ck_repin_lock+0x410/0x410 2018/04/19 09:42:48 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101003, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr\x00', 0x4) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffd90, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f00000002c0)=""/149, 0xfffffffffffffc1e, 0x33d2b283a0, 0x0, 0x0) 2018/04/19 09:42:48 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x9a, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00007f2fe0)={r0, &(0x7f0000829fff), &(0x7f0000570fff)}, 0x20) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x3ff, 0x400000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000000c0)={0x20, 0x0, 0x2, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x7, r2, 0x10001, 0x3}) [ 333.143992] ? copy_msghdr_from_user+0x560/0x560 [ 333.144010] ? __schedule+0x809/0x1e30 2018/04/19 09:42:48 executing program 2: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0x0, 0x0, 0x0, 0x400000}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00000001c0)={'sit0\x00', @ifru_data=&(0x7f0000000080)="47dcb9413483d74624eaa045515e3d2d91b3e3deb654b4d3c23685dab7309594"}) [ 333.144029] ? find_held_lock+0x36/0x1c0 2018/04/19 09:42:48 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000a7aff8)='./file1\x00', &(0x7f00009b9ff8)='./file0\x00', &(0x7f000064eff9)='mqueue\x00', 0x8, &(0x7f0000fcefff)) mknod(&(0x7f0000f6d000)='./file0/file0\x00', 0x8003, 0x0) execve(&(0x7f0000682000)='./file0/file0\x00', &(0x7f0000000fd8), &(0x7f00003ceffc)) mount(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='minix\x00', 0x1004, &(0x7f0000000100)="e745e85653f4dd811daeed2f8e7221decfcdb9dff3b063fd00973aaae8eadb06159a0000000000000000833622af92cc673792652793edfc7a2d4196caa7bc3ac2614e810f") 2018/04/19 09:42:48 executing program 6: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000a6a000)=[&(0x7f0000603000/0x3000)=nil], 0x0, &(0x7f000075c000), 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x554, 0x5, &(0x7f0000001340)=[{&(0x7f0000000080)="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", 0x1000, 0x4}, {&(0x7f0000001080)="27d0f58eb53d70fb77c6556c6f9a14937289bcbd56ee5026219b36aca5b78101f5e73b7a73d0fb53d6a89cef0e8204553f7db4e58ad0f63ba0a595d91f33d2c1c4c5f4c9569edbbd5321cd650c43880decc46e7d398d3338ec7d3caa61eb05470d8b5f5110b287fca092dea536dbfcaff9b20a147b8b792124bd2c576eada803aaaafc2d", 0x84, 0x6}, {&(0x7f0000001140)="08f781b6b939e7121832c3a6f17c1222cc9453b7e28b730f1ff66f89", 0x1c, 0x4aa}, {&(0x7f0000001180)="4e19faaf8b691e91443d033ec8a2b38084828b3bfa46c0c6e3fdd9742e24334d3774f3754744af6f2407a53a30c69f68f1ac5fed4a73f0baef5402c93d78ef6b6d2c34ea3929cf675cb5b531c9f57a2abf3e620f511cdccd6b96a2bcb8efa652b7a164daf2cc54fafa15d27547789eb315fc616a3a036a545ca1d022514f75ddc3a30da49ca7b8d0407c6f", 0x8b, 0x4}, {&(0x7f0000001240)="c6ad790911ef076494f560472adda6e9b05a85e176274acc54fa49737deb44d754f1f678d15888cfb8c1996d4e9e156c909c9f2d1cb51d46aec4819b573bb9c3450f9df259179928b77dc7831bde3f304898a6b79fa2814fe9d945c880f8ec2546163b007c499bc360a64830140b921dc4451f6cc6dd3f222bc05dc26db32a959ca82675a4a91e80b33d31ad76a62a5b314660f5df0d700ab149c0235b4f826091d420217e5e9e2157336b2138d90f4ffd467423822f638adde88bb5407604e5606165f3a4e048a565de3b8b9b30c60b53", 0xd1, 0x3}], 0x20, &(0x7f00000014c0)=ANY=[@ANYBLOB="73686f7765786e632c5969736e33279d2c663178666c6f70312ad0bdfdc552f8249bc67b6575ae7bcdb23a8120199412d5c9d05c48ec7374726963742c6e66733d6e6f7374616c655f726fffff68656391f841f9f427c3505339ce4d56e6b6ee9f04f53c61fc557a5fd470b63e510c0905d9eab493748daf8288419d50aa1c1a529fa824962f1f4ed9e0b50a65949d6a632348a6bda1011dca423ee0959f5a1ea9d5052d7391b02643d326b94041da14896973a907e4c870dab04324c8bfd81b64825f1c3d"]) [ 333.144051] ? lock_downgrade+0x8e0/0x8e0 2018/04/19 09:42:48 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000000006, 0x0, 0x20000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x2c) mount(&(0x7f00009f8000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00005f7ffb)='nfs4\x00', 0x0, &(0x7f000000a000)) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x5, 0x100) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000040)) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x56b1, 0xa000) syz_open_pts(r2, 0x2002) [ 333.144079] ? rcu_note_context_switch+0x710/0x710 [ 333.144095] ? check_same_owner+0x320/0x320 [ 333.144109] ? __might_sleep+0x95/0x190 [ 333.144132] __sys_sendmmsg+0x240/0x6f0 [ 333.144155] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 333.144171] ? __lock_is_held+0xb5/0x140 [ 333.144206] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 333.144219] ? fput+0x130/0x1a0 [ 333.144232] ? ksys_write+0x1a6/0x250 [ 333.144247] ? __ia32_sys_read+0xb0/0xb0 [ 333.144265] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 333.144282] __x64_sys_sendmmsg+0x9d/0x100 [ 333.144296] do_syscall_64+0x1b1/0x800 [ 333.144309] ? finish_task_switch+0x1ca/0x810 [ 333.144324] ? syscall_return_slowpath+0x5c0/0x5c0 [ 333.144339] ? syscall_return_slowpath+0x30f/0x5c0 [ 333.144358] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 333.144378] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 333.144400] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 333.144410] RIP: 0033:0x455329 [ 333.144418] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 333.144433] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 333.144442] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 333.144451] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 333.144459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 333.144467] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 000000000000000f 2018/04/19 09:42:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r1 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x2, 0x101002) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000440)={0x1, 0x800, 0x1, 0x0, 0x0, [], [], [], 0x7, 0x7}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r2 = accept$alg(r0, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x80000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000180)={[0x653, 0x9a, 0x7f, 0x35, 0x1, 0x4, 0x1ff, 0x3, 0x80000000, 0x4, 0x6, 0x8, 0xfffffffffffffffd, 0x0, 0x7f, 0x7], 0x1, 0x60016}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000100)=0x1ff) sendmsg$can_raw(r2, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) 2018/04/19 09:42:49 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f35000)={0x26, "68617368000000000000000200", 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="40eca1c3b192d804d4464de00c14391f087a6cde6287b7b6daef0c88f445bcb14f373108ff68ed69fffffffe3b6cb7628ed50ef5b6b51ef5ed718d16c63113afeaf4be7fdab3915b6690fc11e474fa1b9696934c8dd56051251eeb00e2cecca51256fbcf2f939f7dac2af928ae16081f1743f1f2598e0a19cc811271d520f2f6", 0x80) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f00000000c0)=0x8000) 2018/04/19 09:42:49 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) read(r0, &(0x7f0000003a80), 0x0) 2018/04/19 09:42:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000358fe0)={r2, 0x7, 0x2, r2}) r3 = eventfd2(0x0, 0x0) r4 = eventfd2(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x200000, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000018000)={r4, 0x5, 0x400000000000002, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000c68000)={r3, 0x0, 0x2000000002, r2}) 2018/04/19 09:42:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000140)=0x1) socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000300)={0x40000000000, {{0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x8}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="fffffff7ffffffffffffffff86dc6006f5260008110000000000000000000000000000000000ff02000000000000000000000000000100004e2230b4551600addd7e93a4682ebbd400089078e75fbcdda4051d8e1e46fc202b6708824da498c601010000ebac125703e619b6343d20ab4a8da9ff86bdf77f7d2793224301a2d98ddbad60215284921950a6ba34af18796436d20a250c6358841afa31a5a57cbfe41cbc6f8781ada3211096d3650dfe558fe02df4534a260d6412e35711e49aa0445fea50d84392604101d539eb2c281d"], &(0x7f0000775000)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x400000) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040)) 2018/04/19 09:42:49 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1, 0x15}}, 0x2e) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x800, 0x2000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)=r2) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x20040, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000100)) 2018/04/19 09:42:49 executing program 6: r0 = socket$inet6(0xa, 0x800000806, 0x0) connect$inet6(r0, &(0x7f0000aacfe4)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c) poll(&(0x7f00009aafd8)=[{r0}], 0x1, 0x0) 2018/04/19 09:42:49 executing program 4 (fault-call:3 fault-nth:16): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) [ 333.765644] FAULT_INJECTION: forcing a failure. [ 333.765644] name failslab, interval 1, probability 0, space 0, times 0 [ 333.777077] CPU: 1 PID: 24512 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 333.784271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.798583] Call Trace: [ 333.801189] dump_stack+0x1b9/0x294 [ 333.804836] ? dump_stack_print_info.cold.2+0x52/0x52 [ 333.810044] ? unwind_get_return_address+0x61/0xa0 [ 333.814997] ? __save_stack_trace+0x7e/0xd0 [ 333.819340] should_fail.cold.4+0xa/0x1a [ 333.823598] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 333.828715] ? save_stack+0xa9/0xd0 [ 333.832357] ? save_stack+0x43/0xd0 [ 333.836340] ? kasan_kmalloc+0xc4/0xe0 [ 333.840240] ? __kmalloc_node_track_caller+0x47/0x70 [ 333.845539] ? __alloc_skb+0x14d/0x780 [ 333.849437] ? alloc_skb_with_frags+0x137/0x760 [ 333.854116] ? sock_alloc_send_pskb+0x87a/0xae0 [ 333.858796] ? unix_dgram_sendmsg+0x4f9/0x1730 [ 333.863385] ? sock_sendmsg+0xd5/0x120 [ 333.867283] ? ___sys_sendmsg+0x525/0x940 [ 333.871441] ? __sys_sendmmsg+0x240/0x6f0 [ 333.875595] ? __x64_sys_sendmmsg+0x9d/0x100 [ 333.880022] ? do_syscall_64+0x1b1/0x800 [ 333.884103] ? find_held_lock+0x36/0x1c0 [ 333.888207] ? check_same_owner+0x320/0x320 [ 333.892537] ? print_usage_bug+0xc0/0xc0 [ 333.896611] ? rcu_note_context_switch+0x710/0x710 [ 333.901553] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 333.906844] __should_failslab+0x124/0x180 [ 333.911095] should_failslab+0x9/0x14 2018/04/19 09:42:49 executing program 3: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7fff, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x3, 0x4}) r1 = memfd_create(&(0x7f000093afb8)='(}nodev.ppp1vboxnet1selinuxtrustedvboxnet0GPLposix_acl_access*\\\\md5sum@\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x5) 2018/04/19 09:42:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x800, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000140)={r3, 0x80000, r0}) 2018/04/19 09:42:49 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101000, 0x0) r4 = dup(r2) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e22, @multicast2=0xe0000002}, {0x306, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x40, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 'veth0_to_bridge\x00'}) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000040)={0x2, 0x0, [{}, {0x80000001}]}) 2018/04/19 09:42:49 executing program 3: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}) keyctl$unlink(0xb, r1, 0x0) [ 333.914904] kmem_cache_alloc_node+0x272/0x780 [ 333.919497] ? __lock_acquire+0x7f5/0x5140 [ 333.923750] __alloc_skb+0x111/0x780 [ 333.927478] ? skb_scrub_packet+0x580/0x580 [ 333.931813] ? debug_check_no_locks_freed+0x310/0x310 [ 333.937017] ? __lock_acquire+0x7f5/0x5140 [ 333.941271] ? reacquire_held_locks+0xbc/0x3e0 [ 333.945874] alloc_skb_with_frags+0x137/0x760 [ 333.950409] ? lock_downgrade+0x8e0/0x8e0 [ 333.954566] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 333.959329] ? graph_lock+0x170/0x170 [ 333.963139] sock_alloc_send_pskb+0x87a/0xae0 [ 333.967646] ? find_held_lock+0x36/0x1c0 [ 333.971714] ? sock_wmalloc+0x1e0/0x1e0 [ 333.975702] ? lock_downgrade+0x8e0/0x8e0 [ 333.979860] ? kasan_check_read+0x11/0x20 [ 333.984008] ? do_raw_spin_unlock+0x9e/0x2e0 [ 333.988424] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 333.993005] ? kasan_check_write+0x14/0x20 [ 333.997238] ? do_raw_spin_lock+0xc1/0x200 [ 334.001463] ? _raw_spin_unlock+0x22/0x30 [ 334.005602] unix_dgram_sendmsg+0x4f9/0x1730 [ 334.010008] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 334.015559] ? unix_stream_connect+0x11c0/0x11c0 [ 334.020303] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 334.025827] ? _copy_from_user+0xdf/0x150 [ 334.029961] ? copy_msghdr_from_user+0x3bc/0x560 [ 334.034711] ? security_socket_sendmsg+0x94/0xc0 [ 334.039453] ? unix_stream_connect+0x11c0/0x11c0 [ 334.044197] sock_sendmsg+0xd5/0x120 [ 334.047896] ___sys_sendmsg+0x525/0x940 [ 334.051861] ? copy_msghdr_from_user+0x560/0x560 [ 334.056608] ? find_held_lock+0x36/0x1c0 [ 334.060659] ? lock_downgrade+0x8e0/0x8e0 [ 334.064800] ? rcu_note_context_switch+0x710/0x710 [ 334.069716] ? check_same_owner+0x320/0x320 [ 334.074031] ? __might_sleep+0x95/0x190 [ 334.077999] __sys_sendmmsg+0x240/0x6f0 [ 334.081975] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 334.086281] ? __lock_is_held+0xb5/0x140 [ 334.090348] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 334.095868] ? fput+0x130/0x1a0 [ 334.099133] ? ksys_write+0x1a6/0x250 [ 334.102922] ? __ia32_sys_read+0xb0/0xb0 [ 334.106987] __x64_sys_sendmmsg+0x9d/0x100 [ 334.111211] do_syscall_64+0x1b1/0x800 [ 334.115086] ? finish_task_switch+0x1ca/0x810 [ 334.119568] ? syscall_return_slowpath+0x5c0/0x5c0 [ 334.124486] ? syscall_return_slowpath+0x30f/0x5c0 [ 334.129408] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 334.134768] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 334.139600] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 334.144776] RIP: 0033:0x455329 [ 334.147948] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 334.155646] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 334.162910] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 334.170163] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 334.177414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 334.184664] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000010 2018/04/19 09:42:50 executing program 1: syz_emit_ethernet(0x195, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff98b33c639340a8170056abd3ffffffffffff68ffffffff86dd60c000e200032b0000000043c6f46f8fc8ac4ca0b7387d2711357300000000000000ffffac14ffaaff02000000000000"], 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x40000) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000140)=r1) 2018/04/19 09:42:50 executing program 2: syz_emit_ethernet(0x72, &(0x7f0000000000)={@random="cd390b081bf2", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [{[], {0x8100, 0x1000000000006, 0x6, 0x1}}], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0xffffff88, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}, [], "802a08000000006b"}}}}}}}, 0x0) 2018/04/19 09:42:50 executing program 7: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000), 0xc0) 2018/04/19 09:42:50 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000000)={0x0, 0x4, 0x6, 'queue0\x00', 0x1}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405514, &(0x7f00000000c0)=""/250) 2018/04/19 09:42:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)=0x7f) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) 2018/04/19 09:42:50 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x800) syz_open_pts(r1, 0x400000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/142, 0x8e, 0x20, 0x0, 0x0) sendto$inet(r2, &(0x7f00009fc000), 0x5fa, 0x0, &(0x7f0000357000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 2018/04/19 09:42:50 executing program 4 (fault-call:3 fault-nth:17): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:42:50 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x4000000010011) unshare(0x8000400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000000c0)={0x4b9cac6c, 0x68892cd2, 0x100000001}) sched_getparam(0x0, &(0x7f0000000080)) 2018/04/19 09:42:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xd011, 0x10c01) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000100)={0x2, 0x6, 0x4}) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) [ 334.613747] FAULT_INJECTION: forcing a failure. [ 334.613747] name failslab, interval 1, probability 0, space 0, times 0 [ 334.625140] CPU: 0 PID: 24556 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 334.632333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.641692] Call Trace: [ 334.644297] dump_stack+0x1b9/0x294 [ 334.647934] ? dump_stack_print_info.cold.2+0x52/0x52 [ 334.653134] ? is_bpf_text_address+0xd7/0x170 [ 334.657650] should_fail.cold.4+0xa/0x1a 2018/04/19 09:42:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10002, 0x0, &(0x7f0000ffd000/0x1000)=nil}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00009db000)={@multicast2=0xe0000002, @loopback=0x7f000001, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0xc) [ 334.661722] ? __save_stack_trace+0x7e/0xd0 [ 334.666056] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 334.671179] ? save_stack+0x43/0xd0 [ 334.674815] ? kasan_kmalloc+0xc4/0xe0 [ 334.678714] ? kasan_slab_alloc+0x12/0x20 [ 334.682878] ? find_held_lock+0x36/0x1c0 [ 334.686971] ? check_same_owner+0x320/0x320 [ 334.691301] ? rcu_note_context_switch+0x710/0x710 [ 334.696244] __should_failslab+0x124/0x180 [ 334.700490] should_failslab+0x9/0x14 [ 334.704305] kmem_cache_alloc_node_trace+0x26f/0x770 [ 334.709434] __kmalloc_node_track_caller+0x33/0x70 2018/04/19 09:42:50 executing program 5: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0xfffffd41) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) 2018/04/19 09:42:50 executing program 6: r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x80000) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair(0x10, 0x3, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000380)=0x8) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$int_in(r4, 0x5421, &(0x7f00004cfff8)=0x6) sendto$inet(r4, &(0x7f0000f7db7f)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef443394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d5683ee4ad5ded9a34c00ac1b03f34627ec18a7c2e92c87b7896549cfab5eb55fa85a970994bd4b22b5f0d045e241256d06f485a47b4a55ed389bc1734541232cd41908b5cfa4b8fcfcafce500a0c7ae99767713a98e7927aa69f6ccd7daea62f19ceb82559f41899c9a9aee99113e7e64b5f8b9824be9fdbfa4dd4995673d882bb4daeb64413b334e114965d2ba3cea8051e692508701b9400cb12eae457f8b8549944091b729160939918d8fcae611a5ded665f770db637487a236da1a58ba7566668651a77171fc4fe506496d19059343dbe4f426625d3f2b705f54581372361770bf5a9098a9fafefaf546426b294239ac33e3186e4d58ad2fa995a6ad4dc074e7cca11aead109563b2076c7c6e9f57ec63df960804e2e7f9d8444de9550cca3df7834d864e9777291c2e1f6205de2e43dc995ab8bb1515a365efc2830fa3e7a1dd137f550d6035212bc1f51c3b4ceea430df49ffc9210084ef156ad7e0d219efd6c116693735b44521d389969a3a65617cd2fd6e14060601cee4cd054cf36fe048b57d1d9ee3cad2a73552449926b4a6b03fbe9c0ec68357e1fbe52ed77b67f5870c0aefb7ee8236747e0d67a26725fb515544cbbe8464da94cfd8c0b94bb4e51a263b1749bd0a7cf651931f806d1b928d1f9994f1ad4d50e6a5cd7a8e4e687f8564fdacc864013d095ba9d5709eced3c28eabda476d177a7836400a01e02beeb5a6636d4064fdda344967ad8682d14b87c71727cb66be27d1d39191f4223c545b62fb4860262ba8076a65dbc194cee1df846c584b7bbe9dce6e6895b2cbbb64b03b55548b845cc3de2f939ef918421af9a5e9157e837651245299c03992d0ddee06bd22a31522aca0f309b1feccebc0b1c0ed9d21c19bfd15cd313ff64394fd6a10904890c9f6d646b026f27253e8f584c3ffd20ad67e8b62ed7676706d40bc5c80e376980b", 0x480, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r4, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000f24000)) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000280)={0x7fffffff, 0x9b, 0x3, 0x40, 0xfffffffffffffffd, 0x6, 0x90, 0x1, r3}, 0x20) close(r4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000003c0)={r3, 0x6, 0x30}, &(0x7f0000000400)=0xc) listen(r1, 0xff) r6 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f0000000180)=0x80, 0x800) accept4$packet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x14, 0x80800) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x2}, &(0x7f0000000300)=0x8) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000440)) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f00000001c0)={'bridge0\x00', {0x2, 0x4e23, @loopback=0x7f000001}}) 2018/04/19 09:42:50 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x58272c3b2d892386, 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0x9) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f00000000c0)) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6) 2018/04/19 09:42:50 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x40, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)={{0x108, 0x3, 0x7fff, 0x332, 0xbee2, 0x8, 0x1ca, 0x3f}, "a973fe8e812e3beab5d1204fa4349d747e52ae048eb200695c2a0ccc60e54d9c1ab67cd463c6dbe89b29d875ff1366a5b4e257ecc54366abc602f1c0b8a9c6295a4487eb951de298e55796dd29f6f2171f1516605bc7b245a37693f08c238ea313e4978300aada6d4b9055b26d291623928c69b355277e77a6fb22d115433c5bb53cad0b4795a502b705de142a742d03050485ecf28158650e003456eb1728586c193c4b3c3d1424d8555ab98d7b032d1c5968b673f381bc5b8b01a086ace1ced6dc5245f60f269cc14023a4240480240b1d7b95cfd91ceda02aebf13a4d15f80022c2779ffdc86533b1ad", [[], [], [], [], [], [], [], []]}, 0x90b) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x7ffffffff000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) [ 334.714380] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 334.719199] __alloc_skb+0x14d/0x780 [ 334.722932] ? skb_scrub_packet+0x580/0x580 [ 334.727270] ? debug_check_no_locks_freed+0x310/0x310 [ 334.732474] ? __lock_acquire+0x7f5/0x5140 [ 334.736725] ? zap_class+0x720/0x720 [ 334.740460] ? zap_class+0x720/0x720 [ 334.744212] alloc_skb_with_frags+0x137/0x760 2018/04/19 09:42:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bcsf0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @random="7c2e1626459d"}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') syz_genetlink_get_family_id$fou(&(0x7f0000000640)='fou\x00') r3 = socket$can_raw(0x1d, 0x3, 0x1) sendto(r3, &(0x7f00000001c0)="cb985a0f452679f5338d2a176de9f7ef9bae6a91e6a9919d4cc49f899550247ffbf4b128a3846923aee20b6a71dd1b0c634725726ea9f0566f6f9c1ba189ca7428f268555204d48a91e749ed1fe886acba5092e2ee33f61ec67ac3f0a6efd46561ff1dc49c6bf1114e7a334318ecc744383877dc6dab438c4b6e247cd68751869275d3f9b59cb20e0543486b3cc55f941b45eef65055c1d219286ee9d78ea6af9679629cd69c2590d734ec48da7fb7fbff9127a6c50bb54c5a3bdef34ab490679413f49ee1694102e6aaa37bf9e49c63604eff2d878dea3a8504ba54294830fa9367e1f92de20504f504147826c7d9dc", 0xf0, 0x51, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendmmsg(r5, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e20, @multicast1=0xe0000001}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}}, {{&(0x7f00000035c0)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000005700), 0x0, &(0x7f0000005740)}}], 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x14) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000001380)={&(0x7f0000000a00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000a80)=""/230, 0xe6}, {&(0x7f0000000b80)=""/141, 0x8d}, {&(0x7f0000000c40)=""/131, 0x83}, {&(0x7f0000000d00)=""/71, 0x47}, {&(0x7f0000000d80)=""/208, 0xd0}, {&(0x7f0000000e80)=""/164, 0xa4}, {&(0x7f0000000f40)=""/163, 0xa3}, {&(0x7f0000001000)=""/149, 0x95}, {&(0x7f00000010c0)=""/199, 0xc7}], 0x9, &(0x7f0000001280)=""/226, 0xe2, 0x1}, 0x40) getpeername$packet(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001400)=0x14) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000000480)={'filter\x00', 0x0, 0x3, 0x10, [], 0x6, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/16}, &(0x7f0000000500)=0x78) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'vlan0\x00', r6}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000013000902000000000000000000000000"], 0x1}, 0x1}, 0x0) gettid() setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff54) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname$inet(r7, &(0x7f0000000380)={0x0, 0x0, @multicast2}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'eql\x00'}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') socket(0x3, 0x0, 0x7) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) [ 334.744241] ? skb_complete_wifi_ack+0x1e0/0x1e0 2018/04/19 09:42:50 executing program 3: pipe2(&(0x7f0000140ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000f14000)=[{&(0x7f00006bc4ba)="bd", 0x1}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r3 = syz_open_dev$urandom(&(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x6) sendfile(r3, r2, &(0x7f0000000000), 0x7fffffff) [ 334.744261] ? graph_lock+0x170/0x170 [ 334.744276] ? perf_trace_lock+0xd6/0x900 [ 334.744294] sock_alloc_send_pskb+0x87a/0xae0 [ 334.744318] ? find_held_lock+0x36/0x1c0 [ 334.744332] ? sock_wmalloc+0x1e0/0x1e0 2018/04/19 09:42:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x42002) r2 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x80000000, 0x400000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x8) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)=0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000140)='coredump_filter\x00') ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000300)={0x9, 0x1ff, 0x1}) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000200)=r3) 2018/04/19 09:42:50 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000dd3000)='/dev/snd/seq\x00', 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00005c8000)='/selinux/load\x00', 0x2, 0x0) listen$netrom(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000070d000)={&(0x7f0000775000)={0x10}, 0xc, &(0x7f00002c9ff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000180000000000000000000000020000000000fe0500000000d2ea4605b01397c209f6240a78383cfd82f1d240bebbb49c3b42bae2d4c9d9dc57351523ecb7bdef9dccae51019822a658ea1af42a002ff8e4b226b92b0e3c6ef54cfeb0f5893a0435c0eb795a41b621dff3fcb455a6c43eba1eab0dade949b391491c6010089a610dd7a137e21e304991474f57983f2d224bb05218519eef34c54deda76bb5e4adb82293a9"], 0x1c}, 0x1}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000f04000)={{0xa}, {0xa}}, 0x5c) [ 334.744354] ? lock_downgrade+0x8e0/0x8e0 [ 334.744377] ? kasan_check_read+0x11/0x20 2018/04/19 09:42:50 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$int_out(r0, 0x5469, &(0x7f0000000140)) r1 = semget$private(0x0, 0x4, 0x401) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) semctl$GETPID(r1, 0x1, 0xb, &(0x7f0000000040)=""/241) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000001c0)={r2, &(0x7f00000002c0)=""/245}) [ 334.744392] ? do_raw_spin_unlock+0x9e/0x2e0 [ 334.744408] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 334.744434] ? kasan_check_write+0x14/0x20 [ 334.744451] ? do_raw_spin_lock+0xc1/0x200 [ 334.744474] ? _raw_spin_unlock+0x22/0x30 [ 334.744496] unix_dgram_sendmsg+0x4f9/0x1730 2018/04/19 09:42:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x9a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) 2018/04/19 09:42:50 executing program 3: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') r1 = dup3(r0, r0, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f00000000c0)={0xffffffff000, 0x9}) [ 334.744520] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 334.744546] ? unix_stream_connect+0x11c0/0x11c0 [ 334.744562] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 334.744577] ? _copy_from_user+0xdf/0x150 [ 334.744597] ? copy_msghdr_from_user+0x3bc/0x560 [ 334.744621] ? security_socket_sendmsg+0x94/0xc0 [ 334.744638] ? unix_stream_connect+0x11c0/0x11c0 [ 334.744655] sock_sendmsg+0xd5/0x120 [ 334.744673] ___sys_sendmsg+0x525/0x940 [ 334.744695] ? copy_msghdr_from_user+0x560/0x560 [ 334.744721] ? find_held_lock+0x36/0x1c0 [ 334.744747] ? lock_downgrade+0x8e0/0x8e0 [ 334.744777] ? rcu_note_context_switch+0x710/0x710 [ 334.744793] ? check_same_owner+0x320/0x320 [ 334.744809] ? __might_sleep+0x95/0x190 [ 334.744832] __sys_sendmmsg+0x240/0x6f0 [ 334.744857] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 334.744899] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 334.744912] ? fput+0x130/0x1a0 [ 334.744927] ? ksys_write+0x1a6/0x250 [ 334.744944] ? __ia32_sys_read+0xb0/0xb0 [ 334.744968] __x64_sys_sendmmsg+0x9d/0x100 [ 334.744988] do_syscall_64+0x1b1/0x800 [ 334.745002] ? finish_task_switch+0x1ca/0x810 [ 334.745019] ? syscall_return_slowpath+0x5c0/0x5c0 [ 334.745036] ? syscall_return_slowpath+0x30f/0x5c0 [ 334.745056] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 334.745075] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 334.745098] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 334.745109] RIP: 0033:0x455329 [ 334.745117] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 334.745134] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 334.745143] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 334.745152] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 334.745160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 334.745169] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000011 2018/04/19 09:42:50 executing program 2: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0xa23bf92, 0x8040) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000180)) sendto(0xffffffffffffffff, &(0x7f0000000100)="85", 0x1, 0x0, &(0x7f00000001c0)=@generic={0x0, "a52d2abe6d97ecf8b83d42f3c827999983b9caa8703ffbc3d412424ad4700218039e0f0a343e899a61ff30ae4b7db311479d681eb6b665f7395d3743e78a6b15c7777b22766c93ee4d26b7b128a86d1fd928ba6e5d1955f6d650f1676d9ce2812a160bf188c4e4869cf8e4b522b9a3d50570b34d793ff838b65e72660367"}, 0x80) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) io_setup(0x469, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f00000016c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100), 0xfffffc2e}]) 2018/04/19 09:42:50 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000000)={{0x0, 0x7}}) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000140)={r0, 0x3, 0x2, "7926426f4c55d4efb353391558a5a967d970dc3f8f72ba443b654869fae734bf7bdfd9973c7ec0acd0d7ac0fab36b4b28181941f2a361144a1a00306850c97"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000000a76f0000002a19cbfe4ff257b87315060000003d575d82b8cda663cb90e877af8dd496363b7784b344e12f334efc4a31b0ca6b5bc58d9ec42a67d873d682d8740244f3017bae22058c8de720bd0a46716492f24801526405bc50c19c04c0182787a929d2dcc50c38e323fd2bc2036a2f6ac01e43bdb40958b1072fe3883a6ba199ee9bfc3bc6350517af8ae74b0245"], &(0x7f0000000000)) 2018/04/19 09:42:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x1f, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="f1ca6113cd85c834098d18513fd6035615e21f90bc77a7bd1e722f005089007ead74f6967d54bb136fc4ee90fe18099a92b423249a278dcf00b04fcfca376684fe4ef4100f42107d79c64dae3e983326d943c7060ef72535776af8f3", 0x5c, 0x10001}], 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB="6572727f72733d72656d6f756e742d726f2c636865636b3d72656c617865642c6e66732c756d61736b3d35362c74696d655f6f66667365743d7c79323932363635942c004fd84e51e15810ea893a11d840a67a9ae4450f665f08c01248709ed7e9fb57bc33dcb542c21e85"]) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000180)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000002c0)=r1) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000540)='ip_vti0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'irlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge_slave_1\x00', r3}) sendmsg$nl_generic(r2, &(0x7f0000023000)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)={0x1e, 0x400080000028, 0xaff, 0x0, 0x0, {0x1000001}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @uid}]}]}, 0x20}, 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x3, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000380)="d4078c2fcc5e2379267f34f727135b31c4b7340c0112067b5598a842f31d47d33adf8f742e3d6de8fe875395ea98de31c97f38b000f83b2de5ec13bfa9b1618f7801523d3f7f2c51f844d934b4a03ca93137db7eb987a67532ee429ab132f90071d836689ca7316a00a9ce43ccd5379064ce8b85df49c16685f2a8ff308734a1a57fd019847a2aeeceb56334192b7e0d583c267559fcf567f45ebc654398437f91b4683b", 0xa4}, {&(0x7f0000000440)="3be2906eed373ba9ac6ba740e423fe6ff9c00d31721fa385bb9275a28369a76aee0dd45c28c3176f0d11ed8f06fa0cfdd22c99d274c63e57a7562fc0c59126f6d3a319fe853bc82756a6f53eedaf970ad25e5db013befe8c0d5adbcbf8e87246f460e5ef5dcb6ca4b4", 0x69, 0x7ff}], 0x204480, &(0x7f0000000500)={[{@gid={'gid', 0x3d, [0x34]}, 0x2c}]}) 2018/04/19 09:42:50 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x1c5880, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000140)={0x4, 0x0, [{0x0, 0x0, 0x3}, {0xbfb, 0x0, 0x20}, {0x8fc, 0x0, 0x62be}, {0x40000b63}]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4e}}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x101, 0x0) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f00000000c0)) 2018/04/19 09:42:50 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x501200, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000240)={0x48, 0x4a9d}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000e1000)='./file0\x00', 0x0) r1 = open(&(0x7f0000851000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f000003f154)='./file0\x00', 0x0) r2 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="7b1dd824a047b4ceba2abc3d50e05acae12c65cd157e3b4adb0b9f493286e33c4751b3e53c9487a436a5bdd0572ea832e59817b99a4682c00563b07d994ef16dabe4133331752cac6c82c13ac63acf7faeaa832d63333b578c54dcca6b38", 0x5e, 0x7}], 0x20000, &(0x7f00000001c0)={[{@creator={'creator', 0x3d, "c34e6160"}, 0x2c}, {@codepage={'codepage', 0x3d, 'cp1250'}, 0x2c}, {@gid={'gid', 0x3d, [0x0, 0x37, 0x31, 0x38, 0x35]}, 0x2c}]}) getdents64(r1, &(0x7f00004a9000)=""/4096, 0x1000) unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x200) rmdir(&(0x7f0000000000)='./file0\x00') 2018/04/19 09:42:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000180)=0x3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="c2000000002000000000000000000000", 0x5) ioctl$TIOCSTI(r0, 0x5412, 0x8001) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) 2018/04/19 09:42:50 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffe, 0x8, &(0x7f00000005c0)=[{&(0x7f0000000080)="f7e8ea408e8df47c16c9692527eae56be9df7f7522dfe0cff8ef5d762f1179e1633f202c3e879675bdf0a962c56abffc245b1ee5f30d251bd9e4aee051eac7bfb28532efbc84ff19e6f17f51bca7da0ff0587378517781c8e6c5207ec05cbfdfde95a939d28329c0c67bcf31a8d28e8a28dc676a66eb635b696229d25d63119e2e33ea3124857e9e5d52ab2c1bf09edf8037909ef82983f69853c8d1f6f17f8fd073f617bbfae1fc5a9ecca0d39b1c2c790e60d80ce73d98318ae0", 0xbb, 