x5c0/0x5c0 [ 362.261337] ? syscall_return_slowpath+0x30f/0x5c0 [ 362.266258] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 362.271613] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 362.276451] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.281629] RIP: 0033:0x455979 [ 362.284815] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 362.292515] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 362.299770] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 362.307032] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 362.314287] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 362.321545] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000015 2018/04/29 21:25:23 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:23 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x10000, 0x40) ioctl$sock_ipx_SIOCAIPXPRISLT(r0, 0x89e1, &(0x7f0000000040)=0x97) r1 = socket(0x1d, 0x80000, 0x20003) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x6, @random="d87dcb452ae9"}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 'vcan0\x00'}) connect$ax25(r1, &(0x7f000038aff0)={0x1e, {"86370506060008"}}, 0x10) 2018/04/29 21:25:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x5e00000000000000}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x8) 2018/04/29 21:25:23 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETZCNT(r2, 0x3, 0xf, &(0x7f0000000340)=""/155) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x8, 0x440) r5 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) r7 = getegid() ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000580)=0x0) fstat(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000840)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000940)=0xe8) getgroups(0x1, &(0x7f0000000980)=[0x0]) r14 = openat$rtc(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/rtc0\x00', 0x7c1ef3994456a0e, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000a00)=0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0}, &(0x7f0000000a80)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, &(0x7f0000000b00)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000b40)={0x0}, &(0x7f0000000b80)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f0000000cc0)=0xe8) r20 = getegid() ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000d00)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000d40)={{{@in=@broadcast, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000e40)=0xe8) getresgid(&(0x7f0000000e80)=0x0, &(0x7f0000000ec0), &(0x7f0000000f00)) r24 = getpgrp(0xffffffffffffffff) lstat(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0}) r26 = getgid() ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001040)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000001080)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000001180)=0xe8) r29 = getgid() ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000007280)=0x0) fstat(r1, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r33 = getpid() r34 = geteuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001300)={0x0, 0x0, 0x0}, &(0x7f0000001340)=0xc) r36 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000003a40)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000003b40)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000003b80)={0x0, 0x0, 0x0}, &(0x7f0000003bc0)=0xc) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000051c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000005200)={{{@in=@rand_addr, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000005300)=0xe8) getresgid(&(0x7f0000005340)=0x0, &(0x7f0000005380), &(0x7f00000053c0)) r42 = fcntl$getown(r3, 0x9) getresuid(&(0x7f0000005400)=0x0, &(0x7f0000005440), &(0x7f0000005480)) r44 = getgid() r45 = getpgrp(0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000054c0)={{{@in=@rand_addr, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000055c0)=0xe8) getgroups(0x1, &(0x7f0000005600)=[0xffffffffffffffff]) r48 = getpgid(0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000006900)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000006a00)=0xe8) r50 = getgid() ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000006e00)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000006e40)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@dev}}, &(0x7f0000006f40)=0xe8) stat(&(0x7f0000006f80)='./file0\x00', &(0x7f0000006fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f00000070c0)=[{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000240)="f59b31a5ada672cc6a195ee56180880cd257b5393b31f6f5123696411370a5dcba050d29beb86896a5ecd2e8299129dcfebc06718989e14b77ed1d5805089a26fee2780318b7387efb00de24ca3ff0121d9746b320d6d4da9b388582972da20139588648a5a315cac76af50c15f39232a8876b09c8f79022bbbd3f97a5efd3cd42415af8f2be40218596685a1a16ced7f2ccbc375403440e4ddf472a43d90fe41494558eec44605f1ecdbc6b6d1ef6807eaa12759c2bdcd1", 0xb8}, {&(0x7f0000000400)="e7509e5b5e0eabd14a950136acfd71e7d5ea46377291da86fba83295ea4e18ffd8e178c4c331eadb99c4526a9b852bd1a97086195f8c02be07eefc4a8f570ac489edeccc6eba924e6f1739ede0be1c6c376f5e5879a55acc2bc289c2e28e83cc3255faa1a592c27e33404643bd12be283feb70443f5e223eca42448ce98302546e5d070a61667e5978b44bd3871a83a56b25f8f9878a7f0473e8fec4fa5b36850d193996770fa3ee9d5eb4f28c39d4698053cc08fc4dcf26925196aef7779a28c359fb44538fb2a6b02628f1f763cd2431eff938dfab36d1f06a7581f9351aa80cf92b11298c6fc5", 0xe8}], 0x2, &(0x7f00000006c0)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x40, 0x4000000}, {&(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000780)="e8b5b234c3ddfdfaa54a5831185de11dad7dc6eb07c962389afa5631b8789a1b7d2f3328c0177a2422bbffab3a5facf69ebf70adc2223a478bb4efd54c66c4a23200ad4326a63694", 0x48}], 0x1, &(0x7f0000001380)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r14, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r18, @ANYRES32=r19, @ANYRES32=r20, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r21, @ANYRES32=r22, @ANYRES32=r23, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r24, @ANYRES32=r25, @ANYRES32=r26, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r27, @ANYRES32=r28, @ANYRES32=r29, @ANYBLOB="0000000002000000", @ANYRES32=r30, @ANYRES32=r31, @ANYRES32=r32, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r33, @ANYRES32=r34, @ANYRES32=r35, @ANYBLOB='\x00\x00\x00\x00'], 0x158, 0x8000}, {&(0x7f0000001500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000001580)="8cf414e4717504e392d4b183b62f8d6dc7ccc5705e043047e4c01c62ef4042e4228c1176015fece39051ba54c914e3a1d55bd10d5215c345156c3305e9696d0b05d9f10d4ba52a9b0a2ebbb4576dc4a366c5ebc2caa74ce41dae06638f5b460f4faa05925ceea49dce228f520892b8bcdfded15f2b4c782dedba3b7fa740704a2c0b6070f6f73d47a86e29637a0aeacdffee2e47596801df35620f6574d4f81a12ec7c16737179551f8e85f6cc6986587f2582f434f9714e8b74449adae4eb889ad6dcc49bd36b00e2fd458e8b2225445e817ecae6b3acc810fa911f5d9aa6d9f3ad33fcfb0f", 0xe6}, {&(0x7f0000001680)="9f9cba651ab4d59220c74e37d8c5dbd9fe687c275309131c7696aa2030ca3d29bd25cc25e06b0e7ce5822a0db148af2007d9f968fdd0b11729afc9c1fd11ec4a00889296601b72b514c2a1a72f9a228e9e2471f6401143d90a64bd27aa787d56864edeb55d4efc2c05413e6de61d0e72ddc8eb3f8ce2e9cdf1cc08347b5b21940cca16b7480da629801827956eb7935d87406c6bcf62956f77e7af6e63fe6bb5399432d06ed9907b28bba0b3212737793bbc8f1e62de584db7336b355cfaeddc8b43606428717af24c355ce5", 0xcc}], 0x2, 0x0, 0x0, 0x8c1}, {&(0x7f00000017c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="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", 0x1000}, {&(0x7f0000003840)="09098602bfd1bc21b8c482f8141368944c91a453241db3d8a9151bc2540a154ddc27c274f374252d8e0307db89caa265ecee55d0680ccb2e1c00de4b27cbc63603b052bcfc4ce84442d6ebafc316fa8f697b242b41de3c86cbe6c56ae7589b428aba4b07b4102d5dbb01e172572ab6f4a15ab6224f38673471ae019002a40400852a91a66aa8c59b9ec8df75e22b894021553e0ecd9c5a4620e94ed50cafbd57629d45467ea0bd05eb45a9dea78ebcf34bc9dcdd8c7e8d78124c8906f91f9604c61d69a89459b5dd7f180be5fcf7b9e6318b61475b5c", 0xd6}, {&(0x7f0000003940)="721a4861801ddde8c62a50ee61cc7aa715e29a39c0c5307586453334fa3ff1cf9f6d97237b54da538c5a8374f89e299a693e34eadda410eefc876dc14d6e7503d1bd72fc8307abfe1cf5fa12ab7b22864e3ca16420ba446c65bb4ac27d552e58db52d8bc1a4366816abecf35d3ac1e321f721a1b5ebd028635fc8ac38df00277d71a3327f5efd2af4730694d73c55b198fe3c8effa30f8460b4d97366f9dbe10983496bfc324423c250bd1e4509ac2429c24ba8e1e2cec8a472392d096", 0xbd}], 0x4, &(0x7f0000003c00)=[@rights={0x18, 0x1, 0x1, [r1, r0]}, @cred={0x20, 0x1, 0x2, r36, r37, r38}], 0x38, 0x24000015}, {&(0x7f0000003c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005140)=[{&(0x7f0000003cc0)="ba74c69406e8c9608c2d5799fec063453a9ee4efdf21dd54cda9364ca99b8dcd03d428f646642c04d174c00ab50f26a86addc815b25787845af56a48eead5a3b72d6ed2f66ccf9c476ceae7c83b9b25068196c798d7173adadd86bd5ee5e737517cd8bba0ce475227c58cfd88decff5edc940c90bcff4a944a11bb3c5a13473a5e831f41eb848e6a279e052faaa61dfa0f7ed56ecdc28bab95cb4c13a00f1f8966892e2b7bdb3af11cc8df427a", 0xad}, {&(0x7f0000003d80)="59e462f03a9adf8f1c7ee5e2f836dc29dcafc16a4dc10d19e7ee44c24f1f19190d219ad1f99529b7a0431f2d4d51056431d72c3a6558ca22de02910d17630563faab0cd9b4ce687c94e798e9a6631dfb07c7e60081cd8dcd0cffaacbfa4a9f68576a12d763d94d666a1e91189c43dd68f1012ee9aeccbcad5ce145bb83d5b095ac64089b455feff986baaff4d8169b0c1e61500f5477f9b2e35c186885914f2e77185a9d1880552dc53e1de49016bc797880dd9fb1adc16bb29f7c78d96c12dac84f6a5ae53d81dc144c16c20d0d78caa36fcb9094fd7d4cb80a4ee378ae56964f", 0xe1}, {&(0x7f0000003e80)="a0143bfe2f0a8daeec42d00fc6d73e7ce491b8903fe0d9eda69feb5c2a62efe7f4edfab1afe70f4ee7515d95ce9f5c6b98ecc45d6d7f1ff6bcfd2c5dd218ae5f089bb70f81de4307d4a5170f134a0668a51e91cb98555e54b861e311", 0x5c}, {&(0x7f0000003f00)="73145245373d1bbca1452d32d1f12390e73653fd469eff1d3409e2160c28d22d079883e358d63f8a0467047a2bff25c19ea95bf8676a6328dc6a02acaa4afea0890cd0918172570af84aa630e42b57a000ed455e574c11f6d198339bf1f1d8b2fd8dde8e53e79e168e6c1433e139fde8ecdfefa4004ab6baf296b7e2517902b41665cd7ed38b15385b", 0x89}, {&(0x7f0000003fc0)="2175fae0dd9c7761a04a6a86ae890c21771d3421348138e142eb8502a7ae7496d12508920825d38c07e134c2a5d83b2a70fb83602ef0aaf571022b3eedb945c294fd5fd2412f7ba201d170d32b3fdf27753e5cf4ab3368fb54eb0ef2b790da3216107497309ccea0f4204579a87c49367f4b340923c8dcd673e11c772e20ab675871039b2f12a23fcd21712e37848087a7a2b34a08f2d770edddd6bb7d03170218f2360481ee72e645f171be2dcfc6b62493440c475b70a2f0221f0aa6480ab754b20f7cd6cdc471", 0xc8}, {&(0x7f00000040c0)="a351599c06620936482603acdaa213c7d4e0f88fbb3f96b8ecf9a098fe0eac1c21f49dc159675fd24a9067fac343c8f166b5d44c0a33fbbfba6b04e3ff14993a80e7f77e165a9ed10aa644e638bdc08f43f0405d7de537122a5283", 0x5b}, {&(0x7f0000004140)="8c583c9e695ebf17f927205380aa63c3eb0c5c0ef901c3bccb402d74fbe10c8f5ca3326edede69311f2fa6d72721ab8961df82ae84204202ec34ee08006377c4fcf9d237c7fc067452e16da7c37e8d3de2dcf2504f0656698b078e120b479fac6d8e0420fc511bc74a53b59b658b17078f3a7ed1583e866cd2e53d7153a6738bc3354b4b55da73bf142f76c54fb3e0f70d9d5472500235a46ccd33a68e13af018f33bcba7469fb006b9a667b98efeb1f09a966765ff29fc93834fb5ad80d3a00d8e8b2c6f2150271d14cbf8a1a00391be166825cacf804c5d4925ef80b2f1055bbaa32548f913e4eb7de45be5af511b390950b928bdf4125473ec929aba7322b97140ca13ac2d99019d729ebdc5010631fe040dab5f7cbd34adb601e3c6c8a5267ec5713c9ec987b9f1dba30281146d90d2f2e48a73ab53252942986b5c4980c2aab49095c0d2d63790a680f3d829b5807e87ed4de76719c4578eaffb0e9521945c410b5f6274280da868aee40fbf2951e70ba430eb696de5c47b287dc9506b90861aa52fc981dade11042311c870f6fdfaf443d02e6b5a6d625a30ef6ec8180eb2de2ce1acd4b6b23b8013dc957ef8574704f33e995146258dd9d01abab922bed2a1a94aee4732671dae74662cbe4aaeeb5be6e44f52c058ac482c40c08731f61d2d8418a7bbfbbe967d76b3f669fb246ddc93dfbd89cf6a369eec29527b983ddec395cec28e6a42f7d86f02d5781d43f5ee9ed9ac97d1927d2c4228b744f1f103c013477765132321d25f185362fce1b59520ce815f7cb765fd725340b115b7348b0153f26500fd0249ed0cb9bfc56cdbaef3a4aba8b129b8c34bb93c21328b04386e7339e8e6bc466cc6aaa13ac3e26a2d20ab6bae40dc107fb85cf4c8a4e3950df992277e7b50d021fd9a8881f67998b0f2f733f9a0ae2cf194295934b0c68b1e70c3a095a088743cc668c8329645cde7e31d57136d672b1ca0d8569035c1479914b84045c5eb60e79038dc3b322666cfb72d23550450caf4b3aecd656a8e039001449b8b54134008ad178ecff81bcb5452843bf1f2c891d0d667eee672ee602983ea6f6d8089109e586b18147c22c4363984f8bf21fd82ad75ffd67585abdf124db029c3b4e65e75cde23c49031869298ad2c7c3c25c591153020968ceb784eade29e2764aeaabc1e311b46bfa2f07fdb3cf5814b984e9a4d4a78fec7946ada5b29fc234aa4e9c478110ba3263209f11e3cdffe72d846258408d63466142a7db59bf64f35842b7c3724971626987e679986d3d7aa3a4a3789d59d41944913e3956c3da0a214144adf56c531ec52f4e786c682aba69f8071427d4fdf9c6f286d94745917f2105dfda00b0877ff22cdcebc9f021be3b8a669955598937dbc8311bff80bf0e232564ee068c2fc463557247703fafe5e8b67d80f80bdfa6debaf9f8460f58e2b43e58b5ad7bd6e74dc9e353681d3ba5931e52f0b903244ad35ed46d8127dc3b263fabf703a2ae111460f7c6068d12fa2c613e7ab69e696e4f1035ed32229ec38258d9cfd5597bf49d3c9428ca9ba3a1d0718987eb459d4c99d8e2adcc764dc257b15d58a7aa2f9d206f254c7f5f37a3c7276aee604855ac2366f0b2595b23031a5f56b170a3f0602826d7d8a9db1ee1bace302a26c2fa8719ae02e7dd8ad23e77a5fe90755719a976203021ddf26c9b23da149057219d85a9d967bceba6410166a064cdced91fb1dc311fb784b2e3e25b4185882705893c53873ac67de17ead1f1bbc5433ddeb7fb164892403237a5fac401709076fc0d08afe73e31b10c5506e6ce343e9b03e75fcaca2dd059d12c659df5af98df41c1ca88553081ba862f1910405e329854e56613a1e9b9ab47cd08be1245fa5d10808af2801090a9218671d7c79db82455e618a0a7498717e24918c1439a027c43feee2fd66281329f9342ae11fd1f3035a197f6e0f2c22b5356fbfda6ed3487e1fa5490f81730ca922fc8a159d38c0ac9168b48c808b85212ee56f6360b9c37a0ccf17bd11b6028c4159cc5680234bdb2ef4a6219bb6a7359f9bc3515ac337f53382e023c5f2c1a02706d9c02195a11163f0b638eb4b7adb9d6e95d908a55b322f7104841c6976f9a63c250314f7c19877f2b43a00c333bb6c1241b28459be17f72010efaddfe7ed2dab90f0fe1c655a7e860fd966e04b35cb3f5875811b18e7aa05688375ea12a71c43dc29a95bba15640e3985712cf83d66ae8bf79d5b4cb2cd1a1e92460e2c49b2aff5f0cf3aebd5a57b6e117f7148ba87f11d8afd61d761ec3d1c73f2ca97da50d8cfd4d9d72bfeab8db8c650ce454edf9c528dd1c8e5174e2d6843db90440ee05baf5bd17275e69f341630c588001fa34f5dc89043c72a1ad078fa79c2be23e4a14e393346033f6eaa0bbbe5dc41a63e11cb45ee7b68e927c8dd98cf683cf4f7e74d20b9f27d579263e2156045420943fe3e44ae91ee06cd9757a6eb44a6adeea7cdfc9a79495b9257a7dc5cb64485db50fa652d3bbacc2f9190b721de4e05f9d3c8305309a0c7b16d5051118bc254785185a591553e02e0186f778652869c4731efbd434ff428a98646783b0a9cf689678551b1d0613341c785644bff1e66da75ba385bc13928327e8e97c65931a6a96ef01cf9d6aabca62069d2048a821e1ae66e00ded71215d7d8d9bf410857ba90baa81ade57cb380b54131bce6c76a840609058710b5e237daf6786ef7644c0df7c4cd3bb87538dff3e5c1749d01a1876b0bbc7942289259b94eafd92fb30d2b570c577e95b0a432e41a761d3f8f64aea6902db17d17eb2f29726dcb4f21d6264b7c1bbf402608cfcdb6363886cfe64f5de13cb8d7f3e7f6f8213e8227075d5935e1b2ea65de3562aba04b9825f4285ef97b78a886916e9c0d5c33c7dd913dd91bd3513038afed45aa1912643e32be95b5221a74b3276a1f396514ac3013e13fadd0ae8529e7213a9ae0a52e1b1f43332be7a9a497378d935f60186277faa7a792c383e9209d92058436e2c67ae366f423a5fee396f311942b609c0c24fc05d4d635bef2be7becc2b405c5fa953bf73fe7ce45176886d3f3644d99438c6a9dd56cc582da3bdbe1b4d9c41ad950bc00760d57d0c1ea75cf9095d5fdb88829a9219944ba9397b847562a808ddb82ac591ab75459f5f0559a5c0d717f8201937d5e74ce6e4a40ce8cce06aeaf27d08f10dce0403a32e79e90fc1131c38fb888ca1b453a6a41f5499494fe88c9dbae0946a76d1974e74a99d52002665ea85d40580a7aaed95f5e1523eb29e6e8294aace1bc4eeddff0570e291384cb6f17b85ec7fd79996d039293934395b4d4c9f69bf1ccbb8c99561abfa146b517a67192647cf943d1397d6044fa86ad6bd23646585944e416c8b3832d19a9db8a48fa839f2beb0d7efe14377621131a22d801358dc078f2d10af3f2010585261b8976a365a38eb73ce9631d7cbaf06bba91583472d74530104a3feece5e089cc240806c6a2696650f266e2b9540329633f54561aa0a58877a51a804b816c4e4c6749e61fd5665c538013f72a4d64f9d3f2e65496c18836779567eff220567c47f1ca68b1c9d08a0ad7cf2a7207d84e2d2a561905a10362602b3ac6a87a24de2ad61f88fbb349db4c5970997efccba3a78849e38c2effe9ba860567749444c5d97b2384b21d22c3969ac1f1760def7cabb04f6e79fae25dfb55144f7798a8c65d437fbd054f427ad6e77ff3550214ce700b0cb65bbc27674bb79c00ecfe007e2e032b0c784317518354601637172c3c2edee862d4135e00e27f2b23ba1965b792fcf091517cd6e48a15734da133c9f65cb4aa595e798cf7561e0819aab0f1a50841d0953dc1a6a08b3f96bdc80d4e33f7f89bb64d25f493b64f2bd613c2a6c92333f1a42667ee18e456d1023f17acacaaac00ad9593c3d330b5069c545973a9c3682bacfe7418549ea54925ae0d7de2bde586d638b92ab60706f666877b01359df8a2e8b3a7ba97be1954a64b1decdce7089e4a4e9d5ecf10dba885f314bda2cb9fb8631b52063cd09f2a02504174bfb0dbe82c85cfdb36d739b94bea85cef288e4abd7fb1baf35f49f6468e8c0e88142eb0e50416fb61402155c2980a7024b346a90e0cbdc63d244d1bd7d532ba0aeecb0a7d5ca8418062f7269e0f8c85f68f3204a7e5f53fae797b2b8446cfe42c0f4df8c6a407e389fbe2f771f37b5af1b70b3cdc0912e0dba0afde41c59532bc8523ba6362ad21fe80d0677d98f52aaf6d87790c5b8fbe6dc73a7929348350458f6b3574a802de70b298385f122976a1e55420646f7de7f4791c6e6de6803503f52e8fb72da72c729594294260b9e973a16c5fc5d88922f8ba87de9afca8a947464f25ebd896930224cd899a037b76c294430eebe2fb4e9b25f24c2d2c3581e9195b1f44f34a3987dd2387f2c32b6bdbca18b44a9f65659d61ea6643b43c2c3ec1ceefdb178fe7e1f513f560ce31daf136762740a039b3b027d82bedb164c5aa9c38e4e1d0fbbb61e585a393201a7f17a1a004559e2fd57ae90f163dfeed844fb19429eb47941b1e64cbc023fed05b49014648c81a992e91f872e12cc215c841f268d7a298cc8854971970ed10a69c159db7d381e894223934c7d2caee0ab9ec9c5c0ea74e906fcd94baecb4cbcadec9745e744a8b767127120acc13724ec9dc6c30f9b54b084c5c555a9d0919f69b86871238e393481135268fff06c3349c29f22b27c39838d35e5dad4440d727153b7a856967515777224791ddad8b7d45406c554de7441e3881a6755c1272c4701e209b15ef2c34cf827231b5e2d39a0a97ba238517d63111c50ed051ceba654f851e4cfd7a16923962c28a5e5a11acfea862bf5bcc297625a5bde2618a1ffd3ff26497be1697f05f896bd825c89738667a256023ccb29be342ed85a3d5e55bdcacddfb51a89d01877b685a124eaf0d587078b12c4ddf15fb6fb24e34793732397c879b76e45f5e09ada1b3f04520cbb18ae0a735302a291485315a65e1577301491ea103f49d8e3fe948c03e3383aff7ee176d2419516f006c09097cc08fcc4080e8a90c03c82be3ec0b349c639e4bb220a942769b91b44692068d0c98fbede40ab16c38825256a59b98d6d778c3276ca4a6affa126a30c82abb80f0f0d6021e2b948cb9bd652b13b29e15e34393a8c8654daf52439658a765169b74169bbc0eab0319e95ea0f82acb4ced6a4d7764ac95d54338d611a9955d2f4b2461d5886f93eb70ab3dc778114a980a0f8ec0a0e6584d83dcb160d0783cadf3cbe9f302143192d9aac2321739442c53c95811119a9d7bcdd6693784e37d8e5dbbe07f89fe8ee79ff2cc8792c62247de3ce6defdddd6b46c7d47df1bc0ef32454611609fe3532be5fdd35fffa3fd94489864cedbc3b2dd488d4b88b8ada4b409e33d03dff9f93460363eb27f00f8dfea353ed6570d32e9c04ba4cf50807b067b22ac0a3b6050d87cc35e2fb3ed7b59d858fba3b5da8067c0148713c1233a55858ba243a1f1e1021bf98688db57da348893623e9fde8b5b8e4205c5b188680c3c1efc392e2e50778692e68ba88dcdf416a1384b38e601d72add819673568879912d42758c9f261a3eab8a2d88ccdcee0df9b0df1ac8dbe83958ef5b00fab7c0f51d825230bf06f4637208e62f52ea6d62d59e84fe99cf5518f180f443dd47157d2283bd6097b8ea7848ecfc70e7a608edb8cd8d7e31614e426c1b43ad388405a8685be31def416e728214373ea52bc7580edd4ac71a08b34eb1", 0x1000}], 0x7, &(0x7f0000005640)=[@cred={0x20, 0x1, 0x2, r39, r40, r41}, @cred={0x20, 0x1, 0x2, r42, r43, r44}, @cred={0x20, 0x1, 0x2, r45, r46, r47}], 0x60, 0x48081}, {&(0x7f00000056c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000068c0)=[{&(0x7f0000005740)="15baf5b3875ddefdcfb3fd465d68a1f6bd1b6fb298cca338b02b1b950cb547a608618d956986e279705b92a99de93e7691791e0f293480cb99e76af56dfc224e599691cd17f22d4e8d55fc111dd2f97f", 0x50}, {&(0x7f00000057c0)="54f8d08e143629fcc9763cc44a24e3e5b07a521e924202e05ff8ace25e11e4c7a8886ee54c902e8f5949036e849827af308dc273baa7d71b49eb36129d2d35a81ad0369183fa436a4ee688014ba684c7c3c73068740822e15b0ef126f5e10ded2b41cd666e24878c3256db41afb53d69c3f66076ded1bcee4c34c4698464e7caf581274b19ef1f7a3db10987810c605bb124a310", 0x94}, {&(0x7f0000005880)="aaf8a83c2755564b51d7884d956cb3fd515300b0a9578197c0f1fc756474eaf34e925bc33260cf9bd9f012d0e810f1413c6f9289a1ecaaa6bb6fa3d7bfd4eb9f72df596b0d93482d31b1ef5b8980281ac5a8419381c8c6bf0c05cfa688bb62c24126879010aba7ac7ce2626dbb25ebde2da81ed7fa562be9db338e0cb8c5ac978959bbd06a9f36530a12389be8b5f331c6007a2e4dc5d3de0528a4f09dec07d04d8e2712337cb671949897d696af2b8834564daa39797eb870e3e09ed5dffadede605a8f54fb8460dec36cee8f89765253e9fc63c23fd8a550502fbdc50583ebe33315d3040b31d9024d9dd8f527ce711b183ebedf25179ab895b9a9c93bb087602f4ed280692b2d103959d4529ad101cd65bee934350244d39511a7235425646cf551fad2140c32ad139c6970f82df9468922641259951a90613873b399591370bc8f59be097db5d8640c37756874a8e75e2e32fefab46cc704ec83b68b2ec640f4ebd8019175f6984815be05d9c5532c2356cc6725fcbc677195eacb9a23ba912bee7c409c4de8044ae626d95bfd5dc2a4efc885b1463fb598a8a121cb2e648c58aa17178c3b64582437ce251eb8a1b8b783940e56cb10072566aec8c3feb8dd31686a7c33f8b24cc5dbb02dea1523dba7d696539f1f67458f3dbf0d22cb7932b2e2a9452051bd6df8d89da31195b27b3d7c184188a3598833db604bb0cea68d640375d17c534d42d366f03a4c36f3f2af16d6d4cc10b0f4d3008a3cc7a3f4e32974af102a160f31ffd6de0d9178adf09e4c2d3b81ca499c700afcdf4fcae9e892bee7ce97bd7de586e35fbecd89788ead6d99e13f16de108989b04734be1ea18f9b5687544605444f5181ef6988801941a49530832935e794be7933f0cd13e588e7892d36c1d6ac79417dfabcdb602923b49068eb430958a822a6fbc4fb6f3c1c10fc5bcede77f1a5f331214ae5f30dcdec2bdfde4c486a27cbc08a87e0f9c73f489440b60247f26a9321d4b3a22b61fc0962c1a71cd4e6dad19476d9819f7d967741368af22a7a7d2a26740153917aade1306e18ff56e512e9768aaae1e340a350af95f8fa37f21f09710f763803fcda0f3dee4f35c43122713ccf352b14544c3e6ad1582cef7361c28f14b319f6dedf8c37efe9d0665f60bd9ce3917d5ce0057150386d5acd963a49ff24adc0e60127519d0de53176129f2fac9b6f55e9a8dd80ee020d6c2617695ddb4b19368c845f79d08b8a981a9a56f674d615cef4766b3b76aa3cb6d64884fd2e7260ea139d08edf9e3c2515238e5edf51653d04b1cb87c7399e6a01b6d64df970f706de2ce6b4e0ef6103ba67bdd28a9bd501026e8f8a6edbd54d4e4917fe6d19a50da0d1c1e0bafba3d726ab987555ebcf76d3356507949fe0e90201ecc01aaf0743744446c5ffdf27ccaa8c2221f4cf2a265dfea24c4f8bcaa7d577b1de10e94424b999bc4385f056008015d58ced2350e2f163465458b70e70181890dd39f26e55806bc2ae2920af1bf727eb120cfb1df2c4ca9c188d25740a63d5f38fe60ad7944f99a5c1eb3d9dcc7e300719a95b0f2534d4a059c221a6133734a788f6af9d1624799beb355ba12bd61fa17f499a3ee0e19b5f90e89faa299c91a713404064fc2be93c29877f7748652475281dc7e3d49d3a65bf0bb90a03f37d81b45acc3a0cc5ef989515db2b0c4b0a4f71527ccce8f0e7169c2d6623d1680f6cd5f181346d129688d8ed671e68abc784ff919c16863c09504a739e67b131fe4fa054f1b975797560ae0e2344117e8c84173fd6fece474605568baccd0f4bb4db6534196d89673acd750a4d708f2e87f46de6b95753c13d9e358791508a8fa6cf07aa285d73991123dc806328cbbe75c5ba14979a884d59d346b191dfc1b39f0a8d794d10471a6fa8af1f6ea57968c5048ae880b8f5c849cea0cb4abd314ba030ae3aa0ce8f6502759428b724f256496bbb45e9f24e6b693d72885ade60130c2bca7084cbce5edf94230fd73cb08f92ad80e189683aca2c40412d1e552421c8d9052a58a3e234bfaf8f9fda1c11752d608c7e01b1889743b7a78546a1fd6db1a02d26041025a146dea394d60fb58b1d6ec42362de13b4795a403381327bdd240757e6c7aab7c01c982fd8afb38cd4c05d1f01ca3ebe37350d27d7ac8d45d854da8d9826dddceb2dfae635fcb08766f9975601192a6fe7f6b52c40ef9abec8468651778bb70825931e49313b788736182c14f369af30a8fe18c87c615c3addab45e0692bdb0ecc942fc325e95e7a4de5b10f4c93737e45ccbbf83aea168ae12a9315643cb5729f748d5491214b4d57112d1dc19b83cfe2ab66de5b27373d1af726a5bdb44f82ba2e1756a32766d5980e1e38c59e779098eae8214883d1a0868322838bc91da7d46ffe2b8ecadad35428e27250398de8b6d50971a135ed43561cb6673c1b27d5f2332efcf32672780d0f30e9c754f4f1c100d7b7434effac473230bf14886efa0ce0a2d1cfbac997a0425c152fca9c37f225cb93d8e2b3b70a6674a7db4bc704adcfda230302a8d85017c62d0a651fceb401ca285c69de2886d3df98e745763d0670cfa2935f4836765d3617fd8e01f31185dd91d7a8ecba7575c87116acef18b619ac16ebb082dab751c275c757ea2244c1eaab7fe2e89a2f194af518ba1ceaa90331b635ab794502e58879decb8076a02dba14e5e1bbdaf42628d7462f0f1cd11687e74183e2e5b2e0a13b4d483c8cec8d64d8e872f91a74928b9785d5e59200319a079ffdfd4a659b0e1b0444cee5f1a310c9763bfc267384d72d232eb8e2fb3c792238d638439cc1d7fc412e59933f2fa5b757d196958438d9b17e932343c16523e79e8fff8f4ee4b312388cc339264d31cff014eeeb607957867dd3acc0f791b56b7df50438d46ae2f2b98cc46e4865775f69b500169a0044fc311a8ac10592b55efe6c1f5935f597f30bb5692ab650b10323c5db256a8db52cef9845d20fa9a5a6419b25b17ac294ca3b556b165db34183c369065b2f91ef5aac9534d5404fb82098207a5f93c67f5c1e432a04d16e3f82a5d06a418b9936f00585d3b609ce76fb405e68e1e3104b1c40e56fb81ae9def4489dbeb090f8d11a67284709210c408ab246fd46f03591d83b09442b6ebc39c4e1a678ee6508a07247c9b75e5a8ef7a1eac1895337a0a2a8b8a6eeab8e520ad4596003434ab36785b090a113c1468658eebeb72e9392719f4ff623cc3eb9867c7b6020861271784eeb563497992478b09acae8431442eba7bffbcc53a5f11366915b485a558ad21f0de162c69167627a75dc3d0d25dafa0c51360c5bc1ed5a08adfe18668b76a4bc8b6abf661b593270bdfd6d7b67c6a2d4e77bd03807db3d8e9905423027ef7a6016025a08e627d644966c416672f5cee9bfbc63e8d70a68148a66590123635f66a1947020859100c2e1ee06e09eb1b1348e1788e53bd7505e943d18ee67ab9151c9200e15c1c6f0bab4db687612537e9872414a9bdb0ba7c07daad12c604b2aba8257e3ed2e90726f705aeb8bc3ed828f4dc830678c14a3ed93969c7d795087f8c7b7c3bfc216394c583c55c633fbfea4cdfd1d8d91261f7edbe7d92bc12f39f7652588240dc8b1166a68ba9611108c8c83aa3c263ab9edeefc86e16bc7fb600ed678deb7902f234c3cc9aed51c2d87234d677491e6472eba5c0c71b145ff8c689f7479ddc0f5d4e8889d8d675b3e98ed494e93e5b34d292295ace8cde4bf4d10b8943cc7d9bd46ab739d3e269b0ae223fcda60a27e5d874ff99682db76c7e1fff44a7d798b8c696670a9cf9ef6cb665b1c0acf368146942498bd03717e43de90dcd3e9988ee18da1e9c9fe83b0fc75dcb734365bc9034ab423cb36980801be2b3da7268aeb932c4ff0e7fa64e2efa7490dac6cb54b6e13183fea9c67150aed9815118e4a26030ff44c0c887f9db47cc8de277fde99a11a81ea16fce6bf050665cd14f64e89e1b0c1b5c92ed95162f764f0b940e6e0379d92cce3571f9ec192c4463b0896a5325bc8a075ea291c7a9418b5b5146d099af37cac401ce99873b337b3fe7b35e87c900d69033b0553b79ecc5ec340b88757724058a9239fd8c38d74337de63d1a3bfdb3fd8de00d10d0670d0c74f7d2c8ed13d806bbe793a17d29f0155fa0f219d0c7fd2c36a3a8a660c4332600a64f66e595176499005b05ab87e1c5db70da8fc3b7521206287b381128c60cad1be173cc6016a73bfa16733b5c8bdf113d1c73af57e1206531b98dc6eb7dd7918ffd9543a7b6b649e92dd8324648dd7ddce2564c21050646cb3b28d64f7baf9df6ba218651942154fae02b2f1645f8dc3d31a59a5bdf6d428d1f4a2d9d78a707a0d14a31b23e6c96e59f248c1d79cce4967f8752a70dfda86f1b0d2140d09c86a284ab491fff6f4cf3538994636bd07964e67342e75bb8f20640d597288134d18c1c6c07fb6be5323efc248dbef3f1e6f74e81386ddcb9033f34b05550011e7fa420e6f82aea4aeee9b7f880ef3d75eb2c87f1fc3940a1b59103c13890775789f19739388b14099de7e9a832c963b7afee77453bce1da4e1f06b999e88c12069c12417a8f65d0f0ac41d3a8521d15a4974f5aeba77e3b3e5629521556f59663fb3bb79faff5177b340a8717fc6efb8551b1b8a0eba285075d8eff93e9d62539cb46e28fa70c9b219c8397f07671c4f992675abaf284b5e1fd8abdc910bcd7a2f280644f05e8faa93da9510f848cb1fcd929c647671a326670bd87ecbc52b162999e1ddaa7ae6e89a1f8425fab955f21ac0c897ab3d6bfbf7bc8108066d418340580e878dc4c162b5e8b545dbfce5962b10060e2cc9a135140b805f1bf2bfad42ddd7762edb3ab00022de065329964c1716595342c0db602517f6228c9994e29a483612f578d580ce9f398774704465d2cfda03d945f42744a34ba136ff2827086875ceb78c26b6c881c93f1712cc4f1696db60155cf3daef07e4ed91923e46422c4dd2b2928eafab7914025b4574a91731cd8c31f82b881b6bf71945b2fce06ea471f11f161eb160c0ee8b8110534dc4673421e04c92cfea85005a97cd73b96b8aaa421bc5df8758364bd7392cdaeeb74babb59cd18ef4dc5d685bfc76206cafcb37d00c2d27ed1f94d41ac51492a8f31bf02e0eaf712db3c5385a656668f3e8d4e25ef94f6eb0e6d7d7b01e5c561dc081fd98e36d2203ffc522e2e354a3fd46fc6a47b06b36482aa3301c7c95bf9443b2553a2d2cd8d32f1b2fff5723b61ceeabc1a2733230185378919a95f87a0e5770cb78fa4131d7870f74c0a005a515e1ff2bd1ff352b365630d7d9603af10f2e46e9ae3c843529f60d322e8f18214bf3378dc38affa7e2c496f065ccdf082972ca2e3a1c03443440af4a4c92c2acfeaaae6af6175601c960050429d2a96a9cded5e9bdcf2ccb00a1cc5a8d145240cd0ef88edd284d4b9d93f7bf858c7917bd2e512954b9ff79b4e9ed57a14692931a9262b5a6a4ee49323584ded822dc3e8577bb55369a248dadc5ff9e12a827682f5d5134eaaec8518af5fd444fb171b5f22a6e70817734ad8e9992b478bbebc68545d6d6ede76307c5ee84e62b3bae64718fd360d0b95381ad43f321fbd197bbe93e259fffa5041562f2a3411ab8ad25d0dda7337cefdf3e27c4d480a7f7d77bca6655f8594dbbb3f7b04c5550cd959bd025f7fd58aba07a4f31e68fe3cc1fe833ed05cd08896744354cc4039548155448524c8ad094565fccfabac98d0f61c1a261b8ed13b", 0x1000}, {&(0x7f0000006880)="402d37a26cebcd7388fbe74b2343c0b8d466cbba64b290ad", 0x18}], 0x4, &(0x7f0000006a40)=[@rights={0x18, 0x1, 0x1, [r1]}, @rights={0x30, 0x1, 0x1, [r4, r4, r4, r0, r1, r4, r1, r3]}, @cred={0x20, 0x1, 0x2, r48, r49, r50}, @rights={0x20, 0x1, 0x1, [r1, r0, r3]}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x30, 0x1, 0x1, [r3, r3, r4, r0, r4, r4, r3, r0]}], 0xd0, 0x80}, {&(0x7f0000006b40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000006dc0)=[{&(0x7f0000006bc0)="de7107430aef52e539e9f2631d9383b0da67111a10eb5bff62cbc4e90250fac949ef44df54c5c63eedbb67fcfa3bcd33f38a57192e2dc803fbdb3e1e894f261f30c898ba43bf6323fea35524a63507cc36ac90e3242f413ff0e12c46eb3359c456f75797019133d21d764e4c91b12484ad6c461fd1a7eea56b1796731d37734850", 0x81}, {&(0x7f0000006c80)="a19feb9eee2c1256f1fd9a0d4a97a89c13c949ee1add383d1fedcd195deb2303fe4322407a64fef2b7cefc4784a8275a3a9e648b756165da099d659a24670bdf5ac9b7313a78b9117b997bac921af6173c87425156eab6282cf2c33cf8bc45524e", 0x61}, {&(0x7f0000006d00)="2b6196a8bd10bb5e31c86b08038a15cf08698315208a89d68f21f03becff192cf91fe4d919b8f0690d03ab61e78a38df03a18f266f0a127c68c7acf182713cb7d26417d6159dd29c7b425408acac34b132341d64ebe45ae28a30e6ae709e322c63d60f911359f3c98146dd4943564d2518631e4fe5ab53d0691877c17eeef0ffa2780dedd40fc3397b6343d46f143d67f1b867f9318d", 0x96}], 0x3, &(0x7f0000007040)=[@rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r51, r52, r53}, @rights={0x28, 0x1, 0x1, [r0, r0, r3, r3, r1, r3]}], 0x60, 0x20000010}], 0x7, 0x4080) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000200)={0x6, 0x1, 0xfffffffffffffe01, 0x15bd, 0x2}, 0x14) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000080)={'sit0\x00', {0x2, 0x4e22, @rand_addr=0xa9fe}}) write$rdma_cm(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000785e734003ed000000000000", @ANYRES64=r3], 0x18) write$rdma_cm(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="87000000000000fa", @ANYRES32=0xffffffff, @ANYBLOB="03000000"], 0x31b) dup3(r3, r1, 0x0) 2018/04/29 21:25:24 executing program 7 (fault-call:2 fault-nth:22): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:24 executing program 2: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:24 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0xf8d7) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000140)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 2018/04/29 21:25:24 executing program 1: accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @broadcast}, &(0x7f0000000140)=0x10) r0 = gettid() epoll_create(0x2) kcmp(r0, r0, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x40, 0x200) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000040)=""/160) epoll_create(0x7fff) 2018/04/29 21:25:24 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x401) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 2018/04/29 21:25:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000002900000008000000b338cc01"], 0x14}}], 0x2, 0x0) set_tid_address(&(0x7f0000000080)) 2018/04/29 21:25:24 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x8f) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x0) 2018/04/29 21:25:24 executing program 0: getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)}, &(0x7f0000000240)=0x10) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)) gettid() r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x372c5eb6e5c3d8de) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000200)=0xc) gettid() r2 = syz_open_procfs(r1, &(0x7f0000000300)="6e65742f69705f76735f7374617473007fb6eecaabc09bc019dfbc14686e17f249c2843b9a08ad3a957ff96b15192c6b25006e5ed1e650ba0ced61d18130f30d1226ff653b1f2907085dad069b9b4cfe60b11f851b610c95fb9c573cd7cab949b41e587c56bf7085073b994e182bddcc60d08a686def9a2e295047783d685280486cbfe39abb8a9707bbe0de45d63e9fd19751aa91eb56703caacb6ba236ee3325431d6dbf3af9dcfa241009406821891afebeb6b5f5179330ab143db9fe62285815f8b8bc81e40892104d481c7d") ioctl(r2, 0x8, &(0x7f0000000100)="3729340bde5c1dbf80fb18a5e5000a21880bbae760f353f5106c1463782ac39bfcde427bc171f760da9167829b12f1f50fd2052dfb6d5e0890e1ebfdedc7d001879a6acce4a693185106af2d09cd39a5e5fbdd6e023a8824729c3452375eaf51cc673be9d7479ec793ce4a00731ccb06c7495579c7f25c5510b4275948b1") ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0c0583b, &(0x7f00000002c0)={0x3cd, &(0x7f0000000300)}) [ 362.683524] FAULT_INJECTION: forcing a failure. [ 362.683524] name failslab, interval 1, probability 0, space 0, times 0 [ 362.694857] CPU: 0 PID: 25727 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 362.702133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.711485] Call Trace: [ 362.714083] dump_stack+0x1b9/0x294 [ 362.717725] ? dump_stack_print_info.cold.2+0x52/0x52 [ 362.722927] ? perf_trace_lock_acquire+0xe3/0x980 [ 362.727778] ? __save_stack_trace+0x7e/0xd0 [ 362.732118] should_fail.cold.4+0xa/0x1a [ 362.736192] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 362.741310] ? save_stack+0x43/0xd0 [ 362.744946] ? kasan_kmalloc+0xc4/0xe0 [ 362.748843] ? kmem_cache_alloc_trace+0x152/0x780 [ 362.753695] ? snd_pcm_oss_change_params_locked+0x1f9/0x3c70 [ 362.759834] ? snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 362.765203] ? snd_pcm_oss_write+0x516/0xa20 [ 362.769614] ? graph_lock+0x170/0x170 [ 362.773402] ? splice_from_pipe+0x1e2/0x320 [ 362.777708] ? default_file_splice_write+0x3c/0x90 [ 362.782622] ? direct_splice_actor+0x128/0x190 [ 362.787189] ? splice_direct_to_actor+0x310/0x8d0 [ 362.792020] ? do_sendfile+0x60f/0xe00 [ 362.795895] ? find_held_lock+0x36/0x1c0 [ 362.799944] ? __lock_is_held+0xb5/0x140 [ 362.803998] ? check_same_owner+0x320/0x320 [ 362.808311] ? rcu_note_context_switch+0x710/0x710 [ 362.813227] __should_failslab+0x124/0x180 [ 362.817449] should_failslab+0x9/0x14 [ 362.821234] kmem_cache_alloc_trace+0x2cb/0x780 [ 362.825888] ? debug_check_no_locks_freed+0x310/0x310 [ 362.831063] ? mutex_trylock+0x2a0/0x2a0 [ 362.835116] snd_pcm_oss_change_params_locked+0x231/0x3c70 [ 362.840733] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.846257] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 362.852130] ? perf_trace_lock+0x900/0x900 [ 362.856352] ? graph_lock+0x170/0x170 [ 362.860142] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.865663] ? __perf_event_task_sched_in+0x247/0xb80 [ 362.870836] ? perf_trace_lock_acquire+0xe3/0x980 [ 362.875669] ? find_held_lock+0x36/0x1c0 [ 362.879721] ? lock_downgrade+0x8e0/0x8e0 [ 362.883851] ? finish_task_switch+0x182/0x810 [ 362.888338] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 362.893515] snd_pcm_oss_write+0x516/0xa20 [ 362.897738] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 362.902747] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 362.907591] ? preempt_notifier_register+0x1e0/0x1e0 [ 362.912682] __vfs_write+0x10b/0x960 [ 362.916384] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 362.921212] ? kernel_read+0x120/0x120 [ 362.925083] ? __schedule+0x809/0x1e30 [ 362.928957] ? default_file_splice_read+0x888/0xad0 [ 362.933965] ? check_same_owner+0x320/0x320 [ 362.938273] ? kasan_check_read+0x11/0x20 [ 362.942407] ? rcu_note_context_switch+0x710/0x710 [ 362.947321] __kernel_write+0x10c/0x380 [ 362.951286] write_pipe_buf+0x175/0x220 [ 362.955245] ? default_file_splice_read+0xad0/0xad0 [ 362.960248] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.965769] ? splice_from_pipe_next.part.8+0x296/0x340 [ 362.971123] __splice_from_pipe+0x38e/0x7c0 [ 362.975433] ? default_file_splice_read+0xad0/0xad0 [ 362.980437] splice_from_pipe+0x1e2/0x320 [ 362.984571] ? default_file_splice_read+0xad0/0xad0 [ 362.989574] ? splice_shrink_spd+0xd0/0xd0 [ 362.993801] default_file_splice_write+0x3c/0x90 [ 362.998543] ? generic_splice_sendpage+0x50/0x50 [ 363.003289] direct_splice_actor+0x128/0x190 [ 363.007688] splice_direct_to_actor+0x310/0x8d0 [ 363.012341] ? pipe_to_sendpage+0x3f0/0x3f0 [ 363.016650] ? do_splice_to+0x190/0x190 [ 363.020610] ? rw_verify_area+0x118/0x360 [ 363.024743] do_splice_direct+0x2cc/0x400 [ 363.028878] ? splice_direct_to_actor+0x8d0/0x8d0 [ 363.033706] ? rw_verify_area+0x118/0x360 [ 363.037841] do_sendfile+0x60f/0xe00 [ 363.041545] ? do_compat_pwritev64+0x1b0/0x1b0 [ 363.046117] ? __might_sleep+0x95/0x190 [ 363.050081] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 363.055605] ? _copy_from_user+0xdf/0x150 [ 363.059742] __x64_sys_sendfile64+0x155/0x240 [ 363.064220] ? __ia32_sys_sendfile+0x290/0x290 [ 363.068788] ? do_syscall_64+0x92/0x800 [ 363.072752] do_syscall_64+0x1b1/0x800 [ 363.076622] ? finish_task_switch+0x1ca/0x810 [ 363.081103] ? syscall_return_slowpath+0x5c0/0x5c0 [ 363.086033] ? syscall_return_slowpath+0x30f/0x5c0 [ 363.090952] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 363.096302] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 363.101141] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.106315] RIP: 0033:0x455979 [ 363.109489] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 363.117181] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 363.124434] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 2018/04/29 21:25:24 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) msgget(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x173, &(0x7f0000000100)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x1a0318cf, 0x6, "510893", 0x13d, 0x3c, 0xfffffffffffffbff, @dev={0xfe, 0x80, [], 0xb}, @loopback={0x0, 0x1}, {[@fragment={0x2c, 0x0, 0x5, 0x100000001, 0x0, 0x401, 0x66}, @hopopts={0x0, 0xc, [], [@generic={0x2, 0x43, "afcb43f5af59352ceb7f2d269319278dedf3943bfa8364c320fac2115c0a15fc33835562eb5fce9cdcc7c76ad0f5ef2d31f331c7d4207f1348a5c15a57d08cfab96e8c"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x992, 0x1000, [0x8, 0x2]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x3f, 0x0, 0x80, 0x4, 0x0, 0x7, 0x68}], @udp={0x4e22, 0x4e21, 0xbd, 0x0, [@guehdr={0x2, 0x8001, 0x1c7b79a9, 0x401, 0x0, [0x80]}, @guehdr={0x2, 0x5, 0x80, 0x7f3c, 0x100, [0x80]}, @guehdr={0x1, 0xcc, 0x1, 0x101, 0x100}, @guehdr={0x2, 0x4, 0x0, 0xbe, 0x100, [0x80]}, @guehdr={0x1, 0x0, 0x4, 0x80000001, 0x100}], "656d64fa885e1bb29d0fda79b8f1fc83139e10956c37b16e5098a954fae20eed1baf9ea67b0eed1c4eb750270dd023669cbeec582e811d02e7d02cbfedfadd0f89dc35d9cae3dbe86d05396ac6b2a88bc7eb4e6bf32f9e13a8b814651b024ee96521eef2036f3b010ff398f9b82ce19b6c1b62b677be7a4334bcffeb80fbb0948e357eac70e3ebdc149e76e5eb021c6718c47b384b"}}}}}}, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000040)=""/22) io_setup(0x7, &(0x7f0000a8aff8)=0x0) write$selinux_load(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="e6"], 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f00000000c0)) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f0000587000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f000096f000)="06000000000000009d", 0x9}]) 2018/04/29 21:25:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000ac0)=@create_id={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000a80), 0x2, 0xb}}, 0x20) write$rdma_cm(r0, &(0x7f0000001900)=@create_id={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000018c0)={0xffffffff}, 0x113, 0x9}}, 0x20) write$rdma_cm(r0, &(0x7f0000001000)=@disconnect={0xa, 0x0, 0xfa00, {r1}}, 0xfffffd04) write$rdma_cm(r0, &(0x7f0000001040)=@bind_ip={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xf5af}}}, 0x30) [ 363.131685] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 363.138935] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 363.146186] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000016 2018/04/29 21:25:24 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x100, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000040)={@loopback, @rand_addr, @multicast2}, &(0x7f0000000080)=0xc) mmap(&(0x7f00003f5000/0x2000)=nil, 0x2000, 0x0, 0x1011, r0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) 2018/04/29 21:25:24 executing program 2: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:24 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)=ANY=[@ANYBLOB="001b4a6c006103bf623f97227e1ddd2a48953756a6512ba5552d89ac1a479c6d38bdfe3991766ceb"], &(0x7f0000000440)=0x1) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000080), 0x4) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000240)="0f0097fd050000c4c2fd38407cb8010000000f01d9b9800000c00f3235000800000f3066ba420066b8c00066eff326f4b9800000c00f3235004000000f30660f3881a7621c96dd66baf80cb8385d3080ef66bafc0cedb9800000c00f3235004000000f30", 0x64}], 0x1, 0x1c, &(0x7f0000000200), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/04/29 21:25:24 executing program 1: prctl$intptr(0x3, 0x0) r0 = semget(0x0, 0x3, 0x4) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f0000000000)=""/185) 2018/04/29 21:25:24 executing program 2: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x10000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000080)=0x783, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x0, 0x100000008}) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/29 21:25:24 executing program 7 (fault-call:2 fault-nth:23): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:24 executing program 1: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000000)='./file0\x00') lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='s'], &(0x7f0000000040)='jfs\x00', 0x4, 0x0) dup2(r1, r2) 2018/04/29 21:25:24 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:24 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x400400, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000100)={0x908, 0xb}) prctl$getreaper(0x2, &(0x7f0000000080)) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "08de06", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x6, 0x0, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}, [], "fca967e17f791010"}}}}}}}, 0x0) 2018/04/29 21:25:24 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x80000, 0x0) clock_getres(0xfffff7ffffffffef, &(0x7f0000000080)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8a00, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000000c0)=""/108) [ 363.506242] FAULT_INJECTION: forcing a failure. [ 363.506242] name failslab, interval 1, probability 0, space 0, times 0 [ 363.517556] CPU: 1 PID: 25801 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 363.524829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.534182] Call Trace: [ 363.536780] dump_stack+0x1b9/0x294 [ 363.540427] ? dump_stack_print_info.cold.2+0x52/0x52 [ 363.545630] ? __save_stack_trace+0x7e/0xd0 [ 363.549967] should_fail.cold.4+0xa/0x1a [ 363.554044] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 363.559158] ? save_stack+0x43/0xd0 [ 363.562788] ? kasan_kmalloc+0xc4/0xe0 [ 363.566685] ? kmem_cache_alloc_trace+0x152/0x780 [ 363.571533] ? snd_pcm_oss_change_params_locked+0x1f9/0x3c70 [ 363.577336] ? snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 363.582704] ? snd_pcm_oss_write+0x516/0xa20 [ 363.587120] ? graph_lock+0x170/0x170 [ 363.590927] ? splice_from_pipe+0x1e2/0x320 [ 363.595596] ? default_file_splice_write+0x3c/0x90 [ 363.600536] ? direct_splice_actor+0x128/0x190 [ 363.605129] ? splice_direct_to_actor+0x310/0x8d0 [ 363.609978] ? do_splice_direct+0x2cc/0x400 [ 363.614308] ? do_sendfile+0x60f/0xe00 [ 363.618206] ? find_held_lock+0x36/0x1c0 [ 363.622280] ? __lock_is_held+0xb5/0x140 [ 363.626364] ? check_same_owner+0x320/0x320 [ 363.630696] ? rcu_note_context_switch+0x710/0x710 [ 363.635624] __should_failslab+0x124/0x180 [ 363.639844] should_failslab+0x9/0x14 [ 363.643627] kmem_cache_alloc_trace+0x2cb/0x780 [ 363.648282] ? mutex_trylock+0x2a0/0x2a0 [ 363.652331] snd_pcm_oss_change_params_locked+0x231/0x3c70 [ 363.657937] ? trace_hardirqs_on+0xd/0x10 [ 363.662076] ? kasan_check_read+0x11/0x20 [ 363.666215] ? mark_free_pages+0x3b0/0x3b0 [ 363.670436] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 363.675610] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 363.681475] ? is_bpf_text_address+0xd7/0x170 [ 363.685952] ? kernel_text_address+0x79/0xf0 [ 363.690343] ? __unwind_start+0x166/0x330 [ 363.694474] ? __kernel_text_address+0xd/0x40 [ 363.698949] ? unwind_get_return_address+0x61/0xa0 [ 363.703861] ? __save_stack_trace+0x7e/0xd0 [ 363.708170] ? __put_page+0x130/0x180 [ 363.711951] ? __put_compound_page+0xe0/0xe0 [ 363.716342] ? default_file_splice_read+0x874/0xad0 [ 363.721339] ? splice_direct_to_actor+0x268/0x8d0 [ 363.726177] ? do_splice_direct+0x2cc/0x400 [ 363.730480] ? do_sendfile+0x60f/0xe00 [ 363.734350] ? __x64_sys_sendfile64+0x155/0x240 [ 363.739014] ? do_syscall_64+0x1b1/0x800 [ 363.743067] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.748419] ? generic_pipe_buf_release+0x1dc/0x290 [ 363.753433] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 363.758607] snd_pcm_oss_write+0x516/0xa20 [ 363.762827] ? debug_check_no_obj_freed+0x2ff/0x584 [ 363.767828] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 363.772827] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 363.777650] ? trace_hardirqs_off+0xd/0x10 [ 363.781864] ? quarantine_put+0xeb/0x190 [ 363.785918] __vfs_write+0x10b/0x960 [ 363.789613] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 363.794436] ? kernel_read+0x120/0x120 [ 363.798321] ? default_file_splice_read+0x888/0xad0 [ 363.803318] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.808671] ? check_same_owner+0x320/0x320 [ 363.812982] ? kasan_check_read+0x11/0x20 [ 363.817127] ? rcu_note_context_switch+0x710/0x710 [ 363.822044] __kernel_write+0x10c/0x380 [ 363.826004] write_pipe_buf+0x175/0x220 [ 363.829969] ? default_file_splice_read+0xad0/0xad0 [ 363.834978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.840518] ? splice_from_pipe_next.part.8+0x296/0x340 [ 363.845875] __splice_from_pipe+0x38e/0x7c0 [ 363.850178] ? default_file_splice_read+0xad0/0xad0 [ 363.855179] splice_from_pipe+0x1e2/0x320 [ 363.859309] ? default_file_splice_read+0xad0/0xad0 [ 363.864308] ? splice_shrink_spd+0xd0/0xd0 [ 363.868530] default_file_splice_write+0x3c/0x90 [ 363.873266] ? generic_splice_sendpage+0x50/0x50 [ 363.878013] direct_splice_actor+0x128/0x190 [ 363.882425] splice_direct_to_actor+0x310/0x8d0 [ 363.887075] ? pipe_to_sendpage+0x3f0/0x3f0 [ 363.891379] ? do_splice_to+0x190/0x190 [ 363.895337] ? rw_verify_area+0x118/0x360 [ 363.899487] do_splice_direct+0x2cc/0x400 [ 363.903617] ? splice_direct_to_actor+0x8d0/0x8d0 [ 363.908878] ? rw_verify_area+0x118/0x360 [ 363.913027] do_sendfile+0x60f/0xe00 [ 363.916735] ? do_compat_pwritev64+0x1b0/0x1b0 [ 363.921300] ? __might_sleep+0x95/0x190 [ 363.925261] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 363.930780] ? _copy_from_user+0xdf/0x150 [ 363.934911] __x64_sys_sendfile64+0x155/0x240 [ 363.939389] ? __ia32_sys_sendfile+0x290/0x290 [ 363.943953] ? do_syscall_64+0x92/0x800 [ 363.947914] do_syscall_64+0x1b1/0x800 [ 363.951783] ? finish_task_switch+0x1ca/0x810 [ 363.956260] ? syscall_return_slowpath+0x5c0/0x5c0 [ 363.961174] ? syscall_return_slowpath+0x30f/0x5c0 [ 363.966090] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 363.971447] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 363.976274] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.981442] RIP: 0033:0x455979 [ 363.984609] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 363.992296] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 363.999546] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 364.006794] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 364.014046] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 364.021303] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000017 2018/04/29 21:25:25 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x80, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000340)) r2 = socket$inet_sctp(0x2, 0x9, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYRES64, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="3a53a0f735f4033ff3cc12e1e6877f4434890802db2a8c43", @ANYRES64, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYBLOB="548844c9fa7014ca68268e519759fd7021e2fea79aa6eea51d6d154a60b7e48c4e459f0b524d11b2033fd681438088db8fd94cff0544d2d7d75fbe02c55388b4c3da03a5df73cff52bc995c96a04e8a0f430ea34239e6e44a98a8e5bd03a1dcbaaa543934713cce72dcf4d9611f22ffc2310da2d", @ANYPTR64, @ANYRES16, @ANYPTR64], @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYPTR64], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64, @ANYPTR, @ANYRES16=r2, @ANYRES32, @ANYRES32], @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRES64=r2, @ANYRES16=r2, @ANYPTR64, @ANYRES16=r2, @ANYBLOB="2d8ea30815e5c10bc20c482c", @ANYRES16], @ANYRES64]], 0x10) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r2, r0, 0x0) 2018/04/29 21:25:25 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000100)={0x0, 0xff, 0x32, 'queue0\x00', 0x8}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)) 2018/04/29 21:25:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000080)={0xb2a0, 0x101, 0xffffffffffff6903, 'queue0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000140)=0x7fffffff, 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) 2018/04/29 21:25:25 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') prctl$seccomp(0x16, 0x1, &(0x7f00000001c0)={0x2000000000000098, &(0x7f0000000240)}) r1 = socket$key(0xf, 0x3, 0x2) splice(r1, &(0x7f0000000040)=0x1000000000000000, r0, &(0x7f0000000080), 0x100000001, 0x1) sendfile(r0, r0, 0x0, 0x3ff) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x4, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'bpq0\x00'}}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x40, 0x0, 0x10001, 0x47f}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000100)={0x8, r2}) 2018/04/29 21:25:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x805) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="056304400000001c277234bd7027055ea2eaa53510e75c5974243ca6240d20e2c81930a582dab89a17d8675a4a89d004f248fa27a63928ba4cb9d6eff42943d2721a21953d893c84d941fe88efeafcf244b8a9a50ce68eeab8d3b62ad34982c1510518a67d284f3cac9e94c0cebaa2aaec55f969c9a8085ffa1990f6ad1e6c744a79cf68676c7114e30853a2edb61f2784bb061c54f6c57a4b1a9895be9540d4"], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000cf68)=ANY=[], 0x1, 0x0, &(0x7f0000008f37)="c2"}) r2 = dup3(r1, r0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x10, 0x0, &(0x7f0000015000)=[@request_death={0x400c630e}], 0x0, 0x0, &(0x7f0000016000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000bfd0)={0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000011000)}) 2018/04/29 21:25:25 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00006fc000)={0x2}, 0x10) r1 = dup(r0) io_setup(0xfff, &(0x7f0000000180)=0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000600)="f0", 0x1}], 0x1) io_submit(r2, 0x200000000000010c, &(0x7f00000005c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="da61e432ed082d13ecac2d8ea1a8e068f553dafe035d5018dc3ca7ee3c2042b1b85a6ee44a25195285c7465f4faf64e4a2bafe9bc17131e846dc8085f519e55d3cb06f4e0158d0cf7da8ffbccf8ad3a34dd8475981f06322680aa47334b7df15b1d0f1e3e231a12e33d6c7b978cc74875cc67232437177e9cf89c319999b2ed4ca7f1336c02378724a393a3fe0dd2fc34d368c959ae36a5effdf20748e16", 0x0, 0x5, 0x0, 0x0, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000200)="0c38e26017c900aba014b55c69cf4920550dc2d4fd0a65ac1c8e1d1928ae54cc3628a651a38bcd5e1608539e56004554326f78d208bdbe3800d9bfcab9c3035eb1f1dbd0d7bfc2b34b3eed2dd273733526462c6b73223b8aa858d27a606dc67b39d65ffbc81acc1d720f8d55f614e21339421a14af1fe316af9aa844c651e20bbed3f0e4009fb23d925c4e5d2de04f62af4bcaa1abf7ad1d0b6ede5722b7adcb0ee7425e6eb490335fb3ba115f9f", 0x0, 0x7f, 0x0, 0x1, r1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000000300)="49b01476aab8b1ff59de199b0ce57783a400f18869f7ae9ba280c538f7131713453b76ddffc76fb73dd78533e652bbb85191c15eaa1d94d488c7ad0373f64d61e3ef06fa429a6e600d88adeb88b4b22b4255d265876dd13e0c485648d22ee045bec69dbd7e3c3db1dbad18d3430139066a229c810e655c7de50b29f1b17dba6f0122c23a4426d74df36a32023695cc7962c00b696936bf78e4424c2a03ba8c073ddb3eaa9d679eb76b3b02d7ded75db0436f44867ed3d0081bd71bfbad350463f16814bb3749090f8f96485c4bda3afea9c77b370089acafd49900da30f81b0ce6c3608e33033a1c5c7211e04b3bf061009bbf98f35e553334c1930b", 0x0, 0x3, 0x0, 0x1, r1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f0000000440), 0x0, 0x6, 0x0, 0x0, r1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000540)="f355f2b097609a200927621a288371c95d36e607e40707cb3925ec4380107a7c8a35cf0d198297cdac255ed2edec6a22330128d4a35ed3a62cc1a7d20e00ba4ddcff0a478711c7d4925b9b6359129be8314efa7f37ac6d6f3beb811376297b4cd0cf722686ef17f315d216ebf23648abe160762b0abd824aef", 0x0, 0x40, 0x0, 0x1, r1}]) 2018/04/29 21:25:25 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:25 executing program 7 (fault-call:2 fault-nth:24): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) [ 364.358877] FAULT_INJECTION: forcing a failure. [ 364.358877] name failslab, interval 1, probability 0, space 0, times 0 [ 364.370177] CPU: 0 PID: 25813 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 364.377458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.386810] Call Trace: [ 364.389389] dump_stack+0x1b9/0x294 [ 364.393012] ? dump_stack_print_info.cold.2+0x52/0x52 [ 364.398199] ? __save_stack_trace+0x7e/0xd0 [ 364.402515] should_fail.cold.4+0xa/0x1a [ 364.406567] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 364.411656] ? save_stack+0x43/0xd0 [ 364.415267] ? kasan_kmalloc+0xc4/0xe0 [ 364.419137] ? kmem_cache_alloc_trace+0x152/0x780 [ 364.423963] ? snd_pcm_oss_change_params_locked+0x231/0x3c70 [ 364.429741] ? snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 364.435085] ? snd_pcm_oss_write+0x516/0xa20 [ 364.439481] ? graph_lock+0x170/0x170 [ 364.443270] ? splice_from_pipe+0x1e2/0x320 [ 364.447575] ? default_file_splice_write+0x3c/0x90 [ 364.452495] ? direct_splice_actor+0x128/0x190 [ 364.457100] ? splice_direct_to_actor+0x310/0x8d0 [ 364.461927] ? do_splice_direct+0x2cc/0x400 [ 364.466235] ? do_sendfile+0x60f/0xe00 [ 364.470109] ? find_held_lock+0x36/0x1c0 [ 364.474157] ? __lock_is_held+0xb5/0x140 [ 364.478212] ? check_same_owner+0x320/0x320 [ 364.482521] ? rcu_note_context_switch+0x710/0x710 [ 364.487438] __should_failslab+0x124/0x180 [ 364.491663] should_failslab+0x9/0x14 [ 364.495454] kmem_cache_alloc_trace+0x2cb/0x780 [ 364.500111] ? mutex_trylock+0x2a0/0x2a0 [ 364.504159] snd_pcm_oss_change_params_locked+0x269/0x3c70 [ 364.509765] ? trace_hardirqs_on+0xd/0x10 [ 364.513897] ? kasan_check_read+0x11/0x20 [ 364.518031] ? mark_free_pages+0x3b0/0x3b0 [ 364.522252] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 364.527433] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 364.533298] ? is_bpf_text_address+0xd7/0x170 [ 364.537779] ? kernel_text_address+0x79/0xf0 [ 364.542173] ? __unwind_start+0x166/0x330 [ 364.546306] ? __kernel_text_address+0xd/0x40 [ 364.550784] ? unwind_get_return_address+0x61/0xa0 [ 364.555698] ? __save_stack_trace+0x7e/0xd0 [ 364.560016] ? __put_page+0x130/0x180 [ 364.563801] ? __put_compound_page+0xe0/0xe0 [ 364.568196] ? default_file_splice_read+0x874/0xad0 [ 364.573196] ? splice_direct_to_actor+0x268/0x8d0 [ 364.578024] ? do_splice_direct+0x2cc/0x400 [ 364.582326] ? do_sendfile+0x60f/0xe00 [ 364.586197] ? __x64_sys_sendfile64+0x155/0x240 [ 364.590847] ? do_syscall_64+0x1b1/0x800 [ 364.594890] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.600242] ? generic_pipe_buf_release+0x1dc/0x290 [ 364.605246] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 364.610424] snd_pcm_oss_write+0x516/0xa20 [ 364.614643] ? debug_check_no_obj_freed+0x2ff/0x584 [ 364.619645] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 364.624648] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 364.629475] ? trace_hardirqs_off+0xd/0x10 [ 364.633692] ? quarantine_put+0xeb/0x190 [ 364.637740] __vfs_write+0x10b/0x960 [ 364.641443] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 364.646269] ? kernel_read+0x120/0x120 [ 364.650158] ? default_file_splice_read+0x888/0xad0 [ 364.655159] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.660514] ? check_same_owner+0x320/0x320 [ 364.664820] ? kasan_check_read+0x11/0x20 [ 364.668954] ? rcu_note_context_switch+0x710/0x710 [ 364.673866] __kernel_write+0x10c/0x380 [ 364.677827] write_pipe_buf+0x175/0x220 [ 364.681786] ? default_file_splice_read+0xad0/0xad0 [ 364.686783] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.692305] ? splice_from_pipe_next.part.8+0x296/0x340 [ 364.697656] __splice_from_pipe+0x38e/0x7c0 [ 364.701961] ? default_file_splice_read+0xad0/0xad0 [ 364.706963] splice_from_pipe+0x1e2/0x320 [ 364.711094] ? default_file_splice_read+0xad0/0xad0 [ 364.716096] ? splice_shrink_spd+0xd0/0xd0 [ 364.720322] default_file_splice_write+0x3c/0x90 [ 364.725060] ? generic_splice_sendpage+0x50/0x50 [ 364.729803] direct_splice_actor+0x128/0x190 [ 364.734206] splice_direct_to_actor+0x310/0x8d0 [ 364.738858] ? pipe_to_sendpage+0x3f0/0x3f0 [ 364.743165] ? do_splice_to+0x190/0x190 [ 364.747121] ? rw_verify_area+0x118/0x360 [ 364.751253] do_splice_direct+0x2cc/0x400 [ 364.755386] ? splice_direct_to_actor+0x8d0/0x8d0 [ 364.760510] ? rw_verify_area+0x118/0x360 [ 364.764645] do_sendfile+0x60f/0xe00 [ 364.768345] ? do_compat_pwritev64+0x1b0/0x1b0 [ 364.772910] ? __might_sleep+0x95/0x190 [ 364.776877] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 364.782402] ? _copy_from_user+0xdf/0x150 [ 364.786537] __x64_sys_sendfile64+0x155/0x240 [ 364.791029] ? __ia32_sys_sendfile+0x290/0x290 [ 364.795595] ? do_syscall_64+0x92/0x800 [ 364.799557] do_syscall_64+0x1b1/0x800 [ 364.803425] ? finish_task_switch+0x1ca/0x810 [ 364.807903] ? syscall_return_slowpath+0x5c0/0x5c0 [ 364.812833] ? syscall_return_slowpath+0x30f/0x5c0 [ 364.817747] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 364.823096] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 364.827923] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.833093] RIP: 0033:0x455979 [ 364.836274] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 364.843977] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 364.851231] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 2018/04/29 21:25:26 executing program 7 (fault-call:2 fault-nth:25): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) [ 364.858482] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 364.865730] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 364.872981] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000018 [ 364.901016] binder: 25819:25824 Acquire 1 refcount change on invalid ref 469762048 ret -22 2018/04/29 21:25:26 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f0000000280)) r1 = eventfd(0x80000002) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xd0a, 0x200) bind$vsock_dgram(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000001b40)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) readv(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/176, 0xb0}], 0x1) 2018/04/29 21:25:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) close(r0) fcntl$getflags(r0, 0x3) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x1}, 0x1) 2018/04/29 21:25:26 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) [ 364.943311] audit: type=1326 audit(1525037126.481:697): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25817 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=c000003e syscall=202 compat=0 ip=0x455979 code=0x0 [ 365.042742] FAULT_INJECTION: forcing a failure. [ 365.042742] name failslab, interval 1, probability 0, space 0, times 0 [ 365.054078] CPU: 0 PID: 25854 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 365.061356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.070709] Call Trace: [ 365.073307] dump_stack+0x1b9/0x294 [ 365.076952] ? dump_stack_print_info.cold.2+0x52/0x52 [ 365.082160] should_fail.cold.4+0xa/0x1a [ 365.086239] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 365.091360] ? debug_check_no_locks_freed+0x310/0x310 [ 365.096564] ? graph_lock+0x170/0x170 [ 365.100381] ? debug_check_no_locks_freed+0x310/0x310 [ 365.105578] ? find_held_lock+0x36/0x1c0 [ 365.109633] ? __lock_is_held+0xb5/0x140 [ 365.113689] ? check_same_owner+0x320/0x320 [ 365.117994] ? print_usage_bug+0xc0/0xc0 [ 365.122048] ? rcu_note_context_switch+0x710/0x710 [ 365.126962] ? graph_lock+0x170/0x170 [ 365.130751] __should_failslab+0x124/0x180 [ 365.134973] should_failslab+0x9/0x14 [ 365.138757] __kmalloc+0x2c8/0x760 [ 365.142290] ? constrain_params_by_rules+0x141/0x1360 [ 365.147462] ? find_held_lock+0x36/0x1c0 [ 365.151513] constrain_params_by_rules+0x141/0x1360 [ 365.156521] ? lock_downgrade+0x8e0/0x8e0 [ 365.160664] ? snd_pcm_mmap+0x580/0x580 [ 365.164621] ? rcu_is_watching+0x85/0x140 [ 365.168773] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 365.173960] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 365.179141] ? is_bpf_text_address+0xd7/0x170 [ 365.183634] ? kernel_text_address+0x79/0xf0 [ 365.188032] ? __unwind_start+0x166/0x330 [ 365.192165] ? graph_lock+0x170/0x170 [ 365.195952] ? unwind_get_return_address+0x61/0xa0 [ 365.200866] ? __save_stack_trace+0x7e/0xd0 [ 365.205183] ? __lock_is_held+0xb5/0x140 [ 365.209235] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 365.214236] ? snd_interval_refine+0x428/0x700 [ 365.218804] snd_pcm_hw_refine+0x8e9/0x1180 [ 365.223113] ? do_splice_direct+0x2cc/0x400 [ 365.227423] ? snd_pcm_mmap_status_fault+0x3e0/0x3e0 [ 365.232508] ? graph_lock+0x170/0x170 [ 365.236293] ? __lock_is_held+0xb5/0x140 [ 365.240348] ? __lock_is_held+0xb5/0x140 [ 365.244404] ? snd_pcm_oss_change_params_locked+0x269/0x3c70 [ 365.250186] ? rcu_read_lock_sched_held+0x108/0x120 [ 365.255198] ? _snd_pcm_hw_param_min+0x330/0x570 [ 365.259942] snd_pcm_oss_change_params_locked+0x901/0x3c70 [ 365.265558] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.271081] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 365.276948] ? zap_class+0x720/0x720 [ 365.280662] ? perf_event_update_userpage+0xd10/0xd10 [ 365.285836] ? graph_lock+0x170/0x170 [ 365.289626] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.295148] ? __perf_event_task_sched_in+0x247/0xb80 [ 365.300318] ? perf_trace_lock+0xd6/0x900 [ 365.304456] ? find_held_lock+0x36/0x1c0 [ 365.308511] ? lock_downgrade+0x8e0/0x8e0 [ 365.312647] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 365.317822] snd_pcm_oss_write+0x516/0xa20 [ 365.322040] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 365.327044] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 365.331874] ? preempt_notifier_register+0x1e0/0x1e0 [ 365.336975] __vfs_write+0x10b/0x960 [ 365.340672] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 365.345498] ? kernel_read+0x120/0x120 [ 365.349386] ? __schedule+0x809/0x1e30 [ 365.353258] ? default_file_splice_read+0x888/0xad0 [ 365.358267] ? check_same_owner+0x320/0x320 [ 365.362574] ? rcu_note_context_switch+0x710/0x710 [ 365.367488] __kernel_write+0x10c/0x380 [ 365.371448] write_pipe_buf+0x175/0x220 [ 365.375410] ? default_file_splice_read+0xad0/0xad0 [ 365.380412] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.385935] ? splice_from_pipe_next.part.8+0x296/0x340 [ 365.391286] __splice_from_pipe+0x38e/0x7c0 [ 365.395594] ? default_file_splice_read+0xad0/0xad0 [ 365.400603] splice_from_pipe+0x1e2/0x320 [ 365.404735] ? default_file_splice_read+0xad0/0xad0 [ 365.409736] ? splice_shrink_spd+0xd0/0xd0 [ 365.413966] default_file_splice_write+0x3c/0x90 [ 365.418703] ? generic_splice_sendpage+0x50/0x50 [ 365.423444] direct_splice_actor+0x128/0x190 [ 365.427840] splice_direct_to_actor+0x310/0x8d0 [ 365.432496] ? pipe_to_sendpage+0x3f0/0x3f0 [ 365.436805] ? do_splice_to+0x190/0x190 [ 365.440766] ? rw_verify_area+0x118/0x360 [ 365.444901] do_splice_direct+0x2cc/0x400 [ 365.449037] ? splice_direct_to_actor+0x8d0/0x8d0 [ 365.453870] ? rw_verify_area+0x118/0x360 [ 365.458007] do_sendfile+0x60f/0xe00 [ 365.461717] ? do_compat_pwritev64+0x1b0/0x1b0 [ 365.466281] ? __might_sleep+0x95/0x190 [ 365.470247] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 365.475771] ? _copy_from_user+0xdf/0x150 [ 365.479905] __x64_sys_sendfile64+0x155/0x240 [ 365.484384] ? __ia32_sys_sendfile+0x290/0x290 [ 365.488951] ? do_syscall_64+0x92/0x800 [ 365.492915] do_syscall_64+0x1b1/0x800 [ 365.496787] ? syscall_return_slowpath+0x5c0/0x5c0 [ 365.501703] ? syscall_return_slowpath+0x30f/0x5c0 [ 365.506620] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 365.511974] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 365.516805] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 365.521978] RIP: 0033:0x455979 [ 365.525151] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 365.532845] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 2018/04/29 21:25:26 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mixer\x00', 0x44040, 0x0) write$cgroup_int(r0, &(0x7f0000000440)={[0x0, 0x0, 0x2b, 0x3d, 0x0, 0x3d]}, 0x6) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000469ffc)=0x100, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r2, 0x0, 0x5}, 0x8) sendto$inet(r1, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20}, 0x10) r3 = fcntl$dupfd(r1, 0x0, r1) recvfrom$inet(r1, &(0x7f0000eeff8d)=""/115, 0x73, 0x12041, &(0x7f0000898ff0)={0x2, 0x4e20, @rand_addr}, 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="420000009718691ad1a17a459e881518fb1f0000bb9950b8000ece8cef5717489e2758fb6590482c5003a8bb2bae84a64000000000000001034a6b3e3a016d5c4d89d356ba692dccab168fdb6e138577ab2e08e69281908ccb8049632df3697f7c96c2309609a204f14d5cae19d5a83a7456c8748e7b739ce78a72b0bb65a20acd7871191a76aff7a5ec35cf6197122ace748175dde9e665147135e49aa17469bfe0c2098b88c71b58a25bcd979bd4439a4d95067821d652c8cc000000000000000000000000000000"], &(0x7f0000000080)=0x4a) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000480)={r4, @in6={{0xa, 0x4e24, 0xa9b, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0xfe7}}, 0xc86, 0x7aa900000000000, 0x7, 0x8, 0x20}, &(0x7f00000001c0)=0x98) ioctl$sock_netrom_SIOCGSTAMP(r3, 0x8906, &(0x7f0000bf2000)) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000340)={'broute\x00', 0x0, 0x1, 0xc9, [], 0x1, &(0x7f0000000200)=[{}], &(0x7f0000000640)=""/201}, &(0x7f00000003c0)=0xfffffffffffffe6d) ioctl$sock_netrom_SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) 2018/04/29 21:25:27 executing program 5: getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000a80), &(0x7f0000000ac0)=0x6) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f00000008c0)=ANY=[]}, 0x1}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x1ac00000000, 0x204000) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f00000000c0)=0x12) [ 365.540097] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 365.547350] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 365.554600] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 365.561854] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000019 [ 365.646677] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/04/29 21:25:27 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0", 0x4) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x4, 0x40000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', r4}) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/04/29 21:25:27 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffff9c, 0x7, 0x1, 0x3ff, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl$sock_netrom_TIOCINQ(r0, 0x541b, &(0x7f00000000c0)) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000115fb8)={0x1, 0x3, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}], {0x95}}, &(0x7f0000ee9000)='syzkaller\x00', 0x101, 0xc3, &(0x7f00002b9000)=""/195}, 0x48) 2018/04/29 21:25:27 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f00000004c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000480)={0xffffffff}, 0x113, 0x9}}, 0x20) write$rdma_cm(r0, &(0x7f0000000500)=@connect={0x6, 0x118, 0xfa00, {{0x42eb, 0x0, "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", 0x14, 0xc9a, 0x1, 0x4, 0xffffffffffffffc1, 0xf3, 0x7fff}, r2}}, 0x120) dup3(r1, r0, 0x0) 2018/04/29 21:25:27 executing program 7 (fault-call:2 fault-nth:26): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:27 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:27 executing program 0: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4002}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000000c0)=0x5) write$tun(r1, &(0x7f0000000080)={@void, @hdr, @arp=@generic={0x0, 0x0, 0x6, 0x0, 0x0, @empty, "", @empty, "a586ba13b3225dacfe2fe2c0c6ff9bcd"}}, 0x2e) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@remote, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) 2018/04/29 21:25:27 executing program 1: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x5, 0x80000) recvfrom$unix(r0, &(0x7f0000000080), 0x0, 0x2, 0x0, 0x0) r1 = socket(0x11, 0x4000000000080003, 0x3) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000), 0x47e) mmap(&(0x7f0000397000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0xfffffffffffffffd) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) clone(0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x0, 0x7}) 2018/04/29 21:25:27 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x14, 0x80000) accept4$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8931, &(0x7f0000000140)={'bridge_slave_0\x00', r1}) [ 365.850703] audit: type=1326 audit(1525037127.389:698): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25817 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=c000003e syscall=202 compat=0 ip=0x455979 code=0x0 [ 365.853301] syz-executor0 (25874): /proc/25872/oom_adj is deprecated, please use /proc/25872/oom_score_adj instead. 