0x80000000}, {&(0x7f0000000140)="739d5f958e4971ba99735557da01f8f3d3bd25e448a56d260e01c98df30bf5dd6430d0cfd50f05af82c1053ddb642c4795", 0x31, 0xfffffffffffffffb}, {&(0x7f0000000180)="db0ae536ea25aec81a6a735b4278c032b5583e94c77d54e8453a05e637f92268b1c5ba3fd8f19ca81f4c3478d6476c0a05c8e4b4177278525267818213532b21a545b76c6c929e4c5ffbf1e2e2b9b2ffc3dad5e69f63bf2070da161993cefde49f55ab05c422738f0c40d3de0a4407de7cf90cd16f6e3579b0282edd559a152dc9fef592aa2a0c032ce2c8c60b4dd5e5b466f8b8e4682852d0cf0c485cd868249a6dc572a37a9141d1b75ea4f8751a55890bcf358aa8a62f345f18cf64c4d9032c203727aab40554cbcb5955a11261ddb8ff4fee96f63f72f2ee75bb3ec504c081b969bd5809d76e5d6a43", 0xeb, 0x81}, {&(0x7f0000000280)="c844e10a8d4d36bd3eb2d8b4644495625f36230d8ec0714076d0f5b4160c7b2036faf5b8dc1fd1760661c8d19ddf75ba66c0c86776ce9d271ccf2ccd2f7081c870330a7e89e7cbcffe19a434a14c8b4a7d323f9503dc851855b60f00c87db3a742aead201f551c0b45033f210d427fd1bdd0e0f14c15edf0df82b9f5e7ca0a3f8b853a45526fdb38c33c80741957", 0x8e, 0x81}, {&(0x7f0000000340)="25e51e86b76080ecc62351b0901e19", 0xf, 0x20}, {&(0x7f0000000380)="ac74197eebd324ac52e9b6fdc7ae9510feaa5e1ee61bcc09c29a9d24c47735771468ea65dfc47a2959f425939e956cac91b648148f151af1b82735bb7e736fc4ee572d83d8c81ac4f0914bc8666ae0f55e603aa14df60201f1540297fac73d5c20f1db02be5c9c056e4a915b0b52ac4f80710e70bf0e2ff4cb59a3cb57000b9155633eb2676e921772ae1ae7c1fb3b26f4b976b35994868d5a16429443de2d96bc648dbd4d983a4f58bcdbd5ae9b663ade27f077c4c80725c8f5a7782b11fbdb", 0xc0, 0xfffffffffffffffa}, {&(0x7f0000000440)="3a89c9774dbec372d7668013993b24c837871ad327d9a422a6ad844a177d22e3649ea4540f0aa88b7ae13c1273be6aeeff2491a7f972b2d805c5a4328fe44fdc7e14192b9d6726ec629a825ab8e1aaf49587680249cbc5923465a9af23405aabd84a9679a869cb55b27021395ad3143d2b5288d27b", 0x75, 0x3f}, {&(0x7f00000004c0)="3e9b1947d381ed40095458242be70f11eb011aea94fcd9a8a1cf8f7b6323d3dd1bdf38d3b850f8fb0c151dc667f02766ab658cd1648619f520e455d86fb798b925c562fbbf25ae44ddb8ddc491a451d4a8a6e08406e86a59adc5bbbcdf5e77cebd3103e4f79d4938daad7f8fa14b2cd19f5825888516fb8dad62ffaacf4086269ad156c797096c786edf280756f499e487203a950bffd0d9168f61514c21e6d461a39a96d4af37a354a7d4922875f47d22fbabca306ea36db43f4ad7062cb944b3536dcb843ce65e09727b55b86de7e03c046e329a205f2edd89342ee26c402b98d3f70a8277488503c1ac5d3fa435355e85ac", 0xf3, 0x80000001}], 0x240000, &(0x7f0000000680)={[{@nls={'nls', 0x3d, 'iso8859-13'}, 0x2c}, {@nodecompose='nodecompose', 0x2c}, {@nls={'nls', 0x3d, 'cp936'}, 0x2c}, {@barrier='barrier', 0x2c}]}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rtc\x00', 0x80000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000740)={0x5, 0x10, &(0x7f0000000700)="ae6dd44af9a15636df8d25c142b9f9e8"}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vcs\x00', 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000800)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000840)=""/63) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000880)={0x3}) r3 = syz_open_dev$admmidi(&(0x7f00000008c0)='/dev/admmidi#\x00', 0x1, 0x80000) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000900)={0x0, 0xd001, 0xffffffff, 0x8, 0x401}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000940)='/dev/cuse\x00', 0xa02, 0x0) syz_mount_image$reiserfs(&(0x7f0000000980)='reiserfs\x00', &(0x7f00000009c0)='./file0\x00', 0x1, 0x4, &(0x7f0000002b00)=[{&(0x7f0000000a00)="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", 0x1000, 0x80000000}, {&(0x7f0000001a00)="3c6b239c591643007dd5e80845b18dd5465d30b635a7d05f46a7f3e3ab926eeebe109bd1dea4b79b17a8096c360bd15d90e2ba8adabf7e047912e0616203be498dd37d0ffd1c560c255fd7021b759ff5053ea22bdb1f686f6cc0a91d", 0x5c, 0x9}, {&(0x7f0000001a80)="17a4d3a01f88933b2d25bd580c28169aac3e2d73d641be22971d71e1c9888399975212f2a7de3b2932a9f93a5db0fe2191dc68c4cbde13f7aaa168021fd6fb358f47d23747fd9476c91da00b3df70e7b97ad50d254cc860cdbc4a4f7616af23ee4b560ec28040826933065acb6a8316c468f851cb6001a1b89dd46c33795b70e8b6f129e86c702a751aecaeb7c35455c04efb464e1a8d20cadc5b08c662a94add4eae2b2dfa2a10f35772de885af387ca95dd7550d6599ebf1be4525b73fff92f417cfb6f8388150f841bd020a23206270d75900e2f13bdbb3f661eb262c6b436d03433bf3e98ccc485ecae757fb9235a6b235e9c765e2d7c851054f514840d0fa02360d580922f3920eab2e1fb64116e80731322581f1d73e88ec11833c369abe2a7d3607eac879f57169999cb6ae1d81468f3435951581fe76eb9a1a037803faa5b38f67559d0ffb42f3bd06aebfff10ab5542e9ad33e41723bdedab0d1efd8a590a404bd4b42bdd5a50d511821a2f85ad57d9e69fce18a8c5cefcdd5fa4079f4bc33ccfe6346743b1a53e0b0a9c6490d93321ce2ef0fd220ec773ed86057222a8f0328d57244be306d7ff947796e92e9f159115852f8607e90b0b4a13bd55b316422f7a4c09cb04669ef118d21fd051ce4192679aec84350e4d8e3e2b2948e702052b158efd0377c2a2a21b2375b7037b315981dd923e2f3a4f51449466b5d2ffc879ea453bcbe00e02932497a670872faa076d9fb116d63da11a1cddc7dce8c7abe8cd3d29fb447494be6f141ff12499eafb3b80fca9db587527e22a892c2d7f62e5415af5ed8319ec8a8f1f411b2fd5c51bfed315462df21552446a23d6a4e44c74ca7ce96109d57cc916c2a8cb3bb7cce18109f74b484f3c195d941bb28297a0ffb821c901c2a1ff2bacdb8136e3070f8e1ae2dddf08abb4c51407402bab62117b1f63a4ba1bc31a046afb029c1f727b44ff1363ff1087fd386a87b57a9f8f8b3e951eabc2b66d96c2b37c8004e53832f830946792a94a2ad686cfe1ab3f636dc85a69423e3200fac9c384882e389b67e7d3e79baac8274e09cdb0d14aa2e62e10fb23ecc8b65d22d5017c111013aa55d5de83302c892633bad224299a8756e6a23feeefaa589340ab3e3d3f38b441c78ed90819ddf2a560bbeada578cf568d5dde5c84c4408a640cc22746030de62692a4a2431bd3e88693dd3d0ef3c1d65e31e2420c6a855d821340986800cded51671f5bc5427e9f6e600064c5c66f6b8eed4cb4a82ecbdb1e8d8cf0cb19df911ccd595cda3c778ad3b1a2f25df7bdc969676e3b7f2d822fb69ba74d40750d700a4fa295247bbddd8b1c51189f98cf62ab3c619b33f415a605c0fbb85b63a28f66871dd643753888569732158831f4fa87501df64fbaa444f8836e02334718473853cf64a67654df973e750c9f6aad628cef43ef7337eb09f27e380639900e9b77743962ba9f4b1c2686de9bed2c42655dacf22e84f349328174c8cf2f47b69c9e94e3d2c7325b9a5227ed76886263aba6ddd1dd60b909f94487cde5f915b0826c257bb77067c7f58f78461892a3330a6dc536f85ef12cc401c8dd47940776bc76c50bdd6379de6f6f33e12d06368d389bee3ae1fb7999b7eb45514253e81ffe0b42a54c8f45e4532d9cb035938df1c5cf60e2f8aba26e16438ca3971400e51a1b1954af9fe1fcb384eae2598aaab3423756f7712b450905aa1c788b9543444c30b34cf11ff8790967abaa3d73738d2c8f62093a666f9f588b1154fa28e66275e378fe4bd440356f8149d3e204edfd395eea49f9a04822968fedee35266161d526dcd07a2f74406aed8916b36de398f74f50d6241ee5f6148841cea69c2b7fd594e0a63897bf97fbefe9d1c6d9d34ded69243b87f6aa525b36fe5025f96bec2a1a241c5b881d4b8ee9e152cafa934413637be7aa840bddaa22df800729a3ddd857cbbd7a0b2793800fbeeb2fe14c8cd526aac3fad818f3126a2317b520818aa9b1897ecc8fcaa3efc399e2f6cb133e9d4be99f2a10dfc0485fffc4063891641868640326148f9af4ba20b9a29ad5e7434c0d6b611a153f8ed6d5734a6a488814b946b2bcc399d47765aa813e4204bed3297d67f52fdbd39786f4ac65574304a9e9e8bee366edea731a2e03b2e1e6afdbdd51a47d69666ffbfb38971457125df789018f7e655e25bda2d1067dcdf5d40d018868146e352a563bd94162271062ff7e6d371999576e4cabba6746d881160725b2d6f5f34c04808f4dec150de22a86412888e1fe4b89f999abfaff9096de69095e038f9373174dfd21e79c6af92ebb97acde9239cf17f420f17b7d336c093b7559fa327d545a14f4d87e0a6797d92b7a0a7d8b3d33a3453a47999027943d21879356ef8589c3f877817fec1c8b959ac2c7a11f91e8c54fb0a61856b96babd1ed9f6c62273143acbd87685dba01826e0857eadedae8749eb2b7f28970f78123f2f438ae365d51bfbcc6fcd5266202ca15cec9e73b043ef124472a3fe34918c40adce16a85d5043e0fbdc517c3d6f0cae53201445f5619e4e6ed9211cf1a64855e8072aab37e63cfca1b6cabc1124204b05e89881ce73e91f1d616b4e5b43cf26187a7ad7928aff95e00b4903d4b07097023feab3638bb95da532ff0f30b2b89708b22292a20e209e777e12150f27bf535e9d82303d3de04c713d5457ff3e07e1c7dc0fd783fe39045ffa80798a3419e1c1b8291f2055049fed6af57edb585424fa58274359f9eda438a7d830c03be574593eeeefcc108add9ca5c7a7f50af0906aa62251b6f82e81f40ad320a8733f3ad9b197789bac1535b98b7599a46e6b908cc52c2e7cdfadec1da7d131afb9142bd71b0b878da3d1559afbdb7e8650f5ea3b4e8dac6fb5c8ef0e84d62d1576181381df2f5ea20c9be5ec9605fedab1a4cd850931b598ee4f0ba6a27fc5a472f1ddc013d364497e5d97a4b59bea07fe56b822843a953e08ec5969e3b6e07fa5e26db206b1e9b63abba1761c3a676dd16d45b249168019634b6de617787035102b48af00997875fde84eaede5af27250f7d8dadfe46583e2a09de08860c55e2f36eeb43875a44e68c8f5abd368098beaa6750e30185ddf695df87eaebbd4a083bc67ac88780cfbf8928863e7a1e29da7cc7b559237252141f05cfb156b763ae1c36a5e54c9bf43363b3e99abdd0ae03b2b95d97dd86cbe3dfb62bd9a32ef1736250b3865780068b1335265b6a94a7582d18d6145146323cd2b4a6c98bda338e0fc21644d48ac38c3b0d25094ef6ce7d294f10a4702a373dcd7745c7172a6170092294b32f6e03de2d97a8bcf3a8e3eb7b220214af63839657a29067207010b33a0b3a5c1f8ebd82e1a30cb0de2eb720ce68f3bc8af0e39fa1ab77dc79877d67a80c066c68f0ce2b8b1b946083369167e65134fdaacd05eb1fa8904799b6b16939cfdc07260b3d96c01befe4cd6bb092d564f682e10082f4dfea901f4d73cb9fb82a8b4f9e37be999c7032b7dbeeb86581ac519cf1b1a1a1b970a0676fdb1095cfb2a19d7c27463018d619a506d6bb542c28a466d2c4cbd7d3b9a381925683efa1ded4e029df9c1c2dce8ccb2180d486b5b20645fa8d1f955556bfa3ee76a865af72bcb4f35e174aeaac7ef3440b3ad287167c7879efea46645a5dd24b498e0270d6ea3a1bf9e4f881191ffd20b161482901fef786073c0ebcef6215c00e94852e3893b2cd284dc0bba1425e2f18e51001edb02336d68a0a11d29b5a23af8618a20676f6b27511ad5df074e83c572287b4705ca977c27fa31c4585bc6ced8db075c2526233ef54fbb499f3f9f63a36a6d4cbe81fb089ebbc6c56ba2b52c5661eb9b08561a18c742ebef74c53b5c440e274134f2ca7afdde3406ae1aa3eef3fbb2a0cac6b2479017026a46e9606970010135d609fd3d4657049e6ee9fa16cb9bec3176c3bb127ab48673e66ea023b053e56f2c1d66607d631fbb5b968786b89105d208a9dc6ba3ca8cdeb9539b20841153d54dbd03745622640aa6dd5bab7b947193cfbb9146e235dfa4df51bb2e95d40cbce6eb7c0e7ddb4aebce2c31c2224d3a8ec8846878c825f33e34adcba7756c1adf44cf4f90f551075627ade286296e4d2183284adfa52c51746ebea50f22cbf67c2aae710f9b2ef14a3c78c129dd72baa49237c078b90ad3ac4f2795540c908e287d701d5c785bc9e5501147a06fd70a20f17f7ae7e1cdd6f7917884a09f62477ad6d1052851c15da36d3b5db233be8ee8a7fa81d65db690ed4cb64e0d057260c5efa47283a642118c6fbf84cc80049dfef5496ab017b258c29dbbc0b61ff9f13b9aa5d4c442c8b32f74db45dcdcacd68d242501e149162a23e6d954730d10accaecd7c5f785bf6296e430514c2ae10d7dee248077d857b0c6a5f64ac660be56fcd93ce7dd045f7179ddf876246d8ff1f90ae88875d03fb833b880443f0a8da95af2282c39711e7a5f397294362ed06445ab93043104a3fbcf455bed953452dfb4e90ac749830c72f75192733df049d8641fcc6e105e243f83490e83d83d5f03d9940a973439a5d9caceac287f9d5f731763aa42a2388416de0a3202d5f26ff5e62324ede28783ea00ac33b27c022983aeea42f8574227a165f2f101cfdbae0693b23f76a8d08f7ae848128426e90dce86ec13e268d3628bb0cb0e222736ed505c80f152096cdd78c46452e716180b94f991b4be9b062eb827f5af378aeb04ee0a80eea0ffc07d1cd83d8ac8486ebfb176909f1f550e882aa87f4599c14e2c16e387ec62c6cfdcf61eaf9f0d16624defcdc0954f62928ad357e87d1b277752ff1d17704805d9effb13c94007fdd00f60b104cf93d004fdfd34b3d493194781a6b102ae085b5369aea2aca007692aa6e5ae707a51aa7e63b151480dc00811fc05be509cdbebeba90f0daf7bd0a52577eecc5efc8360592ce30d7899539decb83eb7e7b33a38f440da3d8bedb82c434091790f6d03930ed9f759be5143d447f8a6ae5d5c5194853471ddddb31ade42965399cb73b730b3a43bc910de6791b677354cf60a6f5bc39d47dbc113af91fe400e41dcfad833d642d4093ce8f287795f866bcb97dc0f5d64d1266252626b4979ec950401c5fdb5516a698f8c97cdbacf84a11b0222c59820149967031119c5ec2a0c2cf29d7a78289e93da6f562d0f538989739459912b46ba47332d5af8d34ee023431852911c0312e1ed1eb3140e7dda4c88c9c6188f6694e1640521bdfa55ff95d68326e0b2032f5398f767672781a2bfeb5858560aefdd8e49be312d9803f510a6d911ab2ba4ddc88ef4badb33cfd2e1f48a36f47fd38c1c7f0ccf826e50feea4aebe43fdcf01020997983ec7f22f47b84d6b787a080d049eb318f331e1f5dc57acb6cafb8c5b8bbeb618b583e4670e7a463a7f1d58c6f0975385e05f02a8f99f638aca8dfd97b510ec4e8a201f4273265c9dd60b7c142813def65f5b0fc0e70adc4ef1f37fec9c41764223d194f0d9fd57baa968d2f3ab37c13b280db895571b4fd6af62824d0e0a88a2b47071648abfd7efb0957f1ec03e6c2866e38a44d1a3d313060bfe36daff76bb745fdc1586012e317130e38dc506cb56622d3bff46aeca71fd5a1b90f1326fdc770e9113887813849f5bca822dff3a60dc9b5164e63553abaebe0dd47c50c65e5a98098200c81efdeea9a26b8a70895f18bea9380d6b0885a3af27c0740f11225170414010198534738a88a92bdc1a0e3ad9364d165f6d58136ea51d11857ac3aa12f24dd", 0x1000, 0x2}, {&(0x7f0000002a80)="c8d26736bc07b1d02c12cee327c4001db899e7a3c9d64abd2ee1764d3071a0e9b917073ec7f02be2936d369f695deb39ae1a00d380c4aded56ab6bcdfe587554a8dba777314264d46ce8d9128dab5d3bc8f94a91e4a569f710", 0x59, 0x5}], 0x10002, &(0x7f0000002b80)={[{@barrier_flush='barrier=flush', 0x2c}, {@data_journal='data=journal', 0x2c}, {@balloc_notest4='block-allocator=notest4', 0x2c}, {@balloc_notest4='block-allocator=notest4', 0x2c}]}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000002c00)=""/40) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$hfs(&(0x7f0000002c40)='hfs\x00', &(0x7f0000002c80)='./file0\x00', 0x0, 0x8, &(0x7f0000005040)=[{&(0x7f0000002cc0)='Y', 0x1, 0x9}, {&(0x7f0000002d00)="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", 0x1000, 0x616e78c5}, {&(0x7f0000003d00)="58ff2d9045e2cf0d07dce058b0725c824596f39e0d5766233debc8df2e1946e2815efcb72e75ed4d54d3", 0x2a, 0xffffffffffff14be}, {&(0x7f0000003d40)="126da157adcc5a73873d1aac057af6c4d03d1ebd21fa2d00042de02a66a6c662df1df059e99db0bed320265e9908fa3f689a87a93d660db7a9f5ea3fafc19e61eef66a9381342b6c58c18e03db4784d1240cc209c8f5c4e26dc429aed32f0a88c4609cd5f648de954db1b80d7c3b2dd53ea9cc1b3a8c1e871f4b60bd0a91ba2aad5d37682cd0d1c8ac4c5dc425e469a34725378521d0833dba555a35b65a6797e9117f42a3baf01a9da3ef0765ecd5f0ec9a4dd72c", 0xb5, 0x3}, {&(0x7f0000003e00)="749e971fa09d297206df4f3946e9ab062ee1c4252dc83c01d709ebfeb17d7e4c3cabf2eec59971baa4045635e309f834fc2930d8d108862b3b54b70243ca5352e95d71448b3cdd66010d65d7c9501c7c758c88b7a938df1c344816989241bc0071556b634fe9f4ba4f23d697a3e2961c", 0x70, 0x3ff}, {&(0x7f0000003e80)="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", 0x1000, 0x9}, {&(0x7f0000004e80)="73f3de4a4be26d9225e4fcc590e02a350bfeaf9a7dfe20ebd3fddbe4fad8e41c551e3180501c2178cdc30e477d91bf78738cc63772235588fe98f2a28d265c6592abcbfc53bf652dc083a3f5bcd73604b37c033c25dc48813d0464e58cdf2aeed3de14a3dcdf04994ce967b944e7405e7f4e783c902edd82c9f4547baeb4433c42045f8a00c110de692909f726e4fa09e37b23132a3b08e4ab2b29bab1300b4394dbc028dc040b72cb81aab126b92d91", 0xb0, 0x50}, {&(0x7f0000004f40)="f132936e377b64550dd19233af25377b68fb060d1d3a43bf758c0767348ca67d27722c4722bc2ae718dcf672fb6c06dd4bf1f7128328d6fb216bb25aad28ba639520dcf38e3ffd6fc80d77fb33140e007668956b39fe476c0406d259df5327b1fe01b89981a990cc395a4e037a3e8971db2bd01ed42af9cc894a077815dc97fcb9f178fc335f0374d0f9c91325c8500c3d45319d871b7625ebbab42a6afa6ebc24534b6d59dc6b92c45b15fb1da8d3e44e944524507ada6d9e8f92eea35714ad1c08b635478a6d645b6df4ffb096398f57de224a78666e9791452d5f31", 0xdd}], 0x2000020, &(0x7f0000005100)={[{@codepage={'codepage', 0x3d, 'cp855'}, 0x2c}, {@gid={'gid', 0x3d, [0x30, 0x3d, 0x30, 0x0, 0x38, 0x0, 0x33, 0x0]}, 0x2c}]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000005140)={'bridge_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000005180)={'bcsh0\x00', r6}) ioctl$TCSETAW(r3, 0x5407, &(0x7f00000051c0)={0x1ff, 0x0, 0x5, 0xdc, 0x2, 0x81, 0x3, 0x6, 0x7, 0x9}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000005200)={0x1, 0x9, 0x1}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000005240)={0x1, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000005280)={r0}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) socket$netlink(0x10, 0x3, 0xf) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000052c0)={@local={0xfe, 0x80, [], 0xaa}, 0x66, r6}) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000005300)='/dev/dsp\x00', 0x80000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000005340)) 2018/04/19 09:42:50 executing program 4 (fault-call:3 fault-nth:18): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) [ 335.466377] FAULT_INJECTION: forcing a failure. [ 335.466377] name failslab, interval 1, probability 0, space 0, times 0 [ 335.477739] CPU: 0 PID: 24640 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 335.484936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.494315] Call Trace: [ 335.496930] dump_stack+0x1b9/0x294 [ 335.500572] ? dump_stack_print_info.cold.2+0x52/0x52 [ 335.505780] ? perf_trace_lock_acquire+0xe3/0x980 [ 335.510641] ? unwind_get_return_address+0x61/0xa0 2018/04/19 09:42:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x2180, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r2 = accept$alg(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000300)={0x7, 0x7fffffff, 0x400}) sendmsg$can_raw(r2, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x80800, 0x0) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000200)={0x0, 0x1, 0x100000001, 0x8000, 0x7}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000100)) [ 335.515588] ? __save_stack_trace+0x7e/0xd0 [ 335.519930] should_fail.cold.4+0xa/0x1a [ 335.524011] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 335.529126] ? save_stack+0xa9/0xd0 [ 335.532762] ? save_stack+0x43/0xd0 [ 335.536395] ? kasan_kmalloc+0xc4/0xe0 [ 335.540297] ? __kmalloc_node_track_caller+0x47/0x70 [ 335.545414] ? __alloc_skb+0x14d/0x780 [ 335.549312] ? alloc_skb_with_frags+0x137/0x760 [ 335.553996] ? sock_alloc_send_pskb+0x87a/0xae0 [ 335.558678] ? unix_dgram_sendmsg+0x4f9/0x1730 [ 335.563271] ? sock_sendmsg+0xd5/0x120 [ 335.567171] ? ___sys_sendmsg+0x525/0x940 [ 335.571329] ? __sys_sendmmsg+0x240/0x6f0 [ 335.575499] ? do_syscall_64+0x1b1/0x800 [ 335.579574] ? find_held_lock+0x36/0x1c0 [ 335.583681] ? check_same_owner+0x320/0x320 [ 335.588017] ? print_usage_bug+0xc0/0xc0 [ 335.592092] ? rcu_note_context_switch+0x710/0x710 [ 335.597039] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 335.602334] __should_failslab+0x124/0x180 [ 335.606723] should_failslab+0x9/0x14 [ 335.610541] kmem_cache_alloc_node+0x272/0x780 2018/04/19 09:42:51 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x84001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth1_to_bond\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', r1}) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x14100, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x1, 0x0, 0x10000, 0x1}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000340)={{0xcc9, 0x6, 0x6, 0x4, "080be7d92b8e50b156d9792f449430f84b587e248469d20f3e849f7dc90435d2af0b482d5bc2ce9e6f159ee1", 0x5}, 0x0, 0x0, 0x101, r5, 0x0, 0x20, "403c87aff3e40bd152f1e6272fc4a02376ed3db049a71e140118d61863dd9539c598095b8a0ce6703e8dcbeb131e98cc0497ed3e5cc474968988c94d0590b1fb", &(0x7f0000000300)='/dev/sequencer\x00', 0xf, [], [0x3aa, 0xfffffffffffffffb, 0x7, 0xe131]}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f00000001c0)={r4, 0x81}) r6 = openat$cgroup_int(r3, &(0x7f0000000480)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r7 = accept$alg(r2, 0x0, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rtc\x00', 0x80000, 0x0) ioctl$KVM_PPC_GET_PVINFO(r8, 0x4080aea1, &(0x7f00000000c0)=""/92) ioctl$TCFLSH(r3, 0x540b, 0x7f) recvmsg(r7, &(0x7f0000000640)={&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001880)}, 0x0) write$cgroup_int(r6, &(0x7f0000000500)={[0x2b, 0x36, 0x30, 0x2f, 0x3f, 0x37, 0x2c, 0x37, 0x30]}, 0x9) [ 335.615155] ? __lock_acquire+0x7f5/0x5140 [ 335.619494] __alloc_skb+0x111/0x780 [ 335.623226] ? skb_scrub_packet+0x580/0x580 [ 335.627564] ? debug_check_no_locks_freed+0x310/0x310 [ 335.632776] ? __lock_acquire+0x7f5/0x5140 [ 335.637023] ? perf_trace_lock_acquire+0xe3/0x980 [ 335.643528] ? perf_trace_lock+0x900/0x900 [ 335.647785] alloc_skb_with_frags+0x137/0x760 [ 335.652305] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 335.657072] ? graph_lock+0x170/0x170 [ 335.660888] sock_alloc_send_pskb+0x87a/0xae0 2018/04/19 09:42:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'veth0_to_bond\x00', {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x202000) ioctl$VT_DISALLOCATE(r1, 0x5608) ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000001c0)) pread64(r0, &(0x7f0000000100)=""/79, 0x4f, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r2 = accept$alg(r0, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000380)={0x6151, 0x3, 0xff, 0x1, 0x3f}) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f00000003c0)={0x2, 0x8e, 0x0, 0x2, 0x0, 0x8}) sendmsg$can_raw(r2, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) semget$private(0x0, 0x4, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000440)=""/46) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000200)) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000300)="df8ac9bb03cf8caddf3813e393fea6472ea4f8a46a00801d641e76ffd5fb9235a8994a12faac8d475fda8782b73febd400828a941803144d1bf708661910b08d859ae6a4679356d4") ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000400)={0x200, 0xa2}) [ 335.665399] ? find_held_lock+0x36/0x1c0 [ 335.669473] ? sock_wmalloc+0x1e0/0x1e0 [ 335.673467] ? lock_downgrade+0x8e0/0x8e0 [ 335.677630] ? kasan_check_read+0x11/0x20 [ 335.681786] ? do_raw_spin_unlock+0x9e/0x2e0 [ 335.686201] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 335.690797] ? kasan_check_write+0x14/0x20 [ 335.695042] ? do_raw_spin_lock+0xc1/0x200 [ 335.699289] ? _raw_spin_unlock+0x22/0x30 [ 335.703448] unix_dgram_sendmsg+0x4f9/0x1730 [ 335.707872] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 335.713427] ? unix_stream_connect+0x11c0/0x11c0 [ 335.718192] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 335.723736] ? _copy_from_user+0xdf/0x150 [ 335.727901] ? copy_msghdr_from_user+0x3bc/0x560 [ 335.732674] ? security_socket_sendmsg+0x94/0xc0 [ 335.737444] ? unix_stream_connect+0x11c0/0x11c0 [ 335.748559] sock_sendmsg+0xd5/0x120 [ 335.752290] ___sys_sendmsg+0x525/0x940 [ 335.756294] ? copy_msghdr_from_user+0x560/0x560 [ 335.761071] ? find_held_lock+0x36/0x1c0 [ 335.765137] ? lock_downgrade+0x8e0/0x8e0 [ 335.769288] ? rcu_note_context_switch+0x710/0x710 [ 335.774211] ? check_same_owner+0x320/0x320 [ 335.778537] ? __might_sleep+0x95/0x190 [ 335.782507] __sys_sendmmsg+0x240/0x6f0 [ 335.786496] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 335.790812] ? __lock_is_held+0xb5/0x140 [ 335.794892] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 335.800414] ? fput+0x130/0x1a0 [ 335.803678] ? ksys_write+0x1a6/0x250 [ 335.807476] ? __ia32_sys_read+0xb0/0xb0 [ 335.811553] __x64_sys_sendmmsg+0x9d/0x100 [ 335.815806] do_syscall_64+0x1b1/0x800 [ 335.819698] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 335.824554] ? syscall_return_slowpath+0x5c0/0x5c0 [ 335.829481] ? syscall_return_slowpath+0x30f/0x5c0 [ 335.834405] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 335.839773] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 335.844622] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 335.849801] RIP: 0033:0x455329 [ 335.852975] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 335.861369] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 335.868623] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 335.875877] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 335.883136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 335.890393] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000012 [ 335.922564] QAT: Invalid ioctl [ 335.940896] QAT: Invalid ioctl 2018/04/19 09:42:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x3, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffda6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bcsf0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000a12fb8)={0x1, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071104c000000000000000000000600000000000000000000fba37978c8b143eda4e7c7e50f07df98896d7b0141d3b893b3c4fa672c99db66b6b495d619d9057e1863f318a42e438787d710b8026404a9d7e27e584ac0387ef0c30b13a0577f41c07c810bc39aa6801c3b62773c0f69da8a42e8a73000"], &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f00001a7f05)=""/251, 0x41100, 0x0, [], r0}, 0x48) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x20000, 0x0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000140)={0x2, 0x2, 0x9, 0x0, 0x8000, 0x6a}) 2018/04/19 09:42:51 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x4, 0x80000) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000100)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4000004807fc) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002fe8)={0xaa}) r2 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000ec0)=@nat={'nat\x00', 0x19, 0x5, 0xe28, [0x20000080, 0x0, 0x0, 0x20000270, 0x20000d80], 0x0, &(0x7f0000000040), &(0x7f0000001000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff020000001b0000000200000086dd69703667726574617030000000000000697036746e6c300000000000000000006970365f7674693000000000000000006966623000000000000000000072c0a012aaaaaaaa1a00000000ffffaaaaaaaaaabbff0000ffff00000070000000a8000000e00000006172707265706c790000000000000000000000000000000000400000000000001000000000000000ffffffffffff0000fdffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000c264b482cb260000ffffffff00000000110000000200000000f969705f76746930000000000000000000697036677265300000000000000000006970365f76746930000000000000000062637366300000000000000000000000aaaaaaaaaa15ffffff00ffff0828bc324aa90000ffffff00000070000000a8000000e0000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000000000000000000010000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff020000000300000029000000dada69705f76746930000000000000000000766c616e30000000000000000000000073797a5f74756e00000000000000000073697430000000000000000000000000000000000000ffffffffffffaaaaaaaaaabbffffff00ff000000f800000068010000a0010000697076730000000000000000000000000000000000000000000000000000000028000000000000007f000001000000000000000000000000ffffffffffffffff00000000ffffffff4e2467024e230421636c757374657200000000000000000000000000000000000000000000000000100000000000000088a70000e8af456d7d4f000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa140000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000b45479e7a1080000fcffffff000000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000180c200000e0000feffffff000000001f000000000000000a017465716c30000000000000000000000064756d6d79300000000000000000000079616d3000000000000000000000000067726530000000000000000000000000000000000000ff00ffffff0075534c4e374affffffff00290000080900000809000040090000616d6f6e670000000000000000000000000000000000000000000000000000007008000000000000cb0b0000557ee7090900000005000000040000003f0000000100010009000000fbffffff070000000000000048000000ff7f00000100010003000000ff0000005200000000000000000200000700000001000000060000000104000009000000ebff000040000000ffffffff270000000000000004000000ffff0000000001000900000007000000050000002000000000000100ff7f0000ffffffff0700000000100000f8ffffff00000000faffffffff7f00000600000080000000050000000500000000000000030000000100010001000000b90c00000100010000000000ff000000ffffffff0000000068050000a1e500000900000004000000ffffff7f020000007601000009000000090000000100000030000000ff0300000900000005000000fcffffffc5000000d3010000070000007f0000000200000009000000030000000600000008000000090000001f0000000700000004000000faffffff030000001f00000009000000090000000000000000000080010000008000000000020000feffffff000000000800000005000000020000000200000001000080060000000200000000000000ff0000003f000000ffff00008000000070d900000300000001000000fb0e00003f000000610e00007824000005000000ff0100000000000000000080010000002000000009000000a50000000200000005000000070000000000000003000000ff7f0000020000000000000009000000000200000100000000000000090000002eff000000f0ffff06000000030000000600000001000000070000000700000000000000320000000600000004000000030000008000000006000000fffeffff02000000d40000000200000005000000090000000000000005000000000000000300000000010000050000000000008005000000899a00000600000008000000050000000600000000000000ff0100004afe00008100000001000000c8010000000800000500000000040000b00000000008000000080000040000008e000000ab030000000000000500000002000000020000007a000000ff010000000000003c000000000000000100000005000000030000000000000001000000c22500002b00000001000000050000000800000000000000000000000000000001000000a6000000050000000100008009000000df1f0000d657000004000000090000000700000007000000ff0000000500000008000000d76c000003000000ff010000405a237904000000010000000100000000000000090000000800000000000100050000000100000004000000fa0000000600000006000000100c00001a000000001000000900000009000000411f0000fdffffff6bcefffffdffffffd3020000fffffffffdffffff00080000010400001f000000ff00000000800000000800000500000006000000fcffffff07000000ac1414160100000040000000ffffffff0500000003000000ffffffff0001000000000100ac1414aa040000000200000000000000ff070000000100000000001f03000000ffffff7f09000000ff0f0000ff07000007000000090000000100000008000000fbffffff0010000003000000210000000400000087000000ff0f0000000200008101000000f0ffff0400000000ffffff06000000020000003f000000cb0000000400000001000000010000000500000006000000f7ffffffff030000090000004b0800009b010000bf0700005e0a0000030000000700000006000000ff03000001000000e4152a0effff00000104000004000000040000000000000009000000ff7f000001000000feffffffb504000004000000080000000100000001000000ff01000006000000ff0700000000000079970000000000000000008006000000040000009513000001000000680b000009000000060000005046000003000000ff0000000800000000000000060000000100000000000000060000000600000005000000710e00000700000005000000080000000400000004000000030000000100000003000000000800000400000001000000870500005e00000009f9ffff00000000ff0f0000040000004000000004000000030000008a000000080000000100000006000000af2bad6f810000000600000002000000a20c0000040000003da300000800000001000000010000000400000050a40000ff0f0000050f00000000008040000000220a000000100000040000002b000000ff030000040000000600000006000000f7ffffff070000000300000001000000060000000800000080000000ff07000008000000090000000700000009000000fa0b000001000000ff0000000004000005000000b4f50000070000000300000004000000050000004000000000000000ff7f000001000000060000008000000001000000020000000600000003000000010001000700000006000000010000006f000000ff0f0000ff070000040000000400000003000000ed00000006000000b47b0000fcfffffffc0700000300000002000000007200000400000002000000feffffff7f000000070000000500000002000000920a0000010000800800000066060000000400002e0000000500000006000000000000eaea6d748007000000000000000008000000000100000800000600000004000000970000007590000000000000000000800800000005000000030000000100000001000000ff01000007000000000000000300000004000000c90b0000ffff0000020000000001000005050000050000000c4c00000400000000000000c1ffffff02000000040000000200000008000000fff80000030000000500000019d152330500000009000000060000000600000038090000ffffff7f6d86845597d3d459c5acf1836296a26faaffffb800000006000000806a0000060000005e0000000180000008000000010400000600000001000000cc00000000010000ff0f000007000000010000000300000000010000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000feffffff010000001f0000000300000000f779616d300000000000000000000000007369743000000000000000000000000069726c616e3000000000000000000000627071300000000000000000000000000180c200000300ffffffff00ffffffffffffff00ffffff0000007000000070000000a8000000736e61740000000000000000000000000000000000000000000000000000000010000000000000006d0490f4ca0d0000ffffffff080000002cf72294f5632cfdf13406e3f9a00539cbbfa7a2d82a25cece352e0b44f87ec51ff3ef318054d26fc9738dcdb655da450b812fb832fef28febb7b09d012694e64c6f1f88ad5334d46c6fb43effe705eea58b5d5babc08eddee610719d3e5a1156a3f500a930a86dcfb3703f83bd2e258c6a59cdf7108d1f476f8e075f9c388c082835b1a305e46243d2b13ed80203a33001f9b459f4b46e5b0666248e9d59f836e8e21ed646203e9ee22a171acb6aa3d74bc491b3c1ace5c0f080d2ad1f441c734e988a47f27ca50a42f6e093ae896bf3a1dd366f9ed6af1d85ea9ec3d6c3aee4e6bc68fd8bf32f9887153ee20c2f55e1ab230e98be90078997b98a944c99cfdbd82b22d63f3a93f54fd64914b86821b9faf2bd8eaca55ca86797e30d9757a9b182a7556a0"]}, 0xfb8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r3, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x105541, 0x0) pwrite64(r4, &(0x7f0000008040)="9a", 0x1, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000013000/0xe000)=nil, 0xe000}, 0x1}) pselect6(0x40, &(0x7f0000011fc0), &(0x7f0000011000), &(0x7f0000003000), &(0x7f0000013000), &(0x7f0000001ff8)={&(0x7f0000012000), 0x8}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000004ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/19 09:42:51 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x80000000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'dummy0\x00', 0x1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x1}) 2018/04/19 09:42:51 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x4, 0x32200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000100)={0x9, 0x1, 0x20, 0x8, 0x8001, 0x40}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r2 = accept$alg(r1, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f00000003c0)={r3, 0x4, &(0x7f0000000200)=[0x3f, 0x10001, 0x9, 0x18], &(0x7f0000000300)=[0x5fe7, 0x3ff, 0x5, 0x8, 0x1f, 0x7], 0x0, 0x3, 0x7, &(0x7f0000000340)=[0x8000, 0x4, 0x0], &(0x7f0000000380)=[0x1, 0xd06, 0x5, 0x7, 0x20, 0x3ff, 0xc2b, 0x0, 0x1, 0x1f]}) sendmsg$can_raw(r2, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 2018/04/19 09:42:51 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/233) ioctl$int_in(r0, 0x8000000000500e, &(0x7f0000000640)) [ 336.068904] QAT: Invalid ioctl [ 336.083168] QAT: Invalid ioctl 2018/04/19 09:42:51 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x80000000, 0x200) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0xffffffff, 0x100000001, 0x6, 0x2, 0x81, 0x191, 0x3, 0x9, 0x2, 0x1, 0x9, 0x9}) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0), 0x0) 2018/04/19 09:42:51 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f00000002c0)='bfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0xffffffffffffffff, 0xfffffffffffff000) 2018/04/19 09:42:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x20000, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0x5, 0x10000, 0x4, 0x0, 0x1000, 0x0, 0x7ff, 0x5, 0x6, 0x10000, 0x400, 0x1}) 2018/04/19 09:42:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f00000007c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000780)={0xffffffff}, 0x0, 0x1000}}, 0x20) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="16000000980000fa", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0100000000000000", @ANYRES32=r1, @ANYBLOB="100001001b0000080000001fee17c04a0909d6db15ecca5749c0345600000000000000050000000000009101ffff0000000000b100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e752d42ffd53d71fb1a609df0e6915241f1a8c4be2f34252108a981a93a62d9ff1386dfb25d4669fc8f104721d6444d471a31088b7e4eaaefddf41c1b1de1d109ffb1f0f6fb8499643ee9863dd1d67b666d1b364fc8d3"], 0xa0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000140)=""/139) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x507000, 0x0) 2018/04/19 09:42:51 executing program 4 (fault-call:3 fault-nth:19): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:42:51 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000500)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000240)="370f32ba2000b001ee0f01c9baf80c66b810813a8e66efbafc0ced66b8010000000f01c1360f01cf670f200766b9800000c00f326635010000000f30673e662e660cee", 