2018/04/29 21:25:27 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:27 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) r2 = gettid() ptrace$getenv(0x4201, r2, 0x3, &(0x7f0000000040)) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000000000fa", @ANYRES32=0xffffffff, @ANYBLOB="49c00000"], 0x31b) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000080)={0x9, 0x5, 0x98, &(0x7f0000000180)="f863464e68e7a9234d3206e309be8e0d49b5996a921ed28ec27460bf200a0d4eb7e5d992682cd75174ada7ba45a04945fbeea25bb7ddbbe8ed76cf1cd5666f8df6d5d822330b26571584c25b41b8d6e996fffb19a6336ad76d494350eb20e5b8a986ca617954fbe1718f7f5f216391e9768709074fd320802f154260c8e4ddedd5582c2014e68f2cc6dcb522e63c05910822c0531c6e9088"}) dup3(r1, r0, 0x0) 2018/04/29 21:25:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7}, 0x1f) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007baac0ff000000000000000000000e00950000000000000067775665cab5bf5c62bd634747ef2ad01504e2cf578eaca445769fb672f3266ff92cad5fa4f7477be97c7ce8641556b8ad0d9042a284af2ab51067998dcaba119ef0ea23030fdf02a42d92f18f2cf31dc9ffd77eb0c951f6335a95d53144ef5989355b97b348ee402f04fb0cf97d73aa820efa2554c9"], &(0x7f0000f59000)='GPL\x00', 0x6, 0xfcb6, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/29 21:25:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r0}) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="974535b097e5a725bb0bbdf10f67d8caabc58269986a5069ecd3680359af0a0478efe0b9d919c706ab53cc1b10d028794051f5ed7622e845", 0x38}, {&(0x7f0000000180)="6af2a3f515f32e5b3a071f3610607fe69baefa0573439a3598e83c0f8b97be52616aca7bf764ffbc2d15634a19dc0d9dd94d9f9b47f69acfdba149fed449ef102d891c939b9850cd12970bb4f7ce766797e61e7245cbc4bec464fd2eb172342d4cce", 0x62}, {&(0x7f0000000200)="74bf78ead6b3499dbbaa9ef2a1ea10e6e1cdf6b661070435ba9fabd5cdf38aadf85d9eba67e17695829769fe91196ee4318079aafe5361554f5a4df751fbcaa8365f1b359801e0b5bbac6243b66b8df588195e50e301fd6c544c354f8621269fe1652a3f6285926203ae9c36fbfb292c9eeeb59db67d7401af502d1a06d7810615f7371f10fb3801d2bcda00b67157fb9dc0249f749cbff56ebdcb259ee7b3a68fbdb914c9ce6d91054c1fd38bddf2ca6c8d7b01d27fdf466f1cfe97d09ed2511f15b319405a812f725f7d478951", 0xce}], 0x3}, 0x4000040) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000100)={0xb2f, 0x1f, 0x5, 0x3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="51249b00000000140001000000004b000000ffffac1414bb"], 0x30}, 0x1}, 0x0) 2018/04/29 21:25:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x1c) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000001c0)={0xfa4, 0xd4a1, 0xffa}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r0, r2}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x6}, 0x1c) syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES64]], 0x0) 2018/04/29 21:25:27 executing program 1: r0 = socket$inet(0x2, 0x840000000003, 0x2) r1 = perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000bcf000), 0x4) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) 2018/04/29 21:25:27 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/28, 0x1c) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@local, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'eql\x00', r2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000020000000000000001008e15e7af00", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc0605345, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000180)={0x0, 0x0, 'client0\x00', 0x0, "b0eae01c3d873a1f", "0d99e222fabbcd907aa29fd32f3c823625b9bd5a430bb051ca503497d091de19"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) [ 366.117470] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. [ 366.277887] FAULT_INJECTION: forcing a failure. [ 366.277887] name failslab, interval 1, probability 0, space 0, times 0 [ 366.289179] CPU: 0 PID: 25946 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 366.296455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.305803] Call Trace: [ 366.308380] dump_stack+0x1b9/0x294 [ 366.311993] ? dump_stack_print_info.cold.2+0x52/0x52 [ 366.317175] should_fail.cold.4+0xa/0x1a [ 366.321217] ? __save_stack_trace+0x7e/0xd0 [ 366.325526] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 366.330617] ? debug_check_no_locks_freed+0x310/0x310 [ 366.335788] ? graph_lock+0x170/0x170 [ 366.339581] ? save_stack+0x43/0xd0 [ 366.343193] ? __kasan_slab_free+0x11a/0x170 [ 366.347585] ? kasan_slab_free+0xe/0x10 [ 366.351542] ? find_held_lock+0x36/0x1c0 [ 366.355587] ? __lock_is_held+0xb5/0x140 [ 366.359637] ? check_same_owner+0x320/0x320 [ 366.363943] ? debug_check_no_obj_freed+0x2ff/0x584 [ 366.368945] ? rcu_note_context_switch+0x710/0x710 [ 366.373864] ? graph_lock+0x170/0x170 [ 366.377649] __should_failslab+0x124/0x180 [ 366.381869] should_failslab+0x9/0x14 [ 366.385650] __kmalloc+0x2c8/0x760 [ 366.389181] ? constrain_params_by_rules+0x141/0x1360 [ 366.394359] ? find_held_lock+0x36/0x1c0 [ 366.398409] constrain_params_by_rules+0x141/0x1360 [ 366.403411] ? lock_downgrade+0x8e0/0x8e0 [ 366.407544] ? snd_pcm_mmap+0x580/0x580 [ 366.411499] ? rcu_is_watching+0x85/0x140 [ 366.415630] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 366.420801] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 366.425976] ? is_bpf_text_address+0xd7/0x170 [ 366.430452] ? kernel_text_address+0x79/0xf0 [ 366.434840] ? __unwind_start+0x166/0x330 [ 366.438969] ? __kernel_text_address+0xd/0x40 [ 366.443458] ? unwind_get_return_address+0x61/0xa0 [ 366.448370] ? __save_stack_trace+0x7e/0xd0 [ 366.452680] ? save_stack+0xa9/0xd0 [ 366.456297] ? save_stack+0x43/0xd0 [ 366.459914] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 366.465430] ? snd_interval_refine+0x428/0x700 [ 366.469994] snd_pcm_hw_refine+0x8e9/0x1180 [ 366.474301] ? do_splice_direct+0x2cc/0x400 [ 366.478602] ? do_sendfile+0x60f/0xe00 [ 366.482472] ? snd_pcm_mmap_status_fault+0x3e0/0x3e0 [ 366.487555] ? graph_lock+0x170/0x170 [ 366.491333] ? __lock_is_held+0xb5/0x140 [ 366.495382] ? __lock_is_held+0xb5/0x140 [ 366.499424] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 366.504940] ? snd_interval_refine+0x428/0x700 [ 366.509503] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.515029] ? _snd_pcm_hw_param_set.constprop.34+0x259/0x610 [ 366.520906] ? rcu_read_lock_sched_held+0x108/0x120 [ 366.525903] ? snd_pcm_hw_param_max+0x730/0x730 [ 366.530553] ? _snd_pcm_hw_param_min+0x330/0x570 [ 366.535290] snd_pcm_oss_change_params_locked+0x28c7/0x3c70 [ 366.540989] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 366.546859] ? is_bpf_text_address+0xd7/0x170 [ 366.551335] ? kernel_text_address+0x79/0xf0 [ 366.555726] ? __unwind_start+0x166/0x330 [ 366.559863] ? __kernel_text_address+0xd/0x40 [ 366.564341] ? unwind_get_return_address+0x61/0xa0 [ 366.569252] ? __save_stack_trace+0x7e/0xd0 [ 366.573567] ? __put_page+0x130/0x180 [ 366.577350] ? __put_compound_page+0xe0/0xe0 [ 366.581741] ? default_file_splice_read+0x874/0xad0 [ 366.586737] ? splice_direct_to_actor+0x268/0x8d0 [ 366.591560] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 366.596904] ? generic_pipe_buf_release+0x1dc/0x290 [ 366.601905] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 366.607077] snd_pcm_oss_write+0x516/0xa20 [ 366.611298] ? debug_check_no_obj_freed+0x2ff/0x584 [ 366.616295] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 366.621294] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 366.626121] ? trace_hardirqs_off+0xd/0x10 [ 366.630340] ? quarantine_put+0xeb/0x190 [ 366.634387] __vfs_write+0x10b/0x960 [ 366.638086] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 366.642910] ? kernel_read+0x120/0x120 [ 366.646783] ? default_file_splice_read+0x888/0xad0 [ 366.651780] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 366.657136] ? check_same_owner+0x320/0x320 [ 366.661440] ? kasan_check_read+0x11/0x20 [ 366.665575] ? rcu_note_context_switch+0x710/0x710 [ 366.670490] __kernel_write+0x10c/0x380 [ 366.674449] write_pipe_buf+0x175/0x220 [ 366.678407] ? default_file_splice_read+0xad0/0xad0 [ 366.683406] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.688925] ? splice_from_pipe_next.part.8+0x296/0x340 [ 366.694275] __splice_from_pipe+0x38e/0x7c0 [ 366.698579] ? default_file_splice_read+0xad0/0xad0 [ 366.703581] splice_from_pipe+0x1e2/0x320 [ 366.707714] ? default_file_splice_read+0xad0/0xad0 [ 366.712713] ? splice_shrink_spd+0xd0/0xd0 [ 366.716938] default_file_splice_write+0x3c/0x90 [ 366.721677] ? generic_splice_sendpage+0x50/0x50 [ 366.726419] direct_splice_actor+0x128/0x190 [ 366.730813] splice_direct_to_actor+0x310/0x8d0 [ 366.735464] ? pipe_to_sendpage+0x3f0/0x3f0 [ 366.739771] ? do_splice_to+0x190/0x190 [ 366.743728] ? rw_verify_area+0x118/0x360 [ 366.747860] do_splice_direct+0x2cc/0x400 [ 366.751992] ? splice_direct_to_actor+0x8d0/0x8d0 [ 366.756822] ? rw_verify_area+0x118/0x360 [ 366.761397] do_sendfile+0x60f/0xe00 [ 366.765103] ? do_compat_pwritev64+0x1b0/0x1b0 [ 366.769667] ? __might_sleep+0x95/0x190 [ 366.773631] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 366.779154] ? _copy_from_user+0xdf/0x150 [ 366.783286] __x64_sys_sendfile64+0x155/0x240 [ 366.787764] ? __ia32_sys_sendfile+0x290/0x290 [ 366.792331] ? do_syscall_64+0x92/0x800 [ 366.796290] do_syscall_64+0x1b1/0x800 [ 366.800162] ? finish_task_switch+0x1ca/0x810 [ 366.804640] ? syscall_return_slowpath+0x5c0/0x5c0 [ 366.809552] ? syscall_return_slowpath+0x30f/0x5c0 [ 366.814467] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 366.819815] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 366.824644] entry_SYSCALL_64_after_hwframe+0x49/0xbe 2018/04/29 21:25:28 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000200), &(0x7f0000000280)=0x4) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000440), 0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'lo\x00'}, 0x18) getsockname$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, @local}, &(0x7f0000000100)=0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'bond_slave\x00'}, 0x18) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffc, 0xfffffffffffffffe) 2018/04/29 21:25:28 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback=0x7f000001}, @in={0x2, 0x4e23, @loopback=0x7f000001}, @in6={0xa, 0x4e24, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x95}, @in6={0xa, 0x4e23, 0xfffffffeffffffff, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x20}}, 0x3}, @in6={0xa, 0x4e21, 0xffffffffffffffd2, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e22, 0x4, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0xeec4}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e23, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in={0x2, 0x4e20, @multicast1=0xe0000001}, @in6={0xa, 0x4e21, 0x4, @empty, 0x2}], 0xe8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) mmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x4, 0x13, r1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x500, 0x0) connect$rds(r3, &(0x7f0000000080)={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x400002, 0x0) write$rdma_cm(r1, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r2, r1, 0x0) 2018/04/29 21:25:28 executing program 1: mkdir(&(0x7f00007b4ff8)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x2, &(0x7f0000000000)=@raw=[@map={0x18, 0x4, 0x1, 0x0, 0xffffffffffffff9c}], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x1f, &(0x7f0000000080)=""/31, 0x41100, 0x1}, 0x48) ioctl(r0, 0x3ff, &(0x7f00000002c0)="4611ce44680776eac11e9f50f570d44a89c8d7d68d6ca825d5498bb331fd3388d990db5934543d17b75bc405332ca07ecad8a7982df6c4cfcadcf612c507a3de025a1511aeb884d79b566ef779fad6520b3218d26cff0b0a72fa64ff5b1dcf310fe40893a5d372fc6dcfbe1c4a6ad3da95c42383b906ea3bdefe5b33835129162817") mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f0000bd9fff)) r1 = shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x7000) mount(&(0x7f0000771000)='./file0\x00', &(0x7f0000976000)='./file0\x00', &(0x7f0000905000)='devtmpfs\x00', 0x85030, &(0x7f0000613000)) syz_fuseblk_mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 366.829830] RIP: 0033:0x455979 [ 366.833004] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 366.840704] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 366.847954] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 366.855206] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 366.862458] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 366.869707] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000001a [ 366.919241] IPVS: Error joining to the multicast group [ 366.933434] IPVS: Error joining to the multicast group 2018/04/29 21:25:28 executing program 7 (fault-call:2 fault-nth:27): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:28 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r1, &(0x7f0000807fe4)={0xa, 0x4e22}, 0xffffffffffffffdd) sendto$inet6(r1, &(0x7f0000976000), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)='l', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000640)=""/199, 0xc7}], 0x1) sendto$inet6(r1, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, &(0x7f0000254000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/29 21:25:28 executing program 3: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@multicast1=0xe0000001, @empty, 0x0, 0x0, 'ip6_vti0\x00', 'bpq0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2=0xe0000002, @broadcast=0xffffffff, 0x0, 0x0, 'tunl0\x00', 'tunl0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x280) r1 = memfd_create(&(0x7f0000000040)='CT\x00', 0x1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x880, 0x0) fanotify_mark(r1, 0xa2, 0x0, r2, &(0x7f00000000c0)='./file0\x00') 2018/04/29 21:25:28 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r0, 0xfffffffffffffffe) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="174104779cdf29b5b100b0444fb3fe92f3d4b29299523fa673046f0a6ee75739f56eabf175fd1b5bfc00cf2dbfac0b641aaad9ce841a985d7f12cf8abd9b40d8243267c7f28a7dc180655d03f1c1dbd9e9cc2355b34f775c224f2dbc14774add4762fef60a0ad54f5ebfdbae32b3b627db4f473bad8652804f92574424df68436c53047f3b5358ce8eaaeb19ba820bec41e6", 0x2c0}], 0x1) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [], 0xa, "54e6b7186d80b8f3c71eac2c4ba9ccc21475eaaa35c2d06659108d52bf375fbc3d1a9833129be4bf2ad587f25e18d6c77d5426135ad987418facaeaeca450fb1556ddb3eec9296c257d04b5c27818c7464f8787827b198e0d3f0c55b43af"}, 0x69) 2018/04/29 21:25:28 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0\x00') mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x1000, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000ed6ffe)='..', &(0x7f0000000040)='../file0\x00') umount2(&(0x7f0000000000)='../file0\x00', 0x2) umount2(&(0x7f00000000c0)='./file0\x00', 0x2) open$dir(&(0x7f00000003c0)='../file0\x00', 0x0, 0x0) 2018/04/29 21:25:28 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="02000000b3f10000000002f6cfed581c257d9bd0e5372f4e368781b351113c9dffe379b2f8429af55b"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x8, 0xfa00, {0xffffffff, 0x3}}, 0x10) dup3(r1, r0, 0x0) 2018/04/29 21:25:28 executing program 6: socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x4000000010, 0x803, 0x0) unshare(0x20000400) mq_notify(0xffffffffffffffff, &(0x7f00000002c0)={0x20000000, 0x15, 0x2, @thr={&(0x7f000087c000), &(0x7f00001c1f7f)}}) getsockopt$inet_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000000)=""/170, &(0x7f00000000c0)=0xaa) 2018/04/29 21:25:29 executing program 3: r0 = gettid() rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f00001b9ffc)) r1 = dup(0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x9c, "d34697f78fc96ab37aa4047d94b19bee4d9470166d7859f713148c3ee9fb352e4b78dd1e1316357460e7d757fe54443d069a431d291275b4f13a17f78b465b19afb3f44f45a31293fcdd10cdd77da0ff1c4a79987609bde57d13cd97072a42ba360ee3b40970e10437c6ebea4c8c644777e282690cc900d7b34e9b5baae7eadb867ce1c9323681a52f538219381484acc56fc35eab1cbfd6fa7560f0"}, &(0x7f0000000140)=0xa4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r2, 0x3}, &(0x7f00000001c0)=0x8) clock_getres(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000c49000)={{}, {0x0, r3}}, &(0x7f0000040000)) r4 = semget(0x2, 0x3, 0x206) semtimedop(r4, &(0x7f0000000000)=[{0x4, 0x0, 0x1000}, {0x6, 0x100000001, 0x1800}, {0x3, 0x3, 0x1800}], 0x3, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) shmget(0x3, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) 2018/04/29 21:25:29 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) [ 367.476795] FAULT_INJECTION: forcing a failure. [ 367.476795] name failslab, interval 1, probability 0, space 0, times 0 [ 367.488121] CPU: 0 PID: 25981 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 367.495401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.504752] Call Trace: [ 367.507351] dump_stack+0x1b9/0x294 [ 367.510999] ? dump_stack_print_info.cold.2+0x52/0x52 [ 367.516206] ? perf_trace_lock_acquire+0xe3/0x980 [ 367.521074] should_fail.cold.4+0xa/0x1a [ 367.525153] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 367.530300] ? debug_check_no_locks_freed+0x310/0x310 [ 367.535491] ? graph_lock+0x170/0x170 [ 367.539286] ? save_stack+0x43/0xd0 [ 367.542901] ? kasan_slab_free+0xe/0x10 [ 367.546865] ? find_held_lock+0x36/0x1c0 [ 367.550921] ? __lock_is_held+0xb5/0x140 [ 367.554984] ? check_same_owner+0x320/0x320 [ 367.559299] ? debug_check_no_obj_freed+0x2ff/0x584 [ 367.564306] ? rcu_note_context_switch+0x710/0x710 [ 367.569224] ? graph_lock+0x170/0x170 [ 367.573022] __should_failslab+0x124/0x180 [ 367.577252] should_failslab+0x9/0x14 [ 367.581044] __kmalloc+0x2c8/0x760 [ 367.584582] ? constrain_params_by_rules+0x141/0x1360 [ 367.589759] ? find_held_lock+0x36/0x1c0 [ 367.593823] constrain_params_by_rules+0x141/0x1360 [ 367.598834] ? lock_downgrade+0x8e0/0x8e0 [ 367.602981] ? snd_pcm_mmap+0x580/0x580 [ 367.606945] ? rcu_is_watching+0x85/0x140 [ 367.611084] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 367.616264] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 367.621452] ? is_bpf_text_address+0xd7/0x170 [ 367.625940] ? kernel_text_address+0x79/0xf0 [ 367.630337] ? __unwind_start+0x166/0x330 [ 367.634473] ? __kernel_text_address+0xd/0x40 [ 367.638959] ? unwind_get_return_address+0x61/0xa0 [ 367.643878] ? __save_stack_trace+0x7e/0xd0 [ 367.648203] ? save_stack+0xa9/0xd0 [ 367.651820] ? save_stack+0x43/0xd0 [ 367.655435] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 367.660959] ? snd_interval_refine+0x428/0x700 [ 367.665532] snd_pcm_hw_refine+0x8e9/0x1180 [ 367.669841] ? do_splice_direct+0x2cc/0x400 [ 367.674147] ? do_sendfile+0x60f/0xe00 [ 367.678040] ? snd_pcm_mmap_status_fault+0x3e0/0x3e0 [ 367.683133] ? graph_lock+0x170/0x170 [ 367.686917] ? __lock_is_held+0xb5/0x140 [ 367.691010] ? __lock_is_held+0xb5/0x140 [ 367.695071] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 367.700593] ? snd_interval_refine+0x428/0x700 [ 367.705169] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.710706] ? _snd_pcm_hw_param_set.constprop.34+0x259/0x610 [ 367.716581] ? rcu_read_lock_sched_held+0x108/0x120 [ 367.721586] ? snd_pcm_hw_param_max+0x730/0x730 [ 367.726244] ? _snd_pcm_hw_param_min+0x330/0x570 [ 367.730993] snd_pcm_oss_change_params_locked+0x28c7/0x3c70 [ 367.736710] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 367.742582] ? zap_class+0x720/0x720 [ 367.746292] ? graph_lock+0x170/0x170 [ 367.750084] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.755610] ? __perf_event_task_sched_in+0x247/0xb80 [ 367.760784] ? perf_trace_lock+0xd6/0x900 [ 367.764926] ? find_held_lock+0x36/0x1c0 [ 367.768986] ? lock_downgrade+0x8e0/0x8e0 [ 367.773131] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 367.778316] snd_pcm_oss_write+0x516/0xa20 [ 367.782539] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 367.787547] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 367.792379] ? preempt_notifier_register+0x1e0/0x1e0 [ 367.797474] __vfs_write+0x10b/0x960 [ 367.801182] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 367.806014] ? kernel_read+0x120/0x120 [ 367.809896] ? __schedule+0x809/0x1e30 [ 367.813771] ? default_file_splice_read+0x888/0xad0 [ 367.818787] ? check_same_owner+0x320/0x320 [ 367.823102] ? rcu_note_context_switch+0x710/0x710 [ 367.828028] __kernel_write+0x10c/0x380 [ 367.831997] write_pipe_buf+0x175/0x220 [ 367.835966] ? default_file_splice_read+0xad0/0xad0 [ 367.840970] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.846493] ? splice_from_pipe_next.part.8+0x296/0x340 [ 367.851851] __splice_from_pipe+0x38e/0x7c0 [ 367.856162] ? default_file_splice_read+0xad0/0xad0 [ 367.861181] splice_from_pipe+0x1e2/0x320 [ 367.865317] ? default_file_splice_read+0xad0/0xad0 [ 367.870323] ? splice_shrink_spd+0xd0/0xd0 [ 367.874561] default_file_splice_write+0x3c/0x90 [ 367.879306] ? generic_splice_sendpage+0x50/0x50 [ 367.884053] direct_splice_actor+0x128/0x190 [ 367.888453] splice_direct_to_actor+0x310/0x8d0 [ 367.893114] ? pipe_to_sendpage+0x3f0/0x3f0 [ 367.897431] ? do_splice_to+0x190/0x190 [ 367.901394] ? rw_verify_area+0x118/0x360 [ 367.905535] do_splice_direct+0x2cc/0x400 [ 367.909675] ? splice_direct_to_actor+0x8d0/0x8d0 [ 367.914511] ? rw_verify_area+0x118/0x360 [ 367.918650] do_sendfile+0x60f/0xe00 [ 367.922363] ? do_compat_pwritev64+0x1b0/0x1b0 [ 367.926936] ? __might_sleep+0x95/0x190 [ 367.930909] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.936434] ? _copy_from_user+0xdf/0x150 [ 367.940576] __x64_sys_sendfile64+0x155/0x240 [ 367.945060] ? __ia32_sys_sendfile+0x290/0x290 [ 367.949631] ? do_syscall_64+0x92/0x800 [ 367.953599] do_syscall_64+0x1b1/0x800 [ 367.957479] ? syscall_return_slowpath+0x5c0/0x5c0 [ 367.962397] ? syscall_return_slowpath+0x30f/0x5c0 [ 367.967321] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 367.972677] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 367.977512] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.982687] RIP: 0033:0x455979 [ 367.985861] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 367.993559] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 368.000812] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 368.008070] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 368.015326] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 368.022582] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000001b 2018/04/29 21:25:29 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000000164f30c010040000000000000000000"]) 2018/04/29 21:25:29 executing program 3: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x17) bind$netlink(r0, &(0x7f0000f12000)={0x400000010, 0x0, 0x0, 0x70a1}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000040)=""/254, &(0x7f00001bb000)=0xfe) 2018/04/29 21:25:29 executing program 0: r0 = perf_event_open(&(0x7f0000001f88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f20000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000f20000)) mprotect(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0xb) 2018/04/29 21:25:29 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000080)={0xfffffffffffffffe, 0x7, 0x5, 0xfffffffffffffff8, "0e4a5849b66c38496f51e681602627614848465ca4e00a4669c73a9796ecfe92f69055ec9b5896edd9024141", 0x5}) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x0) 2018/04/29 21:25:29 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x200010, 0x1, 0x6}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/38, 0x26}, &(0x7f0000000080), 0x3a}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000300000000000000000006000000000000000000000000000000e000000100000000000000000700000000000000000000000000000000000000030006000000000002c9a600ac14ffbb0000000000000000070005000000000002000000ac14ffbb00000000000000000400030004000000000000007dd7fd3b3a2dce7a000000000000000000000034"], 0xa0}, 0x1}, 0x0) chroot(&(0x7f0000000140)='./file0\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0xf) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/29 21:25:30 executing program 7 (fault-call:2 fault-nth:28): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:30 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f00002ac000)='/dev/input/mice\x00', 0x0, 0x3e) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f6970365f7461626c65735f6e616d65730017") sendfile(r0, r1, &(0x7f00008d1000), 0x401) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe41, 0x4) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, {0x33, 0x7, 0x6, 0x4, 0x3, 0xa2}, 0xb1a40}, 0xa) 2018/04/29 21:25:30 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x82003, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"], 0x1) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8) close(r0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x200) 2018/04/29 21:25:30 executing program 3: r0 = socket(0x5, 0x3, 0x20002) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1ff, 0x2) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000000c0)=""/21) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000100)=""/48) bind$alg(r4, &(0x7f0000001540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002c00)="f5b340d77e332ca0037c7ba18908d05d8ae48fc17c6df45de8880fb50153b51c", 0x20}], 0x1, &(0x7f0000000300)}, 0x0) recvmsg(r5, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000012000/0x4000)=nil, 0x4000}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) write(r0, &(0x7f00003fe000)="24000000280007003200000800367700fbffffff0100000000000000ffffffff0100ff10", 0x24) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) 2018/04/29 21:25:30 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x9, 0x40000) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x4, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="0200000000a0010000463af6cfed58e5dc7d96b2e5372f4e3e8781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r2, r0, 0x0) 2018/04/29 21:25:30 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:30 executing program 1: perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffefffff, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000, @perf_config_ext={0x4, 0x35492ecc}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x1000, 0x1400, &(0x7f0000ffe000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x54000020, &(0x7f0000ffc000/0x3000)=nil) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000013c0)=""/165) 2018/04/29 21:25:30 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) r1 = socket$inet6(0xa, 0x1000000000001, 0x0) connect(r1, &(0x7f0000000040)=@nl=@unspec, 0x80) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f000084c000), 0x101, 0x20000000, &(0x7f000006ffe4)={0xa, 0x8004e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x3e6, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100000010001, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x3, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0) close(r2) r3 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x0, 0x20010b000) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x78) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x20, &(0x7f00000003c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e21, @loopback=0x7f000001}]}, &(0x7f0000000440)=0x10) sendmsg$inet_sctp(r3, &(0x7f00000004c0)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x7fff, @local={0xfe, 0x80, [], 0xaa}, 0x3ff}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000180)="a35027a2fdfacf32cd1337d12eb38de05a834f1334c702dee6f98f25940fa2a26d226eac09761de3d25d61e97f3fa126523791bc82d6f26e62a2c46d2de72ed2201d410691dd12366988b8f72e3a10dcc3d77c516a706b94353957bb0b220d09cc0304d2b0b16a64876b2b27bc88e005aa1b", 0x72}, {&(0x7f0000000280)="3683d9c5d1985e32e64be2002556522912c8e7ba56917a6278f0e64c6427e491e24097be79c34e21250cf72bf496ea4ca71447ea1318b550cf20e0c8747a08436039dd78d319402c156ef8361419535b16ec96f4815267fd9c20a046e7047b81e15c683759b12a7f93e27d57b7597a10ceec7120b5af3923d51f5084a15d5087970ee6ea8d116008094551defcec3f96e84622ad6a1510d8d506c001547046de0305ff05ed6dbf0c9f213d3bd8b7220a7b153e97607d628db6ae7e87d4ed9b19aa5cd772332cab583a7a094a5db253c75483b6a7290f0408249875", 0xdb}], 0x2, &(0x7f0000000480)=[@sndrcv={0x30, 0x84, 0x1, {0x8, 0x0, 0x8, 0xffffffffffffffff, 0xffffffff, 0x167, 0x1, 0x1, r5}}], 0x30, 0x44801}, 0x4000) r6 = bpf$MAP_CREATE(0x0, &(0x7f000012b000)={0x5, 0x1, 0x200, 0x2, 0x0, r4}, 0x2c) listen$netrom(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004000)={0x2000000000000d, 0x2, 0x4, 0x7, 0x5, r6, 0x0, [0xa]}, 0x2c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000540), 0x8) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000500)=0xff, 0x4) [ 368.768848] FAULT_INJECTION: forcing a failure. [ 368.768848] name failslab, interval 1, probability 0, space 0, times 0 [ 368.780197] CPU: 0 PID: 26055 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 368.787478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.796829] Call Trace: [ 368.799426] dump_stack+0x1b9/0x294 [ 368.803073] ? dump_stack_print_info.cold.2+0x52/0x52 [ 368.808274] ? finish_task_switch+0x1ca/0x810 [ 368.812775] ? finish_task_switch+0x182/0x810 2018/04/29 21:25:30 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001a40)={{{@in=@remote, @in6=@loopback}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000001b40)=0xe8) sendmsg(r0, &(0x7f0000001b80)={&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007fbdb72d1cb2a4a280930a06f00000a8430891650500390008000a000c00060000001900a30700000000000000dc1338d544003ab8220000060cec4fabb1d4", 0x45}], 0x262, &(0x7f0000006000)}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 2018/04/29 21:25:30 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7fffffff, 0x0) setns(r3, 0x48000000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="ea00280000b30082d6540f30ea030000002c0066b850000f00d066ba4200b802000000efc74424000a000000c7442402acc70000c7442406000000000f0114240f20e035100000000f22e03e64360f01cf0f22c7", 0x54}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)={0xc, "d2d47ba0132d450f9e41f89c"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 368.817286] should_fail.cold.4+0xa/0x1a [ 368.821362] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 368.826483] ? __schedule+0x809/0x1e30 [ 368.830377] ? is_bpf_text_address+0xd7/0x170 [ 368.834889] ? __sched_text_start+0x8/0x8 [ 368.839046] ? find_held_lock+0x36/0x1c0 [ 368.843128] ? __lock_is_held+0xb5/0x140 [ 368.847216] ? check_same_owner+0x320/0x320 [ 368.851548] ? snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 368.856920] ? snd_pcm_oss_write+0x516/0xa20 [ 368.861333] ? __vfs_write+0x10b/0x960 [ 368.865230] ? __splice_from_pipe+0x38e/0x7c0 [ 368.869734] ? splice_from_pipe+0x1e2/0x320 [ 368.874073] ? default_file_splice_write+0x3c/0x90 [ 368.879009] ? direct_splice_actor+0x128/0x190 [ 368.883603] __should_failslab+0x124/0x180 [ 368.887852] should_failslab+0x9/0x14 [ 368.891661] kmem_cache_alloc_trace+0x2cb/0x780 [ 368.896341] ? do_raw_spin_lock+0xc1/0x200 [ 368.900584] ? trace_hardirqs_off+0xd/0x10 [ 368.904838] snd_pcm_hw_param_near.constprop.35+0x15c/0xb10 [ 368.910561] ? _snd_pcm_hw_param_min+0x570/0x570 [ 368.915321] ? mark_held_locks+0xc9/0x160 2018/04/29 21:25:30 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:30 executing program 4: clock_settime(0x4, &(0x7f0000000040)) accept$nfc_llcp(0xffffffffffffff9c, 0x0, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='sessionid\x00') connect$vsock_dgram(r0, &(0x7f0000000340)={0x28, 0x0, 0x0, @my=0x0}, 0x10) accept4$nfc_llcp(r0, &(0x7f0000000180), &(0x7f00000000c0)=0xffffffffffffff26, 0x804) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000001}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x128, r1, 0x320, 0x70bd25, 0x25dfdbfc, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3a, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0xc}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xb0bf3aa8b7bee1d9}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x14}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3084}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x4008081) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="00000000180000fa03000000000000009778104676d5aa280d44da241c9d46ca6052b538243d6634115deb9b7be65496b35194112d198646d686688f46988a2ca5f2d0dd8d1d5350db4283d30e6cc0a563a15645c52502b3ee901d58fe34485cc590c0d8ac3c9787c680dbe30cfc341798f2cc9e", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r2, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) r4 = dup3(r3, r2, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40004000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r5, 0x20, 0x70bd25, 0x25dfdbfd, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x80) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000640)={0x0, 0x8001}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000006c0)={0x7aa, 0x8, 0x3, 0x8, r6}, &(0x7f0000000700)=0x10) [ 368.919482] ? kfree+0x111/0x260 [ 368.922858] ? snd_pcm_oss_change_params_locked+0x2c62/0x3c70 [ 368.928748] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 368.933772] ? trace_hardirqs_on+0xd/0x10 [ 368.937933] snd_pcm_oss_change_params_locked+0xc4d/0x3c70 [ 368.943579] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 368.949473] ? is_bpf_text_address+0xd7/0x170 [ 368.953975] ? kernel_text_address+0x79/0xf0 [ 368.958392] ? __unwind_start+0x166/0x330 [ 368.962548] ? __kernel_text_address+0xd/0x40 [ 368.967051] ? unwind_get_return_address+0x61/0xa0 [ 368.971992] ? __save_stack_trace+0x7e/0xd0 [ 368.976339] ? __put_page+0x130/0x180 [ 368.980148] ? __put_compound_page+0xe0/0xe0 [ 368.984560] ? default_file_splice_read+0x874/0xad0 [ 368.989585] ? splice_direct_to_actor+0x268/0x8d0 [ 368.994432] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 368.999809] ? generic_pipe_buf_release+0x1dc/0x290 [ 369.004839] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 369.010037] snd_pcm_oss_write+0x516/0xa20 [ 369.014286] ? debug_check_no_obj_freed+0x2ff/0x584 [ 369.019312] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 369.024328] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 369.029160] ? trace_hardirqs_off+0xd/0x10 [ 369.033380] ? quarantine_put+0xeb/0x190 [ 369.037431] __vfs_write+0x10b/0x960 [ 369.041132] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 369.045958] ? kernel_read+0x120/0x120 [ 369.049831] ? default_file_splice_read+0x888/0xad0 [ 369.054834] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 369.060193] ? check_same_owner+0x320/0x320 [ 369.064509] ? rcu_note_context_switch+0x710/0x710 [ 369.069424] __kernel_write+0x10c/0x380 [ 369.073389] write_pipe_buf+0x175/0x220 [ 369.077349] ? default_file_splice_read+0xad0/0xad0 [ 369.082363] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.087886] ? splice_from_pipe_next.part.8+0x296/0x340 [ 369.093239] __splice_from_pipe+0x38e/0x7c0 [ 369.097546] ? default_file_splice_read+0xad0/0xad0 [ 369.102553] splice_from_pipe+0x1e2/0x320 [ 369.106686] ? default_file_splice_read+0xad0/0xad0 [ 369.111684] ? splice_shrink_spd+0xd0/0xd0 [ 369.115912] default_file_splice_write+0x3c/0x90 [ 369.120651] ? generic_splice_sendpage+0x50/0x50 [ 369.125391] direct_splice_actor+0x128/0x190 [ 369.129787] splice_direct_to_actor+0x310/0x8d0 [ 369.134440] ? pipe_to_sendpage+0x3f0/0x3f0 [ 369.138748] ? do_splice_to+0x190/0x190 [ 369.142706] ? rw_verify_area+0x118/0x360 [ 369.146839] do_splice_direct+0x2cc/0x400 [ 369.150973] ? splice_direct_to_actor+0x8d0/0x8d0 [ 369.155801] ? rw_verify_area+0x118/0x360 [ 369.159934] do_sendfile+0x60f/0xe00 [ 369.163637] ? do_compat_pwritev64+0x1b0/0x1b0 [ 369.168204] ? __might_sleep+0x95/0x190 [ 369.172167] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 369.177689] ? _copy_from_user+0xdf/0x150 [ 369.181822] __x64_sys_sendfile64+0x155/0x240 [ 369.186304] ? __ia32_sys_sendfile+0x290/0x290 [ 369.190878] ? do_syscall_64+0x92/0x800 [ 369.194857] do_syscall_64+0x1b1/0x800 [ 369.198728] ? finish_task_switch+0x1ca/0x810 [ 369.203211] ? syscall_return_slowpath+0x5c0/0x5c0 [ 369.208126] ? syscall_return_slowpath+0x30f/0x5c0 [ 369.213046] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 369.218399] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 369.223229] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 369.228403] RIP: 0033:0x455979 [ 369.231575] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 369.239266] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 369.246518] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 369.253785] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 369.261040] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 2018/04/29 21:25:30 executing program 0: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1d, 0xa0201) kexec_load(0x80000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="b4e41647d01e2d7780694d9ef53a3689929c6bb5592860fb28e6be20cc41e0c6eac44f13f4b6b2e0a505abbc443e1d0441b6b9d97a60225150afd1f32fbee072890b0cca78ebc94922", 0x49, 0x100000000, 0x8}], 0x80000) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000000c0)={{0x0, 0x1, 0x3, 0x40, 0x6, 0x5}, 0x7, 0x6, 0x8, 0x7, 0x80000000, "5cdba3bf2c1b1987214722343977750ca8a4ac68e2188d3659a20aae8e23c005431e3aa23c1c776b85fba2b37d060e6cc44bbf44b30630d562b54ffd9604adb81acafd1ec65e37c01e4abe4df40a32254162497012c808a271db8a6c5654a3d81c7bb8b0691a68c4bff886aaf5fc95481c54b69a8b60319f4e5b3f72d7d51386"}) [ 369.268294] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000001c 2018/04/29 21:25:30 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f0000557130)=@generic={0x0, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a53a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151314a8ef1f1622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x2, 0x101, 0x4, 0x40, 0x0, 0x7fffffff, 0x4000, 0x4, 0x5, 0x6, 0x6ecb, 0x6, 0x8, 0x5, 0x81, 0xf3, 0x4, 0xb2b, 0xb3, 0x40, 0x8, 0x2, 0x40, 0x4, 0xc000000000000000, 0x100, 0xbc, 0x0, 0x8, 0x2, 0x1, 0x7fffffff, 0x396d, 0x7, 0x2, 0xfffffffffffffbff, 0x0, 0x1ff, 0x4, @perf_bp={&(0x7f0000000040)}, 0x0, 0x5, 0x5, 0x6, 0x883, 0xfffffffffffffffc, 0x5}, r1, 0x7, r0, 0xb) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000600)) 2018/04/29 21:25:30 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x0) 2018/04/29 21:25:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x10, 0x0, 0x6}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) accept4$unix(r1, &(0x7f0000000140), &(0x7f0000000200)=0x6e, 0x800) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 369.543179] FAULT_FLAG_ALLOW_RETRY missing 30 [ 369.547802] CPU: 1 PID: 26038 Comm: syz-executor3 Not tainted 4.17.0-rc2+ #24 [ 369.555079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.564430] Call Trace: [ 369.567026] dump_stack+0x1b9/0x294 [ 369.570645] ? dump_stack_print_info.cold.2+0x52/0x52 [ 369.575824] ? kasan_check_write+0x14/0x20 [ 369.580047] ? do_raw_spin_lock+0xc1/0x200 [ 369.584272] handle_userfault.cold.32+0x44/0x5a [ 369.588927] ? handle_userfault+0x16c6/0x2760 [ 369.593739] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 369.598308] ? debug_check_no_locks_freed+0x310/0x310 [ 369.603481] ? graph_lock+0x130/0x170 [ 369.607272] ? plist_check_list+0xa0/0xa0 [ 369.611404] ? __lock_acquire+0x7f5/0x5140 [ 369.615623] ? print_usage_bug+0xc0/0xc0 [ 369.619669] ? print_usage_bug+0xc0/0xc0 [ 369.623716] ? perf_trace_lock+0xd6/0x900 [ 369.627855] ? __lock_acquire+0x7f5/0x5140 [ 369.632078] ? graph_lock+0x170/0x170 [ 369.635871] ? find_held_lock+0x36/0x1c0 [ 369.639921] ? lock_downgrade+0x8e0/0x8e0 [ 369.644059] ? kasan_check_read+0x11/0x20 [ 369.648190] ? do_raw_spin_unlock+0x9e/0x2e0 [ 369.652582] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 369.657151] ? kasan_check_write+0x14/0x20 [ 369.661371] ? do_raw_spin_lock+0xc1/0x200 [ 369.665592] __handle_mm_fault+0x38d8/0x4310 [ 369.669990] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 369.674730] ? graph_lock+0x170/0x170 [ 369.678520] ? find_held_lock+0x36/0x1c0 [ 369.682571] ? lock_downgrade+0x8e0/0x8e0 [ 369.686709] ? handle_mm_fault+0x8c0/0xc70 [ 369.690931] handle_mm_fault+0x53a/0xc70 [ 369.694979] ? __handle_mm_fault+0x4310/0x4310 [ 369.699561] ? find_vma+0x34/0x190 [ 369.703093] __do_page_fault+0x60b/0xe40 [ 369.707141] ? mm_fault_error+0x380/0x380 [ 369.711274] ? graph_lock+0x170/0x170 [ 369.715063] do_page_fault+0xee/0x8a7 [ 369.718846] ? vmalloc_sync_all+0x30/0x30 [ 369.722979] ? find_held_lock+0x36/0x1c0 [ 369.727038] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 369.731867] page_fault+0x1e/0x30 [ 369.735304] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 369.740904] RSP: 0018:ffff88018fa9fc38 EFLAGS: 00010202 [ 369.746253] RAX: ffffed0031f53fb3 RBX: 0000000000000020 RCX: 0000000000000004 [ 369.753506] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff88018fa9fd78 [ 369.760761] RBP: ffff88018fa9fc70 R08: ffffed0031f53fb3 R09: ffffed0031f53faf [ 369.768016] R10: ffffed0031f53fb2 R11: ffff88018fa9fd97 R12: 0000000020013020 [ 369.775274] R13: 0000000020013000 R14: ffff88018fa9fd78 R15: 00007ffffffff000 [ 369.782539] ? _copy_from_user+0x10d/0x150 [ 369.786764] do_fcntl+0xccf/0x14b0 [ 369.790291] ? f_getown+0xc0/0xc0 [ 369.793733] ? fget_raw+0x20/0x20 [ 369.797180] ? fput+0x130/0x1a0 [ 369.800448] ? __x64_sys_futex+0x477/0x680 [ 369.804670] ? do_futex+0x27d0/0x27d0 [ 369.808458] ? security_file_fcntl+0x94/0xc0 [ 369.812858] __x64_sys_fcntl+0x177/0x1f0 [ 369.816903] do_syscall_64+0x1b1/0x800 [ 369.820774] ? finish_task_switch+0x1ca/0x810 [ 369.825265] ? syscall_return_slowpath+0x5c0/0x5c0 [ 369.830181] ? syscall_return_slowpath+0x30f/0x5c0 [ 369.835097] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 369.840445] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 369.845273] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 369.850446] RIP: 0033:0x455979 [ 369.853616] RSP: 002b:00007f86f7204c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 369.861305] RAX: ffffffffffffffda RBX: 00007f86f72056d4 RCX: 0000000000455979 [ 369.868555] RDX: 0000000020013000 RSI: 0000000000000006 RDI: 0000000000000015 [ 369.875809] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 369.883058] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 369.890311] R13: 000000000000008f R14: 00000000006f4e08 R15: 0000000000000000 2018/04/29 21:25:31 executing program 7 (fault-call:2 fault-nth:29): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:31 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f000097e000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0x2, 0x1}, 0x20) r2 = accept4(r1, &(0x7f0000000040)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="ac0000007a264b22da5c611af1fa6a474a71f8500bf7b85d5ca2290d18f65b9677a8d973c2179391073ca46d8d9537fbf69cc02683162c823e692e62feca599910f685cebf1a8ddd105d2431ecc834d0e65da2a34adc6a27a2fddbae7cea4c48d17b39ee90a3b8e54e5f3a8d6d2282947aa4777bde8f638a3dab5ac148c0b07335858b567a94ed15343656ed2db2603326ea59959ff5d5142aa4248513314bb25ca57445a989e6cb0d2e327869a53300"], &(0x7f0000000100)=0xb4) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={r3, 0x8001, 0x4, 0x3}, &(0x7f00000002c0)=0x10) 2018/04/29 21:25:31 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_dump}) 2018/04/29 21:25:31 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x2, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:31 executing program 0: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e6, 0x0, 0x0, 0xd22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrlimit(0xffffffffffffffff, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xffffffff, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0x7fffffff, 0x2, 0x9, 0xb5, 0x1000000000000}) 2018/04/29 21:25:31 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40000, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000240)=0x2, &(0x7f0000000280)=0x4) waitid(0x0, r1, &(0x7f0000000080), 0x2, &(0x7f0000000180)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYRES64=r2], 0x18) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)={&(0x7f00000002c0)='./file0\x00', r2}, 0x10) dup3(r3, r0, 0x0) 2018/04/29 21:25:31 executing program 6: clock_nanosleep(0x0, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f00000ff000)={0x0, r0}) recvmsg(r2, &(0x7f0000172fc8)={&(0x7f0000b3aff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b36000)}, 0x0) dup2(r1, r2) r3 = gettid() syz_open_dev$random(&(0x7f0000000000)='/dev/random\x00', 0x0, 0x80000) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x1, 0x32, 0xffffffffffffffff, 0x0) tkill(r3, 0x16) 2018/04/29 21:25:31 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000fa6000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x83f5, &(0x7f00000000c0)=0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x80, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r3, 0x8, 0x70bd25, 0x25dfdbfd, {0x5}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20008084) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000180), 0x4) io_submit(r1, 0x1, &(0x7f0000c32000)=[&(0x7f000036dfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000d70f92)}]) io_destroy(r1) mkdir(&(0x7f0000001200)='./file0\x00', 0x4) [ 369.975997] FAULT_INJECTION: forcing a failure. [ 369.975997] name failslab, interval 1, probability 0, space 0, times 0 [ 369.987327] CPU: 1 PID: 26130 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 369.994602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.003953] Call Trace: [ 370.006553] dump_stack+0x1b9/0x294 [ 370.010194] ? dump_stack_print_info.cold.2+0x52/0x52 [ 370.015420] should_fail.cold.4+0xa/0x1a [ 370.020032] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 370.020053] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 370.020080] ? graph_lock+0x170/0x170 [ 370.034155] ? is_bpf_text_address+0xd7/0x170 [ 370.038664] ? kernel_text_address+0x79/0xf0 [ 370.043085] ? find_held_lock+0x36/0x1c0 [ 370.047163] ? __lock_is_held+0xb5/0x140 [ 370.051250] ? check_same_owner+0x320/0x320 [ 370.055594] ? snd_pcm_mmap_status_fault+0x3e0/0x3e0 [ 370.055615] ? snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 370.066059] ? rcu_note_context_switch+0x710/0x710 [ 370.070995] ? write_pipe_buf+0x175/0x220 [ 370.075147] ? __splice_from_pipe+0x38e/0x7c0 [ 370.079648] ? splice_from_pipe+0x1e2/0x320 [ 370.083979] __should_failslab+0x124/0x180 [ 370.088221] should_failslab+0x9/0x14 [ 370.092027] __kmalloc+0x2c8/0x760 [ 370.095572] ? kasan_check_write+0x14/0x20 [ 370.099812] ? do_raw_spin_lock+0xc1/0x200 [ 370.104056] ? snd_pcm_plugin_build+0x64/0x670 [ 370.108646] snd_pcm_plugin_build+0x64/0x670 [ 370.113063] snd_pcm_plugin_build_mulaw+0x2aa/0x8b0 [ 370.118083] ? snd_pcm_plugin_build_linear+0x900/0x900 2018/04/29 21:25:31 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xbe1a, 0x105001) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f00000001c0)={0x100000000, 0x5, 0x800, 0x6, 0x20, 0x6}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r2, r3/1000+30000}, {0x0, 0x2710}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6) readv(r0, &(0x7f0000b28000)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140), &(0x7f0000000180)=0x4) signalfd(r0, &(0x7f0000000300), 0x8) 2018/04/29 21:25:31 executing program 0: mkdir(&(0x7f0000dea000)='./file0\x00', 0x0) r0 = open(&(0x7f0000b2cff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00007a4ff8)='./file0\x00', 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) pivot_root(&(0x7f0000b6aff8)='./file0\x00', &(0x7f0000f75000)='.') 2018/04/29 21:25:31 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={'bcsf0\x00', {0x2, 0x4e1e, @broadcast=0xffffffff}}) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000000c0)={0x73, @multicast1=0xe0000001, 0x4e21, 0x2, 'none\x00', 0x0, 0x3, 0x2f}, 0x2c) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80dc5521, &(0x7f0000000040)=""/7) [ 370.123365] ? mulaw_transfer+0x310/0x310 [ 370.127527] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 370.132726] snd_pcm_plug_format_plugins+0x12f9/0x1a60 [ 370.138013] ? snd_pcm_plug_slave_format+0x760/0x760 [ 370.143123] ? snd_interval_refine+0x428/0x700 [ 370.147716] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.153260] ? snd_pcm_hw_param_max+0x730/0x730 [ 370.157939] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 370.163142] snd_pcm_oss_change_params_locked+0x11bd/0x3c70 [ 370.168877] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 370.174768] ? is_bpf_text_address+0xd7/0x170 [ 370.179274] ? kernel_text_address+0x79/0xf0 [ 370.183687] ? __unwind_start+0x166/0x330 [ 370.187846] ? __kernel_text_address+0xd/0x40 [ 370.192350] ? unwind_get_return_address+0x61/0xa0 [ 370.197287] ? __save_stack_trace+0x7e/0xd0 [ 370.201631] ? __put_page+0x130/0x180 [ 370.205441] ? __put_compound_page+0xe0/0xe0 [ 370.209862] ? default_file_splice_read+0x874/0xad0 [ 370.214881] ? splice_direct_to_actor+0x268/0x8d0 [ 370.219719] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.225079] ? generic_pipe_buf_release+0x1dc/0x290 [ 370.230091] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 370.235271] snd_pcm_oss_write+0x516/0xa20 [ 370.239495] ? debug_check_no_obj_freed+0x2ff/0x584 [ 370.244503] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 370.249512] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 370.254344] ? trace_hardirqs_off+0xd/0x10 [ 370.258567] ? quarantine_put+0xeb/0x190 [ 370.262621] __vfs_write+0x10b/0x960 [ 370.266322] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 370.271153] ? kernel_read+0x120/0x120 [ 370.275038] ? default_file_splice_read+0x888/0xad0 [ 370.280048] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.285420] ? check_same_owner+0x320/0x320 [ 370.289734] ? rcu_note_context_switch+0x710/0x710 [ 370.294657] __kernel_write+0x10c/0x380 [ 370.298627] write_pipe_buf+0x175/0x220 [ 370.302590] ? default_file_splice_read+0xad0/0xad0 [ 370.307596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.313120] ? splice_from_pipe_next.part.8+0x296/0x340 [ 370.318481] __splice_from_pipe+0x38e/0x7c0 [ 370.322795] ? default_file_splice_read+0xad0/0xad0 [ 370.327811] splice_from_pipe+0x1e2/0x320 [ 370.331949] ? default_file_splice_read+0xad0/0xad0 [ 370.336953] ? splice_shrink_spd+0xd0/0xd0 [ 370.341193] default_file_splice_write+0x3c/0x90 [ 370.345936] ? generic_splice_sendpage+0x50/0x50 [ 370.350681] direct_splice_actor+0x128/0x190 [ 370.355081] splice_direct_to_actor+0x310/0x8d0 [ 370.359742] ? pipe_to_sendpage+0x3f0/0x3f0 [ 370.364058] ? do_splice_to+0x190/0x190 [ 370.368030] ? rw_verify_area+0x118/0x360 [ 370.372173] do_splice_direct+0x2cc/0x400 [ 370.376312] ? splice_direct_to_actor+0x8d0/0x8d0 [ 370.381147] ? rw_verify_area+0x118/0x360 [ 370.385288] do_sendfile+0x60f/0xe00 [ 370.388998] ? do_compat_pwritev64+0x1b0/0x1b0 [ 370.393577] ? __might_sleep+0x95/0x190 [ 370.397546] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 370.403074] ? _copy_from_user+0xdf/0x150 [ 370.407215] __x64_sys_sendfile64+0x155/0x240 [ 370.411703] ? __ia32_sys_sendfile+0x290/0x290 [ 370.416274] ? do_syscall_64+0x92/0x800 [ 370.420242] do_syscall_64+0x1b1/0x800 [ 370.424115] ? finish_task_switch+0x1ca/0x810 [ 370.428602] ? syscall_return_slowpath+0x5c0/0x5c0 [ 370.433522] ? syscall_return_slowpath+0x30f/0x5c0 [ 370.438447] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 370.443806] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 370.448643] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.453822] RIP: 0033:0x455979 [ 370.456996] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 370.464702] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 370.471956] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 370.479214] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 370.486470] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 370.493724] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000001d 2018/04/29 21:25:32 executing program 1: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) 2018/04/29 21:25:32 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340), 0x0, 0xa}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:32 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x0) 2018/04/29 21:25:32 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000140)={{0x88, 0x1, 0x9, 0x7, 0x1, 0x5}, 0x7fffffff}) ioctl$TCSETAF(r0, 0x5404, &(0x7f00009f1000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00001e4000)={0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x1ff}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200000000000000}) ppoll(&(0x7f0000000040)=[{r0, 0x2000}, {r1, 0x200}, {r0, 0x100}], 0x3, &(0x7f0000000080), &(0x7f00000000c0)={0x100}, 0x8) 2018/04/29 21:25:32 executing program 3: mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa) write$fuse(r0, &(0x7f0000000040)={0x14, 0x0, 0x0, @fuse_poll_out={0x7fff}}, 0x14) truncate(&(0x7f000024aff8)='./file0\x00', 0x0) 2018/04/29 21:25:32 executing program 7 (fault-call:2 fault-nth:30): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:32 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:32 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='/exe\x00\x00\x00\x00\x00\x00') socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$fiemap(r0, 0x6609, &(0x7f0000000080)=ANY=[]) 2018/04/29 21:25:32 executing program 1: r0 = getpgrp(0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x8000, 0x0) write$sndseq(r1, &(0x7f0000000100)=[{0x6, 0x0, 0x800, 0xbb4, @tick=0x4, {0x2, 0x2c}, {0xa6, 0x5}, @raw32}, {0x9, 0xfff, 0x200, 0x161, @tick=0xe4b, {0x4ce, 0x1ff}, {0x7fffffff, 0x1}, @raw32={[0x8, 0x6]}}, {0x9, 0x2f5, 0x6, 0x2, @time={0x0, 0x989680}, {0x5, 0xfff}, {0x1, 0x986}, @ext={0x54, &(0x7f0000000080)="c423040fe4677208d36ded5001406d62819b22b56d7984359a7662fc9393dba6737a6b3d70904f8a696e39d6b4a3060da813dd35e54e343c9f38dad5b0e385d9c032baae659bfc7941a7f929446087338efb6ab9"}}, {0xb03f, 0x7f, 0x3, 0x7fffffff, @tick=0x9, {0x6, 0x4}, {0xfff, 0x1}, @control={0x8, 0x0, 0xd36e}}], 0xc0) process_vm_readv(r0, &(0x7f000001df80)=[{&(0x7f000001d000)=""/109, 0x6d}], 0x1, &(0x7f000001dfa0)=[{&(0x7f000001df93)=""/110, 0x6e}], 0x1000000000000101, 0x0) waitid(0x1, r0, &(0x7f0000000000), 0x20000001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000001c0)={{0x8, 0x4, 0x7, 0x400, "b9d41f4b664fef501e6182754cb8597a960b18a469ed3261236119847bfa233d48821f6bd2d0c051a267a536", 0x6}, 0x80000000, [0xffff, 0x2, 0x7, 0x85, 0x987c, 0xfffffffffffffffd, 0x0, 0x1ff, 0x5, 0xffffffff, 0x40, 0x4, 0x0, 0x80, 0x2, 0xffffffff, 0x10001, 0x0, 0x3f, 0x2, 0x4, 0x1f, 0x4, 0xff, 0x0, 0x0, 0x36fa, 0x9, 0x2, 0x8, 0x1b68, 0x8000, 0x8, 0xff, 0x1, 0x2, 0x19925ac8, 0x9, 0x40, 0x9, 0xfffffffffffffff8, 0x100000001, 0x3, 0x5, 0x3, 0x2, 0x6, 0xc473, 0xde, 0x8, 0x5, 0x5, 0x1, 0x7ff, 0xfffffffffffffffa, 0x7, 0x6, 0xb580, 0xce7, 0x5, 0x0, 0x3, 0x862, 0x7f, 0x4de, 0x1, 0x1ff, 0xfff, 0x1, 0x7c75, 0x7fffffff, 0x1, 0x38a, 0xf9, 0x19, 0x5, 0x6, 0x5, 0x6, 0x4, 0x3, 0x3f, 0x1, 0x10000, 0x2, 0x6, 0xff, 0x1, 0x2, 0xffffffff, 0x7, 0x1, 0x42, 0xfffffffffffffffc, 0x1, 0xffffffffffffffff, 0x8, 0x80000000, 0x8, 0x3, 0x1, 0x3, 0x3f, 0xff, 0x2, 0x3, 0x244ef938, 0xffffffff, 0x81, 0x0, 0x401, 0xe93e, 0x7, 0x1, 0x6, 0x1f, 0x1, 0x2, 0x6, 0x6, 0x7, 0x4, 0xc2, 0x7, 0x8, 0x2, 0xffffffff, 0x4], {0x0, 0x989680}}) 2018/04/29 21:25:32 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0xfe, 0x0) r1 = dup3(r0, r0, 0x1e29ca9b6515f8af) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0x101, 0x4) setsockopt$inet6_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000040)="901aec7b77ebe7d7aa3fc1fb67737ac2ed6206125604351578e8c3c6fbd13ab6b3f74af37b0bad3db47011429e864ec8e7dc42ad230b29b875af17035117eb5e8047f23436d3055af59d3a6550e5611b987b6b44361def1e9134546683c1d947fd5eb79811b7b795fca928c04599f48f4c49e9643e0c280b282119899e4ffe6a765722aaec3dcc185df7a1a673682c931314673626bf43c2eae0e34d556c597f36f2135cc8c23cb79e623ea5b48636cff52411fedd7fb5889d0ed3f715746406160b325b6bf6cad7f1e0b6218d5c7b81d9e21b646eb0621cc1fa", 0xda) rt_sigaction(0x12, &(0x7f0000000380), 0x0, 0x8, &(0x7f00000003c0)) 2018/04/29 21:25:32 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r1, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r2, r0, 0x0) 2018/04/29 21:25:32 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x20800) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f00000000c0)={0x9, 0x7}) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000200)=""/5}, {&(0x7f0000000240)=""/188, 0x6}], 0x3b0) 2018/04/29 21:25:32 executing program 6: r0 = memfd_create(&(0x7f00000000c0)="7b10", 0x3) fcntl$addseals(r0, 0x409, 0x4) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)='0', 0x1}]) r2 = signalfd4(r0, &(0x7f0000000080)={0x80000000}, 0x8, 0x800) preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000200)=""/175, 0xaf}, {&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000480)=""/191, 0xbf}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000400)=""/33, 0x21}], 0x7, 0x0) fstat(r2, &(0x7f0000000180)) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x0, 0x104000}) [ 371.198954] FAULT_INJECTION: forcing a failure. [ 371.198954] name failslab, interval 1, probability 0, space 0, times 0 [ 371.210326] CPU: 0 PID: 26202 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 371.217600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.226945] Call Trace: [ 371.229530] dump_stack+0x1b9/0x294 [ 371.233163] ? dump_stack_print_info.cold.2+0x52/0x52 [ 371.238345] ? __save_stack_trace+0x7e/0xd0 [ 371.242666] should_fail.cold.4+0xa/0x1a [ 371.246719] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 371.251810] ? save_stack+0x43/0xd0 [ 371.255424] ? kasan_kmalloc+0xc4/0xe0 [ 371.259300] ? __kmalloc+0x14e/0x760 [ 371.263003] ? snd_pcm_plugin_build+0x64/0x670 [ 371.267581] ? snd_pcm_plugin_build_mulaw+0x2aa/0x8b0 [ 371.272759] ? snd_pcm_plug_format_plugins+0x12f9/0x1a60 [ 371.278201] ? graph_lock+0x170/0x170 [ 371.281989] ? __kernel_write+0x10c/0x380 [ 371.286131] ? write_pipe_buf+0x175/0x220 [ 371.290268] ? __splice_from_pipe+0x38e/0x7c0 [ 371.294748] ? splice_from_pipe+0x1e2/0x320 [ 371.299058] ? default_file_splice_write+0x3c/0x90 [ 371.303972] ? direct_splice_actor+0x128/0x190 [ 371.308547] ? find_held_lock+0x36/0x1c0 [ 371.312601] ? __lock_is_held+0xb5/0x140 [ 371.316670] ? check_same_owner+0x320/0x320 [ 371.320986] ? rcu_note_context_switch+0x710/0x710 [ 371.325912] __should_failslab+0x124/0x180 [ 371.330137] should_failslab+0x9/0x14 [ 371.333924] __kmalloc+0x2c8/0x760 [ 371.337452] ? kasan_check_write+0x14/0x20 [ 371.341677] ? do_raw_spin_lock+0xc1/0x200 [ 371.345906] ? snd_pcm_plugin_build+0x448/0x670 [ 371.350566] snd_pcm_plugin_build+0x448/0x670 [ 371.355055] snd_pcm_plugin_build_mulaw+0x2aa/0x8b0 [ 371.360058] ? snd_pcm_plugin_build_linear+0x900/0x900 [ 371.365322] ? mulaw_transfer+0x310/0x310 [ 371.369466] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 371.374647] snd_pcm_plug_format_plugins+0x12f9/0x1a60 [ 371.379914] ? snd_pcm_plug_slave_format+0x760/0x760 [ 371.385005] ? snd_interval_refine+0x428/0x700 [ 371.389583] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.395114] ? snd_pcm_hw_param_max+0x730/0x730 [ 371.399771] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 371.404956] snd_pcm_oss_change_params_locked+0x11bd/0x3c70 [ 371.410673] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 371.416543] ? is_bpf_text_address+0xd7/0x170 [ 371.421035] ? kernel_text_address+0x79/0xf0 [ 371.425434] ? __unwind_start+0x166/0x330 [ 371.429569] ? __kernel_text_address+0xd/0x40 [ 371.434054] ? unwind_get_return_address+0x61/0xa0 [ 371.438976] ? __save_stack_trace+0x7e/0xd0 [ 371.443305] ? __put_page+0x130/0x180 [ 371.447095] ? __put_compound_page+0xe0/0xe0 [ 371.451491] ? default_file_splice_read+0x874/0xad0 [ 371.456493] ? splice_direct_to_actor+0x268/0x8d0 [ 371.461328] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.466688] ? generic_pipe_buf_release+0x1dc/0x290 [ 371.471696] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 371.476876] snd_pcm_oss_write+0x516/0xa20 [ 371.481104] ? debug_check_no_obj_freed+0x2ff/0x584 [ 371.486110] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 371.491116] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 371.495944] ? trace_hardirqs_off+0xd/0x10 [ 371.500164] ? quarantine_put+0xeb/0x190 [ 371.504219] __vfs_write+0x10b/0x960 [ 371.507924] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 371.512754] ? kernel_read+0x120/0x120 [ 371.516635] ? default_file_splice_read+0x888/0xad0 [ 371.521639] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.527018] ? check_same_owner+0x320/0x320 [ 371.531338] ? rcu_note_context_switch+0x710/0x710 [ 371.536258] __kernel_write+0x10c/0x380 [ 371.540226] write_pipe_buf+0x175/0x220 [ 371.544193] ? default_file_splice_read+0xad0/0xad0 [ 371.549805] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.555333] ? splice_from_pipe_next.part.8+0x296/0x340 [ 371.560693] __splice_from_pipe+0x38e/0x7c0 [ 371.565004] ? default_file_splice_read+0xad0/0xad0 [ 371.570031] splice_from_pipe+0x1e2/0x320 [ 371.574171] ? default_file_splice_read+0xad0/0xad0 [ 371.579176] ? splice_shrink_spd+0xd0/0xd0 [ 371.583411] default_file_splice_write+0x3c/0x90 [ 371.588152] ? generic_splice_sendpage+0x50/0x50 [ 371.592912] direct_splice_actor+0x128/0x190 [ 371.597312] splice_direct_to_actor+0x310/0x8d0 [ 371.601975] ? pipe_to_sendpage+0x3f0/0x3f0 [ 371.606288] ? do_splice_to+0x190/0x190 [ 371.610256] ? rw_verify_area+0x118/0x360 [ 371.614395] do_splice_direct+0x2cc/0x400 [ 371.618534] ? splice_direct_to_actor+0x8d0/0x8d0 [ 371.623370] ? rw_verify_area+0x118/0x360 [ 371.627506] do_sendfile+0x60f/0xe00 [ 371.631218] ? do_compat_pwritev64+0x1b0/0x1b0 [ 371.635788] ? __might_sleep+0x95/0x190 [ 371.639760] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 371.645285] ? _copy_from_user+0xdf/0x150 [ 371.649424] __x64_sys_sendfile64+0x155/0x240 [ 371.653908] ? __ia32_sys_sendfile+0x290/0x290 [ 371.658481] ? do_syscall_64+0x92/0x800 [ 371.662449] do_syscall_64+0x1b1/0x800 [ 371.666321] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 371.671163] ? syscall_return_slowpath+0x5c0/0x5c0 [ 371.676082] ? syscall_return_slowpath+0x30f/0x5c0 [ 371.681007] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 371.686377] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 371.691215] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.696391] RIP: 0033:0x455979 [ 371.699565] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 371.707260] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 371.714517] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 371.721772] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 371.729031] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 371.736295] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000001e 2018/04/29 21:25:33 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4000000000084) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="e6", 0x1}], 0x1, &(0x7f0000000000)}, 0xc100) nanosleep(&(0x7f0000000000), &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000006380)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="7adc", 0x2}], 0x1, &(0x7f0000000700)}}], 0x1, 0x20008000) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x8, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f00000000c0)) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000100)="bc", 0x1}], 0x1, &(0x7f000000ae80)}, 0x0) setsockopt(r0, 0x0, 0x400, &(0x7f0000000200)="b3b02565cfa3d506ebe690b5c742ee7e27860b2b3623d574a1d8a70fe9777be00a765473e219dcee4a7b45d14172afffaa10928cb1d064da509b02d620a079071435f11b719fe9df508cd70c31ac27a473d55d08b94b2da8df3e16fbcf4aba3d50e87f9adacf8d42e9bdb064878cd7d3f50c8942cf0b64f88502cb34da17b76730371cfbf2ae3161957d08768d9ed12ff267556579f52f01725435e4ace453187e8b0d37f4b39334934a04577866cbfb91fd0256fa2936a769661b833f6c9af91e0bcedac026", 0xc6) 2018/04/29 21:25:33 executing program 3: r0 = semget$private(0x0, 0x7, 0x100000000000000) semop(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff8}, {}], 0x2) semctl$GETZCNT(r0, 0x5, 0xf, &(0x7f0000000080)=""/240) 2018/04/29 21:25:33 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:33 executing program 6: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000052001f0014f9f40700090400020007fc07000100ffffffff0800000000000000", 0x24) 2018/04/29 21:25:33 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x28}, 0x10) ioctl$TIOCGPGRP(r0, 0x40096101, &(0x7f0000000140)) 2018/04/29 21:25:33 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) accept4$llc(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x10, 0x80000) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x0) [ 371.904544] QAT: Device 0 not found 2018/04/29 21:25:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000358fe0)={r2}) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3}) r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1f, 0x10000) sendto$unix(r4, &(0x7f0000000080)="a7663ecd88fb70155fd0eb4a875a44b1e64da02b2207deed9cd2ed653125661fb633362751c7583f2d54f4d04bac94051e3278d7335e4479db424c6f911d7f98130183171dfb7fb362d30e83633969421188ab78182f55d60e4141a27c2962f7f4040d975e0d194b62dda05d6f6961e357e215269b585e8e679029", 0x7b, 0x40000, 0x0, 0x0) dup3(r0, r1, 0x0) 2018/04/29 21:25:33 executing program 6: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev(r0, &(0x7f0000002740)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="ec94aeb2758162414e17e0d940bbea5d4a6b3fa3f373874f7fede93684a4393ad980926d09a29f96b83095b2f6f36fac65ebd9f05cfa07d77b00913a73d125cf007055bdd61fa1087ea09f18a27b1337efc4e10395acdb0483960805b16653cfc6fb95bcfe33225f3eeac8755b321c8bf68b", 0x72}, {&(0x7f00000014c0)="2acbb1eb0abb2941755ec78fcc3d89ca04cc62543fac2ad358d658c12e12af586bbad8c89a880a404abb61235fe6d74dbbda01eb9963a9ac7cfd8a0128611bee0bcbc2703ad14fc7f7cda7db0ca7f5a358b7bdb5a9bd2c67588ee8fa06fb107ca3a09907b5a86eb5edbdc2be8a92c3db828e15915a826d0284f4c1e55238fb29b3c1a5f37523b44596deb31c889fcb761e7c56fa17cbbf0fbd6648bd1d6d949aa96f", 0xa2}, {&(0x7f0000001580)="512cac5de472bf74b030967dde84606f928eecc26618a707b0e5754e2ca515e26118ab71165f958c3bb0a1a559fb2264847d9b3c1f63a1ee4c3d8935f794712f237755716ce063f6551fab6252b63b896bb5976b29266e8666b1dcc9a7a4ec90207c36a88b5d2fbb2d4b21b08ec70f555390f626d2b8551829c88cd85e0946d42fa507303f0bb94901edd5428dc79fd517d00eb7cb8b0c3382ebd1dbdc77a16216b713836317065d0c9883fecdabac03", 0xb0}, {&(0x7f0000001640)="f36e35f25ccecfe059aadca9c3a2d5d44bc4faf7872ca426b127f527968411ffe5dfa4dd68afd88595327a46f9db98524dd866fcc2a516318323c3e7e81f8eea416dfb9b8d493a7d6a88992f4108c12df3786f2719b28c880aff3f4342a8461e2191cc08fcb8e88890951c5bab1edd6f793af44ddafbc4484f0d62884d2ec6fefbb86a46c5c517ec079fa6363f55927b3a77bda9d58e82fbeffeb759d5c0460351962d", 0xa3}, {&(0x7f0000001700)="ad6295c39fd6d906ba7655eb1c1062614707f81ee66c473aa4c1b62e2d9bfa0a94a6073b7eaa959e8a56e4ca69f7f88756887f8562f70012c475cfbdaa", 0x3d}, {&(0x7f0000001740)="42a90de3f16bee68cb236b20d6c01e1e5bd32e17a8cf0effd7e04cde2c6fb580a2fde86b3aaeca7f97b6be02e468ccfd82280c58aa5e763efe024effa7a49a53b8b63e547e1de1cef0300c1b40309b0601c795b0d3500d7b31933f41ffc9d5f1fdeb06311f8eef855723f1deb1393ba3769af02f20c24056e5eac5ee954c0658211fad9c05ad9fd84af751b4d30f4f8fc6874bac63122431ed05a04a72fe2eb5322d33bf7103cf087cc3517a4491971d624e64e363261bfc315621528af7de0567f2fb1796986ebf0a27edf3613508eccaeddef813a2233749994863175234b86a112d7c474a8b812a9bbd6d27448d3187454548ad957acdfa2308f121e9cc99e6d49312b57cf7682f363bcb41298a0e4997c8b946432129f136d8038cffe78da5c1840ae05073fb8ff75c8387b7cde43bd0490a1bc875dad5ea47b429b7212215abf098300867bd132da75630e7af549dbaa414960ce481a307011bd30bbca83984b3678bb0c8afdd474a52c563e0dc4e09838a2fed3a9b8831c6e44ce72b9771467a4ad9fd6b03f9bbbf11b290438e84c5455fc4fbd5355c5bf7369477ecb73e9f0de0dfde581d0c8558ed22d8faf15a485eb7e334eab8280aad93e8402d24669dcbce6bfc555c05f28414cafa1ef7b7f37b0616d5dcb06850450e852e3e05a5b3766e8e2ffdce552609c29d0b9f0fb42e597d89aad3d8aff09ab825928a53f69f324ce753cbb9238c9f4269de92a22769d082106cd6cd29753a8d616e80c8bcac2c8c581d1d28e4688bc4209c6148d4acbaa3f04d97ae9f51ae8bb023b2d779e1d88488c65e14642bcf111e20afa8799e2a76fb28087a8188fd6401db39f1fdab9d957f8574b0a50f27d7dcf12a177b679c5b369aafa08f2a2676c17be383da3775bd38f96dd1524734aa4d19e4adbf7e9e25a9503b6a0548ba66b64de3fc44c31ac47ca5c9c566697737662f7eee7fd350e030ec598ab04cc758b7f8c9f7dc61797e45d3ba42db19e95fcc23e3a4be57ccec90ac533b47cbe01961d1533f17659080b3b6ad26a7b904191dd4bd048cf05fda81b361ead4f6707bc0ccc1d23de7eeca8058b24f9c016bdf4abdb0eda15a8395720250fd1044de2a3a48e4f9952380661b7f2be0f416699bc36a5a4bb59aa5402e7b5466c22dcba3175555cb59022802ed7ccec24a5cbfd6cf3e553a1dbe298519029358386d1df0fbebba957d0cb0dff3f29138b0bd533e8e8bea8289c664e4d9a1ae66e67d13b3d6c37ecfd9ff717dabaa953f97ecadae2e8f601e5323419086aed442bb99fc5d626e3bf958b017cf2d100d4f98ac9feb4d65a181b6e8d7b0d061276dcd67854a4322d7b772323adb91f99b37d2fb9e8dbb98d518015feca96c7f6e4373a1fe3646f7ba55ea39a2a6eafcaf4df606dc93a9a55fd8055cc5547b88eb09829fef98910a8bfba499d13fb8dad16e702de49354bbbd1c1a9c9fd2ff6b10da5a4994531f77e1168a6d29ef92c85e55ef9459a925583f9ced1029973bf73093313924eec9016f00fe2c09336f2b4aa98dcbef68afb76409fab37fb1acc1547eb2e514e46859914bda4f0b11d8e5bcb6e5d7b087cf8d8de2fe4d8fc14cc9bfbaaeea4ab4ac0f54a62fb652bc01f7ca93ce72423350380b537b93a262ca4259359146775ed2e066da002ba7ca57e5c2396e8bab1a7e1116b497832612f8368a8fd79511a0c687579f2c547e57364511cc7df43e613c6d39521e0f8d717641992b61f87260099e1baf4f761d24a3d951c18aa74c4b4f2aa57ad3895e4bf72667b595b16d92e18da1a39b1f2142fa454e5273fad656c80ff90bcff47a022b116482ba37859b8b1eb39a7d941ae4a5baadecf444a96176031ca06e5759b99be604a621d0adba7a789856017e91dd4de81ed74d355242c28606fcf15e068be7d0161f9ffe47b0347089a2f1e97e000a5e11f17f1ec45fa1184732a65de57e1329e2ccfbc401eacfb38722057fb3aa4077a9b3d117850e1e075a0941d4f68038555e8cc099165988a5046555a39590de9804a391501c469d271b84992ab1c1cdeb3dfaa68c7ca60638a694c147631905896f3b4c2bd3a02cb00ae165903857f8e5abf84990a81524bb3c1252908c381c0c8131170fa7a0ef69bd6fd39107a4d3771c0c5a8604aeb98a24fe2bea598c5c0475ff62349cbaf8830e588b72d0f2a321b21bb9f8441a78a0c66c3e0ad00cfbc749367d58c541346136b4fa6a3d876413fd218df27af059315807da11fd43b64a33fbacfd64575fd9509db3c6d20d6639f2a1773ccee34d4e82aa95c29ebe65b83e864c84919b6bf28da43e90bb7e6b1b396c3b1471e4d7832fd19fcf4c7747727fd260546d26430f4f75332f17efa2700bdbedf6054e0f8e0759364b0865ac82feeb58b002c511edaeff19d55541523316b788a63584a02e72f5d4a43b89a789a223d256134b34941aa5e15008afe3c5441d2597df80af80563997b74d394fc2787a6b8cc4f94e300eb8a6f5f2567b754113778f6e79815644bd9b7b5b5e8995b08b9805a183bfd03fbb8152fd52c3e7934c9473d5634250223aac0ac90638b5ed3010f8598087b2f2e47bcb7c464d94f2aa2ff0b9cee05010862b178ee161b5d487c9d93dc91bfeac2b91385df4691dffc8ac199046e4017decbcd509cd52b48b659b4d9297f24659519e10c4c9d0ca3af8bed21f1db91e8c0b385974603818072db0e476e8e7f3249e28f989e75d4b18a0a30e0fe89fdb6551f3c40d65d8c14858104039c7d5168af8b83cd6ef36c2a29ee99f6036369a8fa0e897d560a0632496d54d05d79ce7611952b9234eb389569de7d441e2ffbcb7202595fb49268d791534aba5fe870a8a980d8e38858ead4f391481e64c9f5296645b3c85d1ef8018d36393d60ba09cdbdde84c3c284ac790571714aba8bb66640103e46c03db3222e077681401134c3188cbe561c2ebe4ad37c0b90e7e3cc4c5457408049952cfc60abad690a9389dbfe41732bc61587ec22f0ece87f6543ffcd716eac5baf9df1c61fd49d489c9f259095e8cc8acee05d0455edf680b37b9b3985c6f1cbf911900b7518413547eefd3867576e0d973353a94202ad5cf1a40fafeaf263d40329146c59e08656ec2ef781918c6d2739eca62bf95df24861657c020bb56fb3ba77449ee227b3acc28c33fce30a315407bdacf5fab4731dd5acbb901e89e316ac1325cb7f255fa84f14f31ea4f3d849eb93268660c3afab58d8f63c0e315f4e4088d98a7e91646f73a4e52af39b17ed8040637a17a991776391392af8223d6e3b1ecea63ae2a60e03cd60c45520b944fc8204f487857e8c3826a85c840191eb085645e18c485b25caf4a7c6c3a665e800e94e23d9a285012007c5b5b5f729146f709095a35af5147c694fa7e29143c89a18d2bb1d5d2ac16d9ec2d051328920062dc35e03db860f0be2a9d2e63d8b5695483c430a70b52f4a48f76fe9e0457428f48bc036e5df4f0cec66c8b370d1ba75d3259f3de2f4e4a6f3fdb34ef219324282a30fd0d287617cd70a95f307f20cb06e26d08c14298f4ebb5cf7727a5034d5983088044213019d07e69e2fb72868fb6d9d2ffc5013d996057a024af5da25c5f018b79a74502cfcb17881cfdb9042aa7aa2c8247494d7c92caee3a470e111e3c299d0dee8070b45e9b2ce469a572896d0889d237ef0d5f9cf3f631db4d54bbdc413684f31d5670cd0c029356789fad5ed49d7299aad251af46afd8a8c0374e00276746d07033f0afdb5943a89b9bdc0d8860206fe1570cad2b95fd63961718bbc46ea31ae9d4bf630a74f9ea74eb7ee40f14f6994c379cb4836f1136687108391a8e7e0738b58a9164738d315b66b0c05178cad1f654482fca9e8276fcc715867a94573cb3b8173cc8483ac0b7ce812af86f8edd7534add0800806ce4c3eb1e5079abe8cd49616e4be3c44ed087e7682931728aa19f04a5acb7d190938b2b920fd9f71072b6fff89d871b9ea81d04127c1c12158cbcb18278c374372f8f5ac9ff1994efd82167540d1981edd5c4e8df90c894854205dcb80189d15839b1033bccabf7b273174ffaecdde466e5feb0eed45a842beedd3e30031cde5a84a5da73bf77c8689e0a10c9f01f6e88a26993c5438c8e2dfe8e76d04418bdc677e7f4dc8f8eb0e4bcfc194e3ba71e709f7e5df380b0ce6fa03ad562ae9d3b412092570e34328d87b4ca9e6e731efaa7895e8809d1b5728a6574bb507ecbfd200c3a15ebac9acad7a223d1bdc2a49c897b38669a2b22c6929e8ca91046ace5b6353b7305e5fd8ad473e65f2d76eaf6cdf84b69235a93741cadfc93ba55abddb48454a0dbf3f9686869e0abe10c657b42624e010eb7af07ea05675df3f650d60da7ea6f86c57bfcf49cfe39988d1ec68c293c3fb8e0cfa5a919676012b0f48bfc3e0aaa810018ccd69843a2d4aeafb98870a2ac70d8fc9847d65cbd4574ff28ea311bb4b1079be5087c0bc9ffb884dca9fad7505526779c3d0d65d33d68e3b3df79b45d565f245b762509d46083026f582d908ed5552ca23fe592f5d88daec4c355eb2c2216e90000350747a622c7c2a2db1b7834580b5c2824d9d582d960a986ab0e4e8a804612899da48fa916130676e9b9faee61aea1c8fd22feb467228ad5eaecc422d10554653fea82e9c7863b9d04fd29b40725572f97edb1a76477fe6d4518defadc4283e7a7f695aa019e7ee36aef50b5f380a687cdae73989af49ceb0ee39678b7fd12d31586eb2a887a0ce17a900d0f1dbe69c447d7cb31a91d7bbb40144a80228cb872f28ac5ac0675436c841572d3b282936e75acf94f9c70404d13ac34ac5ac00d1b0ec6555adc908dd107452e20cd19a161b53d9e42c33ccc0c2945a14f6ecb67745e74c9d056eac199946283ee1ee3a9ad7bf1b1d5ea545a990930dc5b714cef2557359de2b66205aac216ca007c9b04eedd73474ac301225748a59f37ac1073fa2245a3d5a237f94be03ed392071e7401180474c3c1d3d97e6eee867a7d22936eb506713a6b85932a5438d054d3af64f4a0054d2176f2d76c3f5bfb5de694bd1bea264c24c66f1f87bbdd12a0a05edcf96c63470475febe7b2d70cafd50ce5858abaf6c464d377e0813757dc19b7e9fb16fcea721d77e30421cfda5e30c9892ddbaa705421cafdb6406b9479523a6a9566f86452b57e439c7b134f176cd1aeb0d5f119e05a507b2a29b14aaec4b52aa02826cca4bbba29e35bb66dbe3acca0e4e5ffec61b5189b8f538690e920f147480dbbe877ad4e2e6ff944ee383f6dbca41f12ed65085a3ecdb3ba5a1b5481994b572147b02d1df5c46c676c7c19c519380faa762ffdfafab1d3ea90ac5bf485d715ff5830cc9660773004d9522b66284990afc7507c6212bf71efdb3db972f5288f1aaeefed92048e905805ae73de3afaa0be7bb7ff94995a277a790535942bcd1f5cfb915956fe5ca95fa67a2f6c2d86a9dec0c6d178c759835186f3cabf287457baa63d368c81d58e4d7985ec6efe3df9be2a87ea8131b353f46b1ad1863c83abb6c5e69ba1b0d208cd5a413d7a79e514d053046b9c6c794b711eaf4f773a2b8abd2ba38fa31e2c196318d52e96e35cf996d8752b5c88418c5b875e9a2169e56262b207f38dd44f90982e9311eb787670ba16a9df0184f7b15071296069a4a4ffeea6e62d0c5e0f0776051fc855534938bc76f47936fb0538be4a794eb4dc358be88ea362c9babc462efe8699116ccabe629d5d9f78affabd5942ba4165000009accc25f6c20ba3", 0x1000}], 0x7, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendfile(r4, r3, &(0x7f0000000280)=0x4020, 0x9) sendmmsg$nfc_llcp(r2, &(0x7f00000003c0)=[{&(0x7f0000000080)={0x27, 0x1, 0x0, 0x4, 0x3, 0x200, "543fdf70b6a639d83b288c0e435c0324dd35b332c65ef94be0ce7ac23f5101b205a6a4a0a546c235455bb65fbeb94cfacea95dceca6dedb4ad80d4011aa09b", 0x6}, 0x60, &(0x7f0000000240)=[{&(0x7f0000000100)="82f19f26ce84aafed9c475e3a70767ee53eedbffc831c84e5ae09cfdfad7b3086ad8eca17f859b5acd58fbd0571406c0668d099f0edc07c53b5637192aa807e5eb0e96d6e50baf57e9c7c70ba8180d61fd6483ed9663d03bb0eb84be3f4cba2b60f45b6f9b43f3fdec14fde677e3c50d0fb79a801e136e6d8e94f6d321809221eef89ab81dffbab90538dac8", 0x8c}, {&(0x7f00000001c0)="fce6c834aefadcaf0b9338c24194cddec2eb594ffb1bf01872559f1db4d78e8336ff549aab83faeab0d03887e246b316c37395f0e741fa85168a211314f18082ece1ea2005e0d843", 0x48}], 0x2, &(0x7f00000002c0)={0x100, 0x0, 0x200, "84f09f1e7f60d9d72bb45ded94f2e5672493645be4ffa4b280d151f0c22f3eaf7d70f8c6c55c08edd510fafcc4aa030b8f0c85b74fa8605309a52a05e9ecd758a1f0c34d797f7d912bcbcce90937306ebd0b6dac312dd38551a50d393d08646ff4eee7264e04bc32e783f929d99e70a9f1491f8a2d1ba827ad7e358e3ec66e1c1748cfd3155576119bee941a10aad9b26a7b2fe5e5e3cdb17766c6b615c4466f01eae22a81afc8bdf6490afee38dd45ffcdee02e9eceb684ccbb3a2b2b1f724d888ed675c304e9a4aa5be24acf33b230aa468990de5892e2a2c3c2cc73da5055535ab57577e9219165a2bbea"}, 0x100, 0xc801}], 0x1, 0x20004000) ioctl$TCSBRKP(r3, 0x5425, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000027c0)={0x7f, 0x7f, 0x80000000}) [ 371.926181] QAT: Device 0 not found [ 372.667601] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 372.667601] The task syz-executor3 (26258) triggered the difference, watch for misbehavior. 