0x43}], 0x1, 0x0, &(0x7f0000000080), 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) arch_prctl(0x0, &(0x7f0000000100)="6c254dfaef0faa") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe2000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000480)="40970f20d835200000000f22d848b805000000000000000f23d00f21f835200000050f23f8460f0131672646def026f3470fbd29430f01ca66b86f000f00d0b8010000000f01d9c744240085e50292c744240200000000c7442406000000000f011c24", 0x63}], 0x1, 0x0, &(0x7f0000000440), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/04/19 09:42:51 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'ip6gretap0\x00', 0x7fffffff}) r1 = socket(0x2, 0x1, 0x0) setsockopt(r1, 0x6, 0x20, &(0x7f0000871000)="020000006c3b172917e25462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54006fe71cbcdc6e30ac10369300aff67d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da6020000435f1f0400d1b0e6ebcb12c7be1871363e97100c4a4c2e9f5c0c14f1659ce8c829d2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000000c0)={'bridge0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}}) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)=r2) 2018/04/19 09:42:51 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x9, 0x200000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002fe8)={0xaa}) r2 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000ec0)=@nat={'nat\x00', 0x19, 0x5, 0xe28, [0x20000080, 0x0, 0x0, 0x20000270, 0x20000d80], 0x0, &(0x7f0000000040), &(0x7f0000001000)=ANY=[@ANYBLOB="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"]}, 0xea0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x105541, 0x0) pwrite64(r3, &(0x7f0000000080)="9a", 0xffffffffffffffc3, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000013000/0xe000)=nil, 0xe000}, 0x1}) pselect6(0x40, &(0x7f0000011fc0), &(0x7f0000011000), &(0x7f0000003000), &(0x7f0000013000), &(0x7f0000001ff8)={&(0x7f0000012000), 0x8}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000004ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000100)={{0x6, 0xffffffffffffffff}, 0x1, 0x7fffffff, 0x1f, {0xfffffffffffffffc, 0x1}, 0x17f, 0x200}) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 336.430960] FAULT_INJECTION: forcing a failure. [ 336.430960] name failslab, interval 1, probability 0, space 0, times 0 [ 336.442368] CPU: 0 PID: 24733 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 336.449567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.458923] Call Trace: [ 336.461512] dump_stack+0x1b9/0x294 [ 336.465134] ? dump_stack_print_info.cold.2+0x52/0x52 [ 336.470317] ? perf_trace_lock_acquire+0xe3/0x980 [ 336.475177] should_fail.cold.4+0xa/0x1a [ 336.479238] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 336.484346] ? save_stack+0x43/0xd0 [ 336.487968] ? kasan_slab_alloc+0x12/0x20 [ 336.492105] ? find_held_lock+0x36/0x1c0 [ 336.496170] ? check_same_owner+0x320/0x320 [ 336.500484] ? rcu_note_context_switch+0x710/0x710 [ 336.505404] __should_failslab+0x124/0x180 [ 336.509635] should_failslab+0x9/0x14 [ 336.513424] kmem_cache_alloc_node_trace+0x26f/0x770 [ 336.518523] __kmalloc_node_track_caller+0x33/0x70 [ 336.523442] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 336.528184] __alloc_skb+0x14d/0x780 [ 336.531886] ? skb_scrub_packet+0x580/0x580 [ 336.536195] ? debug_check_no_locks_freed+0x310/0x310 [ 336.541373] ? __lock_acquire+0x7f5/0x5140 [ 336.545597] ? zap_class+0x720/0x720 [ 336.549297] ? perf_trace_lock+0x900/0x900 [ 336.553513] ? zap_class+0x720/0x720 [ 336.557225] alloc_skb_with_frags+0x137/0x760 [ 336.561731] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 336.566477] ? graph_lock+0x170/0x170 [ 336.570266] ? perf_trace_lock+0xd6/0x900 [ 336.574408] sock_alloc_send_pskb+0x87a/0xae0 [ 336.578895] ? find_held_lock+0x36/0x1c0 [ 336.582943] ? sock_wmalloc+0x1e0/0x1e0 [ 336.586908] ? lock_downgrade+0x8e0/0x8e0 [ 336.591058] ? kasan_check_read+0x11/0x20 [ 336.595201] ? do_raw_spin_unlock+0x9e/0x2e0 [ 336.599597] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 336.604600] ? kasan_check_write+0x14/0x20 [ 336.608820] ? do_raw_spin_lock+0xc1/0x200 [ 336.613046] ? _raw_spin_unlock+0x22/0x30 [ 336.617188] unix_dgram_sendmsg+0x4f9/0x1730 [ 336.621590] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 336.627119] ? unix_stream_connect+0x11c0/0x11c0 [ 336.631859] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 336.637384] ? _copy_from_user+0xdf/0x150 [ 336.641523] ? copy_msghdr_from_user+0x3bc/0x560 [ 336.646280] ? security_socket_sendmsg+0x94/0xc0 [ 336.651033] ? unix_stream_connect+0x11c0/0x11c0 [ 336.655776] sock_sendmsg+0xd5/0x120 [ 336.659480] ___sys_sendmsg+0x525/0x940 [ 336.663438] ? lock_repin_lock+0x410/0x410 [ 336.667661] ? copy_msghdr_from_user+0x560/0x560 [ 336.672406] ? __schedule+0x809/0x1e30 [ 336.676285] ? find_held_lock+0x36/0x1c0 [ 336.680338] ? lock_downgrade+0x8e0/0x8e0 [ 336.684481] ? rcu_note_context_switch+0x710/0x710 [ 336.689396] ? check_same_owner+0x320/0x320 [ 336.693705] ? __might_sleep+0x95/0x190 [ 336.697673] __sys_sendmmsg+0x240/0x6f0 [ 336.701641] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 336.705970] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 336.711501] ? fput+0x130/0x1a0 [ 336.714768] ? ksys_write+0x1a6/0x250 [ 336.718557] ? __ia32_sys_read+0xb0/0xb0 [ 336.722622] __x64_sys_sendmmsg+0x9d/0x100 [ 336.726846] do_syscall_64+0x1b1/0x800 [ 336.730717] ? finish_task_switch+0x1ca/0x810 [ 336.735202] ? syscall_return_slowpath+0x5c0/0x5c0 [ 336.740119] ? syscall_return_slowpath+0x30f/0x5c0 [ 336.745047] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 336.750402] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 336.755239] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 336.760413] RIP: 0033:0x455329 [ 336.763584] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 336.771281] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 336.778534] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 336.785786] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 336.793041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 336.800296] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000013 2018/04/19 09:42:52 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x80, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f00000004c0)={[], 0x8, 0x3, 0x10000, 0x0, 0x0, 0x4, 0x0, [], 0x7f8}) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x10001, 0x1) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000001c0)={0x1, 0xa9, &(0x7f0000000400)="e85b44d8607c63b8e2311573dd7c2deecc25a45a259272c8b69eb21e3afb9d8f4689a54495a4c7880de06596df5722e6a747b61b35e2723ca57e295c520751df3b1e634016479e3d02b0be23f40444fd7ebc1c6f6714db444559ccd82f3b78faa101dda03127eeed39b38844de49d959f5bca82b387407d21ef8a4f3d5c59509d0ab3ef7baa2bec8d2dc4bd63bcc8d6b6aaf4ab4aa76318ac5839d58994b7cd3cd870ec2ea90427147"}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x4e21, @broadcast=0xffffffff}}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000280)={{0x18, 0xfffffffffffffffd, 0x2, 0x8001, "add573e863caf1e0f53143f57544e8193ca800001f000000000076724857ced45f432794a9b24ad3155e9a01", 0x4de0}, 0x0, 0x0, 0x8, r2, 0x20, 0x9, "52da84a2c12a87b9a2ab1541e074f3ef81d0c3c984137bc2d278cf2d246c5ff56bb87ce99f7f76165d037aadb008a0d44b9b4f6a67c98cf5a04b01ae3cff4941", &(0x7f0000000140)='\x00', 0x1, [], [0x8, 0xfffffffffffffffb, 0x6c1, 0x8000]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tun(&(0x7f00000003c0)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00005b2fc8)={&(0x7f0000c2bff4)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="010000001e000103000000000000000000000000000000000000ffffac1400000000000000000000c480000000000000000000000000000000000000000000001c00170000000000000000000000000100002800d2eb9e13af1742cf5f72e9a45fbf93ae6ef20d630cc55249d1f715218d78a3b02b6d7484893ae42e3cee1fc1230bae69931ffb5235de30431371fc3d0c3f5b7fc12199c3e55a6474245034242bec460bc0c03cca7469cbe50c75fa7b85ba2f9bcc98861926915d7cfa764a902554f3d187e029898538b2ac13b4ad6f877bd639a34802692ce79305b7f3e54a9605e7504a27f06f6fd226ba854d9844a9f2a35b8fb2b7e1d1f0"], 0xffffffffffffff5f}, 0x1, 0x0, 0x0, 0x10000}, 0x0) 2018/04/19 09:42:52 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)=0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x80003, 0x9) r3 = dup(r2) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f00000000c0)={r3, 0x5}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = dup3(r1, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000000100)={0x7ff, 0x3, 0x20, 0x7000000000, "895c67774ef05e310df35914bf4163029b1e54f9787b925efb2c8c362914cc84f1373732bbc73206ddf4205f", 0x800}) 2018/04/19 09:42:52 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x9, 0x280040) ioctl$TIOCCBRK(r0, 0x5428) syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) 2018/04/19 09:42:52 executing program 0: msgget(0x0, 0x600) socketpair$unix(0x1, 0x400000000002, 0x0, &(0x7f0000634000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0xc0800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f00000000c0)={0x0, 0x5fa07020, 0x401, 0x8, 0x7, 0x5e}) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492834, 0x0) connect$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) close(r0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000140)) 2018/04/19 09:42:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xbd99, 0x400) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000100)=0x80) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) 2018/04/19 09:42:52 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="1f00b44092e3eb9b000125c6bc039ad21d28fc0000000200000000", 0x22}], 0x10000116) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1f0000000203193b000007000000068100023b050900020000f33f00020058", 0x1f}], 0x1) [ 336.985160] QAT: Invalid ioctl 2018/04/19 09:42:52 executing program 2: r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002c3000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0xc3f8) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x44400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f00000000c0)={0xfffffffffffffffa, 0x5, 0x5, 0x1ff, "d5f0cca3635e9f26817033504158dff5ac5a83ced1248faf6cb362c31aff20766c2e7eb81f401a541a4d17ab", 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/04/19 09:42:52 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'erspan0\x00'}}, 0x1e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80001, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) sendmmsg(r0, &(0x7f00000043c0)=[{{&(0x7f0000001d40)=@can={0x1d}, 0x80, &(0x7f0000002380), 0x0, &(0x7f0000002440)}}, {{&(0x7f0000002a00)=@can={0x1d}, 0x80, &(0x7f0000003e00), 0x375, &(0x7f0000003e80)}, 0x7}], 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x7ff, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) 2018/04/19 09:42:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x101000) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000100)=0x7fffffff) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) 2018/04/19 09:42:52 executing program 6: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000040)={0x7, 0xffffffffffffff9c}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000f82ffc)=0x4001) 2018/04/19 09:42:52 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x400080, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@any=0xffffffff}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)) 2018/04/19 09:42:52 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x10001, 0x101000) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000280)={0x15, 0xd8, &(0x7f0000000180)="da3cd9e6083b50189429500762d4ae1912424241e2018913b941a8c9907be0eeba4218a557362123ed4a32072a15e60ec828fc2c7c89bcf9b1f84b76742a0ca55921ad73134a6ce8443814721fb5dca8fb86f40414b58444c6357ebf2a4d0107dcf50fb9cf12d44eed460523dac61cf00eefb39a41494a866e70446b48b4663476dcc3077a5a7b9d7bd4856268b90cd29955307a89b3a4812d8883f112ad718916c54e3cc0b1528dd1889644932b7ea3fcc7afabfa7ef071dfbae6fdaf607157aeca009409a0d7a19191aa004b3a5dbf29f87be157b513ea"}) r1 = socket(0x6, 0xa, 0xe0c) setsockopt(r1, 0x6, 0xe, &(0x7f0000902000)="020008000000000000005462fa01a15eaf0d2cf653f13cc379ede4eaf40f4a95bbff850a8263357506b31e58a98399b397e695c0f03d3b3d54436fe71cbcdc6e30ac10369300f6af7d07634832b8a5c0a94c470502e9337b3e7298fc74e81b1058d02f9b14732017e2466a9fc43aea71263335960415800020f9575da602000000001f0000d1b0e6ebcb12c7291871363e97100c4a4c2e9f5c0c14f1659ce8c8bed2e97e60a3649f93ea0c8263f864802ad72fa698807ef14a4a1813e976be1d113b514dbdc05ea1309163d6a4830de8391f2ecab7bbfbcb", 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000040)={@in={{0x0, 0x4e20}}, 0x0, 0x0, 0x0, "d29716947758f2572bce2418aa2f9f262a8158bcefafe2c87068772f7e216925de4612090571f4671410f047ed26a53a543cd72f03e389b08cbc39e5d3437d3495b31a5feb61bc78d0d6ebe907112f1b"}, 0x160) [ 337.765328] QAT: Invalid ioctl [ 337.770081] QAT: Invalid ioctl 2018/04/19 09:42:53 executing program 4 (fault-call:3 fault-nth:20): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:42:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) 2018/04/19 09:42:53 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000f76ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc0101282, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x2, 0x100) 2018/04/19 09:42:53 executing program 7: socket$netlink(0x10, 0x3, 0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00') pread64(r0, &(0x7f0000000000)=""/8, 0x8, 0x1ffff) socket$pptp(0x18, 0x1, 0x2) 2018/04/19 09:42:53 executing program 1: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={0x6, {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @broadcast=0xffffffff}, {0x2, 0x4e20, @loopback=0x7f000001}, 0x100, 0x800, 0x7ff, 0x100, 0x5, &(0x7f0000000100)='ifb0\x00', 0xe8, 0xfffffffffffffe01, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rmdir(&(0x7f00000001c0)='./control\x00') rename(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000240)='./control\x00') close(r2) 2018/04/19 09:42:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="95c0fd7c00000000"], 0x0, 0x0, &(0x7f0000011f9d)}) 2018/04/19 09:42:53 executing program 0: prctl$intptr(0x1, 0x6) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x20fd, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000080)={"36ca2f73125c7c59e608cbe7fbb7bcf687ab7b8d534cbd0ce55f20ecf419ee64d8a88788250c372f43bc9890ab9a03db4b423d8a2cf40629fd1dd0337f812eeb78ec5bc15e3bf37cc54d86162a6b5eb9333bf8fbbf99d36642cf84962c2da7ce48a2fb17c55fbd3e5b826daf06bdb800ccdfb8b4cc6ab996e30c937f49e16b7fad4cb9577e5d6ac303a568d0fcadd0a3bf89bb0bfc9b353427f4c9bdbb5494313eeb5eafa429a2515f59b1ff25cb38b3e9a8c7fefcb0be46ca37dd183eb120b3ec98f77559f18e984a12cae91dab4451e5fcb6bac973cceffe8cce5707657f5a85a0341963dd0df17299086717464a06a05ae8c532fc20dd7f967de9a8f6ab6bc0c938d185b1982c50732129e85dc4cd3fc4effe9a6ea0c72a964097d11581c1f793830822f36dd5e732e43263858ce4f7d3e61a2f0735b06f41f02fc0376a14be56070e6c9d1f565dc324d31470a3d3529bf27af98785742c362351186cc8a03a52d220658011d8aac331d92a7b0a31aefde2b9baaf7e295d10c069224e1a57e6425e8fb2403290dca926b940405aa644361a9d6cd8d83fe3ab3842e98882daa2100a81cedb33d868de4f1d15d0c33ef0efca03e651ad12b26ff627bd1c009e2decebd19b90b4f11209d8be8589057b0bf9b02e87aa01e3654587023ac2db5d269744c244f0c8606e45add854a32e95f7aac30106055ed67048a35e622d31bc36cc433e03d242e36b76bca98ac59d90081604ae79897c9b14f6be2f8815b7b1f3d9621344285f4f4cfa8ee467c101a5a64bc70d94b74c286f6c10357c35650453ca56958902b97dfeda38f1503bcbb33a7ff8c997408746d9f08d9fa6ef2bd99e810f05d775e16b7df71e1e08d4634f4cb5e0266d238df738cbaf26f218dfe2da358607c5f2dfc2e5f5a06b04262a659924cd8b83b86a2fadaddca53a6e2cd392a0f779d85f559e8c6ac263ad4842b6159a0cca1ba24276a7ed747b4bbc9f0be0ec068f63a3900994201efce4761dcc7ee5a0b73b542697fda58921a0f008b3c8c5512f8cf26d0488ce1683b00a659ae6e2a3415d7924f0553803682ce9d46d81565a682aa857bd302148c8299be11b65fecb3feec2180d1a498efa5bab798a28ff8c5ea00722c6aedfdfdcdacd679cada9932b8710175ddb1a51964ae71c8746da652beba2a9bfc178d3277bc73c055e3b8f8892a9df39147bc4e1e8fca68b7d72507e7a306dd7bafa1a76fc6abd6b9e8d80a973783d0b02bd8fef348a965ae2d0bd0219daf874291dfd13ac7ffcd7b5c050b60efaa24f03d52561a36f3ae9bba1323a29a30ec7f3d281f116de427e6e851bf0005dd482d5afbbdbd075e97c09e8bb714a2d7bec39d9c69ef755ee4d09c3a5c13fe1cced19558a414bfecd030fdd7552f76de50240245ec962fb964de9e262bd08643151b0c110000b32e507"}) mknod(&(0x7f0000000000)='./file0\x00', 0x5, 0x0) execve(&(0x7f0000001000)='./file0\x00', &(0x7f0000002000), &(0x7f0000001000)) socket$rds(0x15, 0x5, 0x0) 2018/04/19 09:42:53 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x400000}, {&(0x7f0000009000)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0x66}], 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000000)) ioctl(r0, 0x73, &(0x7f0000000080)="b43d7784d88e10c44d6fe618e9dcc70fc151f1b31b66c0f3d796e3284d3d3db94e28e686fd0a1103") [ 337.987517] binder: 24822 RLIMIT_NICE not set 2018/04/19 09:42:53 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000e2aff8)={0xffffffffffffffff}) r1 = gettid() readv(r0, &(0x7f0000616fa0)=[{&(0x7f0000e4bfb4)=""/57, 0x39}], 0x1) close(r0) socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x7) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00002cb000)={0x0, r1}) recvmsg(r3, &(0x7f000070bfc8)={&(0x7f00001d6ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r0, r3) tkill(r1, 0x16) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0', [{0x20}, {0x20, '!em1'}, {0x20, '/GPLppp0vboxnet1'}], 0xa, "4ea6868caea18221ca07f7cb81cd782aa38cb41bb04400a1c4d1d3c7890691a2f6b136303c"}, 0x47) 2018/04/19 09:42:53 executing program 6: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000000)={0x7, 0x9}) 2018/04/19 09:42:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x103801, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000100)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x801, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000200)={0x80, 0x13, 0x80000001, 0x80000001, "29b38a07d98bf71e3499bf8f2cd9d33cbe6e8204386a1361d7daa873bb4e0ffe"}) r4 = semget$private(0x0, 0x0, 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000140)={0x1, 0x0, [0x7fff, 0x1, 0x400, 0xa8, 0xffffffff80000001, 0xfffffffffffffffa, 0xba7, 0x1ff]}) 2018/04/19 09:42:53 executing program 3: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002780)='/selinux/enforce\x00', 0x1, 0x0) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000000)={0x7, 0x5}) fallocate(r0, 0x20, 0x0, 0xffffffff000) 2018/04/19 09:42:53 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) read(r0, &(0x7f0000000400)=""/191, 0xbf) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x0, 0x32, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x189800, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x9) rt_sigtimedwait(&(0x7f0000001ff8), &(0x7f0000f0aff0), &(0x7f0000fbcff0)={0xffffd, 0x989680}, 0x8) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x73, 0x4, &(0x7f0000000280)=[{&(0x7f0000000080)="2c2d3a22bd4e30ef50e0c8f0c8ab3cd1a1ed2fa9814ae91a13300fda8e0527fabaceaf380b8f2ea05e888dc61cb3fe9356b675ac040b1343e28a4ab1a6adef496f32d1f3eb3b", 0x46, 0x8000}, {&(0x7f0000000100)="3b5963a4e54387b87ce873135795ea2e97941d7652ad20bb5fb73e7cccc9561343f17a0190e4880fb8f20d4fe20a", 0x2e, 0x1}, {&(0x7f0000000140)="0537ddd1db233d87ab45d8c86928c3ad5b18411e63283e734276d24d60ed24fe5e48dc327dba0ba227c92842044846c23ce363458b2f53d7889966eeb567d7d619ddaf5f34f9761103043bf08849ebd4867feae9157671b3dcaf8895fe9105000a7bc29ed2f5ab0064767156bb33f51d09491a04455346684504413e9975baaffe", 0x81, 0x7ff}, {&(0x7f0000000200)="9604d0f2121e9f495f009824b2c8c5e20de4c926ebf3a679bc91a208f4618595a1cdd7067a5fbf8bfff9a893eeb8851037f0ee90c39f8f9a99a92fce16ae12f50ad0e96ba453c7e4d823cec3c26d88e61d2dee69018e68bb95ce6f", 0x5b, 0x1}], 0xa80800, &(0x7f0000000300)={'nouuid,', {[{@rtdev={'rtdev', 0x3d, './file0'}, 0x2c}, {@nouuid='nouuid', 0x2c}, {@logbufs={'logbufs', 0x3d, [0x78, 0x36, 0x32, 0x33, 0x37, 0x33]}, 0x2c}, {@swidth={'swidth', 0x3d, [0x34, 0x78, 0x3f]}, 0x2c}, {@inode32='inode32', 0x2c}, {@noikeep='noikeep', 0x2c}, {@nogrpid='nogrpid', 0x2c}, {@nogrpid='nogrpid', 0x2c}]}}) 2018/04/19 09:42:53 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x717, 0x0) ioctl(r0, 0x4400000000001260, &(0x7f0000000000)) 2018/04/19 09:42:53 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x40000) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000040)) 2018/04/19 09:42:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56662f100978a30205000000dd796b", 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xd58e, 0x440000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={"766574683000001e00", r2}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000180)={@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x4e, r3}) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [{}, {}]}) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000100)={0x2, 0x99, 0x8, 0x7, 0x9}) r4 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r4, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) [ 338.257112] FAULT_INJECTION: forcing a failure. [ 338.257112] name failslab, interval 1, probability 0, space 0, times 0 [ 338.268474] CPU: 1 PID: 24846 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 338.275675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.285037] Call Trace: [ 338.287655] dump_stack+0x1b9/0x294 [ 338.291383] ? dump_stack_print_info.cold.2+0x52/0x52 [ 338.296589] ? perf_trace_lock_acquire+0xe3/0x980 [ 338.301455] ? unwind_get_return_address+0x61/0xa0 [ 338.306408] ? __save_stack_trace+0x7e/0xd0 [ 338.310754] should_fail.cold.4+0xa/0x1a [ 338.314841] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 338.319965] ? save_stack+0xa9/0xd0 [ 338.323617] ? save_stack+0x43/0xd0 [ 338.327252] ? kasan_kmalloc+0xc4/0xe0 [ 338.331144] ? __kmalloc_node_track_caller+0x47/0x70 [ 338.336266] ? __alloc_skb+0x14d/0x780 [ 338.340164] ? alloc_skb_with_frags+0x137/0x760 [ 338.344844] ? sock_alloc_send_pskb+0x87a/0xae0 [ 338.349520] ? unix_dgram_sendmsg+0x4f9/0x1730 [ 338.354096] ? sock_sendmsg+0xd5/0x120 [ 338.357987] ? ___sys_sendmsg+0x525/0x940 [ 338.362127] ? __sys_sendmmsg+0x240/0x6f0 [ 338.366267] ? do_syscall_64+0x1b1/0x800 [ 338.370348] ? find_held_lock+0x36/0x1c0 [ 338.374430] ? check_same_owner+0x320/0x320 [ 338.378741] ? print_usage_bug+0xc0/0xc0 [ 338.382793] ? rcu_note_context_switch+0x710/0x710 [ 338.387716] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 338.392988] __should_failslab+0x124/0x180 [ 338.397222] should_failslab+0x9/0x14 [ 338.401026] kmem_cache_alloc_node+0x272/0x780 [ 338.405626] ? __lock_acquire+0x7f5/0x5140 [ 338.409870] __alloc_skb+0x111/0x780 [ 338.413588] ? skb_scrub_packet+0x580/0x580 [ 338.417905] ? debug_check_no_locks_freed+0x310/0x310 [ 338.423089] ? __lock_acquire+0x7f5/0x5140 [ 338.427316] ? perf_trace_lock_acquire+0xe3/0x980 [ 338.432153] ? perf_trace_lock+0x900/0x900 [ 338.436402] alloc_skb_with_frags+0x137/0x760 [ 338.440899] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 338.445655] ? graph_lock+0x170/0x170 [ 338.449456] sock_alloc_send_pskb+0x87a/0xae0 [ 338.453960] ? find_held_lock+0x36/0x1c0 [ 338.458023] ? sock_wmalloc+0x1e0/0x1e0 [ 338.462000] ? lock_downgrade+0x8e0/0x8e0 [ 338.466149] ? kasan_check_read+0x11/0x20 [ 338.470291] ? do_raw_spin_unlock+0x9e/0x2e0 [ 338.474693] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 338.479276] ? kasan_check_write+0x14/0x20 [ 338.483500] ? do_raw_spin_lock+0xc1/0x200 [ 338.487721] ? _raw_spin_unlock+0x22/0x30 [ 338.491865] unix_dgram_sendmsg+0x4f9/0x1730 [ 338.496282] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 338.501826] ? unix_stream_connect+0x11c0/0x11c0 [ 338.506579] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 338.512105] ? _copy_from_user+0xdf/0x150 [ 338.516252] ? copy_msghdr_from_user+0x3bc/0x560 [ 338.521028] ? security_socket_sendmsg+0x94/0xc0 [ 338.525789] ? unix_stream_connect+0x11c0/0x11c0 [ 338.530553] sock_sendmsg+0xd5/0x120 [ 338.534264] ___sys_sendmsg+0x525/0x940 [ 338.538237] ? copy_msghdr_from_user+0x560/0x560 [ 338.542994] ? find_held_lock+0x36/0x1c0 [ 338.547065] ? lock_downgrade+0x8e0/0x8e0 [ 338.551216] ? rcu_note_context_switch+0x710/0x710 [ 338.556133] ? check_same_owner+0x320/0x320 [ 338.560448] ? __might_sleep+0x95/0x190 [ 338.564421] __sys_sendmmsg+0x240/0x6f0 [ 338.568389] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 338.572699] ? __lock_is_held+0xb5/0x140 [ 338.576759] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 338.582283] ? fput+0x130/0x1a0 [ 338.585547] ? ksys_write+0x1a6/0x250 [ 338.589346] ? __ia32_sys_read+0xb0/0xb0 [ 338.593406] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 338.598249] __x64_sys_sendmmsg+0x9d/0x100 [ 338.602479] do_syscall_64+0x1b1/0x800 [ 338.606366] ? finish_task_switch+0x1ca/0x810 [ 338.610860] ? syscall_return_slowpath+0x5c0/0x5c0 [ 338.615779] ? syscall_return_slowpath+0x30f/0x5c0 [ 338.620708] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 338.626077] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 338.630916] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 338.636095] RIP: 0033:0x455329 [ 338.639266] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 338.646969] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 338.654231] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 338.661495] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 338.668768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 338.676039] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000014 [ 338.796545] binder: 24822 RLIMIT_NICE not set [ 338.809175] binder: 24822 RLIMIT_NICE not set [ 338.815507] binder: BINDER_SET_CONTEXT_MGR already set [ 338.821084] binder: 24818:24822 ioctl c0306201 20004000 returned -14 [ 338.822087] binder: 24818:24863 ioctl 40046207 0 returned -16 [ 338.856705] binder: release 24818:24822 transaction 89 in, still active [ 338.863609] binder: send failed reply for transaction 89 to 24818:24863 [ 338.870753] binder: undelivered TRANSACTION_COMPLETE [ 338.875923] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/19 09:42:54 executing program 4 (fault-call:3 fault-nth:21): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:42:54 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) read(r0, &(0x7f0000000000)=""/120, 0x78) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x1, 0x200000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000100)={0x7, 0x8, 0xfffffffffffffffa, 0x2, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}]}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) 2018/04/19 09:42:54 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x2000037d, 0x0, 0x529}, {0x4000039e, 0x0, 0x7fff}]}) 2018/04/19 09:42:54 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x28542, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x1, 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) ioctl$TIOCSCTTY(r1, 0x540e, 0x85) write(r0, &(0x7f0000000180)="b1489ff5466aad1e00c95a1f2693faac7cba1412517b3ea4badb6162f80431914a1d31b0549cd9bb5b4d97e2335839344db87fe8ad62f85b423dbccb03009fe44e0431653875c5d6aa5ec0be44bc3b12a14642c0413633ae32e52e597944e712bfacf6a8b88dcb91df9a6876a87b63cc681927e034e2bc9821095a4920f68c5bb7a2539d107243279f91fecfde0a9401a4f101a829788210aa31b3c40341b7ddbed049a99a15", 0x3d5) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000240)="4e6d1fd43de00cf3f1e8c3785a8ce551b0b5cff7ceca6ba399c5f660b02ae7f654a8de7ab228ffb38086efe0d8445f6a9ec05192ab675076dbd113f637e06ef8125e35e514d97ac0670378cf9ed2050c32d3390a072714b292e7bd74e4b52aadf6eab7c11bcdfa92aa74c5ada32805b8bf3a0bfdd5b9f3b1db3ec92b3f4748bd0ea054313f899c0c93796c4b4e3b71c99cd3d6ed27989a4ac573a5c7f938ca02d1a3b039") 2018/04/19 09:42:54 executing program 3: syz_mount_image$reiserfs(&(0x7f00000002c0)='reiserfs\x00', &(0x7f0000003a40)='./file0\x00', 0x0, 0x0, &(0x7f0000003f00), 0x0, &(0x7f0000003fc0)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [{[{0x9100, 0x1000, 0xff, 0x2}], {0x8100}}], {@mpls_mc={0x8848, {[], @ipv6={0x0, 0x6, "a2c02b", 0x8, 0x33, 0x0, @loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @rand_addr=0xffffffff}, {[], @udp={0x0, 0x0, 0x8}}}}}}}, &(0x7f0000000180)={0x0, 0x0, [0x0, 0x0, 0x99e, 0xb37]}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xfffffffffffffd87, &(0x7f00000001c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x49}, 0x1}, 0x0) r2 = semget(0x1, 0x0, 0x100) semctl$SEM_STAT(r2, 0x3, 0x12, &(0x7f0000000340)=""/92) 2018/04/19 09:42:54 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) 2018/04/19 09:42:54 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000eccfa8)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a), 0x0) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x7, &(0x7f0000e4b000)=0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x1f, 0x60000) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x7) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10d000, 0x0) ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000080)) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="b3", 0x1}]) io_submit(r2, 0x3, &(0x7f0000000640)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x85be, r0, &(0x7f00000000c0)="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", 0xfd, 0x6, 0x0, 0x0, r4}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x2, r4, &(0x7f0000000340)="470fd8f380665910e204ec64fefd0a064705a49ccf4e2a994d953f27bee49f71a1d64369e442250888d97b5158a0996a4222ab8283c669b65f2afbdb4effb1c95a39e3afd92e76d31411759c9b945d87e0393c94775e37fc800affc8146d15a6ecd3a90619a502162ab9b55ea965df011f03d2b08dc8026fb8e11554afc44ec77643fb774d9f19f710b09a060f7223e8ba9b0f07811a6a1a3880edac2fea17d1b1abc14df60df91587dde45a71f1a2bfd86f2049993ccb2692a735455ab3dc", 0xbf, 0x3468, 0x0, 0x0, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x6, r0, &(0x7f0000000540)="e6bbb8aa06c41f1605f3d62a7dcc33da480de5dee38f3acb473013d7555a37a1b1b6eea304", 0x25, 0x1000, 0x0, 0x1, r4}]) 2018/04/19 09:42:54 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') fchdir(r0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'sit0\x00', {0x2, 0x4e22, @loopback=0x7f000001}}) syz_fuseblk_mount(&(0x7f0000976000)='./file0\x00', &(0x7f0000dd3ff8)='-/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000836000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045009, &(0x7f000000bff8)=0x2) write$vnet(r0, &(0x7f00000002c0)={0x1, {&(0x7f0000000240)=""/121, 0x79, &(0x7f0000000140)=""/92, 0x3, 0x100000000000004}}, 0x68) [ 339.447196] FAULT_INJECTION: forcing a failure. [ 339.447196] name failslab, interval 1, probability 0, space 0, times 0 [ 339.458503] CPU: 1 PID: 24879 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 339.465713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 2018/04/19 09:42:55 executing program 6: write$rdma_cm(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x40) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{}]}) prctl$intptr(0x24, 0x0) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d}, 0x10, &(0x7f0000000040)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f700000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0x1}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$VT_ACTIVATE(r3, 0x5606, 0x3) 2018/04/19 09:42:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000100)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'veth1_to_bond\x00', 0x8000}) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0xfffffffffffffffc) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x800) 2018/04/19 09:42:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x3fd, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000004c0)=""/211) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000140)={0x8, 0x4, 0x2}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000629000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) [ 339.465719] Call Trace: [ 339.465743] dump_stack+0x1b9/0x294 [ 339.465760] ? dump_stack_print_info.cold.2+0x52/0x52 [ 339.465776] ? is_bpf_text_address+0xd7/0x170 [ 339.465793] ? kernel_text_address+0x79/0xf0 [ 339.465810] ? __unwind_start+0x166/0x330 2018/04/19 09:42:55 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000080)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) 2018/04/19 09:42:55 executing program 3: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0xc002, 0x0) write$rdma_cm(0xffffffffffffff9c, &(0x7f0000001340)=@create_id={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001300)={0xffffffff}, 0x111, 0x4}}, 0x20) write$rdma_cm(r2, &(0x7f0000001380)=@set_option={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x7, r3, 0x0, 0x0, 0x1}}, 0x20) r4 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000000140)='\x00', 0x1, r0) r5 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f00008d9ffb)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="b33ab76079ebe0d14f729cd653e520d29ad7ef0000000000000044c249b544230b9387fb8bd6ed266ccf59ef70995bf2e8e0ecd3fff32853747eda22d2818d08ca27e0ec821620e365a0e6b9485f2d925493f62113e33e5f8c7eba67fc19a9497f5b07e5849d2e875b066cd6401d36616fe0f3c3002801b4627ee7597689525e8e81f750a86eb580fb4690ea52246bd3d32b1a91f944c82dd184301c190894ff1726f78d0e89edb74b1f50ae08c5387ed8fd0598b600579f3af3f864e1c324f6", 0xc0, r1) keyctl$dh_compute(0x17, &(0x7f0000001500)={r4, r5, r4}, &(0x7f00000001c0)=""/45, 0x2d, &(0x7f0000001600)={&(0x7f0000001580)={'sha1-generic\x00'}, &(0x7f00000015c0)}) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x2, 0x0) [ 339.465828] should_fail.cold.4+0xa/0x1a [ 339.465845] ? __save_stack_trace+0x7e/0xd0 [ 339.465863] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 339.465883] ? save_stack+0xa9/0xd0 [ 339.465896] ? save_stack+0x43/0xd0 [ 339.465910] ? kasan_kmalloc+0xc4/0xe0 [ 339.465923] ? kasan_slab_alloc+0x12/0x20 [ 339.465940] ? find_held_lock+0x36/0x1c0 [ 339.465971] ? check_same_owner+0x320/0x320 2018/04/19 09:42:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x2) ioctl$void(r0, 0x4001) 2018/04/19 09:42:55 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/19 09:42:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000080)={0x4, 0x7f, 0xffff}) syz_emit_ethernet(0xa7, &(0x7f00000000c0)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [{[], {0x8100, 0x0, 0x100, 0x3}}], {@llc_tr={0x11, {@snap={0xaa, 0x1, "84", "ab70b7", 0x0, "e466e9c1dd7889cd904a5aa9c0a779a7e31a00e3424667ea0aeff5c04f09571d0ebcd3118609f0d306745b314c8d15c9c93ffce2ea8f427bec3d7b0d73deca0ceb17448588f63beb277e10df9ad1b16d1cda1e05b759c42e70dfd3afc7d332d1c35990f59d941cc313acbe617e465e6ebfb6eee5764b62923a977612f4b8656676510ccef859b8fe0758fc59f7"}}}}}, &(0x7f0000000180)={0x0, 0x2, [0xa90, 0x763, 0x872, 0x804]}) clone(0x100300, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000ffc), &(0x7f0000000200)) [ 339.465985] ? rcu_note_context_switch+0x710/0x710 [ 339.465997] __should_failslab+0x124/0x180 [ 339.466012] should_failslab+0x9/0x14 [ 339.466026] kmem_cache_alloc_node_trace+0x26f/0x770 [ 339.466048] __kmalloc_node_track_caller+0x33/0x70 [ 339.466064] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 339.466081] __alloc_skb+0x14d/0x780 [ 339.466098] ? skb_scrub_packet+0x580/0x580 [ 339.466114] ? debug_check_no_locks_freed+0x310/0x310 [ 339.466128] ? __lock_acquire+0x7f5/0x5140 [ 339.466146] ? reacquire_held_locks+0xbc/0x3e0 [ 339.466169] alloc_skb_with_frags+0x137/0x760 [ 339.466190] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 339.466206] ? graph_lock+0x170/0x170 [ 339.466224] sock_alloc_send_pskb+0x87a/0xae0 [ 339.466245] ? find_held_lock+0x36/0x1c0 [ 339.466259] ? sock_wmalloc+0x1e0/0x1e0 [ 339.466279] ? lock_downgrade+0x8e0/0x8e0 [ 339.466299] ? kasan_check_read+0x11/0x20 [ 339.466314] ? do_raw_spin_unlock+0x9e/0x2e0 [ 339.466330] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 339.466347] ? kasan_check_write+0x14/0x20 [ 339.466361] ? do_raw_spin_lock+0xc1/0x200 [ 339.466380] ? _raw_spin_unlock+0x22/0x30 [ 339.466399] unix_dgram_sendmsg+0x4f9/0x1730 [ 339.466420] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 339.466443] ? unix_stream_connect+0x11c0/0x11c0 [ 339.466458] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 339.466472] ? _copy_from_user+0xdf/0x150 [ 339.466488] ? copy_msghdr_from_user+0x3bc/0x560 [ 339.466508] ? security_socket_sendmsg+0x94/0xc0 [ 339.466530] ? unix_stream_connect+0x11c0/0x11c0 [ 339.466547] sock_sendmsg+0xd5/0x120 [ 339.466566] ___sys_sendmsg+0x525/0x940 [ 339.466585] ? copy_msghdr_from_user+0x560/0x560 [ 339.466607] ? find_held_lock+0x36/0x1c0 [ 339.466628] ? lock_downgrade+0x8e0/0x8e0 [ 339.466653] ? rcu_note_context_switch+0x710/0x710 [ 339.466667] ? check_same_owner+0x320/0x320 [ 339.466680] ? __might_sleep+0x95/0x190 [ 339.466700] __sys_sendmmsg+0x240/0x6f0 [ 339.466722] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 339.466738] ? __lock_is_held+0xb5/0x140 [ 339.466767] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 339.466779] ? fput+0x130/0x1a0 [ 339.466791] ? ksys_write+0x1a6/0x250 [ 339.466805] ? __ia32_sys_read+0xb0/0xb0 [ 339.466825] __x64_sys_sendmmsg+0x9d/0x100 [ 339.466841] do_syscall_64+0x1b1/0x800 [ 339.466853] ? finish_task_switch+0x1ca/0x810 [ 339.466868] ? syscall_return_slowpath+0x5c0/0x5c0 [ 339.466883] ? syscall_return_slowpath+0x30f/0x5c0 [ 339.466902] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 339.466919] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 339.466938] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 339.466948] RIP: 0033:0x455329 [ 339.466956] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 339.466970] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 339.466978] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 339.466987] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 339.466996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 339.467005] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000015 2018/04/19 09:42:56 executing program 4 (fault-call:3 fault-nth:22): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:42:56 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) semget$private(0x0, 0x4, 0x400) r2 = eventfd2(0x0, 0x0) r3 = dup(r2) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000c68000)={r2, 0x0, 0x2000000001}) 2018/04/19 09:42:56 executing program 0: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8000, 0x400000) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000100)}) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/24) 2018/04/19 09:42:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x0) socket$inet(0x2, 0x3, 0x6) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000100)) 2018/04/19 09:42:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xa2a, 0x4000c0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) bind$alg(r0, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="bc8e77958ed7e3bfbf4ef572723c7b6f49427c3e5c23a2c040d0e3275b5c1fab494ff89be11bccb9a15e857fd64d704f0c0ad238b28277bdf6d3ccb0363060888585f8d3edaf94544bb73bf880abec9efde167e8012af82def38587aec106cfc8c9f4bd2856fa8bece44b4eef79037efdc8f7e2b4136ee8d3569ca39b764832082", 0x81) 2018/04/19 09:42:56 executing program 1: r0 = socket(0x2, 0x3, 0x9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x2000, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b3fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}) getsockopt(r0, 0xff, 0x0, &(0x7f0000b6c000), &(0x7f00003b7000)) 2018/04/19 09:42:56 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000010ffc)=0x5, 0x4) sendto$inet6(r0, &(0x7f0000003fd9), 0x204, 0x0, &(0x7f0000008000)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x20}}, 0x1c) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7fff, 0x290200) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 2018/04/19 09:42:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={"690036740500"}) r0 = syz_open_dev$tun(&(0x7f0000408000)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='system.posix_acl_access\x00', &(0x7f0000000000)="020000001000000040000d02", 0xc, 0x0) [ 340.822442] FAULT_INJECTION: forcing a failure. [ 340.822442] name failslab, interval 1, probability 0, space 0, times 0 [ 340.833866] CPU: 0 PID: 24950 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 340.841079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.850443] Call Trace: [ 340.853046] dump_stack+0x1b9/0x294 [ 340.856701] ? dump_stack_print_info.cold.2+0x52/0x52 [ 340.861910] ? perf_trace_lock_acquire+0xe3/0x980 [ 340.866765] ? unwind_get_return_address+0x61/0xa0 [ 340.871709] ? __save_stack_trace+0x7e/0xd0 [ 340.876057] should_fail.cold.4+0xa/0x1a [ 340.880136] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 340.885250] ? save_stack+0xa9/0xd0 [ 340.888889] ? save_stack+0x43/0xd0 [ 340.892541] ? kasan_kmalloc+0xc4/0xe0 [ 340.896446] ? __kmalloc_node_track_caller+0x47/0x70 [ 340.901578] ? __alloc_skb+0x14d/0x780 [ 340.905484] ? alloc_skb_with_frags+0x137/0x760 [ 340.910150] ? sock_alloc_send_pskb+0x87a/0xae0 [ 340.914815] ? unix_dgram_sendmsg+0x4f9/0x1730 [ 340.919392] ? sock_sendmsg+0xd5/0x120 [ 340.923269] ? ___sys_sendmsg+0x525/0x940 [ 340.927405] ? __sys_sendmmsg+0x240/0x6f0 [ 340.931552] ? do_syscall_64+0x1b1/0x800 [ 340.935601] ? find_held_lock+0x36/0x1c0 [ 340.939686] ? check_same_owner+0x320/0x320 [ 340.944101] ? print_usage_bug+0xc0/0xc0 [ 340.948157] ? rcu_note_context_switch+0x710/0x710 [ 340.953072] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 340.958337] __should_failslab+0x124/0x180 [ 340.962562] should_failslab+0x9/0x14 [ 340.966369] kmem_cache_alloc_node+0x272/0x780 [ 340.970941] ? __lock_acquire+0x7f5/0x5140 [ 340.975164] __alloc_skb+0x111/0x780 [ 340.978866] ? skb_scrub_packet+0x580/0x580 [ 340.983179] ? debug_check_no_locks_freed+0x310/0x310 [ 340.988359] ? __lock_acquire+0x7f5/0x5140 [ 340.992581] ? perf_trace_lock_acquire+0xe3/0x980 [ 340.997410] ? perf_trace_lock+0x900/0x900 [ 341.001641] alloc_skb_with_frags+0x137/0x760 [ 341.006129] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 341.010877] ? graph_lock+0x170/0x170 [ 341.014682] sock_alloc_send_pskb+0x87a/0xae0 [ 341.019168] ? find_held_lock+0x36/0x1c0 [ 341.023214] ? sock_wmalloc+0x1e0/0x1e0 [ 341.027181] ? lock_downgrade+0x8e0/0x8e0 [ 341.031328] ? kasan_check_read+0x11/0x20 [ 341.035461] ? do_raw_spin_unlock+0x9e/0x2e0 [ 341.039866] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 341.044445] ? kasan_check_write+0x14/0x20 [ 341.048668] ? do_raw_spin_lock+0xc1/0x200 [ 341.052895] ? _raw_spin_unlock+0x22/0x30 [ 341.057045] unix_dgram_sendmsg+0x4f9/0x1730 [ 341.061445] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 341.066974] ? unix_stream_connect+0x11c0/0x11c0 [ 341.071717] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 341.077243] ? _copy_from_user+0xdf/0x150 [ 341.081383] ? copy_msghdr_from_user+0x3bc/0x560 [ 341.086140] ? security_socket_sendmsg+0x94/0xc0 [ 341.090890] ? unix_stream_connect+0x11c0/0x11c0 [ 341.095632] sock_sendmsg+0xd5/0x120 [ 341.099332] ___sys_sendmsg+0x525/0x940 [ 341.103291] ? lock_repin_lock+0x410/0x410 [ 341.107512] ? copy_msghdr_from_user+0x560/0x560 [ 341.112263] ? __schedule+0x809/0x1e30 [ 341.116138] ? find_held_lock+0x36/0x1c0 [ 341.120190] ? lock_downgrade+0x8e0/0x8e0 [ 341.124331] ? rcu_note_context_switch+0x710/0x710 [ 341.129252] ? check_same_owner+0x320/0x320 [ 341.133556] ? __might_sleep+0x95/0x190 [ 341.137522] __sys_sendmmsg+0x240/0x6f0 [ 341.141573] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 341.145884] ? __lock_is_held+0xb5/0x140 [ 341.149948] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 341.155466] ? fput+0x130/0x1a0 [ 341.158731] ? ksys_write+0x1a6/0x250 [ 341.162518] ? __ia32_sys_read+0xb0/0xb0 [ 341.166568] __x64_sys_sendmmsg+0x9d/0x100 [ 341.170792] do_syscall_64+0x1b1/0x800 [ 341.174676] ? finish_task_switch+0x1ca/0x810 [ 341.179159] ? syscall_return_slowpath+0x5c0/0x5c0 [ 341.184076] ? syscall_return_slowpath+0x30f/0x5c0 [ 341.189008] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 341.194363] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 341.199201] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 341.204481] RIP: 0033:0x455329 [ 341.207654] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 341.215350] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 2018/04/19 09:42:56 executing program 6: setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @broadcast=0xffffffff}, @in={0x2, 0x0, @multicast1=0xe0000001}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f0000000000), 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 2018/04/19 09:42:56 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x1, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000100)=""/250) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r2 = accept$alg(r1, 0x0, 0x0) r3 = semget$private(0x0, 0x0, 0x108) semctl$GETPID(r3, 0x3, 0xb, &(0x7f0000000300)=""/211) sendmsg$can_raw(r2, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) [ 341.222603] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 341.229856] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 341.237112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 341.244368] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000016 2018/04/19 09:42:56 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="24000000200025f0006b000420edea00023c000801dbb500001004ea08000100000000b7", 0x24) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x10100) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xffff) 2018/04/19 09:42:56 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$fuse(r0, &(0x7f00009eb000)=ANY=[@ANYBLOB="300000000500000000000000000000000000000000000000000000000000000000000200000000000000000000000000"], 0x30) 2018/04/19 09:42:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/38, 0x26}, &(0x7f0000000080), 0x3a}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') fchdir(r2) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_fuseblk_mount(&(0x7f0000976000)='./file0\x00', &(0x7f0000dd3ff8)='-/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000200)={0x8, 0x0, 0x2e9c}) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000400)=0x1, 0x4) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000240)=0x7) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x0) chroot(&(0x7f0000000140)='./file0\x00') r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0x14) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0xcd, 0x100, 0xffff, 0x8001}]}, 0x10) 2018/04/19 09:42:56 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="ace8060000cacf942f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b4000000000000002500000000f6472b3300000000000000000000000000000a9500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) write(r1, &(0x7f00000005c0)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/04/19 09:42:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6-generic)\x00'}, 0x68c) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='ifb0\x00') setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) 2018/04/19 09:42:57 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000000)={0x2, r0, 0x1}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0xffffffff) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000c80)) 2018/04/19 09:42:57 executing program 0: mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000000)={0x0, 0xffffffffffffff9c}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000000c0)={0x2, r0, 0x1}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000140)={0xfffffffffffffffc, 0x2, 0x1000000000003, 0xd3, 0x200000, 0x45}) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 2018/04/19 09:42:57 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="b8d20021020000000000000000000000be14a23f79afc80000000000000000eec8b2b716493000000000e71af8325eb6fcb3696f410000ff0320000000ff5ae06bc15bcfae71e57f47235fdbbdfc040253bf63d02a52a2cf1fa9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c0010000a000000000000005c00110000000000000000000000000000000000e0000002000000000000000000000000000000000000000000000000ff010000000000000000000000000001ac1414bb000000000000000000000000000000000000000000000000"], 0xb8}, 0x1}, 0x0) ioperm(0xffffffffffffff22, 0x4, 0x7) 2018/04/19 09:42:57 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x400, 0x40) ioctl$sock_proto_private(r1, 0x89ea, &(0x7f0000000040)="f9697cceda83426bc0e9f9b619c4158df25100739873739c94006e399336a88a7b96a3f6a2d4fdd9d90d09a2a1f1c079c0e691383128623a0c943a121eb045d5eaa3ff75ec") read(r0, &(0x7f0000000180)=""/384, 0xfffffffffffffeee) signalfd(r0, &(0x7f0000432ff8), 0x8) 2018/04/19 09:42:57 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000200)="72dd1f06a0de9d877acc6d56526770ae2ac84ce0c405f1b8fe7e2a0076cead8252973e94a19beafaab2bdbb23212ad61511b74d780a0f3df0cf1463df01c3860815036dba9bba02397289eaab3fc3447cb9edf962c24a1310bdfa48edf081021bb0378d10b8a3e476f514a69e5ccb1cbe2035ff9423b6b34d33411e5559deaec67acac3e7ee7d65c3cf6a68659a513cd30610679228c67f401abba60a9accfa84baf2ddf817b6834c5852f6020adb6e0b3c44b77c270102e46792106c06b792dd18b216be1d378ef895adc4a9e9669c931a33845bb2af9", 0xd7) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x4, &(0x7f00000000c0)=@raw=[@exit={0x95}, @exit={0x95}], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x5e, &(0x7f0000000180)=""/94}, 0x48) 2018/04/19 09:42:57 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000020000000000000001008e15e7af00", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x8, 0x200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000340)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xc0001, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000000)) ioctl$int_out(r1, 0x5462, &(0x7f0000000200)) r2 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x3f, 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000280)={0x9, 0x8, [0x10000, 0xfffffffffffff5e4]}) 2018/04/19 09:42:57 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f00000000c0)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x48}, 0x1}, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000080)) 2018/04/19 09:42:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566989c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805db67e1c05da4eb88536e888060a2d6ceb338975fb010c4cb2fd42f80a84b861020cd9104592e4e76c6d28ddb61ae82887b7e5085f5fcc1656b98e") r1 = semget$private(0x0, 0x0, 0x200) semctl$IPC_RMID(r1, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)="5329e424052289b34d293b4dd529db94d28a9336fd6cd3b83f9fb3d988efccb4f17648a8a2ef9f41e1496ce209b9bb739bc4c0f8197c7611776cf83d33e65f7277d147f90d22f3ea4351d8ee3870307bab24d5a46f620d8385354ac79871573d93bd05e9639a80c4adedd495e3f260") ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x9, 0x3, 0x1, 0x2, 0xe, 0x9, 0x400, 0x8, 0xfffffffffffffff8, 0xfffffffffffff53f, 0x6}) fsetxattr(r0, &(0x7f0000000240)=@random={'btrfs.', '\x00'}, &(0x7f0000000bc0)='\x00', 0x1, 0x1) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000280)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000200)) 2018/04/19 09:42:57 executing program 4 (fault-call:3 fault-nth:23): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:42:57 executing program 6: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') readlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=""/224, 0xe0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/92, 0x5c) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x5, 0x204000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000480)=""/4096) 2018/04/19 09:42:57 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000600)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0xffffffffffffffe4, 0x400) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000280)=0xfaf) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000080)={{0x0, 0x2, 0x3f, 0x2, "9ea22e4d88750b42f2e79ea154763a54a21723657fbdcfe221d5a5231b57cde72c4c56ee9483ccf4e32be5d8"}, 0x0, 0x0, 0x7, r1, 0xffffffff, 0x80, "989f7a86a676bc1a211054abfbd05470b473d1da355d23ac669cfb136e555374d646fe4da41189c565298f512e67f73ca95b0d628984d80db2e02ed6bc8b699a", &(0x7f0000000040)='+%#\x00', 0x4, [], [0x12, 0xea, 0x7, 0x35004f6e]}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) [ 341.827109] FAULT_INJECTION: forcing a failure. [ 341.827109] name failslab, interval 1, probability 0, space 0, times 0 [ 341.838431] CPU: 0 PID: 25035 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 341.845628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.855099] Call Trace: [ 341.857705] dump_stack+0x1b9/0x294 [ 341.861354] ? dump_stack_print_info.cold.2+0x52/0x52 [ 341.866591] ? perf_trace_lock_acquire+0xe3/0x980 [ 341.871454] ? kernel_text_address+0x79/0xf0 [ 341.875881] ? __unwind_start+0x166/0x330 [ 341.880076] should_fail.cold.4+0xa/0x1a [ 341.884159] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 341.889286] ? save_stack+0xa9/0xd0 [ 341.892933] ? save_stack+0x43/0xd0 [ 341.896577] ? kasan_slab_alloc+0x12/0x20 [ 341.900740] ? find_held_lock+0x36/0x1c0 [ 341.904846] ? check_same_owner+0x320/0x320 [ 341.909184] ? lock_downgrade+0x8e0/0x8e0 [ 341.913352] ? rcu_note_context_switch+0x710/0x710 [ 341.918315] __should_failslab+0x124/0x180 [ 341.922560] should_failslab+0x9/0x14 2018/04/19 09:42:57 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'user.', 'lo/wlan0\x00'}, &(0x7f00000001c0)=""/154, 0x48) shmget(0x2, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000001080)=""/4096, &(0x7f0000000000)=0x1000) r1 = msgget(0x2, 0x2) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000080)=""/75) 2018/04/19 09:42:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000851ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000fe0)={r2}) read$eventfd(r2, &(0x7f00006e8ff8), 0x8) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x40000) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000240)={0x17, 0x5, 0x80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$eventfd(r2, &(0x7f0000000040)=0x3, 0x8) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f00000000c0)) [ 341.926367] kmem_cache_alloc_node_trace+0x26f/0x770 [ 341.931496] __kmalloc_node_track_caller+0x33/0x70 [ 341.936439] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 341.941214] __alloc_skb+0x14d/0x780 [ 341.944948] ? skb_scrub_packet+0x580/0x580 [ 341.949293] ? debug_check_no_locks_freed+0x310/0x310 [ 341.954500] ? __lock_acquire+0x7f5/0x5140 [ 341.958752] ? perf_trace_lock_acquire+0xe3/0x980 [ 341.963614] ? perf_trace_lock+0x900/0x900 [ 341.967881] alloc_skb_with_frags+0x137/0x760 [ 341.972406] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 341.977179] ? graph_lock+0x170/0x170 [ 341.981002] sock_alloc_send_pskb+0x87a/0xae0 [ 341.985512] ? find_held_lock+0x36/0x1c0 [ 341.989568] ? sock_wmalloc+0x1e0/0x1e0 [ 341.993539] ? lock_downgrade+0x8e0/0x8e0 [ 341.997684] ? kasan_check_read+0x11/0x20 [ 342.001831] ? do_raw_spin_unlock+0x9e/0x2e0 [ 342.006230] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 342.010862] ? kasan_check_write+0x14/0x20 [ 342.015852] ? do_raw_spin_lock+0xc1/0x200 [ 342.020076] ? _raw_spin_unlock+0x22/0x30 [ 342.024240] unix_dgram_sendmsg+0x4f9/0x1730 [ 342.028732] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 342.034263] ? unix_stream_connect+0x11c0/0x11c0 [ 342.039005] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 342.044531] ? _copy_from_user+0xdf/0x150 [ 342.048672] ? copy_msghdr_from_user+0x3bc/0x560 [ 342.053418] ? security_socket_sendmsg+0x94/0xc0 [ 342.058165] ? unix_stream_connect+0x11c0/0x11c0 [ 342.062908] sock_sendmsg+0xd5/0x120 [ 342.066611] ___sys_sendmsg+0x525/0x940 [ 342.070573] ? lock_repin_lock+0x410/0x410 [ 342.074808] ? copy_msghdr_from_user+0x560/0x560 [ 342.079550] ? _raw_spin_unlock_irq+0x27/0x70 [ 342.084031] ? __schedule+0x144f/0x1e30 [ 342.087997] ? find_held_lock+0x36/0x1c0 [ 342.092055] ? lock_downgrade+0x8e0/0x8e0 [ 342.096198] ? rcu_note_context_switch+0x710/0x710 [ 342.101114] ? check_same_owner+0x320/0x320 [ 342.105420] ? __might_sleep+0x95/0x190 [ 342.109387] __sys_sendmmsg+0x240/0x6f0 [ 342.113354] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 342.117662] ? __lock_is_held+0xb5/0x140 [ 342.121722] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 342.127246] ? fput+0x130/0x1a0 [ 342.130510] ? ksys_write+0x1a6/0x250 [ 342.134299] ? __ia32_sys_read+0xb0/0xb0 [ 342.138352] __x64_sys_sendmmsg+0x9d/0x100 [ 342.142578] do_syscall_64+0x1b1/0x800 [ 342.146453] ? finish_task_switch+0x1ca/0x810 [ 342.150935] ? syscall_return_slowpath+0x5c0/0x5c0 [ 342.155863] ? syscall_return_slowpath+0x30f/0x5c0 [ 342.160802] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 342.166158] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 342.170994] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 342.176172] RIP: 0033:0x455329 [ 342.179348] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 342.187043] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 342.194300] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 342.201552] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 342.208806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 342.216062] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000017 2018/04/19 09:42:57 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(blowfish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab2719", 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000180)="b29189d4bde6c0b2fc9a8977") ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f00000000c0)=""/110) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000001c0)={[], 0x8cf, 0x1000, 0x4, 0x0, 0x14000000, 0x0, 0x1, [], 0xaf82}) 2018/04/19 09:42:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000009ffb)='comm\x00') openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x9) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0x9) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) syz_open_procfs(r1, &(0x7f0000000100)='attr/prev\x00') 2018/04/19 09:42:57 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'irlan0\x00'}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2801, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000000c0)={{0x3, 0x2, 0xffffffff, 0x0, 0x4}, 0x1, 0x5, 'id0\x00', 'timer1\x00', 0x0, 0x8, 0x7f, 0x6, 0x1}) syz_mount_image$bfs(&(0x7f00000001c0)='bfs\x00', &(0x7f0000000200)='./file0\x00', 0xc800000000000, 0x1, &(0x7f0000000340)=[{&(0x7f0000000240)="bf87883fd698a2f99ea99fab10cb409e1b68bb902824abd811c1a60e420212c81895777a1901ab268632c829deb745addc75d8581ade4dead4e0863ece64ffb338d0b3274bed9c9364d695a8499bd4243f5c8deb8a5925a6bda315973f5746cb8569730a9c4686d523670818932a55ffdd6bd0e9c007a5f885446b8359f68c72faddae75a1eddae62f5b069113969f4b279db454974d14276021363aee2e914f2f25ab8254ec0f13fa23908a36434ac64d293404e6a37eb1c2c3534cca460c8f43b988b900586be7728f4125e6cc3afee039eaa8d87c6502a55f7d97bbd3e8e5aea92e589b34ea6b4ba4d5b0d3", 0xed, 0x10000}], 0x10008, 0x0) socket$inet(0x2, 0x80005, 0x6) 2018/04/19 09:42:57 executing program 7: syz_emit_ethernet(0x26, &(0x7f0000000040)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x17}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@generic={0x22eb, "d7062422175a5af2985fb9bc2071c4f13eb27674d62a38ff"}}}, &(0x7f0000000080)={0x6ff, 0x3, [0xb68, 0x2fc, 0xf51, 0x34]}) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x2600, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 2018/04/19 09:42:58 executing program 4 (fault-call:3 fault-nth:24): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:42:58 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f0000eebff0)) r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x1000, 0x800) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000080)={{0x1, 0x8, 0x9, 0xffffffffffffff81, 0xff, 0xd3}, 0x7fffffff}) socket$netlink(0x10, 0x3, 0x0) 2018/04/19 09:42:58 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380100001a0001000004000000000000000000000000000000000000000000010000000000000000000000000000000100000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000006c000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480002006563622d63617374362d61767800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x138}, 0x1}, 0x0) 2018/04/19 09:42:58 executing program 0: socket$nl_route(0x10, 0x3, 0x0) 2018/04/19 09:42:58 executing program 3: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x8800, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000180)=0xd, 0x11c) dup2(r1, r2) 2018/04/19 09:42:58 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x408000) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0xff) setsockopt(r2, 0x2000000000010d, 0x4000800000000b, &(0x7f0000000280)='\a\x00\x00\x00', 0x4) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/04/19 09:42:58 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f000000c000)={0x9, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e004bcc0ae4de5d4e831c68b6c2956c2874476ee83e417454f684cab6a71b139644ea97a"}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x80, 0x2) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000080)=""/223) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000000)={0x9, 0xffffffffffffffff, 0x0, 0x0, "1ef4bc48491acd5e0c4b976cba7eef36c40efce39f2b9c125ba7a77d8dd019d6041e65648e7f165944391be5"}) 2018/04/19 09:42:58 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @loopback=0x7f000001}, 0xd) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007ff, &(0x7f0000000280)={0x2, 0x4e23}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000001300)={0x3}) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x20a40, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000240)={0x5, 0x8, [0xf8dc, 0x6]}) read(r0, &(0x7f0000000080)=""/218, 0x7b) recvfrom$inet(r0, &(0x7f0000000180)=""/24, 0x18, 0x0, &(0x7f00000001c0)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f00000002c0)=""/4096) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xa7, 0x40000) [ 342.933922] QAT: Invalid ioctl 2018/04/19 09:42:58 executing program 0: syz_emit_ethernet(0x1017, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@llc={0x4, {@snap={0x1, 0x0, "95e8", "8c1ced", 0x0, "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"}}}}}, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x80000) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)=0x2) 2018/04/19 09:42:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/kvm\x00', 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000008c0)=ANY=[@ANYBLOB="80000000000000eeb799890070e9c385d700004000000000000000000000000008f3e891b975bcc174e475359c4fed2a4adb21442ea3eb1e8488cc50b4b309732186a3f90b5997cfc9c286a62b3ec31a8238454d21c0e23f9a9cc1ba988251cb2f2522819c2c291ca0b163517e4266e726"]) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000680)='/dev/snd/midiC#D#\x00', 0x3ff, 0x440) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000007c0)=""/134) mount(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='nfs\x00', 0x4c4, &(0x7f0000000400)="a24424cac15c36e23727b406808536bb727131254cf290504c3eff3825ba5e48079f264ad8fbf7d6ac15e7e9d9dd6ae2ca30123c9363b91916eddf7f27ef0f3ed1bb37e13ac8806ead6aa1859f25530a52ee85c294b6a92f8bb54cf598e85e4798d8ceb793ede47e4fd7dcf8690523c4a1d095e05fa5c1b56b98873a5d199d0a625373a9d9ddde7a89999e4ca55643fac7df88065f5f0ce7f09b8f02409252ea21a140bdb7228b119c9892dc4eae592a93b20b65f7340ed4fec28781e4464325ef935c3498") mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f0000000000)}, 0x0) r4 = syz_open_dev$midi(&(0x7f00000013c0)='/dev/midi#\x00', 0x73, 0x100) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000001400)=""/253, &(0x7f0000001500)=0xfd) shmget(0x0, 0x2000, 0x100, &(0x7f0000ffb000/0x2000)=nil) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f00000016c0)={0x80000000, 0x1, 0x200, 0x6, 0xbee}) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r5, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xffff, 0x7fffffff, 0x180000000000, 0x3, 0x800}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000880)=@assoc_value={r6, 0xfff}, 0x8) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000ef9ffc)=0xc3f, 0x4) recvmsg(r4, &(0x7f0000edffc8)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000940)=""/234, 0x3}], 0x1000027a, &(0x7f0000603000)=""/81, 0x51, 0x7}, 0x40002102) r7 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) stat(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0xfffffffffffffffe, 0x533, 0x3}) ioctl(r7, 0x2285, &(0x7f0000007000)='S') setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000700)=0x6, 0x4) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000006c0)='\x00', &(0x7f0000000140)='vboxnet0]ppp1wlan1)+{]/*ppp0\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)=',.ppp1em1\x00', &(0x7f0000000640)='.\x00'], &(0x7f0000000140)) clone(0x24000200, &(0x7f0000000280)="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", &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)="0524ead87a1dd9c5ff555f54d2f862b1edba067cec4a095b4313b3c02bcbada564ed21aa99faddc6c31129f3c8010e998cc3f8b7d022c10bcc157b28b0e33551fb8252644b695acf600fd618184de21bbad81cc52e507cc378ff3336d260b6f1568707f702caba13690a11717af74159b0b3d1365cbb12087a6c9f4e32852a325c5fceca64301e0ae12175") 2018/04/19 09:42:58 executing program 5: prctl$seccomp(0x21, 0x1, &(0x7f0000000080)={0x2000000000000002, &(0x7f0000000000)=[{0xfff, 0x1, 0x9, 0x2}]}) [ 342.965206] QAT: Invalid ioctl 2018/04/19 09:42:58 executing program 7: r0 = socket$inet(0x2, 0x80003, 0x100000001) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x6488}}}}}, &(0x7f0000000040)) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) 2018/04/19 09:42:58 executing program 3: syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x3fff) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) dup2(0xffffffffffffffff, r0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) 2018/04/19 09:42:58 executing program 0: r0 = open(&(0x7f0000520ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x10000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051bff6)='/dev/ptmx\x00', 0x802, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000080)={r2, 0x30}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x8e) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000200)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/40, 0x28}], 0x1, &(0x7f0000000680)=""/201, 0xc9}}], 0x1, 0x0, &(0x7f0000002f00)) fstat(r0, &(0x7f0000000780)) readv(r1, &(0x7f0000000080), 0x0) 2018/04/19 09:42:58 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x4, 0x800) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x8, 0x84000) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r1}) ioctl$sock_SIOCGPGRP(r1, 0x8981, &(0x7f0000000240)) 2018/04/19 09:42:58 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x80000) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) r2 = accept$alg(r1, 0x0, 0x0) recvmsg(r2, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) [ 343.708732] FAULT_INJECTION: forcing a failure. [ 343.708732] name failslab, interval 1, probability 0, space 0, times 0 [ 343.720110] CPU: 0 PID: 25114 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 343.727287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.736626] Call Trace: [ 343.739203] dump_stack+0x1b9/0x294 [ 343.742816] ? dump_stack_print_info.cold.2+0x52/0x52 [ 343.747993] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 343.753521] ? __perf_event_task_sched_out+0x2cc/0x1470 [ 343.758889] should_fail.cold.4+0xa/0x1a [ 343.762954] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 343.768059] ? find_held_lock+0x36/0x1c0 [ 343.772130] ? find_held_lock+0x36/0x1c0 [ 343.776194] ? check_same_owner+0x320/0x320 [ 343.780500] ? print_usage_bug+0xc0/0xc0 [ 343.784549] ? rcu_note_context_switch+0x710/0x710 [ 343.789460] ? finish_task_switch+0x28b/0x810 [ 343.793937] __should_failslab+0x124/0x180 [ 343.798157] should_failslab+0x9/0x14 [ 343.801939] kmem_cache_alloc_node+0x272/0x780 [ 343.806503] ? __lock_acquire+0x7f5/0x5140 [ 343.810722] __alloc_skb+0x111/0x780 [ 343.814422] ? skb_scrub_packet+0x580/0x580 [ 343.818725] ? debug_check_no_locks_freed+0x310/0x310 [ 343.823900] ? __lock_acquire+0x7f5/0x5140 [ 343.828117] ? perf_trace_lock+0xd6/0x900 [ 343.832245] ? zap_class+0x720/0x720 [ 343.835969] alloc_skb_with_frags+0x137/0x760 [ 343.840478] ? graph_lock+0x170/0x170 [ 343.844297] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 343.849058] ? graph_lock+0x170/0x170 [ 343.852872] sock_alloc_send_pskb+0x87a/0xae0 [ 343.857377] ? find_held_lock+0x36/0x1c0 [ 343.861430] ? sock_wmalloc+0x1e0/0x1e0 [ 343.865409] ? lock_downgrade+0x8e0/0x8e0 [ 343.869547] ? kasan_check_read+0x11/0x20 [ 343.873679] ? do_raw_spin_unlock+0x9e/0x2e0 [ 343.878076] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 343.882646] ? kasan_check_write+0x14/0x20 [ 343.886863] ? do_raw_spin_lock+0xc1/0x200 [ 343.891084] ? _raw_spin_unlock+0x22/0x30 [ 343.895219] unix_dgram_sendmsg+0x4f9/0x1730 [ 343.899620] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 343.905151] ? unix_stream_connect+0x11c0/0x11c0 [ 343.909893] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 343.915413] ? _copy_from_user+0xdf/0x150 [ 343.919551] ? copy_msghdr_from_user+0x3bc/0x560 [ 343.924295] ? security_socket_sendmsg+0x94/0xc0 [ 343.929038] ? unix_stream_connect+0x11c0/0x11c0 [ 343.933779] sock_sendmsg+0xd5/0x120 [ 343.937486] ___sys_sendmsg+0x525/0x940 [ 343.941457] ? copy_msghdr_from_user+0x560/0x560 [ 343.946202] ? find_held_lock+0x36/0x1c0 [ 343.950254] ? lock_downgrade+0x8e0/0x8e0 [ 343.954403] ? rcu_note_context_switch+0x710/0x710 [ 343.959317] ? check_same_owner+0x320/0x320 [ 343.963622] ? __might_sleep+0x95/0x190 [ 343.967589] __sys_sendmmsg+0x240/0x6f0 [ 343.971552] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 343.975898] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 343.981420] ? fput+0x130/0x1a0 [ 343.984685] ? ksys_write+0x1a6/0x250 [ 343.988472] ? __ia32_sys_read+0xb0/0xb0 [ 343.992517] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 343.997346] __x64_sys_sendmmsg+0x9d/0x100 [ 344.001566] do_syscall_64+0x1b1/0x800 [ 344.005435] ? finish_task_switch+0x1ca/0x810 [ 344.009916] ? syscall_return_slowpath+0x5c0/0x5c0 [ 344.015534] ? syscall_return_slowpath+0x30f/0x5c0 [ 344.020453] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 344.025805] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 344.030643] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.035816] RIP: 0033:0x455329 [ 344.038989] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 344.046687] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 344.053947] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 344.061200] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 344.068454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 344.075704] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000018 2018/04/19 09:42:59 executing program 4 (fault-call:3 fault-nth:25): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:42:59 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5404, &(0x7f00009f1000)) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000240)=""/214) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x7fffffff) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x2, 0x4, 0x0, 0x1ff, 0x6, 0x1, 0x0, 0x4, 0x0, 0x8, 0x9}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00001e4000)) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000840)={0x0, @local, @multicast1}, &(0x7f0000000880)=0xc) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000380)={0x669, 0x7fffffff, 0xffffffff}) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000980)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x4e21, 0x5, 0x4e20, 0x0, 0x0, 0x20, 0x0, 0x97, r2, r3}, {0xff, 0x8, 0x9, 0xffff, 0x6, 0xffffffff, 0x6, 0x2}, {0x0, 0x3ff, 0x6, 0x1005}, 0x2, 0x6e6bb6, 0x2, 0x0, 0x3}, {{@in=@loopback=0x7f000001, 0x4d2, 0xff}, 0xa, @in6, 0x3506, 0x7, 0x0, 0x9, 0x100, 0x4}}, 0xe8) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/147, 0x93) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000340)={0x10001, 0xed6, 0x5}) 2018/04/19 09:42:59 executing program 5: nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) ptrace$peekuser(0x3, r0, 0x5) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x6, 0x202) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000200)={0x1, 0x8, 0xffffffff, 0x0, 0xf}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000a55000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6e09b94265e6605bcdc753fdf72a14f20fc1fdabae4f2039ec201a5aa6018f2a83a48042012e"]) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000580)={r1, r1, 0x7}) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5bd3, 0x42) r2 = shmget(0x0, 0x2000, 0x2, &(0x7f000016b000/0x2000)=nil) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) r4 = getegid() stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r2, 0x1, &(0x7f00000004c0)={{0x8001, r3, r4, r5, r6, 0x170, 0x3c}, 0x20000000000, 0x6, 0x4, 0x0, r0, r0}) prctl$intptr(0x1f, 0x0) 2018/04/19 09:42:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x60c000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000001580)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000000140)={0x14, 0x22, 0x105, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x0, 0x0) 2018/04/19 09:42:59 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x40053, r0, 0xffffffffffffffff) r1 = userfaultfd(0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000100)={0x50, 0x0, 0x0, 0xfffffffffffffc01}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000140)={0xdb53, r3}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x840, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000000040)={0x7, 0x1, 0xfffffffffffffff8}) socket$packet(0x11, 0x2, 0x300) 2018/04/19 09:42:59 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000440)={0x0, 0x40000000000002}, 0x10) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000480)='b', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000180), 0x80800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 2018/04/19 09:42:59 executing program 7: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200000, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x300, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r1}) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f000093f000)=@abs={0x1}, 0x8) listen(r3, 0x0) poll(&(0x7f0000000240)=[{r2}, {r3}], 0x2, 0x0) 2018/04/19 09:42:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000000)=""/85) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000080)=""/188) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000000000000000008f8717808f5ff2c13007fce5aafce5710eae85cd20931cbfc7c7a10f169e102b5ce78b951333f82f46bd5d41da5a502aa9688aca317e4bc0b6ca7a55bb334dbc6c4bfea1d7be44dbe36e7f085dfc758511696e30e3adf57b1122ae4c227aa931514f7251856c185f32f85d64a9f498cf7426618c1e994eaff345fc559d6f2a450eab50f0b500006fd52dc989c9a8a4de1b4b23b176aa481044479f1c3d1ccc94f10c"], 0x102d5) 2018/04/19 09:42:59 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 2018/04/19 09:42:59 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="acf80600000080942f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xffffffa0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xa40c65e05fe71708, &(0x7f0000000000)=""/195, 0x41100}, 0x48) r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x8, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffff9c}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x8003, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000001c0)={r1, 0x80000, r2}) 2018/04/19 09:42:59 executing program 7: r0 = getpgid(0x0) sched_setaffinity(r0, 0xfffffffffffffeff, &(0x7f0000000280)=0x5) r1 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80000080}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc02c5341, &(0x7f00000005c0)={0x0, 0x0, 'client1\x00', 0x0, "b60d434322af7817", "35cd0ae4a95704447a1ec18fa7cfd20c85ff9bdca2970b16ce18feeabe96ad3f"}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000000c0)={0x10001, 0x2, 'client0\x00', 0xffffffff80000000, "2f9bbb9a4220fd0b", "36aa95819bf421544e9edf2974a9b4c546e081e4be749cfc4dfde2daed09a503", 0x1f}) 2018/04/19 09:42:59 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x200) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30b) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000000c0)={{0x1c32, 0x3, 0x0, 0x8, "713aa2a14b3ffbb7f4f3ffb6b31de724f32cef3eaef12d1dcf51fc9bbdcd52d17a6e0ab4c851dcf134853e09", 0xeae7000}, 0x0, 0x0, 0x2, r3, 0xc7f4, 0xff, "b6cfe280d1ad89c4f28e346866d718224b87368186c06970cb2d9738a075dd90d4fcb81ab20bfe74e6d9f96e1d82a00a31a4c1ed3bfecbd6ae1bc461e037b0bc", &(0x7f0000000080)='/dev/adsp#\x00', 0xb, [], [0x4, 0x9, 0x7, 0x7]}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getdents64(r1, &(0x7f0000000400)=""/244, 0xf4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x12, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], &(0x7f0000000380)=0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000200)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f00000002c0)={r4, 0x0}) socket$inet(0x2, 0x80000, 0xa4) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000003c0)={0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000280)={r4, r7}) close(r0) 2018/04/19 09:42:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(r0) ioctl$TCXONC(r1, 0x540a, 0xa7a) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x2, 0x1, 0x4}) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="d3aba9d1e897b4276251604fdc6ba69972d2a4b20079ff5c1b000000001c000000", 0x21) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x200000, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x200004, 0x0) 2018/04/19 09:42:59 executing program 6: r0 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0xaa1000)=nil, 0xaa1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f00000000c0)=0xa0) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x80000001, 0x200100) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000180)={0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000001c0)={r2, 0x20}) 2018/04/19 09:42:59 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x8001, 0x200) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0x8, 0x16}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000280)='net/ip_vs\x00') ioctl$TCFLSH(r0, 0x540b, 0x81) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000200)=""/97) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f00000001c0)={0x2, 0x2, 0x10001}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000040)={0x800, 0xfffffffffffffff8, 0x10000, 0x0, 0x0, [], [], [], 0xffffffffb10c53c6, 0x8}) ioctl(r0, 0xc1004110, &(0x7f0000001f64)) syz_open_procfs(r1, &(0x7f0000000340)='net/rt6_stats\x00') ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f00000002c0)=""/98) 2018/04/19 09:43:00 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet(r1, &(0x7f0000ff1ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) listen$netrom(r1, 0x101) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)={0x0, 0x1, 0x5}) prctl$intptr(0x200000002f, 0x2) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000f0e000), 0x4) r2 = accept4$inet(r1, 0x0, &(0x7f00008c5ffc), 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000000), &(0x7f0000000080)=0x8) [ 345.067737] FAULT_INJECTION: forcing a failure. [ 345.067737] name failslab, interval 1, probability 0, space 0, times 0 [ 345.079071] CPU: 1 PID: 25180 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 345.086267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.095623] Call Trace: [ 345.098220] dump_stack+0x1b9/0x294 [ 345.101858] ? dump_stack_print_info.cold.2+0x52/0x52 [ 345.107061] ? is_bpf_text_address+0xd7/0x170 [ 345.111564] ? kernel_text_address+0x79/0xf0 [ 345.115978] ? __unwind_start+0x166/0x330 [ 345.120140] should_fail.cold.4+0xa/0x1a [ 345.124212] ? __save_stack_trace+0x7e/0xd0 [ 345.128551] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 345.133669] ? save_stack+0xa9/0xd0 [ 345.137299] ? save_stack+0x43/0xd0 [ 345.140927] ? kasan_kmalloc+0xc4/0xe0 [ 345.144813] ? kasan_slab_alloc+0x12/0x20 [ 345.148970] ? find_held_lock+0x36/0x1c0 [ 345.153051] ? check_same_owner+0x320/0x320 [ 345.157367] ? rcu_note_context_switch+0x710/0x710 [ 345.162304] __should_failslab+0x124/0x180 [ 345.166554] should_failslab+0x9/0x14 [ 345.170367] kmem_cache_alloc_node_trace+0x26f/0x770 [ 345.175502] __kmalloc_node_track_caller+0x33/0x70 [ 345.180447] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 345.185204] __alloc_skb+0x14d/0x780 [ 345.188910] ? skb_scrub_packet+0x580/0x580 [ 345.193220] ? debug_check_no_locks_freed+0x310/0x310 [ 345.198396] ? __lock_acquire+0x7f5/0x5140 [ 345.202651] alloc_skb_with_frags+0x137/0x760 [ 345.207155] ? graph_lock+0x170/0x170 [ 345.210973] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 345.215740] ? graph_lock+0x170/0x170 [ 345.219551] sock_alloc_send_pskb+0x87a/0xae0 [ 345.224062] ? find_held_lock+0x36/0x1c0 [ 345.228134] ? sock_wmalloc+0x1e0/0x1e0 [ 345.232132] ? lock_downgrade+0x8e0/0x8e0 [ 345.236300] ? kasan_check_read+0x11/0x20 [ 345.240458] ? do_raw_spin_unlock+0x9e/0x2e0 [ 345.244878] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 345.249473] ? kasan_check_write+0x14/0x20 [ 345.253714] ? do_raw_spin_lock+0xc1/0x200 [ 345.257951] ? _raw_spin_unlock+0x22/0x30 [ 345.262085] unix_dgram_sendmsg+0x4f9/0x1730 [ 345.266484] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 345.272036] ? unix_stream_connect+0x11c0/0x11c0 [ 345.276802] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 345.282344] ? _copy_from_user+0xdf/0x150 [ 345.286493] ? copy_msghdr_from_user+0x3bc/0x560 [ 345.291242] ? security_socket_sendmsg+0x94/0xc0 [ 345.296002] ? unix_stream_connect+0x11c0/0x11c0 [ 345.300773] sock_sendmsg+0xd5/0x120 [ 345.304497] ___sys_sendmsg+0x525/0x940 [ 345.308483] ? copy_msghdr_from_user+0x560/0x560 [ 345.313256] ? find_held_lock+0x36/0x1c0 [ 345.317341] ? lock_downgrade+0x8e0/0x8e0 [ 345.321514] ? rcu_note_context_switch+0x710/0x710 [ 345.326450] ? check_same_owner+0x320/0x320 [ 345.330785] ? __might_sleep+0x95/0x190 [ 345.334775] __sys_sendmmsg+0x240/0x6f0 [ 345.338770] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 345.343104] ? __lock_is_held+0xb5/0x140 [ 345.347196] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 345.352748] ? fput+0x130/0x1a0 [ 345.356054] ? ksys_write+0x1a6/0x250 [ 345.359866] ? __ia32_sys_read+0xb0/0xb0 [ 345.363942] __x64_sys_sendmmsg+0x9d/0x100 [ 345.368183] do_syscall_64+0x1b1/0x800 [ 345.372079] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 345.376931] ? syscall_return_slowpath+0x5c0/0x5c0 [ 345.381865] ? syscall_return_slowpath+0x30f/0x5c0 [ 345.386809] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 345.392185] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 345.397051] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.402248] RIP: 0033:0x455329 [ 345.405438] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 345.413151] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 345.420420] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 345.427692] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 345.438964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 345.446241] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000019 2018/04/19 09:43:01 executing program 4 (fault-call:3 fault-nth:26): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000340)="d9f464f26d660f38dd05e58b00000f060fae4d05260f380481000000000f01c8c4c271baacfd00980000f4f0f71413", 0x2f}], 0x1, 0x0, &(0x7f0000000440), 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x15555555555555fb, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000140)={[0x1, 0x0, 0x2000], 0x5922, 0x1, 0x9}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000440)=ANY=[@ANYBLOB="0008000000000000030000000000000000000000070000000100000000000000ff07000000000000030000000000000000000000000000000000000000000000000000000000000000080400000000000000000000000000"]) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000004c0)={0x4, {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e22, @multicast2=0xe0000002}, {0x2, 0x4e22, @rand_addr=0x4}, 0x10, 0x100000000, 0x3, 0x272, 0x0, &(0x7f00000002c0)='bcsh0\x00', 0x2, 0x4, 0x1c0000000000000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000380)="0f01dff20f2058670f01ca0fc7ace9006766c7442400000000006766c7442402a80000006766c744240600000000670f011c24f30f01bbcb00f30f01c8d9735ce800c52ef3e170", 0x47}], 0x1, 0x0, &(0x7f0000000340), 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/04/19 09:43:01 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xfffffffffffeff56, 0x82) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000180)={0x6, 0x80000001}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080)=0x100000000000, 0x401) syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 2018/04/19 09:43:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4008ae61, &(0x7f0000358fe0)={r2}) 2018/04/19 09:43:01 executing program 7: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00000d3fe8)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@add_del={0x2, &(0x7f0000000040)='bridge0\x00'}) 2018/04/19 09:43:01 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x40400) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000140)={{0x67b9, 0x1ff, 0x200, 0xff, 0x9, 0x4}, 0x80000001, 0x468f26af, 0x6, 0x8, 0x3, "ea8d3447840552fd1737fc6e3ae8880f0bb20a909a7c30ea39f2de9f1227dbf1b66ba784a24fbc66ae920b0e5ecc8e6c8afef4f16cf20302de603105381600c9e18b33f1cc336ae7588f2991948ab7acab0e8e89150800101b5f3628abf8d579a32b58f23f32565c2d10c18f1a3c7f921a7644cf5a7aabb71e2a81ab65b19459"}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000b000/0x3000)=nil) socket$inet6_sctp(0xa, 0x5, 0x84) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x2) 2018/04/19 09:43:01 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) pread64(r0, &(0x7f00000008c0)=""/2048, 0xfffffffffffffecd, 0x40000800) 2018/04/19 09:43:01 executing program 6: r0 = socket$inet6(0xa, 0xffffffffffffffff, 0x3) sendto$inet6(r0, &(0x7f00004f3000), 0x0, 0x0, &(0x7f0000cac000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1a) r1 = msgget(0x3, 0x2) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000000)=""/228) 2018/04/19 09:43:01 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x5, 0x8000) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x7) ioctl$KVM_RUN(r1, 0xae80, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes-generic)\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000140)={{0x800000000000, 0x2, 0xfffffffffffffff8, 0x0, 0x3}, 0x8001, 0xfff, 0x3}) sendmmsg$alg(r2, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r2, &(0x7f0000000100)="791f7dfde0815c48c13197fc2e324dea", 0xffffffffffffffbb) recvmsg(r2, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/19 09:43:01 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/rfkill\x00', 0x1, 0x0) write$eventfd(r1, &(0x7f000025bff8)=0x20000000000, 0x8) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x100000001, 0x200000) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000040)={0x9}) 2018/04/19 09:43:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000016c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001d40)=[{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001780)="72eed697893e7ca7d4979bec60e97a0a33bbe8d0750bf943f2186621d06008b6", 0x20}], 0xffffffffffffe39, &(0x7f0000001880)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/19 09:43:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f0000000340)=0x98) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x15555555555555fb, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000140)={[0x1, 0x0, 0x2000], 0x5922, 0x1, 0x9}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000380)="0f01dff20f2058670f01ca0fc7ace9006766c7442400000000006766c7442402a80000006766c744240600000000670f011c24f30f01bbcb00f30f01c8d9735ce800c52ef3e170", 0x47}], 0x1, 0x0, &(0x7f0000000340), 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/19 09:43:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x200000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$fiemap(r0, 0x80087601, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x5, 0x5}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) 2018/04/19 09:43:01 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00'}, &(0x7f00000001c0)=0x24) 2018/04/19 09:43:01 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000480)={0x0, 0x5}, 0xc) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000000)={0x4, r0, 0x1}) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000040)={0x3, 0x0, [{0x4, 0x6, 0x1, 0x7, 0x3ff}, {0x40000000, 0x7f, 0xc5, 0x4, 0x40}, {0x7, 0x9, 0x4e, 0x5, 0x1}]}) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000004e00), 0x4) socket$nl_generic(0x10, 0x3, 0x10) 2018/04/19 09:43:01 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='ns/mnt\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x20000004, 0x80000020032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x6) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$fiemap(r1, 0x40087602, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) [ 346.417282] FAULT_INJECTION: forcing a failure. [ 346.417282] name failslab, interval 1, probability 0, space 0, times 0 [ 346.428609] CPU: 0 PID: 25259 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 346.435790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.445136] Call Trace: [ 346.447735] dump_stack+0x1b9/0x294 [ 346.451359] ? dump_stack_print_info.cold.2+0x52/0x52 [ 346.456540] ? unwind_get_return_address+0x61/0xa0 [ 346.461457] ? __save_stack_trace+0x7e/0xd0 [ 346.465762] should_fail.cold.4+0xa/0x1a [ 346.469808] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 346.474892] ? save_stack+0xa9/0xd0 [ 346.478503] ? save_stack+0x43/0xd0 [ 346.482110] ? kasan_kmalloc+0xc4/0xe0 [ 346.485979] ? __kmalloc_node_track_caller+0x47/0x70 [ 346.491072] ? __alloc_skb+0x14d/0x780 [ 346.494945] ? alloc_skb_with_frags+0x137/0x760 [ 346.499605] ? sock_alloc_send_pskb+0x87a/0xae0 [ 346.504257] ? unix_dgram_sendmsg+0x4f9/0x1730 [ 346.508819] ? sock_sendmsg+0xd5/0x120 [ 346.512687] ? ___sys_sendmsg+0x525/0x940 [ 346.516827] ? __sys_sendmmsg+0x240/0x6f0 [ 346.520960] ? __x64_sys_sendmmsg+0x9d/0x100 [ 346.525354] ? do_syscall_64+0x1b1/0x800 [ 346.529399] ? find_held_lock+0x36/0x1c0 [ 346.533461] ? check_same_owner+0x320/0x320 [ 346.537768] ? print_usage_bug+0xc0/0xc0 [ 346.541817] ? rcu_note_context_switch+0x710/0x710 [ 346.546743] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 346.552010] __should_failslab+0x124/0x180 [ 346.556242] should_failslab+0x9/0x14 [ 346.560037] kmem_cache_alloc_node+0x272/0x780 [ 346.564619] ? __lock_acquire+0x7f5/0x5140 [ 346.568837] __alloc_skb+0x111/0x780 [ 346.572535] ? skb_scrub_packet+0x580/0x580 [ 346.576839] ? debug_check_no_locks_freed+0x310/0x310 [ 346.582013] ? __lock_acquire+0x7f5/0x5140 [ 346.586236] ? perf_trace_lock_acquire+0xe3/0x980 [ 346.591070] alloc_skb_with_frags+0x137/0x760 [ 346.595548] ? graph_lock+0x170/0x170 [ 346.599344] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 346.604080] ? graph_lock+0x170/0x170 [ 346.607860] sock_alloc_send_pskb+0x87a/0xae0 [ 346.612337] ? find_held_lock+0x36/0x1c0 [ 346.616380] ? sock_wmalloc+0x1e0/0x1e0 [ 346.620513] ? lock_downgrade+0x8e0/0x8e0 [ 346.624646] ? kasan_check_read+0x11/0x20 [ 346.628782] ? do_raw_spin_unlock+0x9e/0x2e0 [ 346.633177] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 346.637747] ? kasan_check_write+0x14/0x20 [ 346.641960] ? do_raw_spin_lock+0xc1/0x200 [ 346.646181] ? _raw_spin_unlock+0x22/0x30 [ 346.650314] unix_dgram_sendmsg+0x4f9/0x1730 [ 346.654709] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 346.660230] ? unix_stream_connect+0x11c0/0x11c0 [ 346.664965] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 346.670485] ? _copy_from_user+0xdf/0x150 [ 346.674616] ? copy_msghdr_from_user+0x3bc/0x560 [ 346.679364] ? security_socket_sendmsg+0x94/0xc0 [ 346.684108] ? unix_stream_connect+0x11c0/0x11c0 [ 346.688846] sock_sendmsg+0xd5/0x120 [ 346.692541] ___sys_sendmsg+0x525/0x940 [ 346.696505] ? copy_msghdr_from_user+0x560/0x560 [ 346.701247] ? find_held_lock+0x36/0x1c0 [ 346.705294] ? lock_downgrade+0x8e0/0x8e0 [ 346.709435] ? rcu_note_context_switch+0x710/0x710 [ 346.714353] ? check_same_owner+0x320/0x320 [ 346.718656] ? __might_sleep+0x95/0x190 [ 346.722619] __sys_sendmmsg+0x240/0x6f0 [ 346.726581] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 346.730883] ? __lock_is_held+0xb5/0x140 [ 346.734933] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 346.740448] ? fput+0x130/0x1a0 [ 346.743707] ? ksys_write+0x1a6/0x250 [ 346.747492] ? __ia32_sys_read+0xb0/0xb0 [ 346.751539] __x64_sys_sendmmsg+0x9d/0x100 [ 346.755757] do_syscall_64+0x1b1/0x800 [ 346.759715] ? finish_task_switch+0x1ca/0x810 [ 346.764201] ? syscall_return_slowpath+0x5c0/0x5c0 [ 346.769111] ? syscall_return_slowpath+0x30f/0x5c0 [ 346.774034] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 346.779404] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 346.784243] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.789413] RIP: 0033:0x455329 [ 346.792585] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 346.800275] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 346.807525] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 346.814775] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 346.822031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 346.829284] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 000000000000001a 2018/04/19 09:43:02 executing program 4 (fault-call:3 fault-nth:27): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:02 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x2, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r1 = socket(0x10, 0x2, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000011c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001200)={@dev={0xfe, 0x80, [], 0x11}, 0x48, r2}) r3 = socket$inet_sctp(0x2, 0x2, 0x84) read(r3, &(0x7f0000000000)=""/135, 0x87) write(r1, &(0x7f00000000c0)="1f0000000104ff00fd4354c007110000f305010008000100010423dcff2a0ff6ad2be9211cdce0df00", 0xae) write(r1, &(0x7f0000000100)="1f0000000104fffffd3b54c007110000f30501000b000300000010d10200cf", 0x1f) r4 = shmget$private(0x0, 0x4000, 0x54000008, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) 2018/04/19 09:43:02 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xf1, 0x20040) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f00000000c0)={0x6, 0x3, [{0x1, 0x0, 0x1ff}, {0x7, 0x0, 0x4}, {0x6, 0x0, 0x37}, {}, {0x0, 0x0, 0x7f}, {0x0, 0x0, 0x71c}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000080)="1f0000000104ff00fd438f7b00000000f305010008000100010423dcffdf00", 0x1f) fchmod(r1, 0xe1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000000)="1f0000000104fffff13b54c007110000f30501000b000300720e0000000000", 0x1f) 2018/04/19 09:43:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x101000, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390d006dc80000009d4d54", 0x10) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000008c0)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000900)={0x0, 0x0, 0xd6b9000}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000940)={r3, r4}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x7fffffff, 0xffffffff, 0x4, 'queue1\x00', 0x401}) ioctl$void(r1, 0x5450) syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffffff9, 0x8, &(0x7f0000000740)=[{&(0x7f0000000300)="55a7d8d3d2b54f659deaa6dd354bd903befc8767dccf136ec9065d3a57b4ac690d81650972f37df05139f7902f2efe9a0af160a845de8aa91536f9d9ba2eff3777afbe43358528bea782909f8095c7c84c4090911bb18b1ed229adc1025f0a949625d5a8cb1023234513cb78a41852878c1fb27561e11b8cf4", 0x79, 0x9}, {&(0x7f0000000380)="55de9ae266f5497e4880053b27b6e56becd02d33", 0x14}, {&(0x7f00000003c0)="0e8aa6ad761ee766dba734b105d0e73f7b85372f46ed988a7d110e0cba1d87054b15a907fd29ccf632c9b8ccad5dad3c20f073b433b7b10ae3a641f4093f17b48d492cb2fe299e9d2c2a7be023c6359e18870c4155190edaf4fe056158b9aed230b177d2bb1763ae417e874d4b14f36a207e01b74694381f82be3cf819ead742b736d8d20919b82c0277eab3aa55e877ac192d1a67010a1421e4", 0x9a, 0x9}, {&(0x7f0000000480)="376b85d4f455fdd63032f80c1b16f19952fd57c419f571abdc4b088d0706d7fecc37dc07692f0bc4be96da32afed3c36a1640a54a464ae0fa3b0c199c2ee07ac971fb1148b75cfbe29e0c109c9e55475c4dff6974051a6f5d974b68cf61ee4cb4d3ed2957d6c820e74e7ba368b1508f49fee8500a50ca9185b9ff6abac7a2802f5e3fbada3cf73db162aeb25f8ab5b8237c06aceefeec980c30545e1b31d2dcac71bda07c7d07da89a85dfe72a817107fa86642a9d427508403858de981387f2", 0xc0, 0x7}, {&(0x7f0000000540)="e0eb596e6df8bb5cf076d0734b67dee5226a9ed069e38648e9272a438f5ca6845cd61b61fdff003b4451e84060c5354bb3d64beb17695a1bbfebb11c07f83b4bd57570c7cf6aac97556b8db8278b68aa4f2048cafd5a6cdbf3633ded958d13934a1983b01dbddc6ca4c1a4a96d27e16ced074c2572a9461eb64393dcbcbf000d713075ac22b417b33f41a4274fe013", 0x8f, 0x1}, {&(0x7f0000000600)="9f9373fa8b6e9d9a249777c955b41caa3cb5b5c6665bedbf675d45b8c39e05036bc1a9e831a2", 0x26, 0x5}, {&(0x7f0000000640)="ceee046a07ced0c03bcd6e8813002b5c938e8c8ccc4085a01a0a5185abe344cc646229fa8f5ffb9e3305eed2bf73b4a1abdb49a9a1e5591c7f92a134da4985a851b074e95eae7f520377d58273378c195efc687b281542613b8b7a7a4990aadc5534569d174034840a189df8c313578e407d5d56073e18efd29a14f35feed3e8e001c7cb3b308fbad772bd5e5c114925ca73762828245b6a861c048ae3a2cc59919f", 0xa2, 0xfffffffffffff001}, {&(0x7f0000000700)="a5db224cb2ccd7bfa836a8b4af5bf77c7c76419998ef7f37d91cfe2e95625dc0f624c00b219214f3a9b478327476ad29fc443510fdb0f318de41b5840d4d88", 0x3f, 0xfffffffffffffff8}], 0x1, &(0x7f0000000800)={[{@dmask={'dmask', 0x3d, [0x37, 0x35, 0x36, 0x31, 0x37, 0x34]}, 0x2c}, {@uid={'uid', 0x3d}, 0x2c}, {@fmask={'fmask', 0x3d, [0x35, 0x33]}, 0x2c}, {@show_sys_files_yes={'show_sys_files=yes', 0x3d, [0x39, 0x34, 0x7d, 0x31, 0x36, 0x36, 0x38, 0x39, 0x3f, 0x39]}, 0x2c}, {@show_sys_files_no={'show_sys_files=no', 0x3d, [0x37, 0x0, 0x2d, 0x31, 0x39, 0x30, 0x7f]}, 0x2c}, {@errors_remount='errors=remount-ro', 0x2c}, {@disable_sparse_no={'disable_sparse=no', 0x3d, [0x38, 0x33, 0x36, 0x3f, 0x3d, 0x37, 0x37, 0x3d]}, 0x2c}, {@errors_recover='errors=recover', 0x2c}]}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000040)={0x79, 0x5}) 2018/04/19 09:43:02 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000040)=""/73, &(0x7f00000000c0)=""/130, &(0x7f0000000180)=""/146, 0xf000}) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x0, 0x0) close(r1) syz_open_dev$tun(&(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 2018/04/19 09:43:02 executing program 5: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f000009d000)=""/224, 0xe0, 0x0, &(0x7f0000e6eff8)={0x77359400}) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x70b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), 0x6, 0x2, 0xa}) setpriority(0x0, 0x0, 0x8) mq_timedreceive(r0, &(0x7f0000c04f55)=""/171, 0xab, 0x0, &(0x7f0000f76000)={0x77359400}) r2 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x3, 0x284000) ioctl$KDSETMODE(r2, 0x4b3a, 0xff) mq_timedreceive(r0, &(0x7f0000a2e000)=""/40, 0x28, 0x0, &(0x7f0000b6bff0)) 2018/04/19 09:43:02 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_delroute={0x1c, 0x19, 0x601, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}, 0x1c}, 0x1}, 0x0) r1 = dup(r0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x9) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) 2018/04/19 09:43:02 executing program 1: mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000357000)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f00004e2ff8)='./file0\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f00000000c0)) r3 = fcntl$dupfd(r2, 0x402, 0xffffffffffffffff) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f00000001c0)={0x37, 0x6, 0x2, 0x401, 0xffffffff00000000, 0x7}) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000040)={0x7, 0xaf2}) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000080)="41f4d9a4e8838c8a9658e607181d8f439c8437") ioctl$TIOCSTI(r3, 0x5412, 0x7) [ 346.981717] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 347.028853] netlink: 'syz-executor0': attribute type 3 has an invalid length. [ 347.045469] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 347.058379] netlink: 'syz-executor6': attribute type 3 has an invalid length. [ 347.069475] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 2018/04/19 09:43:02 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000000)={r2, r3, 0x9}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/04/19 09:43:02 executing program 7: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000140)=0x1) syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x7f, 0x101000) openat$cgroup_ro(r1, &(0x7f0000000200)='memory.stat\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stack\x00') ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000180)) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000000c0)={0x30, "d322d957a8a4f1c30a725b12f7c564300cd9a19c71fdbbe770adb7190644510f10166b1bf7c9e8285419f5d7f02c3750"}) 2018/04/19 09:43:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000567000)='/dev/sg#\x00', 0x0, 0x40002) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x242c80, 0x0) ioctl$int_out(r1, 0x2, &(0x7f0000000040)) ioctl(r0, 0x5381, &(0x7f00004a0fff)) [ 347.087103] netlink: 'syz-executor0': attribute type 3 has an invalid length. [ 347.099163] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 347.127198] netlink: 'syz-executor6': attribute type 3 has an invalid length. 