2018/04/29 21:25:34 executing program 7 (fault-call:2 fault-nth:31): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:34 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r1, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r2, r1, 0x0) 2018/04/29 21:25:34 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f00000002c0)=""/170, 0xaa, 0x2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x288080005, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000c29ffc)=0x3, 0x51a9cb301423a087) sendmsg$inet_sctp(r1, &(0x7f0000000200)={&(0x7f0000e3aff0)=@in={0x2, 0x4e23}, 0x10, &(0x7f0000b03000)=[{&(0x7f00007fd000)='^', 0x1}], 0x1}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x8000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000040)=0x7, 0x4) 2018/04/29 21:25:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012001100000000000009000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000e00000000ca"], 0x28}, 0x1}, 0x0) ioctl$int_out(r0, 0xece050ea4d6023da, &(0x7f0000000140)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xa00000, 0x80) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/4096) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000011c0)={0xfffffffffffffff7, 0x2, 0x9}) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) 2018/04/29 21:25:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)="05792881ad94d9d12ffb751f86f7ec025f862fea6ec775027ac78ed35e89585e6574e3186bdc66fbebbaf557df2c4163e10788cf954092bb0f4daa6d64235853e951c688fe16f267b329fe23509fab2cc3129d3728e8182878416089bb60e07e8bbfb21551cf270ef84709715617b94bc24d2f6729b5c0181ce17da6f82f121eef19452575cdfc938e19170f7174b3587685ca2e82642038bc3a85fc7671d79faa2f71a524e889dc3bc2fa916515263b6d95ddc737a939f590f5b5887d3dddf1c4f69d5393cb8566e0e88d3fa09b50956139181918a94cd57577", 0xda, 0xfffffffffffffff9) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x82, 0x0) keyctl$invalidate(0x15, r1) ioctl(r0, 0x20000000005386, &(0x7f0000000140)="cd") 2018/04/29 21:25:34 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x802, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000200)) accept4$packet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x14, 0x80800) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) read(r0, &(0x7f0000000440)=""/143, 0x8f) 2018/04/29 21:25:34 executing program 6: r0 = socket(0x1000000000010, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000c7f4e5892a85f41e000000ae476bb92e14c5becd4cf590be00"], 0x20}, 0x1}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101000, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x1d) 2018/04/29 21:25:34 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(0xffffffffffffffff, &(0x7f0000000640)=[{{}, 0x400, 0x9, 0x3}, {{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0xa8) 2018/04/29 21:25:34 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0xffffffa4], 0x1}}}, {{0xa, 0x4e24}}}, 0x108) r0 = socket$unix(0x1, 0x1, 0x0) shutdown(r0, 0x0) socket(0x0, 0x0, 0x0) 2018/04/29 21:25:34 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0xfffffffffffffdcc}, 0x10) init_module(&(0x7f0000000040)='proc\x00', 0x5, &(0x7f0000000100)='vboxnet0-\x00') [ 372.951142] FAULT_INJECTION: forcing a failure. [ 372.951142] name failslab, interval 1, probability 0, space 0, times 0 [ 372.962526] CPU: 0 PID: 26273 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 372.969804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.979158] Call Trace: [ 372.981758] dump_stack+0x1b9/0x294 [ 372.985397] ? dump_stack_print_info.cold.2+0x52/0x52 [ 372.990600] ? __save_stack_trace+0x7e/0xd0 [ 372.994938] should_fail.cold.4+0xa/0x1a 2018/04/29 21:25:34 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0x90) 2018/04/29 21:25:34 executing program 6: r0 = socket$inet6(0xa, 0x802, 0x0) syncfs(r0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)="3dea92e77d0a2cd39d6de0d43af1bcc8e428b7ebb5c755a041f408640d3fa41882ddedb6d96b02d79f77d42bf777cdecfe9d7eb03b18c7b31bf36370952fb0e2a5c1c49c3fdf0585bc03ac8141667d8e6bffcfadd0b5e61b17f28a5c696a2b39937df70f", 0x64, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r1, r2) r3 = open(&(0x7f0000000180)='./file0\x00', 0x121000, 0x20) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f00000001c0)=""/240) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f00000002c0)) setsockopt$inet6_int(r0, 0x29, 0x22, &(0x7f00004c3ffc), 0x4) [ 372.999013] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 373.004131] ? save_stack+0x43/0xd0 [ 373.007768] ? kasan_kmalloc+0xc4/0xe0 [ 373.011660] ? __kmalloc+0x14e/0x760 [ 373.015385] ? snd_pcm_plugin_build+0x64/0x670 [ 373.019973] ? snd_pcm_plugin_build_mulaw+0x2aa/0x8b0 [ 373.025167] ? snd_pcm_plug_format_plugins+0x12f9/0x1a60 [ 373.030629] ? graph_lock+0x170/0x170 [ 373.034436] ? __kernel_write+0x10c/0x380 [ 373.038595] ? write_pipe_buf+0x175/0x220 [ 373.042751] ? __splice_from_pipe+0x38e/0x7c0 [ 373.047257] ? splice_from_pipe+0x1e2/0x320 [ 373.051586] ? default_file_splice_write+0x3c/0x90 [ 373.056525] ? direct_splice_actor+0x128/0x190 [ 373.061117] ? find_held_lock+0x36/0x1c0 [ 373.065189] ? __lock_is_held+0xb5/0x140 [ 373.069271] ? check_same_owner+0x320/0x320 [ 373.073606] ? rcu_note_context_switch+0x710/0x710 [ 373.078552] __should_failslab+0x124/0x180 [ 373.082791] should_failslab+0x9/0x14 [ 373.082809] __kmalloc+0x2c8/0x760 [ 373.082825] ? kasan_check_write+0x14/0x20 [ 373.082843] ? print_usage_bug+0xc0/0xc0 [ 373.082860] ? snd_pcm_plugin_build+0x448/0x670 [ 373.082879] snd_pcm_plugin_build+0x448/0x670 [ 373.082898] snd_pcm_plugin_build_mulaw+0x2aa/0x8b0 [ 373.082917] ? snd_pcm_plugin_build_linear+0x900/0x900 [ 373.090386] ? mulaw_transfer+0x310/0x310 [ 373.090401] ? mark_held_locks+0xc9/0x160 [ 373.090418] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 373.090436] snd_pcm_plug_format_plugins+0x12f9/0x1a60 [ 373.098697] ? snd_pcm_plug_slave_format+0x760/0x760 [ 373.098712] ? snd_interval_refine+0x428/0x700 [ 373.098733] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 2018/04/29 21:25:34 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x37, 0x150a900e, 0x2}, {{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0x90) 2018/04/29 21:25:34 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget(0x0, 0x3000, 0x40, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/125) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) sendmmsg$unix(r1, &(0x7f0000000040), 0xd1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f0000000140)={0x1f, 0x3, 0xffffffffffff2585, 0x7, 0x4, 0x76}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') connect$unix(r2, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) 2018/04/29 21:25:34 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f0000000080)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) dup2(r1, r0) [ 373.122230] ? snd_pcm_hw_param_max+0x730/0x730 [ 373.122251] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 373.161830] snd_pcm_oss_change_params_locked+0x11bd/0x3c70 [ 373.167560] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 373.173447] ? is_bpf_text_address+0xd7/0x170 [ 373.177945] ? kernel_text_address+0x79/0xf0 [ 373.182354] ? __unwind_start+0x166/0x330 [ 373.186507] ? __kernel_text_address+0xd/0x40 [ 373.191012] ? unwind_get_return_address+0x61/0xa0 [ 373.195953] ? __save_stack_trace+0x7e/0xd0 2018/04/29 21:25:34 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth0\x00', 0x402}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x9, 0x200) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x9) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2000000000000175, &(0x7f0000000140)}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) memfd_create(&(0x7f0000000100)='/dev/admmidi#\x00', 0x0) [ 373.200299] ? __put_page+0x130/0x180 [ 373.204109] ? __put_compound_page+0xe0/0xe0 [ 373.208528] ? default_file_splice_read+0x874/0xad0 [ 373.213551] ? splice_direct_to_actor+0x268/0x8d0 [ 373.218401] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 373.223777] ? generic_pipe_buf_release+0x1dc/0x290 [ 373.228806] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 373.233991] snd_pcm_oss_write+0x516/0xa20 [ 373.238222] ? debug_check_no_obj_freed+0x2ff/0x584 [ 373.243232] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 373.248242] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 373.253074] ? trace_hardirqs_off+0xd/0x10 [ 373.257316] ? quarantine_put+0xeb/0x190 [ 373.261370] __vfs_write+0x10b/0x960 [ 373.265075] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 373.269917] ? kernel_read+0x120/0x120 [ 373.273796] ? default_file_splice_read+0x888/0xad0 [ 373.278801] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 373.284164] ? check_same_owner+0x320/0x320 [ 373.288476] ? rcu_note_context_switch+0x710/0x710 [ 373.293398] __kernel_write+0x10c/0x380 [ 373.297364] write_pipe_buf+0x175/0x220 [ 373.301328] ? default_file_splice_read+0xad0/0xad0 [ 373.306330] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 373.311853] ? splice_from_pipe_next.part.8+0x296/0x340 [ 373.317215] __splice_from_pipe+0x38e/0x7c0 [ 373.321528] ? default_file_splice_read+0xad0/0xad0 [ 373.326538] splice_from_pipe+0x1e2/0x320 [ 373.330674] ? default_file_splice_read+0xad0/0xad0 [ 373.335678] ? splice_shrink_spd+0xd0/0xd0 [ 373.339921] default_file_splice_write+0x3c/0x90 [ 373.344663] ? generic_splice_sendpage+0x50/0x50 [ 373.349414] direct_splice_actor+0x128/0x190 [ 373.353814] splice_direct_to_actor+0x310/0x8d0 [ 373.358476] ? pipe_to_sendpage+0x3f0/0x3f0 [ 373.362791] ? do_splice_to+0x190/0x190 [ 373.366756] ? rw_verify_area+0x118/0x360 [ 373.370893] do_splice_direct+0x2cc/0x400 [ 373.375041] ? splice_direct_to_actor+0x8d0/0x8d0 [ 373.379877] ? rw_verify_area+0x118/0x360 [ 373.384019] do_sendfile+0x60f/0xe00 [ 373.387736] ? do_compat_pwritev64+0x1b0/0x1b0 [ 373.392304] ? __might_sleep+0x95/0x190 [ 373.396273] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 373.401800] ? _copy_from_user+0xdf/0x150 [ 373.405938] __x64_sys_sendfile64+0x155/0x240 [ 373.410420] ? __ia32_sys_sendfile+0x290/0x290 [ 373.414992] ? do_syscall_64+0x92/0x800 [ 373.418962] do_syscall_64+0x1b1/0x800 [ 373.422838] ? finish_task_switch+0x1ca/0x810 [ 373.427321] ? syscall_return_slowpath+0x5c0/0x5c0 [ 373.432239] ? syscall_return_slowpath+0x30f/0x5c0 [ 373.437158] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 373.442514] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 373.447348] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 373.452521] RIP: 0033:0x455979 [ 373.455699] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 373.463396] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 373.470652] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 373.477908] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 373.485162] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 373.492417] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000001f [ 373.530518] device bridge0 entered promiscuous mode [ 373.537386] QAT: Invalid ioctl [ 373.571622] QAT: Invalid ioctl [ 373.673231] device bridge0 left promiscuous mode 2018/04/29 21:25:35 executing program 7 (fault-call:2 fault-nth:32): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:35 executing program 1: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000240)='net/raw\x00') r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000020000000000000001008e15e7af00", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'}) r2 = dup2(r1, r1) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000140)=""/248) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/29 21:25:35 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000503000)={0x12, 0x8, 0x100000001, 0x2}, 0xfffffffffffffc65) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040)='8', &(0x7f0000000180)}, 0x20) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80000, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)={0x11f003, 0x200000000008004}) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x40, 0x200800) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000100)=""/62) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000080)={0x18b4, 0x6}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fdatasync(r2) fcntl$addseals(r3, 0x409, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00003f7fe0)={r0, &(0x7f0000000140), &(0x7f0000b4ffb2)}, 0x20) 2018/04/29 21:25:35 executing program 0: gettid() socket$kcm(0x29, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x400000000000000a, 0x1ff, 0x7fff, 0x100000043}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000700)={0x0, 0x5, 0x0, 0x1ff, 0x18, r0, 0x9}, 0x2c) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000500)={0x7, 0x70, 0x9, 0x7, 0x7ff, 0xffffffff, 0x0, 0x0, 0x20001, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffff7, 0x4, 0x67b, 0x8001, 0x7fffffff, 0x7, 0xbe, 0xb8, 0x0, 0xd9, 0x5, 0x128, 0x6, 0x4, 0xfffffffffffffeff, 0x1, 0x3, 0xffffffff, 0x1, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x2, 0x2}, 0x20, 0x99b, 0x0, 0x7, 0x1, 0x1, 0xffffffff}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000440)=0x5bc6) mkdir(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffe) socketpair(0x8, 0x2, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)={&(0x7f0000000080)='./file1\x00', r3}, 0x10) mkdir(&(0x7f00000006c0)='./file1\x00', 0x88) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) ioprio_set$uid(0x3, r5, 0xfffffffffffffff7) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1}, 0x2c) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000004c0)={&(0x7f0000000480)='./file0/file0\x00', r6}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000680)=r4, 0x4) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000580)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='squashfs\x00', 0x808, &(0x7f00000002c0)="ac9558818f62e72b6f91beaceadb3a985059e3daba0fff7ae9829a87f616e2adebede33891df5f847f840b1d4601d44abb3d8ed8e1a5a741efd6bec2997e6789fb79eb8d89122d9abb2de430a722093924adc54397469b0f3dc53737fed53ba196085ec845c3e43ec52eec494437593e784a6aa83927d2bc251f7b515a10779a7af4c2f092dba12cbd849c5429cd154c171f0cf888bda02abae80bb8817734409e219dac443300b80b358fbf6d4a7ed3577aef284cf07f4bfdc0e87157fc902a003d3eef3d0730a347") mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000300)="1cb335da96a398ff09a3375ead96f3feb43168952b122288b9b20409269a5c47ed1377a08bf87e3a12125d0c9cab0738f1fa8253bbcc9acf15a8f5083f3d86f45f1e5dd2ebea03a4bbc09d0f325b9bc0bd6aa2b1392f5b75b778888244accfa6ec6d65ddd13e04c0a10e02cebe33eb1802f595241af2a188ead84e29e838cdfe67e6fc6bdfa30200fc4c0fa9185080864458e95274f419d65e4060f0d00f0f6150bf9d8eef008c452884e2806b2e8e9627b76af244b5ceb445a27b62918a188390b7611abfed87b199157462e40687806d329ad20a8f1a76cd2ec2a01cfccb268f9c03000cc699d00000000000000000", &(0x7f00000001c0)=""/9}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x28}, 0x10) 2018/04/29 21:25:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000240)={@empty, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x8) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000002c0)={0x81, 0x603}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x400, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) r4 = getpid() ptrace$setsig(0x4203, r4, 0x7, &(0x7f0000000280)={0x8, 0x80, 0x1000000000009, 0x200}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_dccp_int(r5, 0x21, 0x1f, &(0x7f0000000040), 0x4) sendmsg$alg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write(r1, &(0x7f00000001c0)="79c737ffe181860900ba3f649a7ba85e2d12ca741181c4320d5636e3b32eb79e", 0x20) recvmsg(r1, &(0x7f0000158000)={&(0x7f0000001340)=@nfc_llcp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/29 21:25:35 executing program 6: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x6) inotify_init1(0x0) r1 = dup(r0) ioctl$int_in(r1, 0x8000005452, &(0x7f00000000c0)=0x8000200009) 2018/04/29 21:25:35 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r1, r0, 0x0) 2018/04/29 21:25:35 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{0x0, 0x7530}, 0x7f, 0x8000, 0xd}, {{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0x78) [ 373.922360] FAULT_INJECTION: forcing a failure. [ 373.922360] name failslab, interval 1, probability 0, space 0, times 0 [ 373.933712] CPU: 1 PID: 26339 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 373.940991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.950344] Call Trace: [ 373.952943] dump_stack+0x1b9/0x294 [ 373.956585] ? dump_stack_print_info.cold.2+0x52/0x52 [ 373.961785] ? __save_stack_trace+0x7e/0xd0 [ 373.966121] should_fail.cold.4+0xa/0x1a [ 373.970201] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 373.975314] ? save_stack+0x43/0xd0 [ 373.978947] ? kasan_kmalloc+0xc4/0xe0 [ 373.982840] ? __kmalloc+0x14e/0x760 [ 373.986562] ? snd_pcm_plugin_build+0x64/0x670 [ 373.991158] ? snd_pcm_plugin_build_io+0x28c/0x720 [ 373.996095] ? snd_pcm_oss_change_params_locked+0x1247/0x3c70 [ 374.001996] ? graph_lock+0x170/0x170 [ 374.005805] ? write_pipe_buf+0x175/0x220 [ 374.009962] ? __splice_from_pipe+0x38e/0x7c0 [ 374.014466] ? splice_from_pipe+0x1e2/0x320 2018/04/29 21:25:35 executing program 6: r0 = inotify_init() r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x100000000, 0x40) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={[], 0x3, 0x8, 0x3, 0x1b92, 0x9, r2}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40000, 0x0) dup2(r0, r3) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f0000999000)="390000001300094700bb61e1c3e4ffff0600000002000000450000002000000019000a000d0000000000280f00000007fd17e9ffff06060400", 0x39}], 0x1) 2018/04/29 21:25:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f0000002fe2)=""/30, &(0x7f0000000000)=0x1e) chdir(&(0x7f0000000040)='./file0\x00') 2018/04/29 21:25:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) getegid() io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)="0202000000008a000000002924be7b7f", 0x10}]) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'vcan0\x00', 0x3ff}) 2018/04/29 21:25:35 executing program 1: r0 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000394ffc)=0x4) r1 = request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240), 0xfffffffffffffff9) request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)=']ppp1cpusetbdev!posix_acl_access\x00', r1) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'bond_slave_1\x00', @ifru_data=&(0x7f0000000040)="3178e88213f44f4c7cb1fd1fb3c61ad8831b18864338baff8d8f4da80d387533"}}) [ 374.018795] ? default_file_splice_write+0x3c/0x90 [ 374.023730] ? direct_splice_actor+0x128/0x190 [ 374.028316] ? splice_direct_to_actor+0x310/0x8d0 [ 374.033172] ? find_held_lock+0x36/0x1c0 [ 374.037248] ? __lock_is_held+0xb5/0x140 [ 374.041330] ? check_same_owner+0x320/0x320 [ 374.045666] ? rcu_note_context_switch+0x710/0x710 [ 374.050613] __should_failslab+0x124/0x180 [ 374.054858] should_failslab+0x9/0x14 [ 374.058663] __kmalloc+0x2c8/0x760 [ 374.062211] ? mulaw_transfer+0x310/0x310 [ 374.066364] ? snd_pcm_plugin_build+0x448/0x670 [ 374.071045] snd_pcm_plugin_build+0x448/0x670 [ 374.075557] snd_pcm_plugin_build_io+0x28c/0x720 [ 374.077803] netlink: 'syz-executor6': attribute type 10 has an invalid length. [ 374.080320] ? io_playback_transfer+0x310/0x310 [ 374.080341] ? snd_pcm_hw_param_max+0x730/0x730 [ 374.080362] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 374.102204] snd_pcm_oss_change_params_locked+0x1247/0x3c70 [ 374.107937] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 374.113825] ? zap_class+0x720/0x720 [ 374.117552] ? perf_event_update_userpage+0xd10/0xd10 2018/04/29 21:25:35 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0xfffffffffffffff8, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0x60) [ 374.122745] ? graph_lock+0x170/0x170 [ 374.126556] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 374.132110] ? __perf_event_task_sched_in+0x247/0xb80 [ 374.137310] ? perf_trace_lock+0xd6/0x900 [ 374.141473] ? find_held_lock+0x36/0x1c0 [ 374.145551] ? lock_downgrade+0x8e0/0x8e0 [ 374.149714] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 374.154913] snd_pcm_oss_write+0x516/0xa20 [ 374.159161] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 374.164189] ? snd_pcm_oss_ioctl_compat+0x30/0x30 2018/04/29 21:25:35 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1e, &(0x7f00000000c0)=""/188, &(0x7f0000000000)=0xbc) [ 374.169038] ? preempt_notifier_register+0x1e0/0x1e0 [ 374.174157] __vfs_write+0x10b/0x960 [ 374.177877] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 374.182726] ? kernel_read+0x120/0x120 [ 374.186621] ? __schedule+0x809/0x1e30 [ 374.190515] ? default_file_splice_read+0x888/0xad0 [ 374.195553] ? check_same_owner+0x320/0x320 [ 374.199881] ? kasan_check_read+0x11/0x20 [ 374.204036] ? rcu_note_context_switch+0x710/0x710 [ 374.208974] __kernel_write+0x10c/0x380 [ 374.212958] write_pipe_buf+0x175/0x220 [ 374.216937] ? default_file_splice_read+0xad0/0xad0 2018/04/29 21:25:35 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0x48) [ 374.221958] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 374.227504] ? splice_from_pipe_next.part.8+0x296/0x340 [ 374.232880] __splice_from_pipe+0x38e/0x7c0 [ 374.237212] ? default_file_splice_read+0xad0/0xad0 [ 374.242243] splice_from_pipe+0x1e2/0x320 [ 374.246404] ? default_file_splice_read+0xad0/0xad0 [ 374.251430] ? splice_shrink_spd+0xd0/0xd0 [ 374.255704] default_file_splice_write+0x3c/0x90 [ 374.260467] ? generic_splice_sendpage+0x50/0x50 [ 374.265231] direct_splice_actor+0x128/0x190 [ 374.269649] splice_direct_to_actor+0x310/0x8d0 [ 374.274325] ? pipe_to_sendpage+0x3f0/0x3f0 [ 374.278658] ? do_splice_to+0x190/0x190 [ 374.282635] ? rw_verify_area+0x118/0x360 [ 374.286777] do_splice_direct+0x2cc/0x400 [ 374.290916] ? splice_direct_to_actor+0x8d0/0x8d0 [ 374.295749] ? rw_verify_area+0x118/0x360 [ 374.299884] do_sendfile+0x60f/0xe00 [ 374.303591] ? do_compat_pwritev64+0x1b0/0x1b0 [ 374.308161] ? __might_sleep+0x95/0x190 [ 374.312134] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 374.317659] ? _copy_from_user+0xdf/0x150 [ 374.321796] __x64_sys_sendfile64+0x155/0x240 [ 374.326279] ? __ia32_sys_sendfile+0x290/0x290 [ 374.330854] ? do_syscall_64+0x92/0x800 [ 374.334819] do_syscall_64+0x1b1/0x800 [ 374.338693] ? finish_task_switch+0x1ca/0x810 [ 374.343175] ? syscall_return_slowpath+0x5c0/0x5c0 [ 374.348093] ? syscall_return_slowpath+0x30f/0x5c0 [ 374.353024] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 374.358379] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.363211] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 374.368387] RIP: 0033:0x455979 [ 374.371561] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 374.379255] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 374.386512] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 374.393768] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 374.401026] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 374.408279] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000020 2018/04/29 21:25:35 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00008f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000686000)=@file={0x1, './file0\x00'}, 0xa) r1 = dup2(r0, r0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000040)={'raw\x00', 0x2f, "3680b77414b8f063ff3872e4842824c4f2a2937cf19db9071339ab9a55a234dcc8a0c61ab07ceea3a21d51288c8d87"}, &(0x7f00000000c0)=0x53) prlimit64(0x0, 0x7, &(0x7f0000287000), &(0x7f0000a25ff0)) ioctl$sock_ipx_SIOCAIPXITFCRT(r1, 0x89e0, &(0x7f0000a84ffc)) 2018/04/29 21:25:36 executing program 7 (fault-call:2 fault-nth:33): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:36 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000140)="27000000130007070375007f00310f0a000000103b0c709bf00000000200a30000000e00003964e4a60b1a6f3ac813b1154f3688b45fd754f21e40836f983a6810b4f5343616027a2473c4cb928a01e62f554c6818650e338c70973b4c18e051d3d2d36bc326347bb23fd8e291e569c8c40a46892f860d3c5f5d1b81f1581bc291ec0b6beb4d642945414e8b", 0x331) 2018/04/29 21:25:36 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000131fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x180004520, &(0x7f000022afff)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_ifreq(r1, 0x8975, &(0x7f0000000080)={'bcsh0\x00', @ifru_addrs=@llc={0x1a, 0x30d, 0xffffffffffffffff, 0x2, 0xec7, 0x7, @random="d2684be9438c"}}) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0x18000000000, 0xffffffffffffffff, 0x1}) 2018/04/29 21:25:36 executing program 4: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYBLOB="020000000000000048463af6cfed58e5dc7d96b2e5372f4e368781b151113c9dffe379b2f8429abc19"], 0x39) write$rdma_cm(r1, &(0x7f0000000100)=@listen={0x7, 0x0, 0xfa00, {0xffffffff, 0x3}}, 0x31b) dup3(r2, r1, 0x0) 2018/04/29 21:25:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000240)="2e0fc798b7f566b80500000066b9ed9100000f01c166b96d0b000066b80000000066ba000000800f306766c7442400c28e83146766c7442402e28a00006766c744240600000000670f011424bad004b000eed9a30c00dbe064640f01ca66b97c0900000f32c5a59b00", 0x69}], 0x1, 0x0, &(0x7f00000002c0), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000000000b0000040000000ac4d4454b4baadfe00b100004000f0d2c154"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 2018/04/29 21:25:36 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0x48) 2018/04/29 21:25:36 executing program 3: mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = open(&(0x7f0000000100)='./file0\x00', 0x1, 0x83) getsockname$packet(r0, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000031c0)=0xffffffffffffff1c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003200)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000003300)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003340)={{{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in6, 0x4e21, 0x5, 0x4e21, 0x13c, 0xa, 0x20, 0x20, 0xff, r2, r3}, {0x9c3, 0xff, 0x1, 0x8, 0x43f6, 0xed2, 0x8}, {0x6, 0x1f, 0x1000, 0x8}, 0x40, 0x6e6bb1, 0x3, 0x1, 0x0, 0x3}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4d6, 0x3f}, 0x2, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x34ff, 0x4, 0x2, 0x0, 0xe73, 0x3, 0x7}}, 0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x4080000000002001, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setns(r4, 0x2000000) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000002b80)={'dummy0\x00', 0x202}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000002ac0)={0x5, 0x1, 0x1000}, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000002b00), &(0x7f0000002b40)=0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000002900)={0x0, 0x2, 0x6}, &(0x7f0000002a80)=0x8) ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000002940)) sendmmsg$inet_sctp(r1, &(0x7f0000002a00)=[{&(0x7f0000000140)=@in6={0xa, 0x4e24, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)="e165c2fab2dff69dd17b93e4ebb1af5046ecb956d37d6045b4445e5b24b2871a7c82507e5fde0cf424f8cfa6e837c078c0a0a86083bc838e98ae1f365ad32683f02eb0a9a31c896166059814dbb99580e3805daa13b5cf64aee211550b69109f4864f8f33736006c1a949cc4b8115c320e9c515d09d3a39fbf2a31df7557af5deed88d6f90749ada7c0e4d57f24e139158d887d0ccdb8491124fa1932c956bb4bb65c7eebc68461e8e78d8aeb7ae207ae71c2c3b015d99847a1349c3b0e6c1fe8ea3bc9cc6b948122e1ec97fb3280e1d574ada66dd5db7c12ce3dc944cbaade11b31499cba475fdb54b16931a2a4db94fca899b0e1d5", 0xf6}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x8000) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f00000000c0), &(0x7f0000000040)=0x4b) 2018/04/29 21:25:36 executing program 0: r0 = socket$inet(0x2, 0x4000000805, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000012000)=0x3fe, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000eb3fe0)=[@in={0x2, 0x4e20, @local={0xac, 0x14, 0x0, 0xaa}}, @in={0x2, 0x4e20, @broadcast=0xffffffff}], 0x20) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0) getsockopt$ax25_int(r1, 0x101, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @local={0xfe, 0x80, [], 0xaa}}], 0x1c) [ 374.637094] FAULT_INJECTION: forcing a failure. [ 374.637094] name failslab, interval 1, probability 0, space 0, times 0 [ 374.648399] CPU: 0 PID: 26409 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 374.655678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.665026] Call Trace: [ 374.667617] dump_stack+0x1b9/0x294 [ 374.671246] ? dump_stack_print_info.cold.2+0x52/0x52 [ 374.676441] should_fail.cold.4+0xa/0x1a [ 374.680494] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 374.685589] ? snd_pcm_plugin_build+0x448/0x670 [ 374.690244] ? snd_pcm_plugin_build_io+0x28c/0x720 [ 374.695161] ? snd_pcm_oss_change_params_locked+0x1247/0x3c70 [ 374.701038] ? snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 374.706387] ? snd_pcm_oss_write+0x516/0xa20 [ 374.710781] ? __vfs_write+0x10b/0x960 [ 374.714658] ? __kernel_write+0x10c/0x380 [ 374.718794] ? graph_lock+0x170/0x170 [ 374.722585] ? direct_splice_actor+0x128/0x190 [ 374.727155] ? splice_direct_to_actor+0x310/0x8d0 [ 374.731985] ? do_splice_direct+0x2cc/0x400 [ 374.736989] ? do_sendfile+0x60f/0xe00 [ 374.740866] ? __x64_sys_sendfile64+0x155/0x240 [ 374.745525] ? do_syscall_64+0x1b1/0x800 [ 374.749579] ? find_held_lock+0x36/0x1c0 [ 374.753637] ? __lock_is_held+0xb5/0x140 [ 374.757920] ? check_same_owner+0x320/0x320 [ 374.762240] ? rcu_note_context_switch+0x710/0x710 [ 374.767162] __should_failslab+0x124/0x180 [ 374.771389] should_failslab+0x9/0x14 [ 374.775178] kmem_cache_alloc_trace+0x2cb/0x780 [ 374.779837] ? snd_pcm_plugin_build+0x448/0x670 [ 374.784502] snd_pcm_hw_param_near.constprop.35+0x15c/0xb10 [ 374.790207] ? _snd_pcm_hw_param_min+0x570/0x570 [ 374.794953] ? snd_pcm_hw_param_max+0x730/0x730 [ 374.799631] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 374.804821] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 374.810349] ? snd_pcm_plug_slave_size+0x1d0/0x350 [ 374.815268] snd_pcm_oss_change_params_locked+0x1b5b/0x3c70 [ 374.820983] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 374.826864] ? perf_event_update_userpage+0xd10/0xd10 [ 374.832048] ? graph_lock+0x170/0x170 [ 374.835840] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 374.841367] ? __perf_event_task_sched_in+0x247/0xb80 [ 374.846553] ? find_held_lock+0x36/0x1c0 [ 374.850618] ? lock_downgrade+0x8e0/0x8e0 [ 374.854764] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 374.859943] snd_pcm_oss_write+0x516/0xa20 [ 374.864166] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 374.869176] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 374.874027] ? preempt_notifier_register+0x1e0/0x1e0 [ 374.879128] __vfs_write+0x10b/0x960 [ 374.882830] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 374.887662] ? kernel_read+0x120/0x120 [ 374.891885] ? __schedule+0x809/0x1e30 [ 374.895764] ? default_file_splice_read+0x888/0xad0 [ 374.900783] ? check_same_owner+0x320/0x320 [ 374.905092] ? kasan_check_read+0x11/0x20 [ 374.909241] ? rcu_note_context_switch+0x710/0x710 [ 374.914161] __kernel_write+0x10c/0x380 [ 374.918150] write_pipe_buf+0x175/0x220 [ 374.922133] ? default_file_splice_read+0xad0/0xad0 [ 374.927139] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 374.932665] ? splice_from_pipe_next.part.8+0x296/0x340 [ 374.938046] __splice_from_pipe+0x38e/0x7c0 [ 374.942362] ? default_file_splice_read+0xad0/0xad0 [ 374.947377] splice_from_pipe+0x1e2/0x320 [ 374.951515] ? default_file_splice_read+0xad0/0xad0 [ 374.956519] ? splice_shrink_spd+0xd0/0xd0 [ 374.960758] default_file_splice_write+0x3c/0x90 [ 374.965499] ? generic_splice_sendpage+0x50/0x50 [ 374.970245] direct_splice_actor+0x128/0x190 [ 374.974647] splice_direct_to_actor+0x310/0x8d0 [ 374.979308] ? pipe_to_sendpage+0x3f0/0x3f0 [ 374.983624] ? do_splice_to+0x190/0x190 [ 374.987592] ? rw_verify_area+0x118/0x360 [ 374.991730] do_splice_direct+0x2cc/0x400 [ 374.995868] ? splice_direct_to_actor+0x8d0/0x8d0 [ 375.000705] ? rw_verify_area+0x118/0x360 [ 375.004842] do_sendfile+0x60f/0xe00 [ 375.008558] ? do_compat_pwritev64+0x1b0/0x1b0 [ 375.013147] ? __might_sleep+0x95/0x190 [ 375.017116] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 375.022644] ? _copy_from_user+0xdf/0x150 [ 375.026786] __x64_sys_sendfile64+0x155/0x240 [ 375.031282] ? __ia32_sys_sendfile+0x290/0x290 [ 375.035870] ? do_syscall_64+0x92/0x800 [ 375.039841] do_syscall_64+0x1b1/0x800 [ 375.043716] ? finish_task_switch+0x1ca/0x810 [ 375.048199] ? syscall_return_slowpath+0x5c0/0x5c0 [ 375.053117] ? syscall_return_slowpath+0x30f/0x5c0 [ 375.058045] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 375.063402] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 375.068238] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 375.073412] RIP: 0033:0x455979 [ 375.076607] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 375.084305] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 375.091561] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 375.098814] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 375.106080] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 375.113338] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000021 2018/04/29 21:25:36 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x7f) capset(&(0x7f00009b8ff8)={0x19980330}, &(0x7f0000001fe8)) mknod$loop(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7fffffff, 0x2140) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000080)=0x7000000000000000) 2018/04/29 21:25:36 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000cdfff5)='/dev/loop#\x00', 0x0, 0x1) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/4096) ioctl(r0, 0x4420000000001277, &(0x7f0000000000)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x800, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000001040)) 2018/04/29 21:25:36 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)=""/5}, {&(0x7f0000000240)=""/188, 0x6}], 0x3b0) 2018/04/29 21:25:36 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0x48) 2018/04/29 21:25:36 executing program 7 (fault-call:2 fault-nth:34): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000300)={0x17000, 0xf000, 0x1a5, 0x0, 0xfffffffffffff97b}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000003c0)={0x0, 0x6}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={0xffffffffffffff9c}) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x400, @local={0xfe, 0x80, [], 0xaa}, 0x386a}}, 0x3f, 0x102000, 0x7fffffff, "9fd1ed3885677872b842366acab6509b2d72f4e7eb51af9c319a2b104c0bcafdade67cc2e69aa48e342256a4d193b72dd9a13d158f6cd848f01123d34603676886d8215efc5340e5d872d79d60838b09"}, 0xd8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f0000000180)={0x7, 0xd3f}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)) 2018/04/29 21:25:36 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa}) syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0xfff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x260000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000001100)='\x00\x00\b') r2 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x80, 0x420001) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000180)={0x3, 0x5aa, 0x1ff, 0x0, 0x5, 0x8000, 0x8, 0x5, 0x7, 0x6, 0xfffffffffffffff8, 0x8000}) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x4000, 0x0) statx(r2, &(0x7f0000000200)='./file0\x00', 0x7000, 0x20, &(0x7f0000000240)) read(r0, &(0x7f0000000080)=""/127, 0x7f) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/04/29 21:25:36 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="4b17ac98", 0x4) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x4440, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x6}}, [0x20, 0x3, 0x20, 0x2, 0x3, 0x400, 0x4, 0x1e, 0x4, 0x7fff, 0x100000001, 0x7f, 0x7ff, 0x9, 0x967]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000240)={r3, 0x3, 0x1, [0x5]}, &(0x7f0000000280)=0xa) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x1) sendmmsg(r1, &(0x7f00000063c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x4e20}}}, 0x3a, &(0x7f0000000080), 0x5}}, {{&(0x7f0000000000)=@nl=@proc={0x10}, 0xc, &(0x7f00000020c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="100000400000e10007000055b9537681"], 0x10}}], 0x2, 0x0) 2018/04/29 21:25:36 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x3, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000040)=""/37) r2 = dup2(r1, r1) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x2010, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000000c0)={r3}) 2018/04/29 21:25:36 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x0, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0x60) 2018/04/29 21:25:36 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000100)={{r1, r2+10000000}}, &(0x7f0000000140)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, &(0x7f0000002000)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x14) 2018/04/29 21:25:36 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f000000c000)={0x9, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e004bcc0ae4de5d4e831c68b6c2956c2874476ee83e417454f684cab6a71b139644ea97a"}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000ff2000)={{0x9, 0x0, 0x0, 0x0, "b3cb3998b116f3c458384877c192aac54e7aeb175096c7d66666b8316333c04da7b309a5c994ae4dc6cebe72"}, 0x0, [], {0x77359400}}) [ 375.442841] FAULT_INJECTION: forcing a failure. [ 375.442841] name failslab, interval 1, probability 0, space 0, times 0 [ 375.454179] CPU: 1 PID: 26463 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 375.461453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.470794] Call Trace: [ 375.473374] dump_stack+0x1b9/0x294 [ 375.476990] ? dump_stack_print_info.cold.2+0x52/0x52 [ 375.482202] should_fail.cold.4+0xa/0x1a [ 375.486249] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 375.491335] ? snd_pcm_plugin_build+0x448/0x670 [ 375.495985] ? snd_pcm_plugin_build_io+0x28c/0x720 [ 375.500902] ? snd_pcm_oss_change_params_locked+0x1247/0x3c70 [ 375.506768] ? snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 375.512112] ? snd_pcm_oss_write+0x516/0xa20 [ 375.516503] ? __vfs_write+0x10b/0x960 [ 375.520372] ? __kernel_write+0x10c/0x380 [ 375.524504] ? graph_lock+0x170/0x170 [ 375.528289] ? direct_splice_actor+0x128/0x190 [ 375.532853] ? splice_direct_to_actor+0x310/0x8d0 [ 375.537677] ? do_splice_direct+0x2cc/0x400 [ 375.541979] ? do_sendfile+0x60f/0xe00 [ 375.545854] ? __x64_sys_sendfile64+0x155/0x240 [ 375.550507] ? do_syscall_64+0x1b1/0x800 [ 375.554555] ? find_held_lock+0x36/0x1c0 [ 375.558601] ? __lock_is_held+0xb5/0x140 [ 375.562653] ? check_same_owner+0x320/0x320 [ 375.566962] ? rcu_note_context_switch+0x710/0x710 [ 375.571880] __should_failslab+0x124/0x180 [ 375.576102] should_failslab+0x9/0x14 [ 375.579889] kmem_cache_alloc_trace+0x2cb/0x780 [ 375.584543] ? snd_pcm_plugin_build+0x448/0x670 [ 375.589216] snd_pcm_hw_param_near.constprop.35+0x15c/0xb10 [ 375.595273] ? _snd_pcm_hw_param_min+0x570/0x570 [ 375.600024] ? snd_pcm_hw_param_max+0x730/0x730 [ 375.604680] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 375.609856] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 375.615375] ? snd_pcm_plug_slave_size+0x1d0/0x350 [ 375.620290] snd_pcm_oss_change_params_locked+0x1b5b/0x3c70 [ 375.625991] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 375.631870] ? perf_event_update_userpage+0xd10/0xd10 [ 375.637042] ? graph_lock+0x170/0x170 [ 375.640827] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.646351] ? __perf_event_task_sched_in+0x247/0xb80 [ 375.651544] ? find_held_lock+0x36/0x1c0 [ 375.655593] ? lock_downgrade+0x8e0/0x8e0 [ 375.659728] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 375.664902] snd_pcm_oss_write+0x516/0xa20 [ 375.669131] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 375.674134] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 375.678964] ? preempt_notifier_register+0x1e0/0x1e0 [ 375.684056] __vfs_write+0x10b/0x960 [ 375.687753] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 375.692576] ? kernel_read+0x120/0x120 [ 375.696446] ? __schedule+0x809/0x1e30 [ 375.700318] ? default_file_splice_read+0x888/0xad0 [ 375.705323] ? check_same_owner+0x320/0x320 [ 375.709627] ? kasan_check_read+0x11/0x20 [ 375.713758] ? rcu_note_context_switch+0x710/0x710 [ 375.718671] __kernel_write+0x10c/0x380 [ 375.722643] write_pipe_buf+0x175/0x220 [ 375.726601] ? default_file_splice_read+0xad0/0xad0 [ 375.731600] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.737121] ? splice_from_pipe_next.part.8+0x296/0x340 [ 375.742472] __splice_from_pipe+0x38e/0x7c0 [ 375.746777] ? default_file_splice_read+0xad0/0xad0 [ 375.751780] splice_from_pipe+0x1e2/0x320 [ 375.755911] ? default_file_splice_read+0xad0/0xad0 [ 375.760910] ? splice_shrink_spd+0xd0/0xd0 [ 375.765134] default_file_splice_write+0x3c/0x90 [ 375.769875] ? generic_splice_sendpage+0x50/0x50 [ 375.774616] direct_splice_actor+0x128/0x190 [ 375.779014] splice_direct_to_actor+0x310/0x8d0 [ 375.783671] ? pipe_to_sendpage+0x3f0/0x3f0 [ 375.787983] ? do_splice_to+0x190/0x190 [ 375.791942] ? rw_verify_area+0x118/0x360 [ 375.796074] do_splice_direct+0x2cc/0x400 [ 375.800208] ? splice_direct_to_actor+0x8d0/0x8d0 [ 375.805036] ? rw_verify_area+0x118/0x360 [ 375.809167] do_sendfile+0x60f/0xe00 [ 375.812868] ? do_compat_pwritev64+0x1b0/0x1b0 [ 375.817433] ? __might_sleep+0x95/0x190 [ 375.821395] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 375.826914] ? _copy_from_user+0xdf/0x150 [ 375.831047] __x64_sys_sendfile64+0x155/0x240 [ 375.835526] ? __ia32_sys_sendfile+0x290/0x290 [ 375.840092] ? do_syscall_64+0x92/0x800 [ 375.844052] do_syscall_64+0x1b1/0x800 [ 375.847922] ? finish_task_switch+0x1ca/0x810 [ 375.852400] ? syscall_return_slowpath+0x5c0/0x5c0 [ 375.857313] ? syscall_return_slowpath+0x30f/0x5c0 [ 375.862228] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 375.867578] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 375.872407] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 375.877576] RIP: 0033:0x455979 [ 375.880749] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/04/29 21:25:37 executing program 6: prctl$intptr(0x2000000000029, 0x3) mmap(&(0x7f0000522000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)) [ 375.888441] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 375.895690] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 375.902940] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 375.910193] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 375.917444] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000022 2018/04/29 21:25:37 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x24c301, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f00000000c0)=0x2) 2018/04/29 21:25:37 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x0, 0x7ff, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0x60) 2018/04/29 21:25:37 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) getsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000000000), &(0x7f0000000240)=0x4) 2018/04/29 21:25:37 executing program 0: r0 = socket(0x10, 0x8000000000002, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) keyctl$get_persistent(0x16, r1, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000), 0x4) 2018/04/29 21:25:37 executing program 1: geteuid() r0 = epoll_create1(0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000040)={0x6}, 0x4) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={r2, 0x2, 0x1, 0x609883a2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) getsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000003ff4)) setsockopt$sock_int(r1, 0x1, 0x40000000000007, &(0x7f0000fecffc), 0x4) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x400}, 0x8) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000001c0)=0x2) 2018/04/29 21:25:37 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x813, r0, 0x0) sync_file_range(r0, 0xffffffffffffffff, 0x3, 0x2) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) 2018/04/29 21:25:37 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x0, 0x0, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0x60) 2018/04/29 21:25:37 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet(r0, &(0x7f0000103fa0)="88", 0x1, 0x0, &(0x7f0000ab9000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000294ff5)={0x0, 0x0, 0x0, 0x3}, 0xb) msgget(0x0, 0x8) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@rc, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000040)=""/102, 0x66}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x101, {0x2, 0x4e20, @rand_addr=0x3}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x2, 0x4e21, @loopback=0x7f000001}, 0x10, 0x2, 0x3, 0x3, 0x7fff, 0x0, 0x7, 0x9, 0x4}) r2 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000002c0)="60321b38bcf34134abfde035366ced5335c3502381a88de9329c23f6373ddb5892be774aa1e2d7f98aeaabde2dc4a2f6b5973d", 0x33, 0xfffffffffffffff9) keyctl$get_keyring_id(0x0, r2, 0x4) 2018/04/29 21:25:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000010) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000220007000400000000070000000000000000000000000000313b97b568c4edd50517a73241eb94915ce8823a14d0b13687734963c9e96a7ea24b90a7e95b0f483f92e80b090204a3dfc786950ffec16c25f7df2762116c65e80c5073368118737235b2b238dfda5ee7ed09b7aa03a882fa36447b31c274396227428511cfebbbf566dc5f3650ea871531d18328b4e3d8b8e0470cf78f3be486e4f6713e3ad35c0cd32e"], 0x1c}, 0x1}, 0x0) 2018/04/29 21:25:37 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3d, &(0x7f0000000080), &(0x7f00000000c0)=0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0x3, 0x4) 2018/04/29 21:25:37 executing program 7 (fault-call:2 fault-nth:35): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) [ 376.343832] FAULT_INJECTION: forcing a failure. [ 376.343832] name failslab, interval 1, probability 0, space 0, times 0 [ 376.355161] CPU: 1 PID: 26507 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 376.362439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.371794] Call Trace: [ 376.374392] dump_stack+0x1b9/0x294 [ 376.378041] ? dump_stack_print_info.cold.2+0x52/0x52 [ 376.383253] should_fail.cold.4+0xa/0x1a [ 376.387330] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/04/29 21:25:37 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000c1a000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00007cbfff)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./control\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000b6d000)='./control\x00', 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./control\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000080)={0x6, 0xd156, 0x1f, 0x400, 0x7, 0x9}) dup3(r0, r1, 0x0) [ 376.392449] ? debug_check_no_locks_freed+0x310/0x310 [ 376.397648] ? graph_lock+0x170/0x170 [ 376.401456] ? __lock_is_held+0xb5/0x140 [ 376.405529] ? find_held_lock+0x36/0x1c0 [ 376.409602] ? __lock_is_held+0xb5/0x140 [ 376.413684] ? check_same_owner+0x320/0x320 [ 376.418020] ? rcu_note_context_switch+0x710/0x710 [ 376.422964] ? graph_lock+0x170/0x170 [ 376.426775] __should_failslab+0x124/0x180 [ 376.431021] should_failslab+0x9/0x14 [ 376.434829] __kmalloc+0x2c8/0x760 [ 376.438388] ? constrain_params_by_rules+0x141/0x1360 2018/04/29 21:25:38 executing program 0: r0 = socket$inet6(0xa, 0x800, 0x6) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) write$cgroup_pid(r1, &(0x7f00000000c0)={[0x33, 0x36, 0x34, 0x32, 0x38, 0x33, 0x33, 0x39]}, 0x8) sendto$inet6(r1, &(0x7f0000001ffe), 0x0, 0x20043ffc, &(0x7f0000003000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) iopl(0x0) [ 376.443583] ? find_held_lock+0x36/0x1c0 [ 376.447660] constrain_params_by_rules+0x141/0x1360 [ 376.452690] ? lock_downgrade+0x8e0/0x8e0 [ 376.456855] ? snd_pcm_mmap+0x580/0x580 [ 376.460836] ? rcu_is_watching+0x85/0x140 [ 376.464999] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 376.470202] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 376.475400] ? is_bpf_text_address+0xd7/0x170 [ 376.479887] ? kernel_text_address+0x79/0xf0 [ 376.484287] ? __unwind_start+0x166/0x330 [ 376.488425] ? __kernel_text_address+0xd/0x40 [ 376.492907] ? unwind_get_return_address+0x61/0xa0 [ 376.497826] ? __save_stack_trace+0x7e/0xd0 [ 376.502144] ? save_stack+0xa9/0xd0 [ 376.505755] ? save_stack+0x43/0xd0 [ 376.509370] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 376.514370] ? snd_interval_refine+0x428/0x700 [ 376.518943] snd_pcm_hw_refine+0x8e9/0x1180 [ 376.523254] ? splice_direct_to_actor+0x310/0x8d0 [ 376.528079] ? do_splice_direct+0x2cc/0x400 [ 376.532392] ? snd_pcm_mmap_status_fault+0x3e0/0x3e0 [ 376.537479] ? graph_lock+0x170/0x170 [ 376.541264] ? __lock_is_held+0xb5/0x140 [ 376.545318] ? __lock_is_held+0xb5/0x140 [ 376.549370] ? snd_pcm_hw_param_near.constprop.35+0x15c/0xb10 [ 376.555237] ? rcu_read_lock_sched_held+0x108/0x120 [ 376.560238] ? kmem_cache_alloc_trace+0x616/0x780 [ 376.565067] ? _snd_pcm_hw_param_min+0x330/0x570 [ 376.569809] snd_pcm_hw_param_near.constprop.35+0x2cf/0xb10 [ 376.575507] ? _snd_pcm_hw_param_min+0x570/0x570 [ 376.580250] ? snd_pcm_hw_param_max+0x730/0x730 [ 376.584924] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 376.590102] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 376.595625] ? snd_pcm_plug_slave_size+0x1d0/0x350 [ 376.600539] snd_pcm_oss_change_params_locked+0x1b5b/0x3c70 [ 376.606246] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 376.612115] ? is_bpf_text_address+0xd7/0x170 [ 376.616595] ? kernel_text_address+0x79/0xf0 [ 376.620987] ? __unwind_start+0x166/0x330 [ 376.625123] ? __kernel_text_address+0xd/0x40 [ 376.629603] ? unwind_get_return_address+0x61/0xa0 [ 376.634531] ? __save_stack_trace+0x7e/0xd0 [ 376.638848] ? __put_page+0x130/0x180 [ 376.642632] ? __put_compound_page+0xe0/0xe0 [ 376.647034] ? default_file_splice_read+0x874/0xad0 [ 376.652039] ? splice_direct_to_actor+0x268/0x8d0 [ 376.656867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.662219] ? generic_pipe_buf_release+0x1dc/0x290 [ 376.667226] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 376.672401] snd_pcm_oss_write+0x516/0xa20 [ 376.676623] ? debug_check_no_obj_freed+0x2ff/0x584 [ 376.681624] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 376.686626] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 376.691452] ? trace_hardirqs_off+0xd/0x10 [ 376.695671] ? quarantine_put+0xeb/0x190 [ 376.699719] __vfs_write+0x10b/0x960 [ 376.703417] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 376.708246] ? kernel_read+0x120/0x120 [ 376.712122] ? default_file_splice_read+0x888/0xad0 [ 376.717122] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.722482] ? check_same_owner+0x320/0x320 [ 376.726792] ? rcu_note_context_switch+0x710/0x710 [ 376.731706] __kernel_write+0x10c/0x380 [ 376.735669] write_pipe_buf+0x175/0x220 [ 376.739629] ? default_file_splice_read+0xad0/0xad0 [ 376.744632] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.750155] ? splice_from_pipe_next.part.8+0x296/0x340 [ 376.755508] __splice_from_pipe+0x38e/0x7c0 [ 376.759821] ? default_file_splice_read+0xad0/0xad0 [ 376.764827] splice_from_pipe+0x1e2/0x320 [ 376.768963] ? default_file_splice_read+0xad0/0xad0 [ 376.773962] ? splice_shrink_spd+0xd0/0xd0 [ 376.778193] default_file_splice_write+0x3c/0x90 [ 376.782932] ? generic_splice_sendpage+0x50/0x50 [ 376.787672] direct_splice_actor+0x128/0x190 [ 376.792069] splice_direct_to_actor+0x310/0x8d0 [ 376.796723] ? pipe_to_sendpage+0x3f0/0x3f0 [ 376.801044] ? do_splice_to+0x190/0x190 [ 376.805010] ? rw_verify_area+0x118/0x360 [ 376.809150] do_splice_direct+0x2cc/0x400 [ 376.813289] ? splice_direct_to_actor+0x8d0/0x8d0 [ 376.818120] ? rw_verify_area+0x118/0x360 [ 376.822255] do_sendfile+0x60f/0xe00 [ 376.825960] ? do_compat_pwritev64+0x1b0/0x1b0 [ 376.830526] ? __might_sleep+0x95/0x190 [ 376.834489] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 376.840014] ? _copy_from_user+0xdf/0x150 [ 376.844157] __x64_sys_sendfile64+0x155/0x240 [ 376.848636] ? __ia32_sys_sendfile+0x290/0x290 [ 376.853207] ? do_syscall_64+0x92/0x800 [ 376.857169] do_syscall_64+0x1b1/0x800 [ 376.861041] ? finish_task_switch+0x1ca/0x810 [ 376.865520] ? syscall_return_slowpath+0x5c0/0x5c0 [ 376.870434] ? syscall_return_slowpath+0x30f/0x5c0 [ 376.875353] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 376.880703] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 376.885532] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.890703] RIP: 0033:0x455979 [ 376.893877] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 376.901573] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 376.908824] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 376.916075] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 376.923326] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 376.930576] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000023 2018/04/29 21:25:38 executing program 6: r0 = perf_event_open(&(0x7f0000877000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b78f62a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x8, 0x6, 0x5) 2018/04/29 21:25:38 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x0, 0x0, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0x60) 2018/04/29 21:25:38 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000300), 0x80000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000002bc0)=ANY=[@ANYPTR64=&(0x7f0000002b80)=ANY=[@ANYPTR, @ANYPTR64, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYPTR, @ANYRES64=r1, @ANYPTR, @ANYPTR64, @ANYRES32, @ANYPTR, @ANYPTR64], @ANYPTR=&(0x7f0000000a80)=ANY=[@ANYPTR], @ANYPTR=&(0x7f0000002780)=ANY=[@ANYPTR, @ANYPTR, @ANYRES32=r1, @ANYRES32=r1, @ANYPTR64, @ANYRES16, @ANYRES32=r0, @ANYPTR], @ANYPTR=&(0x7f00000028c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="1bcb20ef276d54f3d20202b8a3dc0a2eff0270e0929bb27eba96860d6906c55bee82c01dbf70c3b437225b704eaadaea5ff0256d415aff6666044e7d4c20c1449396801466f70053b9af83604d980d43682b2e4a361be6de7d2292e1830e5e10db5b38772cb6c178e01e5f95fa37cb2fe9d02e03c62b0f8515054f783962e24667f431bba3610f48d9e21dd7", @ANYRES64=r0, @ANYPTR], @ANYPTR=&(0x7f0000002a40)=ANY=[@ANYPTR64, @ANYPTR64], @ANYPTR64=&(0x7f0000002a80)=ANY=[@ANYBLOB="7245e54e93cd8b63a62ed2a55c2b936f8352b4159a8ef6aa9637e0d88a1a5b74f1afb0bed5540fff1671c5e6af136bd954d3c0d18dc3ceaa007356deacd18c38e59b4e545f673b98deae977408331bd2b8de1e1746de7d373c225ddb520877420daf005b3855d5316cbfa78a4a9821903b5e79086992190a3b4fab25fb10152780", @ANYRES16, @ANYRES64=r0, @ANYBLOB="397fce18ba6f30886dcb5a793887c11439deb0575616a49c82da304752b17e9f5203cfbdc0feee8afe12b31392556913c0"]]], &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1, 0x7ff}, 0x90) getsockname(r0, &(0x7f0000000180)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, &(0x7f0000000a40)=0x80) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) r3 = accept(r1, &(0x7f0000002840), &(0x7f0000000580)=0x80) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000dc0)=@l2={0x1f, 0xffffffff80000001, {0x8001, 0x1f, 0x80, 0x1f, 0x1, 0x6}, 0x5, 0x39}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000e40)="b9cea4029880af5ce3049952776fdfcbc46e97d1461267735449b1133e35452075221c741540528daa3e937097332f48ae2cf7c8d50fc6399c7f630fbb8a5a272f32d9675e601f86ec9a7d5a4aeff005664e82569ecd7e14ac08eb794f6763193e77f216de84fdd38a81761cd149cd074c7050a01b219fed262243ed15d344555ce8f710d003723e4b247133af7745bb522aedf3773765beb48679c8624ce7d21765dee322dac708794abfebb231419f5fe826127bf5b0578c41f1c85719710ae7f4ce476b8a8031e0515591aa13f1f6db160838d2f50c86ca5a5d9d8baea7520fe96c3016e47b86c3b074dd96101a", 0xef}], 0x1, &(0x7f0000000f40), 0x0, 0x40000}, 0x81) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$rds(r3, &(0x7f0000002600)={&(0x7f0000000340)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10, &(0x7f0000001040)=[{&(0x7f00000003c0)}, {&(0x7f0000000400)=""/88, 0x58}, {&(0x7f00000005c0)=""/193, 0xc1}, {&(0x7f0000000f40)=""/202, 0xca}, {&(0x7f0000000540)=""/34, 0x22}, {&(0x7f0000000980)=""/190, 0xbe}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x7, &(0x7f00000024c0)=[@fadd={0x58, 0x114, 0x6, {{0xfffffffffffffffb}, &(0x7f00000010c0), &(0x7f0000001100)=0x1, 0x202e, 0x168, 0x6, 0x65224e39, 0xc, 0xffffffffee50774f}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001140)=""/26, 0x1a}, &(0x7f0000001180), 0x40}}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x9}, &(0x7f00000011c0)=0x101, &(0x7f0000001200)=0x7, 0x4, 0x7, 0x5a, 0x8, 0x1, 0x8000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x40, 0x100000000000}, &(0x7f0000002440)=0x2, &(0x7f0000002480)=0x80, 0x3, 0x6, 0x6, 0xfffffffffffffff7, 0x10, 0x1}}], 0x138}, 0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000498000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000d52000)={0x18, 0x2, 0x6, 0x800000001, 0x0, 0x0, {}, [@nested={0x4, 0x2}]}, 0x18}, 0x1}, 0x0) sendto$inet(r1, &(0x7f0000000280)="ade75ba6091d5c5c344a0ec58c86fa78b162f02ed1c1420e6f920d7399da8a4a8782125ff2a3719053e0025d6e4527ef9c48bb7f92f3c69a33a8a9f5e744d88ca63195719be8706d53dbd85fc31b6699cb0d3c8ecffe5e6cc6b54e7625d349c2b2c10096a1b09c3d0354c564b0715ec12f22ca94d7974873162dfa", 0x7b, 0x40000, &(0x7f0000000380)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000b00)=ANY=[@ANYRES32, @ANYBLOB="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"], &(0x7f0000000040)=0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x1, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)={0x0, 0x0, [0x0, 0x3a7]}) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r6, 0x21, 0xf, &(0x7f0000000840)="b85d0903c58e2223edf7c11be1693789fd4dc14655185b9d49d2f2211b0df15494f4854819374127c67fcff235c32a06e7b28b6ec220d3b2758b96ac497d7e5456fa59c674b47004aaec356f19b08a455a3e63856a2bafee35476a2260d196e3dd6db32f6395efd07a6e4cc8f157729f476ac3866a37660b309d7c6fad34a52463b5d51602a1a8b72ecee9b0cfbb160c695bd94d9c3399e8d6de3b7d50ee541ee16f91c2ecac0dbbdd5ea8b0297168a10598fc7a1e19f536b1c17376a546ad841a776321a1143a475febb2192156dce719c8b07e987dc46f15f58983a7d1ddbf84f8ee35", 0xe4) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/vcs\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000002800)={0x0, 0x800, 0x4, 0x80, 0x5}, 0x14) syz_extract_tcp_res(&(0x7f00000003c0)={0x41424344, 0x41424344}, 0x972d, 0x8) syz_extract_tcp_res$synack(&(0x7f0000002640)={0x41424344}, 0x1, 0x0) write$tun(r5, &(0x7f0000002680)={@pi={0x0, 0xe91f}, @void, @ipv6={0x7, 0x6, '\f=y', 0x82, 0x7f, 0x2, @dev={0xfe, 0x80, [], 0x10}, @mcast1={0xff, 0x1, [], 0x1}, {[], @tcp={{0x4e23, 0x4e22, r8, r9, 0x2, 0x0, 0x6, 0x8, 0x7, 0x0, 0xfffffffffffffe92, {[@generic={0x27, 0x2}]}}, {"fd42d7eea4a85c1d9e523e1eb779d25521b7fb10b0d908d82d990ea0647e90dda6cff7469720f2e42093f04e188741f6210c23a7cfffe2f036c96ae5b8d3d186f3ae42f7750d0a1d106a1ccb7dae057239d65e43176a1a5fccb7a34c5f8aa89a151d80f0a653f7141ed6"}}}}}, 0xae) socket(0x8, 0xf, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xffffffffffffffed}, {0xa, 0x4e24, 0x8, @mcast1={0xff, 0x1, [], 0x1}, 0x3}, 0x1, [0x5, 0x40, 0x3ff, 0x4, 0x200, 0x5, 0x7, 0xfff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000006c0)={{0xa, 0x4e21, 0x200, @local={0xfe, 0x80, [], 0xaa}, 0x1000014936325}, {0xa, 0x4e23, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x40}, 0x0, [0x3c8, 0x1000, 0x81, 0x9, 0x7, 0x7, 0xfff, 0x1]}, 0x5c) close(r0) 2018/04/29 21:25:38 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cast6)\x00'}, 0x58) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000003c0)=""/79) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b0d5e383e5b3b60c", 0xb) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000005c0)="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", 0x7d}], 0x1, &(0x7f0000000300), 0x35d73d355bdb01d5}], 0x4924924924926df, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x80000, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000200)={0x0, 0x81, 0x71, &(0x7f00000001c0)=0x6}) mq_getsetattr(r3, &(0x7f0000000240)={0x100, 0x8000, 0x5, 0x6, 0xffff, 0x1, 0x10000, 0x5}, &(0x7f0000000280)) recvmsg(r2, &(0x7f0000b2dfc8)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f0000000040)=[{&(0x7f0000000440)=""/192, 0xc0}], 0x1, &(0x7f0000000080)=""/107, 0x6b}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, @in6={0xa, 0x4e20, 0x1, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x4}, @in6={0xa, 0x4e20, 0xfffffffffffffe01, @mcast1={0xff, 0x1, [], 0x1}, 0x1f}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x64) [ 377.102260] Unknown ioctl 1075359457 [ 377.138265] Unknown ioctl 1075359457 2018/04/29 21:25:39 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, 0x10}, 0x1c) 2018/04/29 21:25:39 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d40)=@broute={'broute\x00', 0x20, 0x3, 0x288, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, 0x305) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) 2018/04/29 21:25:39 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{{}, 0x0, 0x0, 0x100000000}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0x60) 2018/04/29 21:25:39 executing program 0: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0/bus\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x1, &(0x7f00000001c0)) r0 = dup(0xffffffffffffffff) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'nr0\x00', @ifru_addrs=@hci={0x1f, 0x0, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', r1}) unshare(0x200) r2 = syz_open_procfs(0x0, &(0x7f0000c02fca)="6e732f6d6e7400c552c5ba9e2c33e308163dd83bbbef1a23efb866ab2c1b66c09db90000000000000006f4d0e9ae0e19c79a35b158ae") setns(r2, 0x0) clone(0x3002017f, &(0x7f0000c75000), &(0x7f0000695000), &(0x7f000014e000), &(0x7f0000fef000)) 2018/04/29 21:25:39 executing program 5: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f0000000240)) r0 = semget$private(0x0, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x10202) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x7ff) semctl$GETVAL(r0, 0x0, 0xc, &(0x7f0000000040)=""/173) semget(0x1, 0x3, 0x0) 2018/04/29 21:25:39 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6d, 0x20000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000100)={{0x5}, {0x80000000, 0x9}, 0x8000, 0x4, 0x400}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000140), 0x10000000000001c6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000013c0)=@ioapic={0x1, 0x1000, 0x0, 0x649b9d38}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x0, @loopback={0x0, 0x1}}}}, 0x98) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/29 21:25:39 executing program 7 (fault-call:2 fault-nth:36): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-fixed-time)\x00'}, 0x58) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2000, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000029c0)="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", 0x1000}, {&(0x7f0000000400)="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", 0xfc}, {&(0x7f0000000500)="0e160b6b4d01ca04bf4e6373cf7c7c62050915184590ccd936e09ebcf12d92f185e548a7711a6d35e99b0c2397a282599a942ec6c1655919ff82fccd45061cf6cbca9825f250967d020547fd83faf13c0976cf91b5fecb6812832feb7b90", 0x5e}, {&(0x7f0000000580)="086919c64001c569467a6e8b6df11659f3355afd617501a4dc92a6aaa07d533d906b50f43b99b48de5ada309ec6ff9f5719c82eeeb07728198ac61760c8beda6c0641b79894d9caf5d90254d3c628db7fe31146724487d0d65fbbd77c9d9fc3f907f27ee4ddff12c0cd835d08aa6afe55aa2435b7131ef2b7b29a1b4c72ab98248ccc285985db83a1177e674bc761041", 0x90}, {&(0x7f0000000640)="b608030928057cf1f09ddcdac2516f7345df52c7fe99a6be441b63ab34016b390c95a01d0ac8eade21da206913e57c733d396369f83842be39f198f2af74fb5601", 0x41}], 0x5, &(0x7f0000000800)=[@iv={0x88, 0x117, 0x2, 0x6e, "a5df2dfb61b07c6e19c88bba4542c87bda1d37a1262bd5460dffaee002dcbc5e2f1bd3a55d8ddb4639302c0dc726a2da4e2bc75e50a291e01d5bcbd9c52875ac4b79a724a9bffffe67b4030a98a5d695c9767bc3d25f35c9e5e2ea55e6cf5f34d37eb03f71a9b80f52488fc4eaa8"}, @iv={0xd0, 0x117, 0x2, 0xb7, "7d16048727ef5636f13d02bd2c845600dee2c391a8c86b99eea5b8ece4ebb8ad671c9e53cb79abfbc3fdf731b427e17dcdea3e78ac1efddefc50a4a5283975974d6ab16d9347de28f6937a0533504335a4dd860d9530cf0ccb719f67319f89b427c0b3049708eeaded921bcbbe848919321f968e4a51869d98625697745fe791d634f23ff2b9c444c4d5dc8ee8a68ba588c1103e9c786da1932b38fb9e35e09f35593578de9def9356da26d1cf434a6b18ba8a362d89e3"}, @iv={0x80, 0x117, 0x2, 0x6b, "fbe1cce17bad928ea222d9efe0504f48719e9400d8bbede7b98ce29416c665023df3335d5f47579c3ec72b199992967bc46ff1bfd517c544c0caee5500947e07dca57c4c62391b7b333962e5c28621da44c3b5109451e668919532b7f7c04fb87e048396cbd06e6950b5a7"}, @op={0x18, 0x117, 0x3}, @iv={0x48, 0x117, 0x2, 0x2d, "ee88c74b5412bc1ca70809164bb73991e6410d8f20d7d7ae71a1909960ea3cab18aad122f9c3763c5b3a084344"}, @iv={0xe0, 0x117, 0x2, 0xc8, "a1e3aed35bf11ae99b4d2e01203296e7e43e0484729e898c00d7986ed4dbdffbbcea91614e03aa3c3e2fab29e0f3d38786a0db10338bfc1cf9740290064a6e394623b8028cfc7d864fdd0fae579b2f4223a4b2d190d235103b300c63d8362cedd069ea09af331d356a2ff41d69ad0b19eb95cc5acf6dae0c35bf6c538e88acdb96cc4296f5df80ac3b568f6dc79cb689e3a1033e7453feee439a32621e50c006386d9af34f676aec9f346200425e0ab962db7c7d0dc1d9c115a91ff2b22ea26b65905fbf1845b833"}], 0x318, 0x4c015}, 0x40) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r2, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000700)="b6ed95a221e73dfcaca2d1f5aa9ee29a67d2aa4c5da49f2cb5a8923ffd3df771504ee5295ea26ffee71f1a943878a518edce7c75a3e8c19d8312d0a8d244b963375ba3dca667ea566776acd0255db986688071ee059336b31f5710b8465707270f", 0x61}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/92, 0x5c}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x2, &(0x7f0000000340)=""/80, 0x50}, 0x0) [ 377.577346] kernel msg: ebtables bug: please report to author: Wrong len argument [ 377.597865] FAULT_INJECTION: forcing a failure. [ 377.597865] name failslab, interval 1, probability 0, space 0, times 0 [ 377.609173] CPU: 0 PID: 26571 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 377.613860] kernel msg: ebtables bug: please report to author: Wrong len argument [ 377.616448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.616456] Call Trace: [ 377.616480] dump_stack+0x1b9/0x294 [ 377.616503] ? dump_stack_print_info.cold.2+0x52/0x52 [ 377.616521] ? kernel_text_address+0x79/0xf0 [ 377.616542] should_fail.cold.4+0xa/0x1a [ 377.653334] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 377.658458] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 377.664006] ? snd_pcm_hw_refine+0x362/0x1180 [ 377.668512] ? graph_lock+0x170/0x170 [ 377.672347] ? find_held_lock+0x36/0x1c0 [ 377.676419] ? __lock_is_held+0xb5/0x140 [ 377.680507] ? check_same_owner+0x320/0x320 [ 377.684839] ? debug_check_no_obj_freed+0x2ff/0x584 [ 377.689869] ? rcu_note_context_switch+0x710/0x710 [ 377.694812] __should_failslab+0x124/0x180 [ 377.699060] should_failslab+0x9/0x14 [ 377.702872] kmem_cache_alloc_trace+0x2cb/0x780 [ 377.707557] ? snd_pcm_hw_param_first+0x2eb/0x680 [ 377.712414] snd_pcm_hw_param_near.constprop.35+0x15c/0xb10 [ 377.718138] ? _snd_pcm_hw_param_min+0x570/0x570 [ 377.722904] ? snd_pcm_hw_param_max+0x730/0x730 [ 377.727580] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 377.732778] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 377.738323] ? snd_pcm_plug_slave_size+0x1d0/0x350 [ 377.743264] snd_pcm_oss_change_params_locked+0x1bc6/0x3c70 [ 377.748998] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 377.754887] ? zap_class+0x720/0x720 [ 377.758613] ? perf_event_update_userpage+0xd10/0xd10 [ 377.763795] ? graph_lock+0x170/0x170 [ 377.767591] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 377.773119] ? __perf_event_task_sched_in+0x247/0xb80 [ 377.778298] ? perf_trace_lock+0xd6/0x900 [ 377.782447] ? find_held_lock+0x36/0x1c0 [ 377.786508] ? lock_downgrade+0x8e0/0x8e0 [ 377.790656] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 377.795835] snd_pcm_oss_write+0x516/0xa20 [ 377.800060] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 377.805073] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 377.809905] ? preempt_notifier_register+0x1e0/0x1e0 [ 377.815004] __vfs_write+0x10b/0x960 [ 377.818711] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 377.823539] ? kernel_read+0x120/0x120 [ 377.827417] ? __schedule+0x809/0x1e30 [ 377.831293] ? default_file_splice_read+0x888/0xad0 [ 377.836315] ? check_same_owner+0x320/0x320 [ 377.840627] ? rcu_note_context_switch+0x710/0x710 [ 377.845549] __kernel_write+0x10c/0x380 [ 377.849514] write_pipe_buf+0x175/0x220 [ 377.853478] ? default_file_splice_read+0xad0/0xad0 [ 377.858480] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 377.864010] ? splice_from_pipe_next.part.8+0x296/0x340 [ 377.869374] __splice_from_pipe+0x38e/0x7c0 [ 377.873683] ? default_file_splice_read+0xad0/0xad0 [ 377.878698] splice_from_pipe+0x1e2/0x320 [ 377.882834] ? default_file_splice_read+0xad0/0xad0 [ 377.887837] ? splice_shrink_spd+0xd0/0xd0 [ 377.892076] default_file_splice_write+0x3c/0x90 [ 377.896817] ? generic_splice_sendpage+0x50/0x50 [ 377.901565] direct_splice_actor+0x128/0x190 [ 377.905984] splice_direct_to_actor+0x310/0x8d0 [ 377.910644] ? pipe_to_sendpage+0x3f0/0x3f0 [ 377.914957] ? do_splice_to+0x190/0x190 [ 377.918922] ? rw_verify_area+0x118/0x360 [ 377.923063] do_splice_direct+0x2cc/0x400 [ 377.927215] ? splice_direct_to_actor+0x8d0/0x8d0 [ 377.932053] ? rw_verify_area+0x118/0x360 [ 377.936191] do_sendfile+0x60f/0xe00 [ 377.939901] ? do_compat_pwritev64+0x1b0/0x1b0 [ 377.944471] ? __might_sleep+0x95/0x190 [ 377.948451] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 377.953987] ? _copy_from_user+0xdf/0x150 [ 377.958130] __x64_sys_sendfile64+0x155/0x240 [ 377.962613] ? __ia32_sys_sendfile+0x290/0x290 [ 377.967186] ? do_syscall_64+0x92/0x800 [ 377.971154] do_syscall_64+0x1b1/0x800 [ 377.975033] ? finish_task_switch+0x1ca/0x810 [ 377.979518] ? syscall_return_slowpath+0x5c0/0x5c0 [ 377.984438] ? syscall_return_slowpath+0x30f/0x5c0 [ 377.989361] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 377.994717] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 377.999555] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 378.004730] RIP: 0033:0x455979 [ 378.007907] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 378.015606] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 2018/04/29 21:25:39 executing program 6: r0 = socket(0x6, 0x0, 0x0) write(r0, &(0x7f0000000000)="24000000200025eff26b000420edfc00020b000d9410b5004f06b7b408000100000000b7", 0x24) 2018/04/29 21:25:39 executing program 3: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000507000)=0xca55) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000003d000)={0xffffffffffffffff}) read(r1, &(0x7f0000039fff)=""/1, 0x1) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_wait(r2, &(0x7f0000bf2f88)=[{}], 0x1, 0x8001) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000b87ff4)={0x4}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000040)=0x800, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x80000001, 0x900000000000, r0, 0x2, r5, 0x7, 0x4, 0x6}) 2018/04/29 21:25:39 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000017000)={0xa}, 0x1c) syz_emit_ethernet(0xcd, &(0x7f0000000080)={@empty, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@llc_tr={0x11, {@llc={0x46, 0xff, "b0", "dc4edddb9bf47e8e818ddf27a6b5910cb7efae47cf51c9543a8b7a024d222c394479ef02706882f524c68d7ed15195a57aace4716d2b413be415b857ac41c17c6c2c400cb5835da27e738ef83a90e3f0eeba852f33d2f361871d7608ef7f07217d8879bcd10c77d2a1f94c18e3083caa7cf9de3b5e6bbd6952e011af8e5da443f4ec8867a3be9c1cfc52b4ae908a8c5996e5dfad7738b03b92534cfb2064fd000339cbde0082dd6240fe91fa72e6ca3d5cde3e3b7253b2925f5c9dfa"}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000180)) 2018/04/29 21:25:39 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{}, {{}, 0x6, 0x2, 