2018/04/19 09:43:02 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x8, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x2, 0x3, 0x2, 0x9, 0xffffffffffff5c4c}) ioctl$int_out(r0, 0x5462, &(0x7f0000000080)) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [{}, {}, {}]}) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000100)=0x6) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000140)={0x4, 0x0, [{0xfff}, {0x2a3, 0x0, 0x9}, {0xbed, 0x0, 0x1ff}, {0x2a5, 0x0, 0x3f}]}) r1 = msgget$private(0x0, 0x400) msgctl$IPC_STAT(r1, 0x2, &(0x7f00000001c0)=""/67) socket$rds(0x15, 0x5, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000240)=0x2) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000280)=0x80000001) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000002c0)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x200, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000340)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000380)='oom_adj\x00') ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f00000003c0)) msgget(0x2, 0x1) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000500)={&(0x7f0000ffc000/0x4000)=nil, 0x9, 0x7, 0x1, &(0x7f0000ffc000/0x3000)=nil, 0x3}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x200400) r6 = socket$rds(0x15, 0x5, 0x0) readahead(r6, 0x1cac, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000580)={{0xbf, 0x1}, 0x1, 0x4, 0x80000000, {0x4, 0xfffffffffffffffd}, 0x491a, 0x81}) r7 = semget$private(0x0, 0x3, 0x52) semctl$GETPID(r7, 0x3, 0xb, &(0x7f0000000600)=""/241) readahead(r0, 0xa77a, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000700)) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000740)={0x2}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) 2018/04/19 09:43:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8000, 0x2000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x7) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 2018/04/19 09:43:02 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x333}, 0x1}, 0x0) recvmmsg(r2, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x8, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x20, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xffffff4a}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) 2018/04/19 09:43:02 executing program 3: r0 = socket$packet(0x11, 0x100000, 0x300) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x8100, 0xb, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/04/19 09:43:02 executing program 0: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_proto_private(r0, 0x89ea, &(0x7f0000000740)="4633b652dedb25b3daf7d3ae81633c86c9e5d7661589fd7bbb30abc32a17f44f4e76de1906e91c685544cc2ddd633c75f844fc5d7c723bd7869d95455750ddef63142d093658cff31ab8fb285ad8e2b2874dc392957dabc439bfd17fd3b14969f7bcb62440bc6788f8b81c4843ec829a03cb40f2a022278eed6d8817ac0d82de24afe0fe11906ed836ea704ee9469392aee20fd57e2f6de11e5efcc0ed030493fa8451e210b7a40b037a1bd9ede052c0efc5ffbba8b3734e9c63b30bc63dea7c93d81928147273312302cecaa4ebffe99ed67548cf5f766cb79e9576") r1 = socket$inet6_sctp(0xa, 0x20000000000005, 0x84) syz_mount_image$hfsplus(&(0x7f00000001c0)='hfsplus\x00', &(0x7f0000000200)='./file0\x00', 0x40a7, 0x7, &(0x7f0000000640)=[{&(0x7f0000000280)="7c3d566be5867c9aa8430010b4f1ab5608aa4d28854836a24a485d10669f51f80b3a04c55c3313b4e57efd4e854c5f550a2b3ba820f508656fab243cf95622e6f4eb335e72ae4d974b1d8d3d37da8f8d9086b4f5c0564f39674c577675dfef48200a19fff542f80bf909d567530c5db9bcee", 0x72, 0x1}, {&(0x7f0000000300)="a557826b932c79f17781e6812ebaf2d1f938ae6d28fa4beb2d09b32e01871783a3a5a71c7c71f9630e10b387948021b29bba17dcebf534984eb98c59711285287e486d282c83355396d524b911c77f578f145cb59b85c9b93e82f5d7163a1fd77cd6aa18f681784484ede58fc3c0c0b4b54eda443324e120af68b5", 0x7b, 0x20}, {&(0x7f0000000380)="a35d54b36123167dc1849bee0e3c99fd2d37e107b748460c50b9439694120b94c00a2e42ced560c0784ae7a9e28148f4766a4d0980ff7385a74b53fd0a4058345263e0a30cb80cf556150058a9f95d89e8081182350b482651504326124c9b21b46e3927068dfc9fb02cc1c8d8529ccf8748658d2dd75f56e3a47945c913", 0x7e, 0x4}, {&(0x7f0000000400)="0e4a33bec18a92e83c87821ee03015776f8c07806e6e39de0bcc776b449c9bc5b8770430bace47aa66847cab5cc7b6e6b38c580d336e8cfca340759f4d0bdb28590b9d586e0bc9066600a1cc555a7ede7a1d4b6fed9ff7d5b35dd32ba311cad8fbead2abe73af30809d4fe7e2fa0d22b7796b6a2bdfade6e794c62a2d92e12382ec1024ddfcbf4282e28ffefa01bcf105b0fce85513ad3b56c0ebc78c7e93cede3b25bcef3c1c4d4946ddac902f2339aee8ce33fee23fca9fc4f914d9e736e30592216895617f2dde4c193938ab68ec90ce478f54b079612b578d208c4edaf83ff7261b30bd7ccddcf554cabd5a61a8f2fb0da25", 0xf4, 0x7}, {&(0x7f0000000500)="b0ac3527995d9868dc24b316b82e2a48101b024d77b2ff3985dbdfb793f858e8ac", 0x21, 0x18}, {&(0x7f0000000540)="f31dbbd12a285ab4a31e2c29553e2bf9f1111e8012b2dcf3213bb7ff06bea65802766697f5ac16dcf3596894e5482792d56c0845abbe820c5f81d47056fb03cc9ea891c9ceeb0c40539d5cb505059d01ac6f5176abaf7c1afba099363988493d373d1c910a", 0x65, 0x4}, {&(0x7f00000005c0)="aa86e84d5cbff1511ca77796271c245122a63134889718b92a44816a71144cb3f52c65a833e52ee19c506a17f2bf836a781fdb727203afe4b05e4b2ad580c2558fdfc2d8d816db4bf2d9fd3f37f1df69efed2261397ae7f6a54f4e76003fa6f567cc", 0x62, 0xfd0}], 0x1100040, &(0x7f0000000700)={[{@uid={'uid', 0x3d, [0x37, 0x3f, 0x35, 0x39, 0x78, 0x3d]}, 0x2c}, {@nobarrier='nobarrier', 0x2c}]}) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000240)={'tunl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) [ 347.805996] FAULT_INJECTION: forcing a failure. [ 347.805996] name failslab, interval 1, probability 0, space 0, times 0 [ 347.817329] CPU: 1 PID: 25341 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 347.824543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.833891] Call Trace: [ 347.836484] dump_stack+0x1b9/0x294 [ 347.840109] ? dump_stack_print_info.cold.2+0x52/0x52 [ 347.845289] ? is_bpf_text_address+0xd7/0x170 [ 347.849782] ? kernel_text_address+0x79/0xf0 [ 347.854191] ? __unwind_start+0x166/0x330 [ 347.858330] should_fail.cold.4+0xa/0x1a [ 347.862386] ? __save_stack_trace+0x7e/0xd0 [ 347.866712] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 347.871816] ? save_stack+0xa9/0xd0 [ 347.875476] ? save_stack+0x43/0xd0 [ 347.879129] ? kasan_kmalloc+0xc4/0xe0 [ 347.883017] ? kasan_slab_alloc+0x12/0x20 [ 347.887161] ? find_held_lock+0x36/0x1c0 [ 347.891216] ? check_same_owner+0x320/0x320 [ 347.895523] ? rcu_note_context_switch+0x710/0x710 [ 347.900447] __should_failslab+0x124/0x180 [ 347.904669] should_failslab+0x9/0x14 [ 347.908451] kmem_cache_alloc_node_trace+0x26f/0x770 [ 347.913545] __kmalloc_node_track_caller+0x33/0x70 [ 347.918467] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 347.923212] __alloc_skb+0x14d/0x780 [ 347.926928] ? skb_scrub_packet+0x580/0x580 [ 347.931260] ? debug_check_no_locks_freed+0x310/0x310 [ 347.931279] ? __lock_acquire+0x7f5/0x5140 [ 347.940673] ? perf_trace_lock+0xd6/0x900 [ 347.945423] ? zap_class+0x720/0x720 [ 347.949123] ? trace_hardirqs_on+0xd/0x10 [ 347.953263] alloc_skb_with_frags+0x137/0x760 [ 347.957749] ? graph_lock+0x170/0x170 [ 347.961540] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 347.966291] ? graph_lock+0x170/0x170 [ 347.970087] sock_alloc_send_pskb+0x87a/0xae0 [ 347.974580] ? find_held_lock+0x36/0x1c0 [ 347.978623] ? sock_wmalloc+0x1e0/0x1e0 [ 347.982584] ? lock_downgrade+0x8e0/0x8e0 [ 347.986720] ? kasan_check_read+0x11/0x20 [ 347.990851] ? do_raw_spin_unlock+0x9e/0x2e0 [ 347.995243] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 347.999816] ? kasan_check_write+0x14/0x20 [ 348.004047] ? do_raw_spin_lock+0xc1/0x200 [ 348.008278] ? _raw_spin_unlock+0x22/0x30 [ 348.012415] unix_dgram_sendmsg+0x4f9/0x1730 [ 348.016823] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 348.022346] ? unix_stream_connect+0x11c0/0x11c0 [ 348.027083] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 348.032604] ? _copy_from_user+0xdf/0x150 [ 348.036739] ? copy_msghdr_from_user+0x3bc/0x560 [ 348.041480] ? security_socket_sendmsg+0x94/0xc0 [ 348.046222] ? unix_stream_connect+0x11c0/0x11c0 [ 348.050972] sock_sendmsg+0xd5/0x120 [ 348.054692] ___sys_sendmsg+0x525/0x940 [ 348.058673] ? copy_msghdr_from_user+0x560/0x560 [ 348.063441] ? find_held_lock+0x36/0x1c0 [ 348.067509] ? lock_downgrade+0x8e0/0x8e0 [ 348.071646] ? rcu_note_context_switch+0x710/0x710 [ 348.076559] ? check_same_owner+0x320/0x320 [ 348.080864] ? __might_sleep+0x95/0x190 [ 348.084824] __sys_sendmmsg+0x240/0x6f0 [ 348.088788] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 348.093105] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 348.098631] ? fput+0x130/0x1a0 [ 348.101890] ? ksys_write+0x1a6/0x250 [ 348.105671] ? __ia32_sys_read+0xb0/0xb0 [ 348.109725] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 348.114561] __x64_sys_sendmmsg+0x9d/0x100 [ 348.118781] do_syscall_64+0x1b1/0x800 [ 348.122655] ? finish_task_switch+0x1ca/0x810 [ 348.127146] ? syscall_return_slowpath+0x5c0/0x5c0 [ 348.132062] ? syscall_return_slowpath+0x30f/0x5c0 [ 348.136979] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 348.142334] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 348.147168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.152347] RIP: 0033:0x455329 [ 348.156053] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 348.163749] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 348.171010] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 348.178288] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 348.185546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 348.192809] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 000000000000001b 2018/04/19 09:43:03 executing program 4 (fault-call:3 fault-nth:28): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:03 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x6000) r0 = shmget(0xffffffffffffffff, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x440, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000180)) shmctl$IPC_RMID(r0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) shmdt(0x0) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x101, 0x10000) 2018/04/19 09:43:03 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40005, 0x0) fallocate(r0, 0x10, 0x0, 0x1000) ioctl$TIOCSBRK(r0, 0x5427) 2018/04/19 09:43:03 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000000c0)=[{&(0x7f0000000bc0)=@abs, 0xffffffffffffff55, &(0x7f0000000040), 0x1000000000000050, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="ca6b00fd159c49e54632c995ff6ef5e2b6ecb741090000009ac0e0ddad7d0e0b"], 0x30}], 0x1, 0x8) 2018/04/19 09:43:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d40)=@broute={'broute\x00', 0x20, 0x3, 0x288, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'irlan0\x00', 'bond0\x00', 'sit0\x00', 'ip6gretap0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0, 0x0, 0x0, 0xff], 0xf0, 0xf0, 0x140, [@vlan={'vlan\x00', 0x8}, @helper={'helper\x00', 0x28, {{0x0, 'sane-20000\x00'}}}]}}, @common=@log={'log\x00', 0x28, {{0x0, "821383dc054f0434f823f006d014905391dfe1aa181f9e36cd39220a4ff7"}}}}]}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x0, 0x5, 0x200, 'bond0\x00', 'bridge0\x00', 'bcsf0\x00', 'bcsf0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1a}, [0xff, 0x0, 0xff, 0x0, 0xff], 0x70, 0x70, 0xb8}}, @common=@ERROR={'ERROR\x00', 0x20, {"fc4fd3b508b1334437f24a548a4b42ef85ad9ecf60b21f0064c7b29e0542"}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x300) r1 = dup(r0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, 0x0, 0x40}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x101, 0x10000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000380)={r2, 0x0, r3}) 2018/04/19 09:43:03 executing program 6: r0 = socket$inet6(0xa, 0x80003, 0xef) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2000, 0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x210a00) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000040)={{0x7, 0xb587}, 'port0\x00', 0x40, 0x50420, 0x8, 0x1, 0x12b0, 0x8, 0x1af, 0x0, 0x0, 0x585}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000240)={{0x2, 0x4e22, @rand_addr=0x9e}, {0x307, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x18}}, 0x40, {0x2, 0x4e23, @rand_addr=0x715}, 'veth1_to_bond\x00'}) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000000)) socket$inet6(0xa, 0xa, 0x9) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x6, 0x0, 0x5, 0x100000000, 0x7, 0x5, 0x870000000, 0x1, 0x5, 0x80000000, 0x5b, 0x3}) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={0x3f, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e24, @rand_addr=0x1000}, {0x2, 0x4e23, @rand_addr=0x9bb6}, 0x18, 0x10001, 0x0, 0x6, 0x1, &(0x7f0000000180)='veth1_to_bridge\x00', 0x0, 0x61, 0x10001}) 2018/04/19 09:43:03 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x9b}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0x66}], 0x5, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000100)={{0xffffffffffffdcba, 0xd127, 0x6, 0xffffffffffffff59, 0x7, 0x9}, 0x1, 0x10000, 0x7}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'veth0_to_team\x00', 0x5000}) sync_file_range(r0, 0x400, 0x6, 0x6) ioctl$TIOCSCTTY(r0, 0x540e, 0x3f) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x228500, 0x0) 2018/04/19 09:43:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score\x00') preadv(r0, &(0x7f00000016c0), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000000)) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000000140)="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") ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x4) [ 348.329956] QAT: Invalid ioctl [ 348.368601] QAT: Invalid ioctl [ 348.386809] kernel msg: ebtables bug: please report to author: entries_size too small 2018/04/19 09:43:03 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000dacff8)=@assoc_value={0x0, 0x200}, 0x8) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f0000000000)="a1043bf8b21874353cdb736efe29daa52eb28c8cd989164bb58d9d01b754e2a2baf92ead133fdd055130e8b4098326e6505eb674b0fc14a51a6b4dff21f4d21562a00e5035afa4efc09f2b85dcfdc162bf9fac8fb73185aad571aca7d2d0c3f1958c05ddc1ca7b9560f409830d81b2b655b906bab858314816d115933ae1a963bdcb8ae1fa76c2f932f967fef4213acd4245d5b882a0702e74f08e76e921ad67739e335d772cc2c44cffb29b56dde855abc54b7cee96a737b9842135dba4aed7faa82e64483f89606b80aa6c3498f8590649") setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000098effc), 0x4) writev(r0, &(0x7f0000447ff0)=[{&(0x7f00008889ff)="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", 0x55f}], 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x40080, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000140)={0x6, 0x1f, 0x40, 0x5, 0x4, 0x81}) writev(r0, &(0x7f00002f7000)=[{&(0x7f0000000300)="b22fce43b43b45aff01fec0080ed0d3ae773a40776be65a48150485c5680dc0ab7eb9d0cc909ee14fde47521fb552f11a70d8cf2a9f5d1620bf6d698b38ea056cc1ea5c3d903743e9667185f8acd56513d4574d8ac12d51c7db7eea59e39c0491c9a5b0e48fdfb7dd4791e6557bb56114ecce0113e33766a84a98d1d7a1c975491c170194305baea5eae9cf013695cdc6292b926239b574c5eccd4c6f01c67e7d60f5a4cc6bc6178e68fc21168e7cc59f7103e08ca42c148f4fdf760c4964a00974d1a8f20b473f877fe198680664f5577b3f1535cfb434ca7c5f920d311ca4c75be9bfd21573cc3afc48ff475e2e77fe6155cfcafc6fdb43dfa33e4580ddf885ea625828fd064221609a01d0e0124fc8bc39fe71cb6d2a037eb2ee319cfcc0e5afe919ecd95f5c2171f310a97009d930ed2b33934ad09dc6a3adc03e397e8411c87913effa1625bd324e864e1c7388bf04fe86ba1d0c82640d1e092f5ac8338818ef3ccc41698b9189b4b3319bcab666c2adfc9bd319d370c6c13155c6654138bca2727090cbe637792eb699b65cfff8a7266a691e02cd717b3dc17e56bc38e27dcdefa53fddca1ad83208344c2e3cccf4200e98db158f457491da487160a3e4bfa23a4d1491486dfc1636d972070ecc65d38ba60fdf9ba1d28fa8a0670742320ef0035f6adf24c3c30ac5e08c659a56f1cf4d6733a35ae6a7424d8fbdd4289", 0xfffffe37}], 0x10000121) 2018/04/19 09:43:03 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'vcan0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="1b20e2ff07200000dbe397a9"]}) 2018/04/19 09:43:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002c00ff0a0000000000fd2c3ce85d33f44e63541b70808dc51980e200030000006813ca8b2354246edb7308f87a30edf9426b3ea8b5fa15519ad4cc5b174576e9ed8ed2824c6bba5c0723738b7f72478b717d81a8490f2f7e1a39c9941f7b6ac083da3e57b74aff408761dacbc4198cac6e8ef64988863b40f460fcf70d7412679140d520c1b8386a4e1726cd394c99a9a5054f78e289e923fd0f30cfcd3a66cdb3aa1418"], 0x1c}, 0x1}, 0x0) 2018/04/19 09:43:03 executing program 0: signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xe81) perf_event_open(&(0x7f0000fdef88)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) pselect6(0x21, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000f08fc0), &(0x7f0000086000), &(0x7f0000b16ff8)={0x0, 0x989680}, &(0x7f0000d0a000)={&(0x7f00001da000), 0x8}) [ 348.412627] kernel msg: ebtables bug: please report to author: entries_size too small 2018/04/19 09:43:04 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@generic={0x10000000001e, "0100000000001e0000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624280027800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000040)}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x8000) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000140)="0fc72d650f01c826660f107649baf80c66b8ae652a8866efbafc0cb04bee0f20e06635100000000f22e0baa000ed66b9430300000f3266b9800000c00f326635000100000f30366bc0f80f09", 0x4c}], 0x1, 0x5, &(0x7f00000001c0)=[@efer={0x2, 0x400}, @cstype0={0x4, 0x2}], 0x2) 2018/04/19 09:43:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000270063810000000000c54c3af6e4a9409d407cd1db96a1d0d4906c8bf4df38ac2c0f2342e753675143496ec6a0079eac62137f57c2146f9fb9d3f11e22f10d9a295ff708a82a761561877924c8a1c3a02db2d163f54b18367123f9f312574eca7900e54d7d8689b916ce4a621e36e13d29bc79561b1167e15a4aa03950f8931b2755aeab6306e76f2980b913ab79e18a29c8a825b455162eda93ca7dcf368cbb0125d943ad2251ffe0659acb4c93d977f3eafc7e0000000000000000000000000000000000000000000000"], 0x18}, 0x1}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000100)={{0x7f, 0x1}, 'port1\x00', 0xb5, 0x1, 0x0, 0x0, 0x3f, 0x96e, 0x1, 0x0, 0x2, 0x7f}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x5f13) 2018/04/19 09:43:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000042ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r0, 0x0, 0xfffffffffffffffd, 0x73e0) sendfile(r1, r2, &(0x7f0000e64ff8), 0x8e18) sendfile(r1, r2, &(0x7f00007ed000), 0x2b) 2018/04/19 09:43:04 executing program 5: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)='e', 0x1, 0xfffffffffffffffb) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000100)) keyctl$unlink(0x9, r0, r0) [ 349.163376] FAULT_INJECTION: forcing a failure. [ 349.163376] name failslab, interval 1, probability 0, space 0, times 0 [ 349.174653] CPU: 1 PID: 25440 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 349.181830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.191172] Call Trace: [ 349.193763] dump_stack+0x1b9/0x294 [ 349.197380] ? dump_stack_print_info.cold.2+0x52/0x52 [ 349.202559] ? unwind_get_return_address+0x61/0xa0 [ 349.207478] ? __save_stack_trace+0x7e/0xd0 [ 349.211791] should_fail.cold.4+0xa/0x1a [ 349.215841] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 349.220944] ? save_stack+0xa9/0xd0 [ 349.225033] ? save_stack+0x43/0xd0 [ 349.228650] ? kasan_kmalloc+0xc4/0xe0 [ 349.232522] ? __kmalloc_node_track_caller+0x47/0x70 [ 349.237608] ? __alloc_skb+0x14d/0x780 [ 349.241488] ? alloc_skb_with_frags+0x137/0x760 [ 349.246147] ? sock_alloc_send_pskb+0x87a/0xae0 [ 349.250806] ? unix_dgram_sendmsg+0x4f9/0x1730 [ 349.255381] ? sock_sendmsg+0xd5/0x120 [ 349.259249] ? ___sys_sendmsg+0x525/0x940 [ 349.263382] ? __sys_sendmmsg+0x240/0x6f0 [ 349.267518] ? __x64_sys_sendmmsg+0x9d/0x100 [ 349.271913] ? do_syscall_64+0x1b1/0x800 [ 349.275981] ? find_held_lock+0x36/0x1c0 [ 349.280076] ? check_same_owner+0x320/0x320 [ 349.284409] ? print_usage_bug+0xc0/0xc0 [ 349.288478] ? rcu_note_context_switch+0x710/0x710 [ 349.293406] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 349.298697] __should_failslab+0x124/0x180 [ 349.302938] should_failslab+0x9/0x14 [ 349.306744] kmem_cache_alloc_node+0x272/0x780 [ 349.311344] ? __lock_acquire+0x7f5/0x5140 [ 349.315599] __alloc_skb+0x111/0x780 [ 349.319319] ? skb_scrub_packet+0x580/0x580 [ 349.323629] ? debug_check_no_locks_freed+0x310/0x310 [ 349.328801] ? __lock_acquire+0x7f5/0x5140 [ 349.333027] ? perf_trace_lock_acquire+0xe3/0x980 [ 349.337869] alloc_skb_with_frags+0x137/0x760 [ 349.342350] ? graph_lock+0x170/0x170 [ 349.346148] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 349.350885] ? graph_lock+0x170/0x170 [ 349.354669] sock_alloc_send_pskb+0x87a/0xae0 [ 349.359154] ? find_held_lock+0x36/0x1c0 [ 349.363198] ? sock_wmalloc+0x1e0/0x1e0 [ 349.367158] ? lock_downgrade+0x8e0/0x8e0 [ 349.371290] ? kasan_check_read+0x11/0x20 [ 349.375425] ? do_raw_spin_unlock+0x9e/0x2e0 [ 349.379819] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 349.384388] ? kasan_check_write+0x14/0x20 [ 349.388615] ? do_raw_spin_lock+0xc1/0x200 [ 349.392837] ? _raw_spin_unlock+0x22/0x30 [ 349.396970] unix_dgram_sendmsg+0x4f9/0x1730 [ 349.401396] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 349.406920] ? unix_stream_connect+0x11c0/0x11c0 [ 349.411662] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 349.417205] ? _copy_from_user+0xdf/0x150 [ 349.421339] ? copy_msghdr_from_user+0x3bc/0x560 [ 349.426080] ? security_socket_sendmsg+0x94/0xc0 [ 349.430822] ? unix_stream_connect+0x11c0/0x11c0 [ 349.435563] sock_sendmsg+0xd5/0x120 [ 349.439265] ___sys_sendmsg+0x525/0x940 [ 349.443225] ? copy_msghdr_from_user+0x560/0x560 [ 349.447974] ? find_held_lock+0x36/0x1c0 [ 349.452033] ? lock_downgrade+0x8e0/0x8e0 [ 349.456169] ? rcu_note_context_switch+0x710/0x710 [ 349.461084] ? check_same_owner+0x320/0x320 [ 349.465386] ? __might_sleep+0x95/0x190 [ 349.469347] __sys_sendmmsg+0x240/0x6f0 [ 349.473307] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 349.477611] ? __lock_is_held+0xb5/0x140 [ 349.481679] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 349.487201] ? fput+0x130/0x1a0 [ 349.490463] ? ksys_write+0x1a6/0x250 [ 349.494246] ? __ia32_sys_read+0xb0/0xb0 [ 349.498294] __x64_sys_sendmmsg+0x9d/0x100 [ 349.502522] do_syscall_64+0x1b1/0x800 [ 349.506393] ? finish_task_switch+0x1ca/0x810 [ 349.510872] ? syscall_return_slowpath+0x5c0/0x5c0 [ 349.515785] ? syscall_return_slowpath+0x30f/0x5c0 [ 349.520709] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 349.526060] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 349.530890] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.536063] RIP: 0033:0x455329 [ 349.539232] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 349.546933] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 349.554194] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 349.561708] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 349.568962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 349.576213] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 000000000000001c 2018/04/19 09:43:05 executing program 4 (fault-call:3 fault-nth:29): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:05 executing program 0: r0 = semget$private(0x0, 0x2, 0x1) semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000040)=""/119) request_key(&(0x7f00000000c0)="646e735f7265730e5a1c15e9bf4c2976f0156f6c76657200", &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000000140)='/selinux/mls\x00', 0xffffffffffffffff) 2018/04/19 09:43:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000000c0)) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x2) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000280)={0x84, @loopback=0x7f000001, 0x4e23, 0x2, 'lblcr\x00', 0x4, 0x1ff, 0x75}, 0x2c) read(r0, &(0x7f000006b000)=""/24, 0x18) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000200)={0x2, 0x9, 0xfffffffffffffff7}) sync_file_range(r0, 0x0, 0x0, 0x4) write$evdev(r0, &(0x7f0000057fa0)=[{{}, 0x0, 0x100000001}, {}], 0x30) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)=0x9) write$evdev(r2, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000140)={0x5, 0x1f, 0xfc, 0x101, 0x81, 0x88}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/122) 2018/04/19 09:43:05 executing program 7: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x101ff, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000180)=0x5) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = dup2(r0, r0) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000040)=0x4) sendmsg$inet_sctp(r2, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0xa, 0x4e20}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000200)="a0", 0x1}], 0x1, &(0x7f00000003c0)}, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) sendmmsg(r1, &(0x7f000000ab00)=[{{&(0x7f0000000080)=@in={0x2, 0x4e20, @broadcast=0xffffffff}, 0x3bf, &(0x7f000000a280), 0x100000f8, &(0x7f0000000040)}}, {{&(0x7f000000a440)=@can={0x1d}, 0x10, &(0x7f0000000100), 0x100000000000003f, &(0x7f0000000140)}, 0x80000000007}], 0x3fffffffffffd18, 0x10000000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000240)={{0x7, 0x3}, {0x9, 0xfffffffffffffff8}, 0x4}) 2018/04/19 09:43:05 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x20000) ioctl$KDDELIO(r0, 0x4b35, 0x10000) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100, 0x6000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x13, r1, 0x0) madvise(&(0x7f0000776000/0x3000)=nil, 0x3000, 0x9) 2018/04/19 09:43:05 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007ff, &(0x7f0000000280)={0x2, 0x4e23}, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0x165, 0x200007ff, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) 2018/04/19 09:43:05 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x20080, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, [0x1]}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000440)={0x0, 0x4, 0x0, 0x0, 0xfe9}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 2018/04/19 09:43:05 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x19c, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}, [], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x70, &(0x7f0000000080)=""/153, 0xfffffffffffffffe}, 0x48) 2018/04/19 09:43:05 executing program 6: mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x8001, &(0x7f0000000000)=0x3f, 0x5, 0x0) 2018/04/19 09:43:05 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x40000000000000ff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0xb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000080)=0x9) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}, r3}, 0xc) 2018/04/19 09:43:05 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f00000000c0)}}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) tkill(r0, 0x15) socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x101000) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[0x7ff, 0x856, 0x80000001, 0x100000000, 0xff, 0x2]}) 2018/04/19 09:43:05 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={0x9}, 0x8) r1 = gettid() syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x237, 0x80) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) close(r0) tkill(r1, 0x15) 2018/04/19 09:43:05 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20002, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) prctl$void(0x20) 2018/04/19 09:43:05 executing program 5: r0 = epoll_create1(0x0) close(r0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)={r2, r3, 0xfffffffffffffff7}) read(r0, &(0x7f0000000000)=""/6, 0x322) 2018/04/19 09:43:05 executing program 6: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000200)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) semget$private(0x0, 0x0, 0x100) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000880)={0x0, &(0x7f0000000840)}) setrlimit(0x0, &(0x7f00000008c0)) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000840)='/dev/snd/pcmC#D#c\x00', 0x9, 0x4400) r3 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) gettid() getpgid(0x0) r5 = dup(r4) getsockopt$inet6_tcp_int(r5, 0x6, 0x1a, &(0x7f0000003ffc), &(0x7f0000012ffc)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind(r5, &(0x7f00000007c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0xd97, "c4b6cd71144b54d44f1617344c7bc52d4f4f69efe4588c1c13317354f53164b6fa1bdb971aa98d83ea46bf60fb5757457008cca2bd823a78759e9e95a88eab", 0x18}, 0x80) r6 = dup3(r3, r1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000280)=0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x81, 0x20, &(0x7f0000000100)}) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000000c0)={r7, 0x7, 0x30}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1, 0x0) pselect6(0x40, &(0x7f0000000240)={0x7, 0x80000000, 0x2, 0x101, 0x7f, 0x2, 0x4bfe, 0x1}, &(0x7f00000002c0)={0x9, 0x101, 0x401, 0xd5f, 0x9, 0x80, 0xffffffffffffffff, 0x7}, &(0x7f0000000300)={0x400, 0x5, 0x10000, 0x6, 0x6, 0x9bc, 0x0, 0x10000}, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380)={0x7f}, 0x8}) 2018/04/19 09:43:05 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7fff, 0x8400) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000040)={0x5, 0x5, 0x9}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x80100) [ 350.573655] FAULT_INJECTION: forcing a failure. [ 350.573655] name failslab, interval 1, probability 0, space 0, times 0 [ 350.584996] CPU: 1 PID: 25508 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 350.592190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.601533] Call Trace: [ 350.604112] dump_stack+0x1b9/0x294 [ 350.607731] ? dump_stack_print_info.cold.2+0x52/0x52 [ 350.612909] ? is_bpf_text_address+0xd7/0x170 [ 350.617393] ? kernel_text_address+0x79/0xf0 [ 350.621813] ? __unwind_start+0x166/0x330 [ 350.625980] should_fail.cold.4+0xa/0x1a [ 350.630069] ? __save_stack_trace+0x7e/0xd0 [ 350.634384] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 350.639505] ? save_stack+0xa9/0xd0 [ 350.643150] ? save_stack+0x43/0xd0 [ 350.646792] ? kasan_kmalloc+0xc4/0xe0 [ 350.650697] ? kasan_slab_alloc+0x12/0x20 [ 350.654858] ? find_held_lock+0x36/0x1c0 [ 350.658955] ? check_same_owner+0x320/0x320 [ 350.663284] ? rcu_note_context_switch+0x710/0x710 [ 350.668216] __should_failslab+0x124/0x180 [ 350.672442] should_failslab+0x9/0x14 [ 350.676256] kmem_cache_alloc_node_trace+0x26f/0x770 [ 350.681437] __kmalloc_node_track_caller+0x33/0x70 [ 350.686355] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 350.691100] __alloc_skb+0x14d/0x780 [ 350.694810] ? skb_scrub_packet+0x580/0x580 [ 350.699143] ? debug_check_no_locks_freed+0x310/0x310 [ 350.704324] ? __lock_acquire+0x7f5/0x5140 [ 350.708553] alloc_skb_with_frags+0x137/0x760 [ 350.713050] ? graph_lock+0x170/0x170 [ 350.716865] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 350.721616] ? graph_lock+0x170/0x170 [ 350.725410] sock_alloc_send_pskb+0x87a/0xae0 [ 350.729914] ? find_held_lock+0x36/0x1c0 [ 350.733980] ? sock_wmalloc+0x1e0/0x1e0 [ 350.737963] ? lock_downgrade+0x8e0/0x8e0 [ 350.742135] ? kasan_check_read+0x11/0x20 [ 350.746290] ? do_raw_spin_unlock+0x9e/0x2e0 [ 350.750714] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 350.755302] ? kasan_check_write+0x14/0x20 [ 350.759525] ? do_raw_spin_lock+0xc1/0x200 [ 350.763750] ? _raw_spin_unlock+0x22/0x30 [ 350.767883] unix_dgram_sendmsg+0x4f9/0x1730 [ 350.772279] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 350.777821] ? unix_stream_connect+0x11c0/0x11c0 [ 350.782591] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 350.788141] ? _copy_from_user+0xdf/0x150 [ 350.792279] ? copy_msghdr_from_user+0x3bc/0x560 [ 350.797036] ? security_socket_sendmsg+0x94/0xc0 [ 350.801782] ? unix_stream_connect+0x11c0/0x11c0 [ 350.806521] sock_sendmsg+0xd5/0x120 [ 350.810219] ___sys_sendmsg+0x525/0x940 [ 350.814181] ? copy_msghdr_from_user+0x560/0x560 [ 350.818924] ? find_held_lock+0x36/0x1c0 [ 350.822972] ? lock_downgrade+0x8e0/0x8e0 [ 350.827107] ? rcu_note_context_switch+0x710/0x710 [ 350.832029] ? check_same_owner+0x320/0x320 [ 350.836351] ? __might_sleep+0x95/0x190 [ 350.840330] __sys_sendmmsg+0x240/0x6f0 [ 350.844982] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 350.849295] ? __lock_is_held+0xb5/0x140 [ 350.853350] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 350.858881] ? fput+0x130/0x1a0 [ 350.862164] ? ksys_write+0x1a6/0x250 [ 350.865971] ? __ia32_sys_read+0xb0/0xb0 [ 350.870043] __x64_sys_sendmmsg+0x9d/0x100 [ 350.874289] do_syscall_64+0x1b1/0x800 [ 350.878189] ? finish_task_switch+0x1ca/0x810 [ 350.882698] ? syscall_return_slowpath+0x5c0/0x5c0 [ 350.887624] ? syscall_return_slowpath+0x30f/0x5c0 [ 350.892544] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 350.897897] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 350.902724] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 350.907899] RIP: 0033:0x455329 [ 350.911076] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 350.918773] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 350.926032] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 350.933288] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 350.940541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 350.947803] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 000000000000001d 2018/04/19 09:43:06 executing program 4 (fault-call:3 fault-nth:30): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:06 executing program 0: perf_event_open(&(0x7f0000271000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x8010000080802, 0x0) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) write$fuse(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="58000000000000000100000000000000070000004044b23250f0e6065d86a61bf2b3b36e2708546d44a355dededda48445f7bf7b3a8d3b874662bb74e794b2ee47ed46cd5ed34882afb9950b0003d332fdc82b8391907f08669a07b844b7fa165157ed02b0e435f00ef4c134ebd7cfb0"], 0x58) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000140)={0xa, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) 2018/04/19 09:43:06 executing program 3: r0 = perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1f, 0x2000) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x6, 0x400, 0x2, 0x7, 0x3, 0x7, 0x4, 0x4, 0x7fff, 0x2}) r2 = add_key(&(0x7f0000001240)='big_key\x00', &(0x7f0000001280)={0x73, 0x79, 0x7a}, &(0x7f00000012c0)='1', 0x1, 0xfffffffffffffffc) r3 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000000)) keyctl$read(0xb, r2, &(0x7f00000022c0)=""/4096, 0x1000) 2018/04/19 09:43:06 executing program 7: rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f00008ec000)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000200)={0x5, 0x0, 0x10000, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000240)={0x4, r2}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101c80, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000080)={0xdd, 0x9, 0x0, 0x0, 0x0, [], [], [], 0x7c63, 0x5}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000280)={0x3, r1}) timer_delete(0x0) 2018/04/19 09:43:06 executing program 6: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8001, 0xa0040) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000000)) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000080)={0x6, 0x0, [{0x0, 0x4727, 0x2, 0x0, 0x3}, {0x0, 0xffffffff, 0x10001, 0x0, 0x20}, {0x0, 0x3, 0x100, 0x4, 0x7f}, {0x80000019, 0x80000001, 0x3, 0x3c, 0x7}, {0x80000008, 0x253, 0x0, 0x0, 0x3}, {0x40000001, 0x0, 0x7, 0x401, 0xfffffffffffffffe}]}) 2018/04/19 09:43:06 executing program 1: syz_mount_image$gfs2(&(0x7f00000014c0)='gfs2\x00', &(0x7f0000001500)='./file0\x00', 0x4, 0x0, &(0x7f0000001540), 0x800, &(0x7f0000001580)={[{@discard='discard', 0x2c}, {@quota_quantum={'quota_quantum', 0x3d, [0x3d]}, 0x2c}, {@meta='meta', 0x2c}]}) r0 = socket(0x2, 0x3, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000013c0)=ANY=[@ANYBLOB="060000000000000000700000800000002300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000d00000000000000010000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000d0010000000000290000000000f400", @ANYPTR=&(0x7f00000010c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000400000000000000c600000000000000", @ANYPTR=&(0x7f0000001100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000070000000000000a200000000000000", @ANYPTR=&(0x7f0000001200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000210000000000000f800000000000000", @ANYPTR=&(0x7f00000012c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) getsockopt(r0, 0xff, 0x1, &(0x7f0000000000), &(0x7f0000000040)) 2018/04/19 09:43:06 executing program 2: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x400, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000340)={0x2, 0x7}) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = epoll_create1(0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x49c}, &(0x7f0000000080)=0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x28, &(0x7f00000001c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={r4, 0x5, 0x18}, 0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e23, 0x2, @mcast2={0xff, 0x2, [], 0x1}, 0x3}}, 0x0, 0x10000, 0x0, 0x6, 0x42}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000380)=0xfffffffffffffa3c) 2018/04/19 09:43:06 executing program 5: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000140)='./control\x00') ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000040)=0x100000000) close(r1) [ 351.103893] CUSE: DEVNAME unspecified 2018/04/19 09:43:06 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xfffffffb) 2018/04/19 09:43:06 executing program 6: setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000040)=0xc5cc, 0x4) socket(0x0, 0x1000080000006, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x90) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x4, 0x123040) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f00000000c0)={0x7, 0x4, 0xfa, 0x1, 0xfffffffffffffffd}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)=ANY=[@ANYBLOB="67540f70ef7869e18579fe8d1ac131a962f394c24d79d50d5d75fb395f0a51393c75bce4ae112624ff4f499e95aa473d72e1ec015230a995c9885001ccf3fd7daf6bd3a9ed8b92b9"], &(0x7f0000000000)=0x1) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) 2018/04/19 09:43:06 executing program 3: syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x3, 0x40c00) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0xa) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4002}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x3, 0x341, 0xfffffffffffffeff, 0xffffffffffff7fff, 0x6, 0x80000001, 0x9, 0x4, 0xc0b, 0x61, 0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000200)={0x0, 0x8}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'irlan0\x00', r3}) write(r1, &(0x7f0000000180), 0xff4d) 2018/04/19 09:43:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(blowfish-asm)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab2719", 0x4) write(r1, &(0x7f0000000000)="791f7dfde08186d67dba3f649a7ba85e30", 0x11) 2018/04/19 09:43:06 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @rand_addr}}}, &(0x7f0000002ffc)=0xa0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x32, 0xffffffffffffffff, 0x0) close(r0) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2800000000004, 0x111000) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000100)) 2018/04/19 09:43:06 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f00008a1f80)=@generic={0x42001e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d64fb8f8401a3ff59829a2b0afe7ce43a5b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31510000500000000000bdb9c8ea31000077aeb81c90001d6f7c980400000000f70dc136cb184a"}, 0x80) socket(0x1e, 0x1, 0x0) close(r0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) add_key$user(&(0x7f0000c24ffb)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)="600001e3a255ec4a8d9d652d0527abdffd0587e50ec159997396abc344a7d9f542a3e3af2d90a5df424d68996f51a7b3f20108f152bfd57ac5a50be84a106249abbfc5b3f2e96bf3039474801001807fbf00000000000000000000000000000000", 0x61, r2) r3 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f00008fa000)={0x73, 0x79, 0x7a}, &(0x7f0000537ffd)="0003", 0x2, r2) r4 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f00008d9ffb)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000f19edc)="b33ab76079ebe0d14f729cd653e520d29ad7ef0000000000000044c249b544230b9387fb8bd6ed266ccf59ef70995bf2e8e0ecd3fff32853747eda22d2818d08ca27e0ec821620e365a0e6b9485f2d925493f62113e33e5f8c7eba67fc19a9497f5b07e5849d2e875b066cd6401d36616fe0f3c3002801b4627ee7597689525e8e81f750a86eb580fb4690ea52246bd3d32b1a91f944edb74b1f50ae08c5387ed8fd0598b600579f3af3f864e1c324f6928f6672f98f7e149bd61bd78b506e8b", 0xc0, r2) r5 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)="2f6465612f7675746f66730719", r1) keyctl$dh_compute(0x17, &(0x7f00004c8ff4)={r3, r4, r5}, &(0x7f00005cd000), 0x0, &(0x7f000010c000)={&(0x7f0000bf4ff3)={'ghash-generic\x00'}, &(0x7f0000000000)}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'sit0\x00'}, 0xffffffffffffff09) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x20000000cdfd, 0x400000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000035c0)={'teql0\x00'}) r6 = memfd_create(&(0x7f0000000080)='dev ', 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r6, 0x0, 0x0, 0x0) fchmod(r6, 0x0) r7 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r8 = socket(0x0, 0x3, 0x0) recvmsg$netrom(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)=@ax25={0x3, {"8aafabddcfcc23"}}, 0x10, &(0x7f00000004c0)}, 0x0) write(r8, &(0x7f0000000080)="240000005a005f191415f507125a00000903210308001000fff708", 0x1b) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x106}) r9 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x80000001) r10 = dup2(r9, r7) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000240)={@empty, @multicast1, @remote}, &(0x7f0000000280)=0xc) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 2018/04/19 09:43:06 executing program 0: r0 = socket(0x400000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="260000005e0009ff3d281a72b4d3e2ffffffff00000000a0f10600042400d2c600000000009e", 0xfffffffffffffdca) recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000200)=""/91, 0x5b}], 0x2, &(0x7f0000000140)=""/77, 0x4d}, 0x0) read(r0, &(0x7f0000001400)=""/233, 0xffffffaf) 2018/04/19 09:43:06 executing program 6: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) bind$packet(r0, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd}, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x202400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000080)={0x3, 0x0, 0xffffffff7fffffff, 0x80000001, "400f1aac26dfa028ebe7d339b718bcd5adb1e76ea312cc6235312788d099aa93994ed119f8b453e4b07d25da", 0x6}) syz_emit_ethernet(0xfffffffffffffd29, &(0x7f00000000c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x2, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}}, @udp={0x4e20, 0x4e20, 0x8}}}}}, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x3, 0x1000000]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x5, 0x0, [{0xffffffffffffffc0, 0x4, 0x0, 0x0, @msi={0x7fff, 0x6, 0x5}}, {0x100000000, 0x5, 0x0, 0x0, @adapter={0x9, 0x100000000, 0xf6c, 0x1, 0x80000000}}, {0x1ff, 0x0, 0x0, 0x0, @irqchip={0x80000000, 0xad4}}, {0x40, 0x3, 0x0, 0x0, @msi={0x0, 0x400, 0x10001}}, {0x3, 0x4, 0x0, 0x0, @adapter={0x2, 0x5, 0x3, 0x2, 0x4}}]}) [ 351.944025] FAULT_INJECTION: forcing a failure. [ 351.944025] name failslab, interval 1, probability 0, space 0, times 0 [ 351.955378] CPU: 0 PID: 25576 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 351.962571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.971925] Call Trace: [ 351.974520] dump_stack+0x1b9/0x294 [ 351.978137] ? dump_stack_print_info.cold.2+0x52/0x52 [ 351.983313] ? unwind_get_return_address+0x61/0xa0 [ 351.988243] ? __save_stack_trace+0x7e/0xd0 [ 351.992563] should_fail.cold.4+0xa/0x1a [ 351.996619] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 352.001719] ? save_stack+0xa9/0xd0 [ 352.005341] ? save_stack+0x43/0xd0 [ 352.008957] ? kasan_kmalloc+0xc4/0xe0 [ 352.012841] ? __kmalloc_node_track_caller+0x47/0x70 [ 352.018554] ? __alloc_skb+0x14d/0x780 [ 352.022440] ? alloc_skb_with_frags+0x137/0x760 [ 352.027093] ? sock_alloc_send_pskb+0x87a/0xae0 [ 352.031746] ? unix_dgram_sendmsg+0x4f9/0x1730 [ 352.036312] ? sock_sendmsg+0xd5/0x120 [ 352.040183] ? ___sys_sendmsg+0x525/0x940 [ 352.044323] ? __sys_sendmmsg+0x240/0x6f0 [ 352.048476] ? __x64_sys_sendmmsg+0x9d/0x100 [ 352.052869] ? do_syscall_64+0x1b1/0x800 [ 352.056926] ? find_held_lock+0x36/0x1c0 [ 352.060993] ? check_same_owner+0x320/0x320 [ 352.065301] ? print_usage_bug+0xc0/0xc0 [ 352.069349] ? rcu_note_context_switch+0x710/0x710 [ 352.074264] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 352.079532] __should_failslab+0x124/0x180 [ 352.083757] should_failslab+0x9/0x14 [ 352.087542] kmem_cache_alloc_node+0x272/0x780 [ 352.092110] ? __lock_acquire+0x7f5/0x5140 [ 352.096331] __alloc_skb+0x111/0x780 [ 352.100043] ? skb_scrub_packet+0x580/0x580 [ 352.104360] ? debug_check_no_locks_freed+0x310/0x310 [ 352.109548] ? __lock_acquire+0x7f5/0x5140 [ 352.113772] ? perf_trace_lock_acquire+0xe3/0x980 [ 352.118609] alloc_skb_with_frags+0x137/0x760 [ 352.123087] ? graph_lock+0x170/0x170 [ 352.126873] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 352.131790] ? graph_lock+0x170/0x170 [ 352.135577] sock_alloc_send_pskb+0x87a/0xae0 [ 352.140078] ? find_held_lock+0x36/0x1c0 [ 352.144146] ? sock_wmalloc+0x1e0/0x1e0 [ 352.148117] ? lock_downgrade+0x8e0/0x8e0 [ 352.152264] ? kasan_check_read+0x11/0x20 [ 352.156397] ? do_raw_spin_unlock+0x9e/0x2e0 [ 352.160794] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 352.165361] ? kasan_check_write+0x14/0x20 [ 352.169579] ? do_raw_spin_lock+0xc1/0x200 [ 352.173797] ? _raw_spin_unlock+0x22/0x30 [ 352.177931] unix_dgram_sendmsg+0x4f9/0x1730 [ 352.182347] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 352.187900] ? unix_stream_connect+0x11c0/0x11c0 [ 352.192666] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 352.198205] ? _copy_from_user+0xdf/0x150 [ 352.202360] ? copy_msghdr_from_user+0x3bc/0x560 [ 352.207127] ? security_socket_sendmsg+0x94/0xc0 [ 352.211889] ? unix_stream_connect+0x11c0/0x11c0 [ 352.216655] sock_sendmsg+0xd5/0x120 [ 352.220378] ___sys_sendmsg+0x525/0x940 [ 352.224351] ? copy_msghdr_from_user+0x560/0x560 [ 352.229099] ? find_held_lock+0x36/0x1c0 [ 352.233149] ? lock_downgrade+0x8e0/0x8e0 [ 352.237306] ? rcu_note_context_switch+0x710/0x710 [ 352.242225] ? check_same_owner+0x320/0x320 [ 352.246526] ? __might_sleep+0x95/0x190 [ 352.250502] __sys_sendmmsg+0x240/0x6f0 [ 352.254469] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 352.258774] ? __lock_is_held+0xb5/0x140 [ 352.262829] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 352.268347] ? fput+0x130/0x1a0 [ 352.271607] ? ksys_write+0x1a6/0x250 [ 352.275389] ? __ia32_sys_read+0xb0/0xb0 [ 352.279439] __x64_sys_sendmmsg+0x9d/0x100 [ 352.283662] do_syscall_64+0x1b1/0x800 [ 352.287541] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 352.292368] ? syscall_return_slowpath+0x5c0/0x5c0 [ 352.297278] ? syscall_return_slowpath+0x30f/0x5c0 [ 352.302208] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 352.307577] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.312413] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.317594] RIP: 0033:0x455329 [ 352.320775] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 352.328475] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 352.335735] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 352.342992] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 352.350254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 352.357510] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 000000000000001e 2018/04/19 09:43:08 executing program 4 (fault-call:3 fault-nth:31): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:08 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4"}) r1 = msgget$private(0x0, 0x401) msgsnd(r1, &(0x7f0000000040)={0x3, "8613d052afe3ac2b41943752e9e8f87476bcef79f93437a7a1bac5786dacb813c95220d643266496743c167664"}, 0x35, 0x800) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}, 0x0, 0x3}) 2018/04/19 09:43:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x4327f9ad, 0x1f}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x1c000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000010000000200faffffff000000000700000000000000000000000000000000518d000000000000000000006c874867dbce1a"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x100000001}) 2018/04/19 09:43:08 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0x40086602, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200010000000000000000000000000000000000000000000000000000000000"]) openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) 2018/04/19 09:43:08 executing program 1: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x4008240b, 0xfffffffffffeffff) 2018/04/19 09:43:08 executing program 7: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x5, 0x0) io_setup(0x9, &(0x7f0000128000)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)}]) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000480)=""/4096) 2018/04/19 09:43:08 executing program 0: socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket(0x400020000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f00000056000d6dfcffff05bc0203030701ff2104173f8100000002000039", 0x1f) 2018/04/19 09:43:08 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x4000000002, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pread64(r0, &(0x7f000057c000)=""/226, 0xe2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0x21, 0x1, r0}) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)}], 0x1, 0x0) write$tun(r0, &(0x7f00000000c0)={@void, @hdr, @llc={@snap={0x0, 0x0, 'U', "423183"}}}, 0x12) 2018/04/19 09:43:08 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x4043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip_vti0\x00', 0x10) shutdown(r1, 0x1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x241, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000040)) 2018/04/19 09:43:08 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20000, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000080)}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) 2018/04/19 09:43:08 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 2018/04/19 09:43:08 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2, 0x40001) ioctl$VT_RELDISP(r0, 0x5605) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x130e, 0x5, 0x80, &(0x7f0000ffc000/0x1000)=nil, 0xf37}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="3867b2e2f79fc02c483ed0533e0500"], 0xf) 2018/04/19 09:43:08 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x1, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{}, {}, {}]}) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000100)=0x5) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x9) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000240)={0x85d, 0x3}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000f48)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}, &(0x7f0000b0a000)=0xb8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x9, &(0x7f0000000f68)={0x0, @in6={{0xa, 0x4e20}}, 0x0, 0x2}, 0x90) 2018/04/19 09:43:08 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f000074eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000016ffc), 0x4) write(r1, &(0x7f0000435ffb), 0x0) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x957, 0x40) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3f) readv(r0, &(0x7f00006e4ff8)=[{&(0x7f0000649f35)=""/203, 0xcb}], 0x1) r3 = dup(r0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x3) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x9}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000040)={0xfffffffffffff000, r4}) 2018/04/19 09:43:08 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x40000) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}) r1 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r1, &(0x7f0000932fc8)={&(0x7f0000927ff4)={0x10}, 0xc, &(0x7f000095e000)={&(0x7f000019df7c)=ANY=[@ANYBLOB="4000200016000100ffffffffffffffff0a000000", @ANYRES32=0x0, @ANYBLOB="14000100000000000000000000000000000000001400020000000000000000000000000000000000"], 0x40}, 0x1}, 0x0) 2018/04/19 09:43:08 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0/control\x00', 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mkdir(&(0x7f0000024ff0)='./file0/control\x00', 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) rename(&(0x7f0000000080)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f0000ab3ff0)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000980)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000002c00ff0a0000000000ebf04bc00000000c00d72708000100085400002ae29ad2f49760ad02fa71795c9a"], 0x20}, 0x1}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x105800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x7, 0x3, {0xffffffffffffffff, 0x3, 0xdb7c, 0x3, 0x6}}) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x3}) [ 353.321761] FAULT_INJECTION: forcing a failure. [ 353.321761] name failslab, interval 1, probability 0, space 0, times 0 [ 353.333051] CPU: 1 PID: 25653 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 353.340225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.349566] Call Trace: [ 353.352164] dump_stack+0x1b9/0x294 [ 353.355799] ? dump_stack_print_info.cold.2+0x52/0x52 [ 353.360975] ? is_bpf_text_address+0xd7/0x170 [ 353.365466] ? kernel_text_address+0x79/0xf0 [ 353.369867] ? __unwind_start+0x166/0x330 [ 353.374012] should_fail.cold.4+0xa/0x1a [ 353.378066] ? __save_stack_trace+0x7e/0xd0 [ 353.382375] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 353.387481] ? save_stack+0xa9/0xd0 [ 353.391100] ? save_stack+0x43/0xd0 [ 353.394717] ? kasan_kmalloc+0xc4/0xe0 [ 353.398590] ? kasan_slab_alloc+0x12/0x20 [ 353.402726] ? find_held_lock+0x36/0x1c0 [ 353.406797] ? check_same_owner+0x320/0x320 [ 353.411104] ? rcu_note_context_switch+0x710/0x710 [ 353.416037] __should_failslab+0x124/0x180 [ 353.420273] should_failslab+0x9/0x14 [ 353.424064] kmem_cache_alloc_node_trace+0x26f/0x770 [ 353.429162] __kmalloc_node_track_caller+0x33/0x70 [ 353.434083] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 353.438839] __alloc_skb+0x14d/0x780 [ 353.442546] ? skb_scrub_packet+0x580/0x580 [ 353.446856] ? debug_check_no_locks_freed+0x310/0x310 [ 353.452038] ? __lock_acquire+0x7f5/0x5140 [ 353.456262] ? perf_trace_lock_acquire+0xe3/0x980 [ 353.461096] alloc_skb_with_frags+0x137/0x760 [ 353.465583] ? graph_lock+0x170/0x170 [ 353.469373] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 353.474115] ? graph_lock+0x170/0x170 [ 353.477919] sock_alloc_send_pskb+0x87a/0xae0 [ 353.482400] ? find_held_lock+0x36/0x1c0 [ 353.486449] ? sock_wmalloc+0x1e0/0x1e0 [ 353.490418] ? lock_downgrade+0x8e0/0x8e0 [ 353.494641] ? kasan_check_read+0x11/0x20 [ 353.498771] ? do_raw_spin_unlock+0x9e/0x2e0 [ 353.503163] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 353.507729] ? kasan_check_write+0x14/0x20 [ 353.511946] ? do_raw_spin_lock+0xc1/0x200 [ 353.516174] ? _raw_spin_unlock+0x22/0x30 [ 353.520325] unix_dgram_sendmsg+0x4f9/0x1730 [ 353.524773] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 353.530325] ? unix_stream_connect+0x11c0/0x11c0 [ 353.535094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 353.540642] ? _copy_from_user+0xdf/0x150 [ 353.544803] ? copy_msghdr_from_user+0x3bc/0x560 [ 353.549576] ? security_socket_sendmsg+0x94/0xc0 [ 353.554336] ? unix_stream_connect+0x11c0/0x11c0 [ 353.559078] sock_sendmsg+0xd5/0x120 [ 353.562778] ___sys_sendmsg+0x525/0x940 [ 353.566739] ? copy_msghdr_from_user+0x560/0x560 [ 353.571485] ? find_held_lock+0x36/0x1c0 [ 353.575543] ? lock_downgrade+0x8e0/0x8e0 [ 353.579691] ? rcu_note_context_switch+0x710/0x710 [ 353.584606] ? check_same_owner+0x320/0x320 [ 353.588910] ? __might_sleep+0x95/0x190 [ 353.592871] __sys_sendmmsg+0x240/0x6f0 [ 353.596838] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 353.601146] ? __lock_is_held+0xb5/0x140 [ 353.605201] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 353.611156] ? fput+0x130/0x1a0 [ 353.614427] ? ksys_write+0x1a6/0x250 [ 353.618211] ? __ia32_sys_read+0xb0/0xb0 [ 353.622265] __x64_sys_sendmmsg+0x9d/0x100 [ 353.626493] do_syscall_64+0x1b1/0x800 [ 353.630362] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 353.635624] ? syscall_return_slowpath+0x5c0/0x5c0 [ 353.640536] ? syscall_return_slowpath+0x30f/0x5c0 [ 353.645452] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 353.650801] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 353.655632] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.660801] RIP: 0033:0x455329 [ 353.663970] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 353.671660] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 353.678912] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 353.686164] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 353.693431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 353.700684] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 000000000000001f 2018/04/19 09:43:09 executing program 0: lsetxattr(&(0x7f0000910ff8)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f0000d48000)="0200000002000001000000000100000000000000", 0x14, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x8, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x8, 0x80000000, 0x6, 0x4, 0x4, 0x4, 0x3, 0x6, 0x9, 0x5, 0x800, 0x5}) 2018/04/19 09:43:09 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x2, 0x800) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9}, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x2c) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x240) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000140)=0xff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r3, &(0x7f0000eed000), &(0x7f0000b88000)="13"}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r3, &(0x7f0000000000), &(0x7f0000000440)=""/129}, 0x18) 2018/04/19 09:43:09 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setsig(r1, 0xa, 0x0) r2 = dup(r1) sendmsg$nl_netfilter(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000980)={0x14}, 0x14}, 0x1}, 0x0) 2018/04/19 09:43:09 executing program 7: r0 = socket$inet_sctp(0x2, 0x800000000800001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="c6", 0x1, 0x0, &(0x7f0000000080)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x408000, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000040)={0xffffffffffffffc4, 0x379f}) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000240)=ANY=[@ANYBLOB="04000000ff0300000300000000000000ff0000000000000006000000000000000700000000000000ff07000000000000c80100000000000000010000000000000500000000000000d8481ca85673ee955db315e803643064b195bd93799619e841ed463ef000b21aa8ea4e070bb2f300795876e4bd817060b591ce8f00000087f8a36419f8989d325c930f1a60ffc4335682501d1a90bc53f05d70be183de75bc36eeaaf3f4713f0b4af1bbdb3d8a9deef1fcbf0fa5c6163efdf66d48855032b6db7ffe60d706c133eb581f08817bda56b62916affdfc2e05326f0782c5a59e5e0fdae794f72b84eb22ae33f48e9699dda447adcda75cc"]) 2018/04/19 09:43:09 executing program 5: r0 = eventfd2(0x2, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) write$eventfd(r0, &(0x7f0000000180)=0x3, 0x8) readv(r0, &(0x7f0000002fe0)=[{&(0x7f0000002f94)=""/108, 0x6c}], 0x1) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000000c0)={0x8, 0x2, {0x3, 0x3, 0x240000000000000, 0x1, 0x40}}) 2018/04/19 09:43:09 executing program 4 (fault-call:3 fault-nth:32): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000340)={0x7, 0x0, [{0x20, 0x2, 0x0, 0x0, @msi={0x10001, 0x3ff, 0x7}}, {0x8, 0x1, 0x0, 0x0, @sint={0x2, 0xfffffffffffffc7c}}, {0x9, 0x1, 0x0, 0x0, @irqchip={0x5, 0x3}}, {0x2, 0x0, 0x0, 0x0, @adapter={0x0, 0x0, 0x7, 0x200, 0x1}}, {0x401, 0x2, 0x0, 0x0, @msi={0x8001, 0x9}}, {0x64, 0x4, 0x0, 0x0, @msi={0x100, 0x8, 0x7}}, {0x6, 0x3, 0x0, 0x0, @adapter={0x526, 0x2, 0x100, 0x6, 0x7}}]}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xdc6d, 0x100000000080000) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000040)=""/170) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000100)="f228ce8cce6553e759cab63cc8bc0181b6e427f83e0acfe1d2828cd5d187ccf30941de93805fa679280fa17f735ea73b754be6bae31a9321eba605b56d70ef7ddaf560c1f98cddf14fca3bc95fbf0059857c21aa71e7200f2e3ef1e475847c6bde1478c1", &(0x7f0000000280)="c857f41248f54a445d6718581274ee9b64dec18429dd0c8727dc3488872bc17f05fd11fbb880ea72b736c7aedaa43feeb4b921f3aeccbeaf65ac800be4e37363d116ce79ac3d79d1c4b4ab08abe8e9df059a59d1d253b091bb3d320ea13544e65e6f0abfe82a29f4f7ca261e21a4acd5e87bf8241663ca2c30fc7ce31f31285ddef743a252", 0x64, 0x85}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000100deffffdf52182f795cbda83d69060000000000"]) 2018/04/19 09:43:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000040801000000000000000000000000000000000000000000", @ANYRES32=0x0], 0x20}, 0x1}, 0x0) 2018/04/19 09:43:09 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x0, &(0x7f00000000c0)={'team0\x00', @ifru_addrs=@generic={0xb, "17e9fb482fd124517b67fa8fb3ef"}}) r1 = eventfd2(0x0, 0x80000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = msgget$private(0x0, 0x20) msgctl$IPC_INFO(r4, 0x3, &(0x7f0000000180)=""/231) write$binfmt_elf64(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000000000000000000000e0ffffff00000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000"], 0x78) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000280)={0x0, 0x2000, 0x7, 0xfff, 0x40}) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000140)=r5) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000000)={0x6, 0x80000001, 0x2, 'queue0\x00', 0x4}) 2018/04/19 09:43:09 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x40000101005, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@generic={0x3, 0x7fff, 0x100000001}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x534efde5d2bae475) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x4040, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0xeb74, 0xa, 0x1, 0x9, "d2d6d7b62c042c1cfbe2a728d15bc38417254424e447d90bdaae63376848d620"}) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="80fd0200002b3327153a2811e0f569502f35e7282996da120e0a93219671c48e1f60be78a6235b16bf7dd89239", 0x2d}], 0x1, 0x0) 2018/04/19 09:43:09 executing program 6: r0 = socket$pptp(0x18, 0x1, 0x2) perf_event_open(&(0x7f0000220000)={0x42, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0xfffffffffffffeb7) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x1) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x71fc, 0x2) [ 353.942779] netlink: 12 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/19 09:43:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256_mb\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000), 0x2b) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000200)={r3, 0x1, &(0x7f0000000040)=[0x9], &(0x7f0000000140)=[0x5], 0x0, 0x5, 0x1f, &(0x7f0000000180)=[0xfff, 0x5d9, 0xffe000000000000, 0x81, 0x200], &(0x7f00000001c0)=[0x9, 0x7, 0x4, 0x9, 0x800000]}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x1, 0x4, 0x401, 0x400, 0x8, 0x100000, r4}) 2018/04/19 09:43:09 executing program 7: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x12400, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000100)={0x40003, 0x0, [0x1, 0x1, 0x7f40800, 0x7, 0x64, 0x1000, 0x7fffffff, 0x582121c1]}) r1 = socket(0x2, 0x2, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000040)={0x7, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000080)={0x9, r3}) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000a84000), 0x4) 2018/04/19 09:43:09 executing program 1: ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff}) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) pread64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffffffffffd) 2018/04/19 09:43:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f0000000180)={0x8, &(0x7f0000000200)=""/211, &(0x7f0000001700)=[{0x8, 0x1000, 0x8, &(0x7f0000000300)=""/4096}, {0x101, 0x35, 0x9, &(0x7f00000000c0)=""/53}, {0x3, 0x89, 0xb03a, &(0x7f0000001300)=""/137}, {0x1af4, 0x6, 0x5d9e, &(0x7f0000000140)=""/6}, {0x8001, 0xf5, 0x9, &(0x7f00000013c0)=""/245}, {0x80000001, 0xef, 0xfff, &(0x7f00000014c0)=""/239}, {0x5, 0x79, 0x1f, &(0x7f00000015c0)=""/121}, {0x7, 0xb7, 0x153927e7, &(0x7f0000001640)=""/183}]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f00000017c0)=[@text64={0x40, &(0x7f0000000040)="440f20c0350e000000440f22c0260f013ab805000000b9078000000f01d9b9321001c0b802000000ba000000000f30c744240000f0d9e8c744240204000000c7442406000000000f011424c4227d0ff70f353e660f38814d0ac4e27d8c07668ec5", 0x61}], 0xaaaaaaaaaaaac66, 0x40, &(0x7f00000001c0), 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/19 09:43:09 executing program 6: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000002dcd8)=ANY=[@ANYBLOB="050000000200ba5d79a7e07fc84d0000180000000303000000ff3f000000000009000000030000000100000000000000ffffffffffffffffe8000000ffffffff18020000ffffffffffffffff18020000ffffffff03000000", @ANYPTR=&(0x7f000002bfd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800e800000000000000000000000000000000000000000000000000000054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80049030000000000000000000000000000000000000000000000006800435400000000000000000000000000000000000000000000000000000002000000000000000000000000736e6d7000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000008d02000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x163) [ 354.169054] QAT: Invalid ioctl [ 354.204057] QAT: Invalid ioctl [ 354.689806] FAULT_INJECTION: forcing a failure. [ 354.689806] name failslab, interval 1, probability 0, space 0, times 0 [ 354.701110] CPU: 1 PID: 25719 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 354.708297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.717651] Call Trace: [ 354.720253] dump_stack+0x1b9/0x294 [ 354.723879] ? dump_stack_print_info.cold.2+0x52/0x52 [ 354.729062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.734584] ? __perf_event_task_sched_out+0x2cc/0x1470 [ 354.739947] should_fail.cold.4+0xa/0x1a [ 354.743997] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 354.749104] ? find_held_lock+0x36/0x1c0 [ 354.753150] ? find_held_lock+0x36/0x1c0 [ 354.757205] ? check_same_owner+0x320/0x320 [ 354.761515] ? print_usage_bug+0xc0/0xc0 [ 354.765571] ? rcu_note_context_switch+0x710/0x710 [ 354.770486] ? finish_task_switch+0x1ca/0x810 [ 354.774966] ? finish_task_switch+0x182/0x810 [ 354.779459] __should_failslab+0x124/0x180 [ 354.783683] should_failslab+0x9/0x14 [ 354.787480] kmem_cache_alloc_node+0x272/0x780 [ 354.792051] ? __lock_acquire+0x7f5/0x5140 [ 354.796275] __alloc_skb+0x111/0x780 [ 354.799975] ? skb_scrub_packet+0x580/0x580 [ 354.804288] ? debug_check_no_locks_freed+0x310/0x310 [ 354.809467] ? __lock_acquire+0x7f5/0x5140 [ 354.813688] ? perf_trace_lock+0xd6/0x900 [ 354.817833] alloc_skb_with_frags+0x137/0x760 [ 354.822316] ? graph_lock+0x170/0x170 [ 354.826126] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 354.830877] ? graph_lock+0x170/0x170 [ 354.834666] sock_alloc_send_pskb+0x87a/0xae0 [ 354.839163] ? find_held_lock+0x36/0x1c0 [ 354.843228] ? sock_wmalloc+0x1e0/0x1e0 [ 354.847207] ? lock_downgrade+0x8e0/0x8e0 [ 354.852080] ? kasan_check_read+0x11/0x20 [ 354.856221] ? do_raw_spin_unlock+0x9e/0x2e0 [ 354.860619] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 354.865192] ? kasan_check_write+0x14/0x20 [ 354.869434] ? do_raw_spin_lock+0xc1/0x200 [ 354.873661] ? _raw_spin_unlock+0x22/0x30 [ 354.877814] unix_dgram_sendmsg+0x4f9/0x1730 [ 354.882239] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 354.887770] ? unix_stream_connect+0x11c0/0x11c0 [ 354.892515] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 354.898046] ? _copy_from_user+0xdf/0x150 [ 354.902183] ? copy_msghdr_from_user+0x3bc/0x560 [ 354.906929] ? security_socket_sendmsg+0x94/0xc0 [ 354.911686] ? unix_stream_connect+0x11c0/0x11c0 [ 354.916441] sock_sendmsg+0xd5/0x120 [ 354.920153] ___sys_sendmsg+0x525/0x940 [ 354.924144] ? copy_msghdr_from_user+0x560/0x560 [ 354.928924] ? find_held_lock+0x36/0x1c0 [ 354.932981] ? lock_downgrade+0x8e0/0x8e0 [ 354.937124] ? rcu_note_context_switch+0x710/0x710 [ 354.942047] ? check_same_owner+0x320/0x320 [ 354.946360] ? __might_sleep+0x95/0x190 [ 354.950333] __sys_sendmmsg+0x240/0x6f0 [ 354.954306] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 354.958612] ? __lock_is_held+0xb5/0x140 [ 354.962671] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 354.968196] ? fput+0x130/0x1a0 [ 354.971476] ? ksys_write+0x1a6/0x250 [ 354.975260] ? __ia32_sys_read+0xb0/0xb0 [ 354.979310] __x64_sys_sendmmsg+0x9d/0x100 [ 354.983530] do_syscall_64+0x1b1/0x800 [ 354.987402] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 354.992231] ? syscall_return_slowpath+0x5c0/0x5c0 [ 354.997146] ? syscall_return_slowpath+0x30f/0x5c0 [ 355.002067] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 355.007431] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.012273] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.017446] RIP: 0033:0x455329 [ 355.020632] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 355.028448] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 355.035724] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 355.042999] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 355.050275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 355.057546] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000020 2018/04/19 09:43:10 executing program 4 (fault-call:3 fault-nth:33): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:10 executing program 2: getrusage(0x0, &(0x7f0000007000)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f00007e0000)=[{&(0x7f0000007000)="fd20932fcc7cfaafcf960802e02348f8fba600069da7a78a04a646", 0x1b}], 0x1, &(0x7f0000334f28)}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000970000)='/dev/sg#\x00', 0x0, 0xc0002) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x0, 0x4, 0x1, 0x8001}}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x6, 0x9, 0x4, 0x40000000000, 0x800, 0xfa, 0x3ff, 0x3f, 0x1}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0xbe7, 0x2, 0x6c, 0xacb9, 0xfffffffffffff801, 0x8f, 0x0, 0x4, 0x4, 0x9}) 2018/04/19 09:43:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}], 0x1a6) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 2018/04/19 09:43:10 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$VT_RELDISP(r2, 0x5605) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="0f30f3afbaf80c66b8981d068566efbafc0c66b80d00008066ef660f320f01df650f01ca66b9800000c00f326635000100000f3066b9700900000f3266b9800000c00f326635002000000f30f30f07", 0x4f}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000080)={[0x1f006, 0x10000, 0x1, 0x2000], 0xfff, 0x74, 0x443a}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000008406000000f4ff00000000008e44399b145ca456b26815e700000000"]) 2018/04/19 09:43:10 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000feffe4)={0xa, 0x4e20}, 0x1c) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0xfffffffffffffc00, 0x3, 0xb5, &(0x7f0000fff000/0x1000)=nil, 0x6}) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000d3cffc), 0x4) listen(r0, 0xfff) 2018/04/19 09:43:10 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000180)=@ethtool_cmd={0x1f}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x82202, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', r2}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) 2018/04/19 09:43:10 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000240)=""/225) rt_sigsuspend(&(0x7f0000000080), 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xc5, 0x4400) fchmod(r2, 0x20) tkill(r0, 0x1000000000016) 2018/04/19 09:43:10 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000180)={0x0, 0x6, 0x5}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sctp\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x1, 0x0, 0xffffffff, 