0x1ff}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0x60) [ 378.022860] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 378.030115] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 378.037371] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 378.044625] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000024 2018/04/29 21:25:39 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000140)={{0x9, 0x1, 0x9, 0x8, "f017c6548252b8a727fee98e47dbfdb2e1cf385872e9d1d1b47a76ac53da45e2511aa9ba121bb75ca8525089", 0x8}, 0x0, [0x27200, 0xff, 0x8, 0x6490, 0x4, 0x101, 0x7, 0x2, 0x3f, 0x2, 0x1, 0x2, 0x60, 0x2, 0x731, 0x9, 0x3f, 0x2, 0xb4, 0x3, 0xc80, 0x80, 0x854, 0x8000, 0x5, 0x8000, 0x1, 0x2b9c0ee0, 0xfffffffffffffffe, 0x401, 0xbe, 0x8, 0x0, 0x80000001, 0x6, 0x4119b504, 0x6, 0x2, 0x2, 0x6, 0x7, 0xfc6, 0x9, 0x6, 0x2, 0x6, 0x7, 0x101, 0xff, 0x3f, 0x401, 0x0, 0x0, 0x1, 0x4, 0xbb88, 0x0, 0xa7b7, 0x9, 0x1, 0x7, 0x7, 0x1ff, 0x1, 0x10001, 0x8, 0x401, 0x9, 0x0, 0xffffffffffff8001, 0x40, 0x2, 0xc74, 0x85, 0x7, 0x2, 0xee, 0x0, 0x100, 0xffffffff97249d27, 0x8, 0x7, 0xff, 0x801, 0x2, 0x3, 0x2, 0x4, 0x8, 0x6, 0x1, 0x800, 0x5, 0x7fff, 0x2e8, 0x1, 0x7fffffff, 0xfff, 0x2, 0x6, 0x40, 0x6, 0x9, 0x5, 0x0, 0xe0, 0xa, 0xf18, 0x80000001, 0xfffffffffffff8cc, 0x2, 0xffff, 0xe442, 0xfffffffffffffe01, 0x6, 0x100000001, 0x1, 0x6, 0x6, 0x0, 0x3, 0xffff, 0xc5, 0x6, 0x7ff, 0x10000, 0x100000000, 0x1]}) syz_open_dev$midi(&(0x7f0000000640)='/dev/midi#\x00', 0x297, 0x186c0) r1 = socket$inet6(0xa, 0x6, 0x2) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, 0x1c) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000680)) connect$inet6(r1, &(0x7f0000000040)={0xa}, 0x1c) pipe2(&(0x7f00000006c0), 0x80800) getsockname(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000100)=0x3a) sendmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x91fd64c6d72236e2, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f0000000000)=ANY=[], 0x1c, &(0x7f0000000680), 0x0, &(0x7f0000002000), 0x2ab}}], 0x400000000000144, 0x0) 2018/04/29 21:25:39 executing program 5: io_setup(0x5e57, &(0x7f0000000080)=0x0) io_getevents(r0, 0x0, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000140)={0x0, 0x1c9c380}) r1 = socket(0x40000000015, 0x5, 0xfffffffffffffffd) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x2710}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x3f, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)={0x4}) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) 2018/04/29 21:25:39 executing program 7 (fault-call:2 fault-nth:37): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:39 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0x48) [ 378.351492] FAULT_INJECTION: forcing a failure. [ 378.351492] name failslab, interval 1, probability 0, space 0, times 0 [ 378.362848] CPU: 0 PID: 26630 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 378.370121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.379458] Call Trace: [ 378.382036] dump_stack+0x1b9/0x294 [ 378.385652] ? dump_stack_print_info.cold.2+0x52/0x52 [ 378.390828] ? is_bpf_text_address+0xd7/0x170 [ 378.395313] should_fail.cold.4+0xa/0x1a [ 378.399360] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 378.404450] ? graph_lock+0x170/0x170 [ 378.408239] ? find_held_lock+0x36/0x1c0 [ 378.412295] ? __lock_is_held+0xb5/0x140 [ 378.416341] ? usb_udc_init+0x8e/0x95 [ 378.420140] ? check_same_owner+0x320/0x320 [ 378.424451] ? rcu_note_context_switch+0x710/0x710 [ 378.429362] ? perf_trace_lock+0xd6/0x900 [ 378.433499] __should_failslab+0x124/0x180 [ 378.437737] should_failslab+0x9/0x14 [ 378.441525] __kmalloc+0x2c8/0x760 [ 378.445050] ? __lock_acquire+0x7f5/0x5140 [ 378.449277] ? constrain_params_by_rules+0x141/0x1360 [ 378.454451] ? graph_lock+0x170/0x170 [ 378.458245] constrain_params_by_rules+0x141/0x1360 [ 378.463259] ? find_held_lock+0x36/0x1c0 [ 378.467306] ? snd_pcm_mmap+0x580/0x580 [ 378.471275] ? lock_downgrade+0x8e0/0x8e0 [ 378.475414] ? rcu_is_watching+0x85/0x140 [ 378.479548] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 378.484721] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 378.489899] ? is_bpf_text_address+0xd7/0x170 [ 378.494380] ? kernel_text_address+0x79/0xf0 [ 378.498773] ? __unwind_start+0x166/0x330 [ 378.502904] ? __kernel_text_address+0xd/0x40 [ 378.507384] ? unwind_get_return_address+0x61/0xa0 [ 378.512299] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 378.517818] ? snd_interval_refine+0x428/0x700 [ 378.522384] snd_pcm_hw_refine+0x8e9/0x1180 [ 378.526697] ? snd_pcm_mmap_status_fault+0x3e0/0x3e0 [ 378.531795] ? snd_pcm_oss_change_params_locked+0x1bc6/0x3c70 [ 378.537672] ? snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 378.543026] ? snd_pcm_oss_write+0x516/0xa20 [ 378.547427] ? __vfs_write+0x10b/0x960 [ 378.551295] ? __kernel_write+0x10c/0x380 [ 378.555426] ? write_pipe_buf+0x175/0x220 [ 378.559560] ? __splice_from_pipe+0x38e/0x7c0 [ 378.564038] ? splice_from_pipe+0x1e2/0x320 [ 378.568344] ? default_file_splice_write+0x3c/0x90 [ 378.573273] ? direct_splice_actor+0x128/0x190 [ 378.577838] ? splice_direct_to_actor+0x310/0x8d0 [ 378.582661] ? do_splice_direct+0x2cc/0x400 [ 378.586967] ? do_sendfile+0x60f/0xe00 [ 378.590838] ? __x64_sys_sendfile64+0x155/0x240 [ 378.595493] ? do_syscall_64+0x1b1/0x800 [ 378.599539] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 378.604886] ? print_usage_bug+0xc0/0xc0 [ 378.608935] ? kasan_check_write+0x14/0x20 [ 378.613153] ? do_raw_spin_lock+0xc1/0x200 [ 378.617374] ? trace_hardirqs_off+0xd/0x10 [ 378.621593] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 378.626681] ? debug_check_no_obj_freed+0x2ff/0x584 [ 378.631689] ? mark_held_locks+0xc9/0x160 [ 378.635818] ? quarantine_put+0xeb/0x190 [ 378.639877] snd_pcm_hw_param_last+0x323/0x660 [ 378.644447] snd_pcm_hw_param_near.constprop.35+0x831/0xb10 [ 378.650145] ? _snd_pcm_hw_param_min+0x570/0x570 [ 378.654885] ? snd_pcm_hw_param_max+0x730/0x730 [ 378.659539] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 378.664712] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 378.670234] ? snd_pcm_plug_slave_size+0x1d0/0x350 [ 378.675154] snd_pcm_oss_change_params_locked+0x1bc6/0x3c70 [ 378.680861] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 378.686728] ? is_bpf_text_address+0xd7/0x170 [ 378.691207] ? kernel_text_address+0x79/0xf0 [ 378.695600] ? __unwind_start+0x166/0x330 [ 378.699731] ? __kernel_text_address+0xd/0x40 [ 378.704214] ? unwind_get_return_address+0x61/0xa0 [ 378.709133] ? __save_stack_trace+0x7e/0xd0 [ 378.713451] ? __put_page+0x130/0x180 [ 378.717240] ? __put_compound_page+0xe0/0xe0 [ 378.721634] ? default_file_splice_read+0x874/0xad0 [ 378.726636] ? splice_direct_to_actor+0x268/0x8d0 [ 378.731462] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 378.736811] ? generic_pipe_buf_release+0x1dc/0x290 [ 378.741812] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 378.746989] snd_pcm_oss_write+0x516/0xa20 [ 378.751210] ? debug_check_no_obj_freed+0x2ff/0x584 [ 378.756218] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 378.761494] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 378.766320] ? trace_hardirqs_off+0xd/0x10 [ 378.770539] ? quarantine_put+0xeb/0x190 [ 378.774587] __vfs_write+0x10b/0x960 [ 378.778285] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 378.783112] ? kernel_read+0x120/0x120 [ 378.786985] ? default_file_splice_read+0x888/0xad0 [ 378.791989] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 378.797348] ? check_same_owner+0x320/0x320 [ 378.801657] ? rcu_note_context_switch+0x710/0x710 [ 378.806575] __kernel_write+0x10c/0x380 [ 378.810535] write_pipe_buf+0x175/0x220 [ 378.814497] ? default_file_splice_read+0xad0/0xad0 [ 378.819498] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 378.825025] ? splice_from_pipe_next.part.8+0x296/0x340 [ 378.830377] __splice_from_pipe+0x38e/0x7c0 [ 378.834685] ? default_file_splice_read+0xad0/0xad0 [ 378.839690] splice_from_pipe+0x1e2/0x320 [ 378.843822] ? default_file_splice_read+0xad0/0xad0 [ 378.848821] ? splice_shrink_spd+0xd0/0xd0 [ 378.853051] default_file_splice_write+0x3c/0x90 [ 378.857793] ? generic_splice_sendpage+0x50/0x50 [ 378.862534] direct_splice_actor+0x128/0x190 [ 378.866928] splice_direct_to_actor+0x310/0x8d0 [ 378.871584] ? pipe_to_sendpage+0x3f0/0x3f0 [ 378.875893] ? do_splice_to+0x190/0x190 [ 378.879851] ? rw_verify_area+0x118/0x360 [ 378.883988] do_splice_direct+0x2cc/0x400 [ 378.888126] ? splice_direct_to_actor+0x8d0/0x8d0 [ 378.892954] ? rw_verify_area+0x118/0x360 [ 378.897089] do_sendfile+0x60f/0xe00 [ 378.900791] ? do_compat_pwritev64+0x1b0/0x1b0 [ 378.905355] ? __might_sleep+0x95/0x190 [ 378.909318] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 378.914839] ? _copy_from_user+0xdf/0x150 [ 378.918984] __x64_sys_sendfile64+0x155/0x240 [ 378.923464] ? __ia32_sys_sendfile+0x290/0x290 [ 378.928038] ? do_syscall_64+0x92/0x800 [ 378.932003] do_syscall_64+0x1b1/0x800 [ 378.935878] ? finish_task_switch+0x1ca/0x810 [ 378.940358] ? syscall_return_slowpath+0x5c0/0x5c0 [ 378.945271] ? syscall_return_slowpath+0x30f/0x5c0 [ 378.950190] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 378.955544] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 378.960374] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 378.965543] RIP: 0033:0x455979 [ 378.968714] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 378.976407] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 378.983661] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 378.990914] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 378.998167] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 379.005419] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000025 2018/04/29 21:25:40 executing program 6: r0 = gettid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="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"]) exit(0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) ioprio_set$pid(0x2, r0, 0x0) setrlimit(0x0, &(0x7f00000001c0)={0x209, 0x9a9}) 2018/04/29 21:25:40 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @remote, 0x0}, &(0x7f0000000040)=0xc) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x2, {0x2, 0x4e22, @multicast2=0xe0000002}, 'bcsf0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', r1}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe0002", 0x21) 2018/04/29 21:25:40 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0x48) 2018/04/29 21:25:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000080)=0x20) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000001800)='/dev/audio\x00', 0x9fc385083d8b645c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x8, &(0x7f0000000240)=[{0x3, 0xae2a, 0x2, 0x6}, {0x7a7, 0x882d, 0x3, 0x7b}, {0xce, 0x9, 0x101, 0x99}, {0x2, 0x6, 0x7c45, 0x6}, {0x7, 0xffffffffffffffe0, 0xb2ea, 0x100}, {0x5ab, 0x4, 0x400, 0x80}, {0x9, 0x8001, 0x3, 0x8}, {0x1, 0x401, 0x5, 0x8}]}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r3 = getpgid(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@loopback={0x0, 0x1}, 0x800, 0x1, 0xff, 0x0, 0x6, 0xcb, 0x80000000}, 0x20) rt_tgsigqueueinfo(r2, r3, 0x36, &(0x7f0000000180)={0x1f, 0x200, 0x6, 0x8}) getpeername$netrom(r1, &(0x7f0000001840), &(0x7f0000001880)=0x10) 2018/04/29 21:25:40 executing program 4: socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f000020cffc), 0x225) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x40, &(0x7f0000000040)=0x1) 2018/04/29 21:25:40 executing program 1: symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') unshare(0x8000400) r0 = timerfd_create(0x0, 0x0) r1 = dup2(r0, r0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000140)=""/233) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000080)) timerfd_gettime(r0, &(0x7f0000000000)) 2018/04/29 21:25:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000180)={{0x0, 0x69dc}, 'port1\x00'}) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req3={0x3, 0x5, 0x5, 0x20, 0x3ff, 0x700000000000, 0x1}, 0x9e428f35648e3a4) socket(0x10, 0x0, 0xfff) 2018/04/29 21:25:40 executing program 7 (fault-call:2 fault-nth:38): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) [ 379.396249] FAULT_INJECTION: forcing a failure. [ 379.396249] name failslab, interval 1, probability 0, space 0, times 0 [ 379.407597] CPU: 1 PID: 26648 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 379.414878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.424233] Call Trace: [ 379.426832] dump_stack+0x1b9/0x294 [ 379.430476] ? dump_stack_print_info.cold.2+0x52/0x52 [ 379.435683] ? lock_downgrade+0x8e0/0x8e0 [ 379.439848] should_fail.cold.4+0xa/0x1a [ 379.443923] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 379.449042] ? graph_lock+0x170/0x170 [ 379.452852] ? kernel_text_address+0x79/0xf0 [ 379.457266] ? __unwind_start+0x166/0x330 [ 379.461424] ? find_held_lock+0x36/0x1c0 [ 379.465496] ? __lock_is_held+0xb5/0x140 [ 379.469582] ? check_same_owner+0x320/0x320 [ 379.473916] ? snd_pcm_hw_param_last+0x323/0x660 [ 379.478687] ? snd_pcm_hw_param_near.constprop.35+0x831/0xb10 [ 379.484581] ? snd_pcm_oss_change_params_locked+0x1bc6/0x3c70 [ 379.490481] ? rcu_note_context_switch+0x710/0x710 [ 379.495415] ? __kernel_write+0x10c/0x380 [ 379.499575] ? write_pipe_buf+0x175/0x220 [ 379.503735] ? __splice_from_pipe+0x38e/0x7c0 [ 379.508239] __should_failslab+0x124/0x180 [ 379.512484] should_failslab+0x9/0x14 [ 379.516293] __kmalloc+0x2c8/0x760 [ 379.519841] ? do_raw_spin_lock+0xc1/0x200 [ 379.524090] ? trace_hardirqs_off+0xd/0x10 [ 379.528345] ? constrain_params_by_rules+0x141/0x1360 [ 379.533550] constrain_params_by_rules+0x141/0x1360 [ 379.538570] ? __lock_acquire+0x7f5/0x5140 [ 379.542799] ? quarantine_put+0xeb/0x190 [ 379.546853] ? kfree+0x111/0x260 [ 379.550211] ? snd_pcm_mmap+0x580/0x580 [ 379.554182] ? debug_check_no_locks_freed+0x310/0x310 [ 379.559360] ? constrain_params_by_rules+0xa3d/0x1360 [ 379.564546] ? snd_pcm_mmap+0x580/0x580 [ 379.568506] ? perf_trace_lock+0xd6/0x900 [ 379.572642] ? lock_downgrade+0x8e0/0x8e0 [ 379.576780] ? zap_class+0x720/0x720 [ 379.580481] ? rcu_is_watching+0x85/0x140 [ 379.584613] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 379.589612] ? snd_interval_refine+0x428/0x700 [ 379.594469] snd_pcm_hw_refine+0x8e9/0x1180 [ 379.598781] ? snd_pcm_mmap_status_fault+0x3e0/0x3e0 [ 379.603871] ? find_held_lock+0x36/0x1c0 [ 379.607921] ? print_usage_bug+0xc0/0xc0 [ 379.611969] ? lock_downgrade+0x8e0/0x8e0 [ 379.616105] ? lock_release+0xa10/0xa10 [ 379.620067] ? kasan_check_read+0x11/0x20 [ 379.624203] ? do_raw_spin_unlock+0x9e/0x2e0 [ 379.628597] ? mark_held_locks+0xc9/0x160 [ 379.632734] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 379.637739] snd_pcm_hw_params+0x2ba/0x1f20 [ 379.642045] ? trace_hardirqs_off+0xd/0x10 [ 379.646263] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 379.651353] ? debug_check_no_obj_freed+0x2ff/0x584 [ 379.656353] ? snd_pcm_hw_refine+0x1180/0x1180 [ 379.660929] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 379.665932] ? snd_pcm_hw_param_value+0x112/0x550 [ 379.670764] ? snd_pcm_hw_param_last+0x300/0x660 [ 379.675508] ? snd_pcm_hw_param_near.constprop.35+0x6e9/0xb10 [ 379.681387] ? _snd_pcm_hw_param_min+0x570/0x570 [ 379.686128] ? snd_pcm_hw_param_max+0x730/0x730 [ 379.690785] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 379.695963] snd_pcm_kernel_ioctl+0x6c/0x200 [ 379.700356] snd_pcm_oss_change_params_locked+0x1bfd/0x3c70 [ 379.706063] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 379.711931] ? zap_class+0x720/0x720 [ 379.715638] ? perf_event_update_userpage+0xd10/0xd10 [ 379.720815] ? graph_lock+0x170/0x170 [ 379.724602] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.730122] ? __perf_event_task_sched_in+0x247/0xb80 [ 379.735304] ? find_held_lock+0x36/0x1c0 [ 379.739354] ? lock_downgrade+0x8e0/0x8e0 [ 379.743495] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 379.748674] snd_pcm_oss_write+0x516/0xa20 [ 379.752896] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 379.757903] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 379.762732] ? preempt_notifier_register+0x1e0/0x1e0 [ 379.767822] __vfs_write+0x10b/0x960 [ 379.771520] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 379.776346] ? kernel_read+0x120/0x120 [ 379.780218] ? __schedule+0x809/0x1e30 [ 379.784093] ? default_file_splice_read+0x888/0xad0 [ 379.789104] ? check_same_owner+0x320/0x320 [ 379.793408] ? kasan_check_read+0x11/0x20 [ 379.797542] ? rcu_note_context_switch+0x710/0x710 [ 379.802459] __kernel_write+0x10c/0x380 [ 379.806422] write_pipe_buf+0x175/0x220 [ 379.810381] ? default_file_splice_read+0xad0/0xad0 [ 379.815381] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.820901] ? splice_from_pipe_next.part.8+0x296/0x340 [ 379.826257] __splice_from_pipe+0x38e/0x7c0 [ 379.830564] ? default_file_splice_read+0xad0/0xad0 [ 379.835569] splice_from_pipe+0x1e2/0x320 [ 379.839702] ? default_file_splice_read+0xad0/0xad0 [ 379.844704] ? splice_shrink_spd+0xd0/0xd0 [ 379.848935] default_file_splice_write+0x3c/0x90 [ 379.853676] ? generic_splice_sendpage+0x50/0x50 [ 379.858417] direct_splice_actor+0x128/0x190 [ 379.862812] splice_direct_to_actor+0x310/0x8d0 [ 379.867466] ? pipe_to_sendpage+0x3f0/0x3f0 [ 379.871774] ? do_splice_to+0x190/0x190 [ 379.875737] ? rw_verify_area+0x118/0x360 [ 379.879874] do_splice_direct+0x2cc/0x400 [ 379.884018] ? splice_direct_to_actor+0x8d0/0x8d0 [ 379.888852] ? rw_verify_area+0x118/0x360 [ 379.892988] do_sendfile+0x60f/0xe00 [ 379.896695] ? do_compat_pwritev64+0x1b0/0x1b0 [ 379.901261] ? __might_sleep+0x95/0x190 [ 379.905225] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 379.910746] ? _copy_from_user+0xdf/0x150 [ 379.914880] __x64_sys_sendfile64+0x155/0x240 [ 379.919359] ? __ia32_sys_sendfile+0x290/0x290 [ 379.923931] ? do_syscall_64+0x92/0x800 [ 379.927892] do_syscall_64+0x1b1/0x800 [ 379.931762] ? finish_task_switch+0x1ca/0x810 [ 379.936241] ? syscall_return_slowpath+0x5c0/0x5c0 [ 379.941157] ? syscall_return_slowpath+0x30f/0x5c0 [ 379.946076] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 379.951430] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 379.956262] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 379.961437] RIP: 0033:0x455979 [ 379.964608] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 379.972306] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 379.979557] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 379.986810] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/29 21:25:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x8) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000180)={0x8, 0x7f, 0x8b, 0x1}) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast1, @in=@broadcast}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000340)={0x2200000000000000, 0x0, 0x10001, 0x2, 0x11}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x9}, 0x10) r5 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r0, r4}) shutdown(r0, 0x0) 2018/04/29 21:25:40 executing program 0: gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) setpriority(0x0, r0, 0x8000) r1 = syz_open_procfs(r0, &(0x7f0000000080)='fdinfo\x00') r2 = syz_open_procfs(r0, &(0x7f0000000240)="73797363616d6c00116459660efa01267e6862b901777c4860efe143a61ee7d9f4929951c922ada11c1433b0ac0778d28bdbda06385274d7454b175d9f0fc2a5299e92bae627e0711ae31fcb9c372401717dcc8dd0329c47bbfa8ce99ca79f25c8bb910bc277321dc01a75ba7114c4305503bb35978c5d9e3da974d0439418032313ca952ebfa09f6a8faebefdaa91d1c8893a07744433c3fda6c8113ec1052b676cf4a8ceb340dfb4efc3356accc3530c33d3eadd3e2252214177eb428ede46098e9a218b91b7") bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0xffffffffffffffa4) sendfile(r1, r2, &(0x7f0000000000)=0x4, 0x3) 2018/04/29 21:25:41 executing program 1: socketpair(0x5, 0x805, 0x10001, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[0x3, 0x2, 0x4, 0xfffffffffffffffe]}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) socket(0x0, 0x5, 0x40000) fchown(r1, 0x0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000100)) [ 379.994064] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 380.001315] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000026 2018/04/29 21:25:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x14}}, @ipv4={[], [0xff, 0xff]}, @remote={0xfe, 0x80, [], 0xbb}, 0xc71, 0xfffffffffb706cb4, 0x3, 0x400, 0x0, 0xa40000, r1}) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffffffffffffffd, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x1000000003}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ppp\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x6, 0xa, 0x7}) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) r3 = request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)='systemwlan1@GPLem1(+%^]]^@system}wlan1*\x00', 0xfffffffffffffff8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000500)={0x0, 0xfffffffffffffffc}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000580)={r4, 0x8}, 0x8) r5 = add_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000002c0)="dd422fa04e396109f7c6d08b194cf1fb2a575095fb8668b7003028e9f5196dfd3e12bca668fa9e4a8308bdfc5c98534d4bd236ef9e3fcf83b7fdaebf1b94877e2a6fa88f05d632eee3441e90c7", 0x4d, 0xfffffffffffffff9) keyctl$search(0xa, r3, &(0x7f0000000180)='encrypted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, r5) 2018/04/29 21:25:41 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000000)=0x1, 0x4) preadv(r0, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x4000000000) 2018/04/29 21:25:41 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{}, {{0x77359400}, 0x8, 0x80, 0x2}, {{}, 0x4, 0xe08, 0x9}], 0x48) 2018/04/29 21:25:41 executing program 3: r0 = socket(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x100000002}, 0x1c) sendto$inet(r0, &(0x7f0000000080), 0x0, 0xfffffffffffffffc, &(0x7f000055fff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/04/29 21:25:41 executing program 7 (fault-call:2 fault-nth:39): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) [ 380.218687] FAULT_INJECTION: forcing a failure. [ 380.218687] name failslab, interval 1, probability 0, space 0, times 0 [ 380.230052] CPU: 1 PID: 26703 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 380.237330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.246683] Call Trace: [ 380.249281] dump_stack+0x1b9/0x294 [ 380.252929] ? dump_stack_print_info.cold.2+0x52/0x52 [ 380.258129] ? perf_trace_lock_acquire+0xe3/0x980 [ 380.262992] should_fail.cold.4+0xa/0x1a [ 380.267067] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 380.272186] ? __save_stack_trace+0x7e/0xd0 [ 380.276519] ? graph_lock+0x170/0x170 [ 380.280322] ? find_held_lock+0x36/0x1c0 [ 380.284378] ? __lock_is_held+0xb5/0x140 [ 380.288443] ? check_same_owner+0x320/0x320 [ 380.292756] ? do_raw_spin_lock+0xc1/0x200 [ 380.296981] ? rcu_note_context_switch+0x710/0x710 [ 380.301901] ? trace_hardirqs_off+0xd/0x10 [ 380.306123] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 380.311221] __should_failslab+0x124/0x180 [ 380.315450] should_failslab+0x9/0x14 [ 380.319239] __kmalloc+0x2c8/0x760 [ 380.322770] ? mark_held_locks+0xc9/0x160 [ 380.326907] ? quarantine_put+0xeb/0x190 [ 380.330958] ? constrain_params_by_rules+0x141/0x1360 [ 380.336142] constrain_params_by_rules+0x141/0x1360 [ 380.341146] ? trace_hardirqs_on+0xd/0x10 [ 380.345293] ? snd_pcm_mmap+0x580/0x580 [ 380.349262] ? snd_pcm_mmap+0x580/0x580 [ 380.353230] ? debug_check_no_locks_freed+0x310/0x310 [ 380.358408] ? constrain_params_by_rules+0xa3d/0x1360 [ 380.363603] ? snd_pcm_mmap+0x580/0x580 [ 380.367569] ? perf_trace_lock+0xd6/0x900 [ 380.371706] ? perf_trace_lock_acquire+0xe3/0x980 [ 380.376559] ? lock_downgrade+0x8e0/0x8e0 [ 380.380699] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 380.386223] ? snd_interval_refine+0x428/0x700 [ 380.390799] snd_pcm_hw_refine+0x8e9/0x1180 [ 380.395108] ? snd_interval_refine+0x428/0x700 [ 380.399685] ? snd_pcm_mmap_status_fault+0x3e0/0x3e0 [ 380.404783] ? snd_pcm_mmap_status_fault+0x3e0/0x3e0 [ 380.409876] ? find_held_lock+0x36/0x1c0 [ 380.413927] ? print_usage_bug+0xc0/0xc0 [ 380.417994] ? graph_lock+0x170/0x170 [ 380.421783] ? lock_downgrade+0x8e0/0x8e0 [ 380.425925] ? lock_release+0xa10/0xa10 [ 380.429906] ? kasan_check_read+0x11/0x20 [ 380.434054] ? __lock_is_held+0xb5/0x140 [ 380.438110] snd_pcm_hw_param_first+0x30e/0x680 [ 380.442773] snd_pcm_hw_params+0x35a/0x1f20 [ 380.447082] ? trace_hardirqs_off+0xd/0x10 [ 380.451305] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 380.456402] ? snd_pcm_hw_refine+0x1180/0x1180 [ 380.460978] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 380.465982] ? snd_pcm_hw_param_value+0x112/0x550 [ 380.470819] ? snd_pcm_hw_param_last+0x300/0x660 [ 380.475569] ? snd_pcm_hw_param_near.constprop.35+0x6e9/0xb10 [ 380.481452] ? _snd_pcm_hw_param_min+0x570/0x570 [ 380.486197] ? snd_pcm_hw_param_max+0x730/0x730 [ 380.490858] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 380.496043] snd_pcm_kernel_ioctl+0x6c/0x200 [ 380.500442] snd_pcm_oss_change_params_locked+0x1bfd/0x3c70 [ 380.506155] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 380.512035] ? is_bpf_text_address+0xd7/0x170 [ 380.516524] ? kernel_text_address+0x79/0xf0 [ 380.520919] ? __unwind_start+0x166/0x330 [ 380.525057] ? __kernel_text_address+0xd/0x40 [ 380.529541] ? unwind_get_return_address+0x61/0xa0 [ 380.534460] ? __save_stack_trace+0x7e/0xd0 [ 380.538788] ? __put_page+0x130/0x180 [ 380.542577] ? __put_compound_page+0xe0/0xe0 [ 380.546979] ? default_file_splice_read+0x874/0xad0 [ 380.551983] ? splice_direct_to_actor+0x268/0x8d0 [ 380.556818] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.562174] ? generic_pipe_buf_release+0x1dc/0x290 [ 380.567197] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 380.572377] snd_pcm_oss_write+0x516/0xa20 [ 380.576605] ? debug_check_no_obj_freed+0x2ff/0x584 [ 380.581610] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 380.586616] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 380.591449] ? trace_hardirqs_off+0xd/0x10 [ 380.595669] ? quarantine_put+0xeb/0x190 [ 380.599725] __vfs_write+0x10b/0x960 [ 380.603430] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 380.608260] ? kernel_read+0x120/0x120 [ 380.612139] ? default_file_splice_read+0x888/0xad0 [ 380.617140] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.622503] ? check_same_owner+0x320/0x320 [ 380.626818] ? rcu_note_context_switch+0x710/0x710 [ 380.631740] __kernel_write+0x10c/0x380 [ 380.635709] write_pipe_buf+0x175/0x220 [ 380.639676] ? default_file_splice_read+0xad0/0xad0 [ 380.644679] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.650217] ? splice_from_pipe_next.part.8+0x296/0x340 [ 380.655578] __splice_from_pipe+0x38e/0x7c0 [ 380.659891] ? default_file_splice_read+0xad0/0xad0 [ 380.664903] splice_from_pipe+0x1e2/0x320 [ 380.669044] ? default_file_splice_read+0xad0/0xad0 [ 380.674051] ? splice_shrink_spd+0xd0/0xd0 [ 380.678287] default_file_splice_write+0x3c/0x90 [ 380.683039] ? generic_splice_sendpage+0x50/0x50 [ 380.687788] direct_splice_actor+0x128/0x190 [ 380.692190] splice_direct_to_actor+0x310/0x8d0 [ 380.696851] ? pipe_to_sendpage+0x3f0/0x3f0 [ 380.701165] ? do_splice_to+0x190/0x190 [ 380.705130] ? rw_verify_area+0x118/0x360 [ 380.709269] do_splice_direct+0x2cc/0x400 [ 380.713409] ? splice_direct_to_actor+0x8d0/0x8d0 [ 380.718245] ? rw_verify_area+0x118/0x360 [ 380.722383] do_sendfile+0x60f/0xe00 [ 380.726098] ? do_compat_pwritev64+0x1b0/0x1b0 [ 380.730671] ? __might_sleep+0x95/0x190 [ 380.734641] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 380.740165] ? _copy_from_user+0xdf/0x150 [ 380.744307] __x64_sys_sendfile64+0x155/0x240 [ 380.748790] ? __ia32_sys_sendfile+0x290/0x290 [ 380.753364] ? do_syscall_64+0x92/0x800 [ 380.757349] do_syscall_64+0x1b1/0x800 [ 380.761230] ? finish_task_switch+0x1ca/0x810 [ 380.765715] ? syscall_return_slowpath+0x5c0/0x5c0 [ 380.770633] ? syscall_return_slowpath+0x30f/0x5c0 [ 380.775554] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 380.780914] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 380.785752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.790929] RIP: 0033:0x455979 [ 380.794107] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 380.801805] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 380.809064] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 380.816317] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 380.823573] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 380.830828] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000027 2018/04/29 21:25:42 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x8, 0x69a6, 0x3, 0x11a4, 0x0, 0x0, 0x9000, 0x4, 0x7, 0x0, 0x10001, 0x4000000, 0x1, 0x80, 0x61d, 0x3f, 0xffffffff, 0x2ee, 0x3ff, 0x5e3, 0x5, 0x0, 0x1, 0x4, 0xbbe, 0x7, 0x7, 0x2c6, 0x778e, 0x6, 0x709f, 0x1ff, 0x1, 0x6a4, 0xffffffff, 0x7, 0x0, 0x3ff, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x20, 0x32f5, 0x0, 0x0, 0x6, 0x100000001, 0x7ff}, r1, 0x3, r0, 0x1) r2 = syz_open_procfs(r1, &(0x7f0000000780)='stat\x00') readv(r2, &(0x7f0000000f80)=[{&(0x7f0000000ec0)=""/161, 0xa1}], 0x1) syz_open_procfs(0x0, &(0x7f0000272000)='net/mcfilter\x00') 2018/04/29 21:25:42 executing program 4: clone(0x0, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000003ffc), &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x24e000)=nil, 0x24e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)) r0 = request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000002c0)='qnodev\x00', 0x0) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)="15b36de88bf4", 0x6, r0) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) recvmmsg(r1, &(0x7f00000022c0)=[{{&(0x7f0000000340)=@un=@abs, 0x80, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/214, 0xd6}, {&(0x7f00000006c0)=""/187, 0xbb}, {&(0x7f0000000780)=""/32, 0x20}, {&(0x7f00000007c0)=""/130, 0x82}, {&(0x7f0000000880)=""/151, 0x97}], 0x7, &(0x7f00000009c0)=""/173, 0xad}, 0x4}, {{&(0x7f0000000a80)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000b00)=""/123, 0x7b}, {&(0x7f0000000b80)=""/164, 0xa4}, {&(0x7f0000000c40)=""/185, 0xb9}], 0x3, &(0x7f0000000d40)=""/4096, 0x1000, 0x949}, 0x6}, {{&(0x7f0000001d40)=@vsock={0x0, 0x0, 0x0, @host}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001dc0)=""/11, 0xb}, {&(0x7f0000001e00)=""/186, 0xba}, {&(0x7f0000001ec0)=""/12, 0xc}], 0x3, &(0x7f0000001f40)=""/6, 0x6, 0x4e92}, 0xe1}, {{&(0x7f0000001f80)=@ax25, 0x80, &(0x7f0000002200)=[{&(0x7f0000002000)=""/102, 0x66}, {&(0x7f0000002080)=""/87, 0x57}, {&(0x7f0000002100)=""/186, 0xba}, {&(0x7f00000021c0)=""/24, 0x18}], 0x4, &(0x7f0000002240)=""/73, 0x49, 0x3a}, 0x1}], 0x4, 0x40000102, &(0x7f00000023c0)) r2 = getpid() r3 = dup(0xffffffffffffff9c) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000040)={0xfffffffffffffffc, 0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f00000000c0)={{0xffffffffffffb592, 0x800}, {0x7, 0x7}, 0x3, 0x4, 0x3}) bind$bt_rfcomm(r3, &(0x7f0000000300)={0x1f, {0x8, 0x81, 0x9, 0xffffffffffffff81, 0x6, 0x9e48}}, 0xa) waitid(0x0, r2, &(0x7f0000000000), 0x80000006, 0x0) 2018/04/29 21:25:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0xffffffffffffff9c, 0x1, 0x1, 0x800, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x8, 0x1, 0xffffffffffffffff, 0x8000, 0x0, 0xbb9c, 0x80000, 0x4, 0xf393, 0x80000001, 0xfffffffffffffff7, 0x2, 0x1, 0x7fff, 0x7, 0x1ff, 0x9, 0x1, 0x8, 0x6, 0x400, 0x4, 0x8, 0x1, 0x7f, 0x2, 0x9, 0x6, 0x2ba7, 0xffffffffffffff64, 0x6, 0x8, 0x9, 0x9, 0xffff, 0x4, 0x0, 0x1f, 0x2, @perf_config_ext={0x2, 0x80000001}, 0x2, 0x6b70c686, 0xd2, 0x0, 0x2, 0x3, 0xfffffffffffff801}, r0, 0x9, r1, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0xb, &(0x7f0000000000), 0x20) 2018/04/29 21:25:42 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000040)=@ipx={0x4, 0xf5c, 0x7, "97e4472ca6fd", 0x8001}, 0x360) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x3, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c527ea83969a422c"}}, 0x48}, 0x1}, 0x0) 2018/04/29 21:25:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="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") ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000000c0)) preadv(r0, &(0x7f0000005000)=[{&(0x7f0000000240)=""/1, 0x1}], 0x100000000000016d, 0x10000000000000) 2018/04/29 21:25:42 executing program 3: arch_prctl(0x1003, &(0x7f0000000080)="2d6f70de7cfeccdfe478dcb3c568451af7c79ce97fc1c9fbda8644a0af9bb5fc89e6c05d7bb852f1409f79478d8c0de57b432468a4b21233b030122312587d3c4bce9e6e2629943a7cfb9fb4ef9fe3d8157df2683b48ca60f272080f93bc7774ee7c4174fdd09346603bf4c1616c8de0fa86dfe33c96f0e4a8e8b249d3b0884010c65c0e12474acf219472b6806928384605eba4b62072c2673f72542bf99f04af8007bfbbf23a0111882b5566358a31deb7ee4c57a1f20c52f1d49c5417bc0f9bf6ad5f04a5302bd1e13e1da1933cd41f6c47558ce6ff0691fe21c7f2cd6e74862c9871c3f0059f") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x4, 0x9}, 0x2c) 2018/04/29 21:25:42 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{}, {{}, 0x4, 0xe08, 0x9}], 0x30) 2018/04/29 21:25:42 executing program 7 (fault-call:2 fault-nth:40): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) [ 380.996789] FAULT_INJECTION: forcing a failure. [ 380.996789] name failslab, interval 1, probability 0, space 0, times 0 [ 381.008098] CPU: 0 PID: 26733 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 [ 381.015371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.024721] Call Trace: [ 381.027320] dump_stack+0x1b9/0x294 [ 381.030958] ? dump_stack_print_info.cold.2+0x52/0x52 [ 381.036163] should_fail.cold.4+0xa/0x1a [ 381.040229] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 381.045324] ? graph_lock+0x170/0x170 [ 381.049109] ? __lock_is_held+0xb5/0x140 [ 381.053159] ? find_held_lock+0x36/0x1c0 [ 381.057207] ? __lock_is_held+0xb5/0x140 [ 381.061260] ? check_same_owner+0x320/0x320 [ 381.065565] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 381.070566] ? rcu_note_context_switch+0x710/0x710 [ 381.075482] __should_failslab+0x124/0x180 [ 381.079703] should_failslab+0x9/0x14 [ 381.083490] kmem_cache_alloc_node_trace+0x26f/0x770 [ 381.088577] ? print_usage_bug+0xc0/0xc0 [ 381.092629] __get_vm_area_node+0x12d/0x390 [ 381.096940] __vmalloc_node_range+0xc4/0x750 [ 381.101332] ? snd_pcm_plugin_alloc+0x56e/0x760 [ 381.105985] ? mark_held_locks+0xc9/0x160 [ 381.110122] ? snd_pcm_plugin_alloc+0x56e/0x760 [ 381.114779] vmalloc+0x6f/0x80 [ 381.117957] ? snd_pcm_plugin_alloc+0x56e/0x760 [ 381.122610] snd_pcm_plugin_alloc+0x56e/0x760 [ 381.127096] snd_pcm_plug_alloc+0x1f1/0x320 [ 381.131403] snd_pcm_oss_change_params_locked+0x2233/0x3c70 [ 381.137107] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 381.142980] ? is_bpf_text_address+0xd7/0x170 [ 381.147463] ? kernel_text_address+0x79/0xf0 [ 381.151855] ? __unwind_start+0x166/0x330 [ 381.155986] ? __kernel_text_address+0xd/0x40 [ 381.160467] ? unwind_get_return_address+0x61/0xa0 [ 381.165382] ? __save_stack_trace+0x7e/0xd0 [ 381.169698] ? __put_page+0x130/0x180 [ 381.173484] ? __put_compound_page+0xe0/0xe0 [ 381.177879] ? default_file_splice_read+0x874/0xad0 [ 381.182878] ? splice_direct_to_actor+0x268/0x8d0 [ 381.187706] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.193059] ? generic_pipe_buf_release+0x1dc/0x290 [ 381.198065] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 381.203243] snd_pcm_oss_write+0x516/0xa20 [ 381.207463] ? debug_check_no_obj_freed+0x2ff/0x584 [ 381.212466] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 381.217468] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 381.222295] ? trace_hardirqs_off+0xd/0x10 [ 381.226511] ? quarantine_put+0xeb/0x190 [ 381.230562] __vfs_write+0x10b/0x960 [ 381.234262] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 381.239090] ? kernel_read+0x120/0x120 [ 381.242963] ? default_file_splice_read+0x888/0xad0 [ 381.247959] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.253316] ? check_same_owner+0x320/0x320 [ 381.257625] ? rcu_note_context_switch+0x710/0x710 [ 381.262541] __kernel_write+0x10c/0x380 [ 381.266503] write_pipe_buf+0x175/0x220 [ 381.270463] ? default_file_splice_read+0xad0/0xad0 [ 381.275463] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 381.280983] ? splice_from_pipe_next.part.8+0x296/0x340 [ 381.286349] __splice_from_pipe+0x38e/0x7c0 [ 381.290655] ? default_file_splice_read+0xad0/0xad0 [ 381.295663] splice_from_pipe+0x1e2/0x320 [ 381.299884] ? default_file_splice_read+0xad0/0xad0 [ 381.304884] ? splice_shrink_spd+0xd0/0xd0 [ 381.309116] default_file_splice_write+0x3c/0x90 [ 381.313857] ? generic_splice_sendpage+0x50/0x50 [ 381.318598] direct_splice_actor+0x128/0x190 [ 381.322995] splice_direct_to_actor+0x310/0x8d0 [ 381.327655] ? pipe_to_sendpage+0x3f0/0x3f0 [ 381.331965] ? do_splice_to+0x190/0x190 [ 381.335926] ? rw_verify_area+0x118/0x360 [ 381.340064] do_splice_direct+0x2cc/0x400 [ 381.344198] ? splice_direct_to_actor+0x8d0/0x8d0 [ 381.349036] ? rw_verify_area+0x118/0x360 [ 381.353170] do_sendfile+0x60f/0xe00 [ 381.356873] ? do_compat_pwritev64+0x1b0/0x1b0 [ 381.361439] ? __might_sleep+0x95/0x190 [ 381.365402] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 381.370922] ? _copy_from_user+0xdf/0x150 [ 381.375057] __x64_sys_sendfile64+0x155/0x240 [ 381.379537] ? __ia32_sys_sendfile+0x290/0x290 [ 381.384107] ? do_syscall_64+0x92/0x800 [ 381.388068] do_syscall_64+0x1b1/0x800 [ 381.391938] ? finish_task_switch+0x1ca/0x810 [ 381.396420] ? syscall_return_slowpath+0x5c0/0x5c0 [ 381.401336] ? syscall_return_slowpath+0x30f/0x5c0 [ 381.406250] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 381.411599] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 381.416431] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.421606] RIP: 0033:0x455979 [ 381.424779] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 381.432471] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 381.439721] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 381.446971] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 381.454224] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 381.461476] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000028 [ 381.469230] syz-executor7: vmalloc: allocation failure: 8192 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 381.479554] syz-executor7 cpuset=syz7 mems_allowed=0 [ 381.485243] CPU: 0 PID: 26733 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 2018/04/29 21:25:43 executing program 6: r0 = socket$inet(0xa, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x200401, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000300)="49642d011e56c8f4a332918c9896b2165749eee14932dca7a1aba9f0ddd997bbd20164e546af6f198ef070551f0fb4e42ba1b1e80a99db7d09b3a7b83de1c3460be3d49908ddfd7c7a591ae07261341e08b7618971ce776cabaca2d402cfee64d6c0543504a8ceb14c1a02745131bc53a74bba706c3922a9fc3d76f6c0e0f50d988c6a1a9ef45009ad717d0bbb6e3f7e020b81a2e7d209b6806f5172c6b1f060a09fa6c7a53ab727174aec6aa2d96189ca58e6c877e184056ca8de61427fb6bcdb8135ddce1d3fa999cabd4cadb811e547a6ccededb06c5e1c7fc3e318025420bc719286f92b", 0xe6) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x1, 0x1f8, [0x20000040, 0x0, 0x0, 0x200001d8, 0x20000208], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'bpq0\x00', 'ifb0\x00', 'bridge0\x00', 'vlan0\x00', @link_local={0x1, 0x80, 0xc2}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0xb8, 0x120, 0x168, [@ip={'ip\x00', 0x20, {{@dev={0xac, 0x14, 0x14}, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x29}}}]}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}, @snat={'snat\x00', 0x10}]}, @common=@ERROR={'ERROR\x00', 0x20, {"64ec599661eb9835039d7b9552f63f49a4e54073af800972fe32ab179a37"}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x270) 2018/04/29 21:25:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab2719", 0x4) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d85a8a32c725ea5500", 0x9}], 0x10000000000000a6}, 0x2) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000180)=@nfc_llcp, 0x80, &(0x7f0000000200)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) [ 381.492512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.501861] Call Trace: [ 381.504458] dump_stack+0x1b9/0x294 [ 381.508100] ? dump_stack_print_info.cold.2+0x52/0x52 [ 381.513306] warn_alloc.cold.118+0xb2/0x1b8 [ 381.517635] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 381.522479] ? __get_vm_area_node+0x12d/0x390 [ 381.526978] ? __get_vm_area_node+0x12d/0x390 [ 381.531480] ? rcu_read_lock_sched_held+0x108/0x120 [ 381.536503] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 381.541786] ? print_usage_bug+0xc0/0xc0 2018/04/29 21:25:43 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1f, 0x20000000004, 0x5, 0xb, 0x3}, 0x2c) [ 381.545861] ? __get_vm_area_node+0x2da/0x390 [ 381.550369] __vmalloc_node_range+0x45e/0x750 [ 381.554873] ? mark_held_locks+0xc9/0x160 [ 381.559037] ? snd_pcm_plugin_alloc+0x56e/0x760 [ 381.563715] vmalloc+0x6f/0x80 [ 381.566917] ? snd_pcm_plugin_alloc+0x56e/0x760 [ 381.571590] snd_pcm_plugin_alloc+0x56e/0x760 [ 381.576098] snd_pcm_plug_alloc+0x1f1/0x320 [ 381.580427] snd_pcm_oss_change_params_locked+0x2233/0x3c70 [ 381.586157] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 381.592049] ? is_bpf_text_address+0xd7/0x170 2018/04/29 21:25:43 executing program 3: r0 = socket$inet6(0xa, 0x2000000005, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe0000000000000000000000000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2000002b7504bb004d735ddd270b4da8edfae28a7d568e69b40d73578aee5ccb578830344fc785037cb263be4546b97735927defe12e2b86dba3557f6a63dcb4ec0de774a60f7ef30a40900dfd7c8a5abd3805b6610c0b05a67fe16a81ba951fcfa7d2eecb251a2278170fe5e0"], &(0x7f00000002c0)) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e22, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0xffff}}, 0x8, 0x1, 0xffffffffffff0362, "03fc8dc13f5681638b89d0c54df7e18add1979a02b467f2265af1400f2d02c07fb86a59a4363af859755482cc9b04cdfa1da58e4abf98c210a749d28dfdea5de496dd53443347d4dd5832c2b0aebdbe4"}, 0xd8) [ 381.596551] ? kernel_text_address+0x79/0xf0 [ 381.600965] ? __unwind_start+0x166/0x330 [ 381.605122] ? __kernel_text_address+0xd/0x40 [ 381.609625] ? unwind_get_return_address+0x61/0xa0 [ 381.614562] ? __save_stack_trace+0x7e/0xd0 [ 381.618903] ? __put_page+0x130/0x180 [ 381.622704] ? __put_compound_page+0xe0/0xe0 [ 381.627097] ? default_file_splice_read+0x874/0xad0 [ 381.632097] ? splice_direct_to_actor+0x268/0x8d0 [ 381.636928] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.642282] ? generic_pipe_buf_release+0x1dc/0x290 [ 381.647284] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 381.652457] snd_pcm_oss_write+0x516/0xa20 [ 381.656678] ? debug_check_no_obj_freed+0x2ff/0x584 [ 381.661679] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 381.666683] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 381.671507] ? trace_hardirqs_off+0xd/0x10 [ 381.675725] ? quarantine_put+0xeb/0x190 [ 381.679775] __vfs_write+0x10b/0x960 [ 381.683475] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 381.688300] ? kernel_read+0x120/0x120 [ 381.692175] ? default_file_splice_read+0x888/0xad0 [ 381.697174] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.702529] ? check_same_owner+0x320/0x320 [ 381.706838] ? rcu_note_context_switch+0x710/0x710 [ 381.711755] __kernel_write+0x10c/0x380 [ 381.715716] write_pipe_buf+0x175/0x220 [ 381.719678] ? default_file_splice_read+0xad0/0xad0 [ 381.724678] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 381.730201] ? splice_from_pipe_next.part.8+0x296/0x340 [ 381.735551] __splice_from_pipe+0x38e/0x7c0 [ 381.739857] ? default_file_splice_read+0xad0/0xad0 [ 381.744862] splice_from_pipe+0x1e2/0x320 [ 381.748997] ? default_file_splice_read+0xad0/0xad0 [ 381.754005] ? splice_shrink_spd+0xd0/0xd0 [ 381.758237] default_file_splice_write+0x3c/0x90 [ 381.762976] ? generic_splice_sendpage+0x50/0x50 [ 381.767720] direct_splice_actor+0x128/0x190 [ 381.772115] splice_direct_to_actor+0x310/0x8d0 [ 381.776770] ? pipe_to_sendpage+0x3f0/0x3f0 [ 381.781079] ? do_splice_to+0x190/0x190 [ 381.785040] ? rw_verify_area+0x118/0x360 [ 381.789178] do_splice_direct+0x2cc/0x400 [ 381.793312] ? splice_direct_to_actor+0x8d0/0x8d0 [ 381.798141] ? rw_verify_area+0x118/0x360 [ 381.802285] do_sendfile+0x60f/0xe00 [ 381.805991] ? do_compat_pwritev64+0x1b0/0x1b0 [ 381.810561] ? __might_sleep+0x95/0x190 [ 381.814524] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 381.820046] ? _copy_from_user+0xdf/0x150 [ 381.824181] __x64_sys_sendfile64+0x155/0x240 [ 381.828660] ? __ia32_sys_sendfile+0x290/0x290 [ 381.833402] ? do_syscall_64+0x92/0x800 [ 381.837374] do_syscall_64+0x1b1/0x800 [ 381.841245] ? finish_task_switch+0x1ca/0x810 [ 381.845724] ? syscall_return_slowpath+0x5c0/0x5c0 [ 381.850648] ? syscall_return_slowpath+0x30f/0x5c0 [ 381.855565] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 381.860926] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 381.865757] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.870927] RIP: 0033:0x455979 [ 381.874098] RSP: 002b:00007f51c209fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 381.881790] RAX: ffffffffffffffda RBX: 00007f51c20a06d4 RCX: 0000000000455979 [ 381.889041] RDX: 0000000020000080 RSI: 0000000000000014 RDI: 0000000000000013 [ 381.896292] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 381.903546] R10: 0000000040400102 R11: 0000000000000246 R12: 0000000000000015 [ 381.910797] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000028 [ 381.918492] Mem-Info: [ 381.920993] active_anon:110644 inactive_anon:76 isolated_anon:0 [ 381.920993] active_file:3732 inactive_file:9016 isolated_file:0 [ 381.920993] unevictable:0 dirty:94 writeback:0 unstable:0 [ 381.920993] slab_reclaimable:10108 slab_unreclaimable:106363 [ 381.920993] mapped:73946 shmem:85 pagetables:1076 bounce:0 [ 381.920993] free:1293672 free_pcp:419 free_cma:0 [ 381.954572] Node 0 active_anon:442564kB inactive_anon:308kB active_file:14928kB inactive_file:36156kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295744kB dirty:380kB writeback:0kB shmem:340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 313344kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 381.982739] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 382.008913] lowmem_reserve[]: 0 2830 6335 6335 [ 382.013582] Node 0 DMA32 free:2900292kB min:30116kB low:37644kB high:45172kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2901148kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:856kB local_pcp:120kB free_cma:0kB [ 382.041315] lowmem_reserve[]: 0 0 3505 3505 [ 382.045715] Node 0 Normal free:2257088kB min:37300kB low:46624kB high:55948kB active_anon:442664kB inactive_anon:308kB active_file:14928kB inactive_file:36156kB unevictable:0kB writepending:380kB present:4718592kB managed:3589432kB mlocked:0kB kernel_stack:5600kB pagetables:4144kB bounce:0kB free_pcp:896kB local_pcp:312kB free_cma:0kB [ 382.075535] lowmem_reserve[]: 0 0 0 0 [ 382.079424] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 382.093110] Node 0 DMA32: 3*4kB (M) 5*8kB (UM) 3*16kB (UM) 3*32kB (M) 4*64kB (UM) 1*128kB (M) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 705*4096kB (M) = 2900292kB [ 382.108913] Node 0 Normal: 3601*4kB (UME) 1720*8kB (UME) 1434*16kB (UME) 1130*32kB (UME) 534*64kB (UME) 85*128kB (UM) 44*256kB (UME) 32*512kB (UME) 13*1024kB (UME) 4*2048kB (UME) 507*4096kB (UM) = 2258148kB [ 382.127615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 382.136204] 12855 total pagecache pages [ 382.140188] 0 pages in swap cache [ 382.143654] Swap cache stats: add 0, delete 0, find 0/0 [ 382.149040] Free swap = 0kB 2018/04/29 21:25:43 executing program 6: r0 = memfd_create(&(0x7f0000000200)='/dev/audio#\x00', 0x1) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280)=0x3a5, &(0x7f0000000380)=0x2) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x15, 0x5, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f0000000080)={@loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x8) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001780)) getresuid(&(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)) getgroups(0x3, &(0x7f0000001880)=[0x0, 0xffffffffffffffff, 0x0]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003400)={0x0}, &(0x7f0000003440)=0xc) r4 = getuid() stat(&(0x7f0000003480)='./file0\x00', &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fcntl$getown(r0, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003540)={0x0, 0x0}, &(0x7f0000003580)=0xc) stat(&(0x7f00000035c0)='./file0\x00', &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$random(&(0x7f0000003880)='/dev/random\x00', 0x0, 0x3a1000) sendmmsg$unix(r0, &(0x7f0000003900)=[{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000440)="c7e647e7c96e7c4737853c2e74adbb82ea31dddcc24c518caec013fd6cc527b73078e1abcda3efef504b038912f8fca0f64364fae639", 0x36}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001640)="e3c21deef2c7a7d27e76f2bbbba6f57d886292b3fd2b1777faeb589eb809656e1588bfad988559c553ca1d77d98e6a0d655ebb8f59750ffc9dfbbe89b4bb1fc42cc97d40241a467b5522e66ab2e949f9f81f2265596dcd4ef3704f14bed2609d7cf9f8c184e4b2671535eaba70ff5dc309eac039011df1f52a979c99d547671c6bb07a52a14aee15152cdb6cda926858d8c3ba44291b81e780d2a1a1316513bf7ba887bc06a0e5520d1849ba6f449ca5", 0xb0}], 0x3, &(0x7f00000018c0), 0x0, 0x850}, {&(0x7f0000001900)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001980)="9113faa746973ca22295c61f891daf4e78f977c5ae1f105b0ed82803847a4c6e51b8e1580d44909b7b528fae2b566ef2c12466879eb8214c562f37bd230575bea2065a966d0423ded73d5b187da7fa615df77e10e6db13fd6ff3acf64864fc312344d3a1f3dc58f9f43c0a6fb0a8416c14", 0x71}, {&(0x7f0000001ac0)="19fa6c7426daa76d11a71f126b4d0232ea055bda744559dbce0fc3bf3ba8473423a35dbdfa54e8ae997e0bcd03785f257b4efb2cb493600ce0c1c146411a0e5e766a314b87324fea44a391f8bb8808406e967c72b77a099c67faae3d0ae8888a24d3623df46a3cf569e5b58e8a0e66ad15e561c294ba842b786a2fc52b569ebff476fe3ee526dffa15c20c4a082d2e8ce061c27c3e8a58e2d223ae7ec861a86fe25cf908372b661e0ead875bcad762b825654c67b7d1407d79b10c60054498d6032e0eded0af3bbb322c2c2ea9cf19b7da5447ff4c086a442deab22e6fc0ea5a06ae8f68ac5eafd1", 0xe8}, {&(0x7f0000001c00)="8c265e6863c182297bc6bff97b2af1d981afeaa8972d745684c4cf8f609e7e89c44413b771cb3d1ae2c4a4de1b55cc7c59120ff05000d4220de723fe1e448b598359b033c208cc9586115e70291fd974de59fa9954683ec209f41d2c312d1a385bba3700849c98105c05c64ace92e93909d77cb866f73d", 0x77}], 0x3, &(0x7f0000001d00), 0x0, 0x11}, {&(0x7f0000001d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003340)=[{&(0x7f0000001dc0)="294c7f2f507eebd1933af82f81616830202e3b2c26c2c30567606cdfe34a29d611baa3d0c0c60985fcf9063f4410cb35ba8421bd08", 0x35}, {&(0x7f0000001ec0)="e159936545b360c9d95fecb268fdf8076123f202673137c13f4f5a752af8bfca15a685ce46f2b7d9bb443bb858be5a670facb0aa8bfed02bcf6c4614ae4ce7d8c99d614a204093bbc7492edf27731e6b5dbb9afac83b43a0ea4a4c13a705a42340cdfb2e864ddfd57b2a847d265479537c2639d7574c59e784b2a0e715411e459387c47026ecdc0e229c0158574f3d42bd307702047c797c8693ee78865d3403c7d25e8c", 0xa4}, {&(0x7f0000002080)="54ab7a0269f7e7b44caca79b40876c8823b1d863aa1ba87eb2736a0f99fcfe97b2f35cc861dd4c3748fd7588", 0x2c}, {&(0x7f0000002100)="637420ab6eee5c8eebd757b673532209494a3cf4903d74ebac9cd1f6bc4c451455395197a3e9eac3bb8acba05a00e8eac81b28802f4caaf70fe2fc158411484cb0625d4318001bdaf62f87b2252bf4773ee069e7b0de431b983dfef5f08cea46881a5b169dcf6508f7f203209890c30658da1974b4f425eb9be96aeea6", 0x7d}, {&(0x7f0000003180)="75f9118779e7c7fd0bcc109961f3cd5ea88fc6051217515886f0d0c9ea17d411a599c55212ff21c4d625009a149d6bd4b8fd5c5555f50267c49249ef309583be321cd2abe82e69adf7997ecfbe28f53bb673b24048a6856dfb5742212aa60360d93b1cb9cac0d83675ead0f02237c5b0b5377e8f73ef5e90d0f1d1d2d7ec7c0b409fe4b678d5089c05e05e7774c612230323c2de08f4acfb79ac2b8dc6f6c6bf68a404b1de38bbfed6b363de219a68a329ad7147b252e3725eaff0ffe07095d90feea4ed3a9c86db53d30b3b1752713f2ef7e2efc3cf7d42c21644769b95882c3eda9c6c5d", 0xe5}], 0x5, &(0x7f0000003680)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000038000000edffffff0000000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xc8}, {&(0x7f0000003780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003840)=[{&(0x7f0000003800)}], 0x1, &(0x7f00000038c0), 0x0, 0x40}], 0x4, 0x4000) setsockopt$sock_int(r2, 0x1, 0x14, &(0x7f0000000040), 0x1c) recvmsg(r2, &(0x7f0000000340)={&(0x7f0000000000)=@rc, 0x2c3, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/98, 0x62}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000480)={'gretap0\x00', {0x2, 0x4e22, @multicast2=0xe0000002}}) getpid() getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@broadcast, @in=@rand_addr}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0xffff, 0x8080) 2018/04/29 21:25:43 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x240000, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000240), &(0x7f00000002c0)=0x14) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000002200090100000000000000000410fca55f000c000000abaf0000000000000000000000016809f5f857bc21638f216380fc3b21afb40cfa9782270ab2f6838ca5ec488fbcb20de70ad5f3d770c35d76fc4f7a874f6a2e8cdd463cd84fa09ce95f7d53675973e8a5c405f36f61dec17984db04b3899c2df68de3f8e2f6145f4c36009a6645a8cf7bee357231095ee8682698459848d5e22bf0aa36efd2df3a02129c99c1d611ed24652ea31dd756f2e44154fcd3a020e8e84d6ab21f917cbbfe"], 0x28}, 0x1}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x0, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe000000000000000}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2018/04/29 21:25:43 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x2) r1 = socket(0x0, 0x11, 0x2) write(r1, &(0x7f0000000200)="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", 0xfc) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x3, 'bridge0\x00', 0x4}, 0x18) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) 2018/04/29 21:25:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xfffffffffffffffd) write(r0, &(0x7f0000000000)="2400000026007f000000000000007703000000ff0100000000000000ecffffff0100ff65", 0xfffffffffffffd63) 2018/04/29 21:25:43 executing program 4: 2018/04/29 21:25:43 executing program 1: r0 = socket$inet(0x2, 0xfffffffffffffffe, 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0xf, &(0x7f0000a0c000)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@broadcast=0xffffffff}}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}}, 0x0, @in6=@mcast2={0xff, 0x2, [], 0x1}}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa}, 0x1c) bind$inet(r0, &(0x7f0000a0dff0)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 2018/04/29 21:25:43 executing program 7: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080), 0x40400102) 2018/04/29 21:25:43 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{}], 0x18) [ 382.152078] Total swap = 0kB [ 382.155104] 1965969 pages RAM [ 382.158221] 0 pages HighMem/MovableOnly [ 382.162203] 339347 pages reserved [ 382.223879] sock: sock_set_timeout: `syz-executor6' (pid 26773) tries to set negative timeout 2018/04/29 21:25:43 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x813, r0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x4000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x4}) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) 2018/04/29 21:25:43 executing program 1: syz_mount_image$hfs(&(0x7f00000001c0)='hfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000480)=ANY=[]) r0 = creat(&(0x7f0000000100)='./file2\x00', 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) rename(&(0x7f0000000140)='./file2\x00', &(0x7f0000000380)='./file0\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) r2 = getegid() fchownat(r0, &(0x7f0000000000)='./file0\x00', r1, r2, 0x100) 2018/04/29 21:25:43 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x3, 0x10001]) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000070100f7000000000100000000000000"]) 2018/04/29 21:25:43 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{}], 0x18) 2018/04/29 21:25:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x0, 0x0, 0x6}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000180)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x20, 0x0, 0x0, 0x0, 0x0, 0x215, 0x800, 0x0, 0x0, 0x6, 0x0, 0xeda, 0x3c, 0x0, 0x0, 0xf2]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10002, 0x3, 0x0, 0x1000, &(0x7f0000013000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x4000, 0x2000, &(0x7f0000014000/0x2000)=nil}) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000009000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 382.297460] sock: sock_set_timeout: `syz-executor6' (pid 26785) tries to set negative timeout 2018/04/29 21:25:43 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000cc5000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r2, r1) r3 = memfd_create(&(0x7f000003e000)='\t', 0x0) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x1f, 0x0, 0x0, 0x3fd}], 0x30) 2018/04/29 21:25:44 executing program 2 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{}], 0x18) 2018/04/29 21:25:44 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x404000, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000800020694454d454ca240dffc0a5cdead511572c22dcf7d1196c3efb0bc354095f4eb86d073fa58388048df61b25698f5d13da06e6b369112cd5a78cde04eb2660a5149232a2a89e12c5dabbc489576236a8f0e15b2d49552814484"], &(0x7f0000000200)=0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffb, 0xfffffffffefffffd}, 0x0, 0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0xa, 0x0, 0xffffffffffffffff}) getsockopt$ax25_buf(r0, 0x101, 0x19, &(0x7f0000000100)=""/76, &(0x7f0000000180)=0x4c) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) r3 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r3, 0x2) 2018/04/29 21:25:44 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xfffffffffffffc00, 0x800, 0x6, 0x100000000, 0x6}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0x1c}}}}, 0x84) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000980), 0x11) [ 382.504995] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. [ 382.566136] x86/PAT: syz-executor1:26825 map pfn RAM range req write-combining for [mem 0x18c3f0000-0x18c3f3fff], got write-back [ 382.626858] x86/PAT: syz-executor1:26826 map pfn RAM range req write-combining for [mem 0x18b3a0000-0x18b3a3fff], got write-back [ 382.660361] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/29 21:25:44 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{}], 0x18) 2018/04/29 21:25:44 executing program 7: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080)=0x48, 0x40400102) 2018/04/29 21:25:44 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000140)=0xd3, 0x4) r1 = request_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180)='user\x00', 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)='F', 0x1, r1) keyctl$invalidate(0x15, r2) keyctl$setperm(0xb, r2, 0x0) 2018/04/29 21:25:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000a32000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000080)={0x18, 0x2c, 0x1, 0x0, 0x0, {0x1}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) r1 = dup(r0) setsockopt$inet6_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000040)="f39cb0e8013b6e4801c628ff1ca3343833f8f8801546c8ad36fb8e1e9230c66be7be8515", 0x24) 2018/04/29 21:25:44 executing program 4: r0 = timerfd_create(0x7, 0x0) clock_gettime(0x0, &(0x7f0000499ff0)) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x2, 0x400) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r2}) timerfd_gettime(r0, &(0x7f0000000040)) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000000)={0xa426, 0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000100)={0x0, r3, 0x10001, 0x9}) 2018/04/29 21:25:44 executing program 1: r0 = inotify_init1(0x80000) fadvise64(r0, 0x0, 0x6, 0x0) r1 = socket(0x11, 0x803, 0x300) r2 = socket$inet(0x2, 0x1, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x101000) ioctl$TIOCNOTTY(r3, 0x5422) connect$inet(r2, &(0x7f0000cd0ff0)={0x2}, 0x10) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000580)={0x5, {{0x2, 0x4e20, @loopback=0x7f000001}}, 0x1, 0x1, [{{0x2, 0x4e20, @loopback=0x7f000001}}]}, 0x110) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = msgget$private(0x0, 0x184) msgrcv(r4, &(0x7f0000000240)={0x0, ""/35}, 0x2b, 0x0, 0x2000) recvmmsg(r1, &(0x7f000094f000), 0x269, 0x0, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x105002) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f000000efcc)={{0x3, 0x0, 0x0, 0x0, 0x1}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r2, &(0x7f0000000480)="df0325dc58806ef8ce0df2e1d57950f1105479d98f47693e612d68e0d64de9f2e997fc03678964c478ab6dcf9daa577b47210fd9", &(0x7f0000000500)}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) getsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000400)={@remote, @broadcast, @rand_addr}, &(0x7f0000000440)=0xc) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r7) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x0, 0xfffffffffffffffe, 0x811, 0x4, 0x9, 0xff, 0xfffffffffffffff9, r8}, 0x20) sendmsg$nl_netfilter(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84000800}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYRES64=r3], 0xfffffffffffffd3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_netrom_SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000004c0)) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="030000000000000002004e24ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000010000000500000002004e20ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2100000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb0075c70be3925d720b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e237f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cfa8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8d15a4f04793cc5d3bbe3da48595f90d52c9f2a89411484a7b5579c2876d60740613be1c3830bc9fdefaa8fb5f8c5d5c99cd6ee3fcf4419e2571e7488353c9049099b80456955b15006eb85b354ecc3724b5"], 0x1) 2018/04/29 21:25:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x400) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x745}, 0xfffffd92) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x10000000, @dev={0xfe, 0x80}}, 0xffffffffffffff61) 2018/04/29 21:25:44 executing program 0: seccomp(0x2, 0x0, &(0x7f0000028ff0)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x280, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xcc, "4408d872daf6163aefeeb2620bcb6e405fe85fe41264f05b301481b0aff1f7284f91760ab4443c6eee94d85e5c27e915cf5022ba79bbc08c527c8a50e74710b3149cc0710ad4e871a873a9ed50ab94208a6bdc5bb7d718dd881a76397af691325f6377727a364c6a5c6a06707cb779585e4ff01b98b1ce5209e2b96c74df95a216ab9f57962fccb041a93a8085522eb6df793ad33d6bb13e49015ed8895c4d773f0eba38fda57f3d535adbed99de86888719210204d51708b443bc6b1220b593fca2720b0ab41b1d896c54b6"}, &(0x7f00000001c0)=0xd4) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r1, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, 0x0, 0xe138}, 0x90) 2018/04/29 21:25:44 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x200, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0x321, 0x400, 0x1, 0x3, 0x2, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) r1 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x1, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="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"]}, 0x2a8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)={0x7, 0xfffffffffffffff8, 0x80}) 2018/04/29 21:25:44 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)="75736572aa736563757269747900", 0x2000000005) socket$inet_icmp_raw(0x2, 0x3, 0x1) lseek(r0, 0x0, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040)) 2018/04/29 21:25:44 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x1000000006) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xb}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2bcc52d9981d639b45358ed2eaef2f9d"], &(0x7f00000002c0)={0x0, 0x0, [0x0, 0x0, 0xffffffffffffffff]}) 2018/04/29 21:25:44 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8001, 0x100) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, r2, 0x8, 0x70bd27, 0x25dfdbfc, {0xa}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback=0x7f000001}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x9c}, 0x1}, 0x41) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r0, r3, &(0x7f000097d000), 0xff) 2018/04/29 21:25:44 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000000c0)="24000000210025f0071c0165fffffc0e020000170000000182a9000c0800060000000000", 0x29b) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f0000000100)='/\x00', 0x2, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) 2018/04/29 21:25:44 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{}], 0x38) 2018/04/29 21:25:44 executing program 5: ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000080)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x400000000e) ioctl$TCFLSH(r0, 0x540b, 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4800) syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x5, 0x88000) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000100)) r2 = semget$private(0x0, 0x3, 0x46) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000000)=""/13) [ 383.076268] kernel msg: ebtables bug: please report to author: bad policy 2018/04/29 21:25:44 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000994000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7ff, 0x109000) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000aeefa8)={{0x0, 0x1}}) [ 383.142670] kernel msg: ebtables bug: please report to author: bad policy 2018/04/29 21:25:45 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$rdma_cm(r0, &(0x7f0000002380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002340)}}, 0x20) write$evdev(r0, &(0x7f0000000640)=[{}], 0x20000658) 2018/04/29 21:25:45 executing program 6: r0 = socket$inet(0x2, 0x100000000805, 0x0) listen(r0, 0x800006) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00007dc000)=0x1, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000180)=0x7f) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x58}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0x4, 0x400, 0x3ee3, 0x3, 0x9}, &(0x7f0000000140)=0x14) 2018/04/29 21:25:45 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) shutdown(r0, 0x2) r1 = dup(r0) setsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000000040)="641473ed1b40ce68b7307046dee22a22d52bd89761f643ee6ace24b5a2cb747e61581b678d296724d22086a64d8a5c1570c5da18aa9762835feddc419d865549a36b926aaa1fd3fa99049066eaacd07ce747a3fb19e97dbc76ee72045602df389e8f8e1ea1393d7166a1e8827747d0d42de5cc93a5d2b81d10310f345567465686b230893e057579650df7", 0x8b) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x17, 0x4) pipe(&(0x7f0000000100)) close(r0) 2018/04/29 21:25:45 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x0, &(0x7f00000000c0), &(0x7f0000000900)=ANY=[]}, 0x78) 2018/04/29 21:25:45 executing program 4: r0 = socket(0x11, 0x1, 0xd538) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000040)={'nat\x00', 0x0, 0x4, 0xad, [], 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000100)=""/173}, &(0x7f00000001c0)=0x78) r1 = socket$inet(0x2, 0x3, 0x1002) setsockopt$inet_int(r1, 0x0, 0x10000000000d0, &(0x7f00000000c0)=0x6, 0x4) 2018/04/29 21:25:45 executing program 0: perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x30d000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1f) write(r0, &(0x7f0000994fd9)="2700000014001707030e0000120f0a0028171000f5fe0012ff000300078a151f75080039000500", 0x27) 2018/04/29 21:25:45 executing program 7: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000740)='net/route\x00') sendfile(r0, r1, &(0x7f0000000080)=0x6c000000, 0x40400102) 2018/04/29 21:25:45 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="6b00000025003d6f198942ddd20d7923048ab6131afbef81d733678f6b12b822d9957739fe058d17e72d5c8e517d35096967f0da397ff7fbf13ad5fa135137befd4550c6e62e60127077439f3276325a1a47b5f7dafc6f3441f40f2785e249c42ac770c92d8e35fb1afce860cdffa2"], &(0x7f00000000c0)=0x73) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e24, 0x7fffffff, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x100}}, 0x0, 0xdb, 0x1f, 0x5, 0x8}, 0x98) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x5) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000001c0)=0x1, 0x4) setsockopt(r3, 0x100000800000010d, 0x2, &(0x7f0000003ff8)="00000000ff", 0x5) 2018/04/29 21:25:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="660f017100660f6fb3b0000fc7afd1070fc76c0036cd38ea997ce300baf80c66b8a48d878c66efbafc0c66b8858d000066ef0f00d0640fe475d4d07aa2", 0x3d}], 0x1, 0x0, &(0x7f0000000540), 0xb95024bcdeb65d74) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={[], 0x3, 0x7, 0x80000000, 0x7, 0x4, r4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x802) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f0000000280)={{0x98ca8bddcb5a44a9, 0x2, 0x8000, 0x3, 0x7ff}, 0x9, 0xffffffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000001c0)="640f6785008000000f01c80f015800c4e1fe707be300b8230000000f23c00f21f835000006000f23f8f20f32660f388227b9420a0000b807000000ba000000000f3066baf80cb81201b780ef66bafc0c66ed676565f26467650f225a", 0x5c}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0x80003}) [ 384.094252] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 384.102088] kasan: CONFIG_KASAN_INLINE enabled [ 384.107059] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 384.114458] general protection fault: 0000 [#1] SMP KASAN [ 384.119994] Dumping ftrace buffer: [ 384.123528] (ftrace buffer empty) [ 384.127235] Modules linked in: [ 384.130433] CPU: 1 PID: 26925 Comm: syz-executor5 Not tainted 4.17.0-rc2+ #24 [ 384.137702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.147072] RIP: 0010:smc_setsockopt+0x8b/0x120 [ 384.151729] RSP: 0018:ffff88018e787cc8 EFLAGS: 00010206 [ 384.157079] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc900024b3000 [ 384.164334] RDX: 0000000000000005 RSI: ffffffff873e71a6 RDI: 0000000000000028 [ 384.171592] RBP: ffff88018e787cf8 R08: 000000000000008b R09: ffff88018e787770 [ 384.178844] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88018e787d40 [ 384.186093] R13: 0000000000000101 R14: 0000000000000019 R15: 0000000020000040 [ 384.193348] FS: 00007f6d23170700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 384.201553] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 384.207417] CR2: 0000000020000040 CR3: 00000001cbb49000 CR4: 00000000001406e0 [ 384.214667] DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000 [ 384.221917] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 384.229164] Call Trace: [ 384.231739] __sys_setsockopt+0x1bd/0x390 [ 384.235871] ? kernel_accept+0x310/0x310 [ 384.239916] ? do_futex+0x27d0/0x27d0 [ 384.243703] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 384.249249] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 384.254087] __x64_sys_setsockopt+0xbe/0x150 [ 384.258481] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 384.263482] do_syscall_64+0x1b1/0x800 [ 384.267353] ? finish_task_switch+0x1ca/0x810 [ 384.271831] ? syscall_return_slowpath+0x5c0/0x5c0 [ 384.276744] ? syscall_return_slowpath+0x30f/0x5c0 [ 384.281657] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 384.287004] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 384.291835] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 384.297004] RIP: 0033:0x455979 [ 384.300182] RSP: 002b:00007f6d2316fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 384.307872] RAX: ffffffffffffffda RBX: 00007f6d231706d4 RCX: 0000000000455979 [ 384.315125] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000014 [ 384.322375] RBP: 000000000072bea0 R08: 000000000000008b R09: 0000000000000000 [ 384.329626] R10: 0000000020000040 R11: 0000000000000246 R12: 00000000ffffffff [ 384.336874] R13: 0000000000000581 R14: 00000000006fc4b8 R15: 0000000000000000 [ 384.344126] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 9b 50 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 28 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 62 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 28 49 [ 384.363340] RIP: smc_setsockopt+0x8b/0x120 RSP: ffff88018e787cc8 [ 384.369542] ---[ end trace 702b492b71723a9d ]--- [ 384.374304] Kernel panic - not syncing: Fatal exception [ 384.380056] Dumping ftrace buffer: [ 384.383581] (ftrace buffer empty) [ 384.387268] Kernel Offset: disabled [ 384.390872] Rebooting in 86400 seconds..