0x5, "b0a033ecb546dd4e8e43a3422852087c88b1e151abc1af468b637e8897b070e8895008cf4dcefc6979748e5c"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="66baf80cb850c47f80ef66bafc0cb80000c0feefc4a19f51f2440f019fc62c248566f247ac4ede5600c4e3791d7ee004c40151e299992c0000b805000000b9336600000f01c1420f5bddb99f0a0000b88eabb2c9ba000000000f30", 0x5b}], 0x1, 0x0, &(0x7f00000000c0), 0xfffffffffffffa3) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000200)=@add_del={0x2, &(0x7f00000001c0)='bond0\x00', 0x7ff}) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x0) 2018/04/19 09:43:10 executing program 2: r0 = socket$inet(0x10, 0x40000000040003, 0x80) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x10}, 0x0) 2018/04/19 09:43:10 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(arc4-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="ad", 0x1) r2 = accept$alg(r1, 0x0, 0x0) chroot(&(0x7f0000000080)='./file0\x00') r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x82000, 0x0) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000140)) sendmmsg$alg(r2, &(0x7f0000009940)=[{0x0, 0x0, &(0x7f0000008840)=[{&(0x7f0000008800)="856e", 0x2}], 0x1, &(0x7f0000008880)}], 0x1, 0x0) 2018/04/19 09:43:10 executing program 0: creat(&(0x7f0000000440)='./file0\x00', 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffe, 0x32, r0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00004ebff0)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000d12000)={0x1}) times(&(0x7f0000cc1fe0)) execve(&(0x7f0000ec1ff8)='./file0\x00', &(0x7f000039e000), &(0x7f00001a3000)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000300)=ANY=[], &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}}}, &(0x7f0000000180)=0xa0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) timer_create(0x0, &(0x7f0000273000), &(0x7f0000a71000)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) timer_create(0x0, &(0x7f0000c8c000)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f00001e8000)) fcntl$setstatus(r2, 0x4, 0x42000) write$selinux_validatetrans(0xffffffffffffffff, &(0x7f0000815000)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a746d70632311361bc5ddec865f743a73302073797374086d5f753a6f626a6563745f723a0100636f3f000000000000007865635f743a7330200000202f7573722f7362"], 0x55) timer_create(0x0, &(0x7f0000abdfa0), &(0x7f0000db3ffc)) timer_gettime(0x0, &(0x7f0000964000)) request_key(&(0x7f00009f6000)='keyring\x00', &(0x7f00004ceffb)={0x73, 0x79, 0x7a}, &(0x7f0000ec9000)='\x00', 0xffffffffffffffff) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000a4dff0), &(0x7f0000bb0000)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20}}}, 0x8c) mremap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000729000/0x2000)=nil) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00006cdfd2)=""/46, &(0x7f0000430ffc)=0x2e) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x7530}, 0x10) ioctl$sock_ipx_SIOCAIPXITFCRT(r1, 0x89e0, &(0x7f0000000300)=0x1990) munmap(&(0x7f0000b52000/0x2000)=nil, 0x2000) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f0000000ffc)=0x81, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000a59000)=0x4, 0x4) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r2, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/19 09:43:10 executing program 3: setrlimit(0xb, &(0x7f00003e3000)) pipe(&(0x7f00005c8000)={0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x448402, 0x0) close(r0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a44000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x7) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000040)) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00002cb000)={0x0, r1}) recvmsg(r3, &(0x7f000070bfc8)={&(0x7f00001d6ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) r4 = dup2(r0, r3) tkill(r1, 0x16) ioctl$TCFLSH(r4, 0x540b, 0x8) 2018/04/19 09:43:10 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0x2) prctl$intptr(0x17, 0x0) 2018/04/19 09:43:10 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x6, 0x10202) ioctl$sock_proto_private(r0, 0x89e7, &(0x7f00000001c0)="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") ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) capset(&(0x7f0000002ffa)={0x20080522, r1}, &(0x7f0000002000)={0x0, 0xffffffffffffffff, 0xfffffffffffffffd}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='ifb0\x00'}) 2018/04/19 09:43:10 executing program 6: perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe46, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000cf1ff4)={0x10}, 0xc, &(0x7f0000703000)={&(0x7f000023f000)=ANY=[@ANYBLOB="84000000000000000000000000000000005b659a62290ffc380c2dbfc75e8917e101000006000000001cb4e2bf501db1bb948decd8337f6d63cc8769c29c4d91b0325df0be48b748d3050bc1700612dbc3080c91125fa158cf0d70309f7f19cc7c8262d73294c0351575a9e8aa5944f2a432a15b3fe56aa566ce5ccee13b17c20b032e"], 0x83}, 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x20b) connect$inet6(r0, &(0x7f000053b000)={0xa}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000100)}}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x15) 2018/04/19 09:43:11 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x400000000002, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x2c5) sendto$inet(r0, &(0x7f00000002c0), 0x2e2, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x420000, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000100)) [ 356.040919] FAULT_INJECTION: forcing a failure. [ 356.040919] name failslab, interval 1, probability 0, space 0, times 0 [ 356.052235] CPU: 0 PID: 25786 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 356.059418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.068783] Call Trace: [ 356.071378] dump_stack+0x1b9/0x294 [ 356.075003] ? dump_stack_print_info.cold.2+0x52/0x52 [ 356.080201] ? is_bpf_text_address+0xd7/0x170 [ 356.084700] ? kernel_text_address+0x79/0xf0 [ 356.089099] ? __unwind_start+0x166/0x330 [ 356.093251] should_fail.cold.4+0xa/0x1a [ 356.097312] ? __save_stack_trace+0x7e/0xd0 [ 356.101639] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 356.106743] ? save_stack+0xa9/0xd0 [ 356.110364] ? save_stack+0x43/0xd0 [ 356.113978] ? kasan_kmalloc+0xc4/0xe0 [ 356.117851] ? kasan_slab_alloc+0x12/0x20 [ 356.121997] ? find_held_lock+0x36/0x1c0 [ 356.126081] ? check_same_owner+0x320/0x320 [ 356.130408] ? rcu_note_context_switch+0x710/0x710 [ 356.135329] __should_failslab+0x124/0x180 [ 356.139552] should_failslab+0x9/0x14 [ 356.143354] kmem_cache_alloc_node_trace+0x26f/0x770 [ 356.148452] __kmalloc_node_track_caller+0x33/0x70 [ 356.153371] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 356.158114] __alloc_skb+0x14d/0x780 [ 356.161814] ? skb_scrub_packet+0x580/0x580 [ 356.166161] ? debug_check_no_locks_freed+0x310/0x310 [ 356.171341] ? __lock_acquire+0x7f5/0x5140 [ 356.175571] alloc_skb_with_frags+0x137/0x760 [ 356.180066] ? graph_lock+0x170/0x170 [ 356.183874] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 356.188623] ? graph_lock+0x170/0x170 [ 356.192422] sock_alloc_send_pskb+0x87a/0xae0 [ 356.196928] ? find_held_lock+0x36/0x1c0 [ 356.200994] ? sock_wmalloc+0x1e0/0x1e0 [ 356.204980] ? lock_downgrade+0x8e0/0x8e0 [ 356.209144] ? kasan_check_read+0x11/0x20 [ 356.213301] ? do_raw_spin_unlock+0x9e/0x2e0 [ 356.217922] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 356.222516] ? kasan_check_write+0x14/0x20 [ 356.226756] ? do_raw_spin_lock+0xc1/0x200 [ 356.230997] ? _raw_spin_unlock+0x22/0x30 [ 356.235160] unix_dgram_sendmsg+0x4f9/0x1730 [ 356.239580] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 356.245132] ? unix_stream_connect+0x11c0/0x11c0 [ 356.249885] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 356.255415] ? _copy_from_user+0xdf/0x150 [ 356.259553] ? copy_msghdr_from_user+0x3bc/0x560 [ 356.264301] ? security_socket_sendmsg+0x94/0xc0 [ 356.269051] ? unix_stream_connect+0x11c0/0x11c0 [ 356.273809] sock_sendmsg+0xd5/0x120 [ 356.277513] ___sys_sendmsg+0x525/0x940 [ 356.281488] ? copy_msghdr_from_user+0x560/0x560 [ 356.286244] ? find_held_lock+0x36/0x1c0 [ 356.290311] ? lock_downgrade+0x8e0/0x8e0 [ 356.294480] ? rcu_note_context_switch+0x710/0x710 [ 356.299418] ? check_same_owner+0x320/0x320 [ 356.303726] ? __might_sleep+0x95/0x190 [ 356.307688] __sys_sendmmsg+0x240/0x6f0 [ 356.311651] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 356.315965] ? __lock_is_held+0xb5/0x140 [ 356.320040] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 356.325576] ? fput+0x130/0x1a0 [ 356.329038] ? ksys_write+0x1a6/0x250 [ 356.332846] ? __ia32_sys_read+0xb0/0xb0 [ 356.337006] __x64_sys_sendmmsg+0x9d/0x100 [ 356.341248] do_syscall_64+0x1b1/0x800 [ 356.345135] ? finish_task_switch+0x1ca/0x810 [ 356.349634] ? syscall_return_slowpath+0x5c0/0x5c0 [ 356.354570] ? syscall_return_slowpath+0x30f/0x5c0 [ 356.359518] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 356.364883] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 356.369714] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.374893] RIP: 0033:0x455329 [ 356.378065] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 356.385767] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 356.393022] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 356.400289] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 356.407540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 356.414791] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000021 2018/04/19 09:43:12 executing program 4 (fault-call:3 fault-nth:34): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:12 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x1102}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x400, 0x8002) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x2, 0x3, {0x3, 0x2, 0x9, 0x1, 0x8}}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000340)=0x9) 2018/04/19 09:43:12 executing program 0: epoll_create1(0x0) socket$unix(0x1, 0x5, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000cb000)='/dev/rtc\x00', 0x0, 0x0) unshare(0x8000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000000000000000000000000000000000000000000000000000000000000000000000000000587323ae5af82f0d6f957ceb680bd0a19b118e115a1efdfe8924ffb2222eacd3d1c284f87d3eae7997306633ab739bf07350cdc48aac1a294501ea4be3b3e58cec3fca5d1a808142e64d68393802b39902dda71b180603bff351e673ab5db70b0a634cf74016d7393dada62bfd"]) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x202000, 0x0) 2018/04/19 09:43:12 executing program 7: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xff, 0x12100) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x4e23, @multicast2=0xe0000002}, {0x306, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x60, {0x2, 0x4e23, @loopback=0x7f000001}, 'vlan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') readv(r1, &(0x7f0000000080), 0x2) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000100)={&(0x7f0000e00000/0x200000)=nil, 0x23, 0x2, 0x20, &(0x7f0000ef9000/0x1000)=nil, 0x8383}) 2018/04/19 09:43:12 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x3c1, 0x2, 0x240, [0x20000bc0], 0x0, &(0x7f00000008c0), &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x38d) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x7, 0x2, 0xb6, &(0x7f0000ffb000/0x2000)=nil, 0x1}) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0xc00, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) 2018/04/19 09:43:12 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000001180)={@link_local={0x1, 0x80, 0xc2}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x3a, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}}}, &(0x7f0000000180)) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x2000) write$tun(r0, &(0x7f0000000040)={@pi={0x0, 0x89ff}, @hdr={0x2, 0x3, 0x9, 0x7, 0x81, 0x8}, @llc={@snap={0xab, 0x0, "ff", "7081cf", 0xa2b1601510662dc6, "024a72e8fdc0e820047fc3696333295781d7dd42642a275d9eafae4e7c8e47655ab6892e85a2eac9a63e122331f960af3b73bfa119c5b9a43b86ba0b844d"}}}, 0x54) 2018/04/19 09:43:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={"00080000d2003000600400004000", r1}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@setlink={0x2c, 0x13, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xc, 0x1}]}, 0x2c}, 0x1}, 0x0) 2018/04/19 09:43:12 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/179, 0xb3}], 0xf6, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000100)={r0}) [ 356.554386] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/04/19 09:43:12 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-twofish-avx)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="0a0775b0d5b60ced5c54dbb777846d3d2b64180ae497e000429f87018bf9b6e23989c4adbd553c78067af350e798d7533a357d473941dc9ac44f5c673c680dd4d023d06999a48cac3a8d0ee495e994d7c48fabbdcc3d7a201344873c015033a45aede1b789571a10492fab058e9195ebf2c324a49524002520a4c435cb1cfbd68e4d203d01c4621e59ece8cd87a675458351ec39c5b5369ba1a2b0c550e7e6dfe017c49a35face79e0a6eef91c81f92386fbaabdf5c050ee8e9f9ac0a3fd1b5cafe243327b793121fbd540ca44c1c5184eaf48", 0xd3) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f000022efc8)={&(0x7f0000bb5ff0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)=""/121, 0x79}], 0x1, &(0x7f0000139000)=""/70, 0x46}, 0x0) 2018/04/19 09:43:12 executing program 3: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000100)=""/201) 2018/04/19 09:43:12 executing program 1: r0 = socket$inet(0x2, 0x803, 0x81) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001b40)=@nat={'nat\x00', 0x19, 0x2, 0x260, [0x200015c0, 0x0, 0x0, 0x200017c0, 0x200017f0], 0x0, &(0x7f0000001580), &(0x7f00000015c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff02000000050000000000000008006c6f0000000000000000000000000000626f6e64300000000000000000000000697036746e6c3000000000000000000069703667726574617030000000000000aaaaaaaaaaaa000000000000ffffffffffff0000000000000000b8000000f00000002801000069700000000000000000000000000000000000000000000000000000000000002000000000000000ac141400ffffffff000000000000000000068004000000000000000000000000617270726570020000000000000000000000000000000000000000000000000010000000000000000180c2000000000000000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa000000000000000000001b000000000000000000736974300000000000000000000000007663616e3000000000000000000000006c6f0000000000000000000000000000726f73653000000000000000000000005703a99868490000000000000180c200070000000000000000007000000070000000a80000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000"]}, 0x2d8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udplite6\x00') ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000040)=""/198) 2018/04/19 09:43:12 executing program 0: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x10000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000100)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x330) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x3, 0x48000000}, 0xc) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x400080, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x7fff}) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f00000000c0), &(0x7f0000000040)) [ 356.614609] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/04/19 09:43:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f0000000240)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) sendmsg$unix(r3, &(0x7f000062e000)={&(0x7f0000690ff6)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000d000), 0x0, &(0x7f0000000ff0)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) close(r2) close(r0) readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000005c0)=""/68, 0x44}, {&(0x7f0000000640)=""/240, 0xf0}], 0x5) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000180)={0x1000, 0x0, 0xff, 0x1, 0xf5d1}, 0xc) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000c40)="c513896cfa552311bd0d0319bf70173e4fdf8bbf7c774fb93c1f32f966171dba6339866b66bed4a5f2e3e24fa93e99ea81b1f972c3e5e8b655f70affa01ea1797d16f4d58c1ba68338aa3d9a7128c03af95b638aec3955077feb72b69300e4d909b73d97229f197132e59bb29d1d0fef5f2800dd5510db38016b757578ec04325a956e5263104a5629c3b4c8945795c1da0c158a0e3a35beb329fa59546fb39dbd", 0xa1) recvmsg$netrom(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000780)=@ax25={0x3, {"3c1b7251c1894a"}}, 0x10, &(0x7f0000000fc0), 0x0, &(0x7f0000000ac0), 0x0, 0x80}, 0x40000140) sendto(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) mlockall(0x3) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa460cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x3f, &(0x7f0000000d00)=""/241, &(0x7f0000000140)=0xf1) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000000)=0x7, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000a80)={0x1, &(0x7f0000000080)=[{0x8, 0x0, 0xdda3}]}, 0x10) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x0, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000a40)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000980)) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000a00)=0x439d0444) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000980)={0x4, 0x80000000, 0x4, 0x80000001, 0x1, [{0xfa7, 0xf8cc, 0x0, 0x0, 0x0, 0x2000}]}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000580)={0x28, 0x0, 0x2711, @host=0x2}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000ac0], 0x0, &(0x7f00000004c0), &(0x7f0000000ac0)=[{}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x0, 0x0, 0x0, 'eql\x00', 'ipddp0\x00', 'nr0\x00', 'ip6gre0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff], 0x70, 0xb8, 0xe0}, [@common=@log={'log\x00', 0x24, {{0x10001, "25d4237edf0250c72ef30c7f911844fe0b5b7267b1682a34651f081c5bc3", 0xb}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x4}}]}, {0x0, '\x00', 0x1}]}, 0x1f8) 2018/04/19 09:43:12 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'rose0\x00', {0x2, 0x4e22}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x492, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000f5ffc)=0xfffffffeffffffff, 0x4) bind$inet6(r1, &(0x7f0000710fe4)={0xa, 0x4e21}, 0x1c) 2018/04/19 09:43:12 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x400000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="8100000000000000"], 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0xf6, 0x5, 0x3, 0x3ff, 0x1, 0x9, 0x9, 0x8, 0x0, [0x2caa3f73, 0x9, 0x68, 0x20, 0x80000000, 0x3, 0x5, 0xd5f]}}) 2018/04/19 09:43:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00005a0000)='attr\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getdents(r0, &(0x7f0000ac7f8c)=""/116, 0x74) accept$packet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000140)=0x14) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000180)={r2, 0x1, 0x6}, 0x10) getpeername(r1, &(0x7f0000000040)=@nl=@proc, &(0x7f00000000c0)=0x80) [ 357.387290] FAULT_INJECTION: forcing a failure. [ 357.387290] name failslab, interval 1, probability 0, space 0, times 0 [ 357.398587] CPU: 0 PID: 25855 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 357.405760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.415098] Call Trace: [ 357.417678] dump_stack+0x1b9/0x294 [ 357.421292] ? dump_stack_print_info.cold.2+0x52/0x52 [ 357.426471] ? unwind_get_return_address+0x61/0xa0 [ 357.431389] ? __save_stack_trace+0x7e/0xd0 [ 357.435714] should_fail.cold.4+0xa/0x1a [ 357.439763] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 357.444853] ? save_stack+0xa9/0xd0 [ 357.448466] ? save_stack+0x43/0xd0 [ 357.452090] ? kasan_kmalloc+0xc4/0xe0 [ 357.455973] ? __kmalloc_node_track_caller+0x47/0x70 [ 357.461069] ? __alloc_skb+0x14d/0x780 [ 357.464939] ? alloc_skb_with_frags+0x137/0x760 [ 357.469591] ? sock_alloc_send_pskb+0x87a/0xae0 [ 357.474244] ? unix_dgram_sendmsg+0x4f9/0x1730 [ 357.478806] ? sock_sendmsg+0xd5/0x120 [ 357.482677] ? ___sys_sendmsg+0x525/0x940 [ 357.486807] ? __sys_sendmmsg+0x240/0x6f0 [ 357.490935] ? __x64_sys_sendmmsg+0x9d/0x100 [ 357.495326] ? do_syscall_64+0x1b1/0x800 [ 357.499370] ? find_held_lock+0x36/0x1c0 [ 357.503422] ? check_same_owner+0x320/0x320 [ 357.507726] ? print_usage_bug+0xc0/0xc0 [ 357.511769] ? rcu_note_context_switch+0x710/0x710 [ 357.516684] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 357.521945] __should_failslab+0x124/0x180 [ 357.526166] should_failslab+0x9/0x14 [ 357.529948] kmem_cache_alloc_node+0x272/0x780 [ 357.534518] ? __lock_acquire+0x7f5/0x5140 [ 357.538741] __alloc_skb+0x111/0x780 [ 357.542441] ? skb_scrub_packet+0x580/0x580 [ 357.546755] ? debug_check_no_locks_freed+0x310/0x310 [ 357.551928] ? __lock_acquire+0x7f5/0x5140 [ 357.556159] ? find_held_lock+0x36/0x1c0 [ 357.560220] alloc_skb_with_frags+0x137/0x760 [ 357.564698] ? graph_lock+0x170/0x170 [ 357.568490] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 357.573239] ? graph_lock+0x170/0x170 [ 357.577032] sock_alloc_send_pskb+0x87a/0xae0 [ 357.581516] ? find_held_lock+0x36/0x1c0 [ 357.585569] ? sock_wmalloc+0x1e0/0x1e0 [ 357.589536] ? lock_downgrade+0x8e0/0x8e0 [ 357.593692] ? kasan_check_read+0x11/0x20 [ 357.597829] ? do_raw_spin_unlock+0x9e/0x2e0 [ 357.602222] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 357.606791] ? kasan_check_write+0x14/0x20 [ 357.611023] ? do_raw_spin_lock+0xc1/0x200 [ 357.615250] ? _raw_spin_unlock+0x22/0x30 [ 357.619388] unix_dgram_sendmsg+0x4f9/0x1730 [ 357.623786] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 357.629315] ? unix_stream_connect+0x11c0/0x11c0 [ 357.634061] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 357.639591] ? _copy_from_user+0xdf/0x150 [ 357.643734] ? copy_msghdr_from_user+0x3bc/0x560 [ 357.648484] ? security_socket_sendmsg+0x94/0xc0 [ 357.653238] ? unix_stream_connect+0x11c0/0x11c0 [ 357.657981] sock_sendmsg+0xd5/0x120 [ 357.661682] ___sys_sendmsg+0x525/0x940 [ 357.665639] ? lock_repin_lock+0x410/0x410 [ 357.669859] ? copy_msghdr_from_user+0x560/0x560 [ 357.674601] ? __schedule+0x809/0x1e30 [ 357.678489] ? find_held_lock+0x36/0x1c0 [ 357.682548] ? lock_downgrade+0x8e0/0x8e0 [ 357.686700] ? rcu_note_context_switch+0x710/0x710 [ 357.691614] ? check_same_owner+0x320/0x320 [ 357.695920] ? __might_sleep+0x95/0x190 [ 357.699883] __sys_sendmmsg+0x240/0x6f0 [ 357.703845] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 357.708156] ? __lock_is_held+0xb5/0x140 [ 357.712211] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 357.717740] ? fput+0x130/0x1a0 [ 357.721015] ? ksys_write+0x1a6/0x250 [ 357.724830] ? __ia32_sys_read+0xb0/0xb0 [ 357.728902] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 357.733736] __x64_sys_sendmmsg+0x9d/0x100 [ 357.737957] do_syscall_64+0x1b1/0x800 [ 357.741825] ? finish_task_switch+0x1ca/0x810 [ 357.746314] ? syscall_return_slowpath+0x5c0/0x5c0 [ 357.751235] ? syscall_return_slowpath+0x30f/0x5c0 [ 357.756160] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 357.761508] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 357.766351] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.771523] RIP: 0033:0x455329 [ 357.774692] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 357.782387] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 357.789637] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 357.796914] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 357.804168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 357.811856] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000022 2018/04/19 09:43:13 executing program 4 (fault-call:3 fault-nth:35): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:13 executing program 5: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r0, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='setgroups\x00') sendfile(r1, r1, &(0x7f000050dff8), 0x86) ppoll(&(0x7f0000001fd8)=[{r0}], 0x1, &(0x7f0000001000)={0x77359400}, &(0x7f0000001000), 0x8) 2018/04/19 09:43:13 executing program 0: set_mempolicy(0x4003, &(0x7f00003ccff8)=0x10003, 0x7742) mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1, &(0x7f000000b000), 0x4, 0x0) mbind(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x0, &(0x7f00002dfff8), 0x1, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) readahead(r0, 0x2, 0xd00) 2018/04/19 09:43:13 executing program 3: add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240), 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x20) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={r2, r3, 0x4}) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000340)=""/2) 2018/04/19 09:43:13 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/62, 0x3e}], 0x10000179, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000e9f000)=0x600210) pread64(r0, &(0x7f0000000040)=""/21, 0x15, 0x0) pwritev(r0, &(0x7f0000000040), 0x19d, 0x0) 2018/04/19 09:43:13 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @random="3b5f09814edc"}, 0x0, {0x2, 0x0, @broadcast=0xffffffff}, "00ffffffffffffff00"}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000180)={0x3, 0x20, 0x3, 'queue1\x00', 0x80000000}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f00000000c0)={0x7, 0xfffffffffffffffd, 0x800, 0x200, 0x2, 0x5}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000100)={0x0, r2}) 2018/04/19 09:43:13 executing program 7: msgget(0x1, 0x40) r0 = getpid() r1 = msgget(0x3, 0x100) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000040)=""/29) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x92b, 0x1) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000500)={{0x200, 0x9}, 'port1\x00', 0x24, 0xfffffffffffffffc, 0x100000001, 0x4, 0x0, 0x3f, 0xfffffffffffffffc, 0x0, 0x2, 0x6d7a1e59}) ioctl$int_in(r2, 0x5473, &(0x7f0000000240)=0x1) perf_event_open(&(0x7f0000014f88)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x4) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'\x00', 0x400}) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000100)=r0) openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000140)={0x6, 0xee, 0x9, 'queue0\x00', 0x8}) 2018/04/19 09:43:13 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="020000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) fchmod(r0, 0x40) [ 357.967571] QAT: Invalid ioctl [ 357.995314] QAT: Invalid ioctl 2018/04/19 09:43:13 executing program 2: r0 = socket$inet6_sctp(0xa, 0x4, 0x84) mmap(&(0x7f0000000000/0xaa1000)=nil, 0xaa1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000097f60)={0x0, @in={{0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, &(0x7f0000aaaffc)=0xa0) r1 = semget(0x3, 0x2, 0x8) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x800, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000100)={0x2, 0x3, 0x9, 0x6}) semctl$GETZCNT(r1, 0x4, 0xf, &(0x7f0000000000)=""/149) 2018/04/19 09:43:13 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') r0 = socket(0x4, 0xb, 0x4e) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=0x8) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000040)=ANY=[]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040), 0x3) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs(r2, &(0x7f00000000c0)='pagemap\x00') 2018/04/19 09:43:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/exec\x00') ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='teql0\x00') ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x1) mmap(&(0x7f0000000000/0xfc2000)=nil, 0xfc2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/8, 0x8, 0x0) [ 358.030147] QAT: Invalid ioctl [ 358.042487] QAT: Invalid ioctl 2018/04/19 09:43:13 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) close(r0) 2018/04/19 09:43:13 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x10000) r1 = getpgrp(0x0) pwrite64(r0, &(0x7f0000000080)="c61bf57786b88fd79c64c75af91b5405779939b479d383e07241f00a122959fc510763d946c44d462229c8", 0x2b, 0x0) kcmp(r1, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 2018/04/19 09:43:13 executing program 5: socket$kcm(0x29, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)="6e65742f697076365f726f7574650000001601e1160aa209e07a86df5448177d3a0500006e78220008000069a43690640d0f5c4a51ce00000008f516f26c2f363faa5fe8ec210edb437b63ccd8db59750540b977b0298f24826a3aa03977b41c422c8e76ab47d16ea287abfb72812b102ee7bf3d7da9ad5c045840aceaaf0137edaa1dc78a95190e0c3f9c149c4672df66e6be42676465fef03b5f0000969c5b494b2b0c10bd82a1ae3d170000000000000001da57ce748f04000000000000004d7cfd5c59f5f4eea23411f454f972ea99e818e9eefbdd9932d02ef383272aefad49d76c5c3f3aef746c59b085bc973de3cb1ff800a5c77d6cc291a391934cc4cf26bf716a3f45e29b2b6c572da5b9b4a19838f90f848f314d08e4c189ecc00671bae001f387") bind$alg(r0, &(0x7f0000e15000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) socket$inet_icmp(0x2, 0x2, 0x1) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000040)={0x9, 0x1}) sendfile(r2, r1, &(0x7f0000000000), 0xffc) 2018/04/19 09:43:13 executing program 0: r0 = perf_event_open(&(0x7f0000a0f000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000bfc000)=0x10000000) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x7) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000080)=""/128) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000100)=""/247) 2018/04/19 09:43:13 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfffffffffffffefb, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="9a148be70e76", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [0xfffffff5], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff80, 0x0, 0x0, 0x0, [0x294], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) [ 358.798873] FAULT_INJECTION: forcing a failure. [ 358.798873] name failslab, interval 1, probability 0, space 0, times 0 [ 358.810222] CPU: 0 PID: 25930 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 358.817410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.826960] Call Trace: [ 358.829546] dump_stack+0x1b9/0x294 [ 358.833192] ? dump_stack_print_info.cold.2+0x52/0x52 [ 358.838404] ? perf_trace_lock_acquire+0xe3/0x980 [ 358.843258] ? kernel_text_address+0x79/0xf0 [ 358.847677] ? __unwind_start+0x166/0x330 [ 358.851822] should_fail.cold.4+0xa/0x1a [ 358.855880] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 358.860978] ? save_stack+0xa9/0xd0 [ 358.864595] ? save_stack+0x43/0xd0 [ 358.868210] ? kasan_slab_alloc+0x12/0x20 [ 358.872352] ? find_held_lock+0x36/0x1c0 [ 358.876442] ? check_same_owner+0x320/0x320 [ 358.880760] ? rcu_note_context_switch+0x710/0x710 [ 358.885695] __should_failslab+0x124/0x180 [ 358.889924] should_failslab+0x9/0x14 [ 358.893721] kmem_cache_alloc_node_trace+0x26f/0x770 [ 358.898822] __kmalloc_node_track_caller+0x33/0x70 [ 358.903746] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 358.908496] __alloc_skb+0x14d/0x780 [ 358.912203] ? skb_scrub_packet+0x580/0x580 [ 358.916520] ? debug_check_no_locks_freed+0x310/0x310 [ 358.921704] ? __lock_acquire+0x7f5/0x5140 [ 358.925931] ? perf_trace_lock_acquire+0xe3/0x980 [ 358.930769] ? perf_trace_lock+0x900/0x900 [ 358.935018] alloc_skb_with_frags+0x137/0x760 [ 358.939518] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 358.944263] ? graph_lock+0x170/0x170 [ 358.948064] sock_alloc_send_pskb+0x87a/0xae0 [ 358.952560] ? find_held_lock+0x36/0x1c0 [ 358.956614] ? sock_wmalloc+0x1e0/0x1e0 [ 358.960580] ? lock_downgrade+0x8e0/0x8e0 [ 358.964726] ? kasan_check_read+0x11/0x20 [ 358.968873] ? do_raw_spin_unlock+0x9e/0x2e0 [ 358.973267] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 358.977836] ? kasan_check_write+0x14/0x20 [ 358.982058] ? do_raw_spin_lock+0xc1/0x200 [ 358.986282] ? _raw_spin_unlock+0x22/0x30 [ 358.990432] unix_dgram_sendmsg+0x4f9/0x1730 [ 358.994833] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 359.000369] ? unix_stream_connect+0x11c0/0x11c0 [ 359.005122] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 359.010662] ? _copy_from_user+0xdf/0x150 [ 359.014810] ? copy_msghdr_from_user+0x3bc/0x560 [ 359.019563] ? security_socket_sendmsg+0x94/0xc0 [ 359.024310] ? unix_stream_connect+0x11c0/0x11c0 [ 359.029059] sock_sendmsg+0xd5/0x120 [ 359.032761] ___sys_sendmsg+0x525/0x940 [ 359.036725] ? copy_msghdr_from_user+0x560/0x560 [ 359.041484] ? find_held_lock+0x36/0x1c0 [ 359.045534] ? lock_downgrade+0x8e0/0x8e0 [ 359.049673] ? rcu_note_context_switch+0x710/0x710 [ 359.054588] ? check_same_owner+0x320/0x320 [ 359.058897] ? __might_sleep+0x95/0x190 [ 359.062871] __sys_sendmmsg+0x240/0x6f0 [ 359.066843] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 359.071190] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 359.076725] ? fput+0x130/0x1a0 [ 359.080006] ? ksys_write+0x1a6/0x250 [ 359.083806] ? __ia32_sys_read+0xb0/0xb0 [ 359.087861] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 359.092700] __x64_sys_sendmmsg+0x9d/0x100 [ 359.096927] do_syscall_64+0x1b1/0x800 [ 359.100806] ? finish_task_switch+0x1ca/0x810 [ 359.105295] ? syscall_return_slowpath+0x5c0/0x5c0 [ 359.110228] ? syscall_return_slowpath+0x30f/0x5c0 [ 359.115159] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 359.120514] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 359.125346] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.130533] RIP: 0033:0x455329 [ 359.133705] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 359.141409] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 359.148674] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 359.155932] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 359.163195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 359.170448] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000023 2018/04/19 09:43:14 executing program 4 (fault-call:3 fault-nth:36): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:14 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x6, 0x100, 0x7ff00000000000, 0x0, 0x1000, 0x8, 0x71, 0xfffffffffffffffb, 0x1, 0x2}) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000280)=0x100000001) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000000c0)=""/135) write$fuse(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="2850000002000000000000000000000000000000000000000000000000000000000000000000000017b37c42d814cc66fd47a142c464b0039e569578fe9e0d76730458b46ae53bac5b331b55c259a66b482d68a5c5f30b105b6a725a97a9ccbca7862536261911aa5d5f4eaccc0e0f241902d40834319ebb2d0c651def18ed12f0c5536800deea9ff9dad30df18b1687ecaef05e7666d109af32939b0fc3f3047e2089a0b314592db01ece80d801704f20d105865e345eea0f7a39f6195b846c6bf7d3ff197d928616b4212e833c53c11579b0dda6"], 0x28) 2018/04/19 09:43:14 executing program 7: r0 = socket$inet6(0xa, 0x3, 0xff) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x2) write$vnet(r1, &(0x7f00000002c0)={0x1, {&(0x7f0000000180)=""/240, 0xf0, &(0x7f0000000080)=""/34, 0x3, 0x3}}, 0x68) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) sendmsg$key(r0, &(0x7f0000000280)={0x20480, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@broadcast=0xffffffff, @in=@local={0xac, 0x14, 0x14, 0xaa}}]}, 0x231}, 0x1}, 0x0) 2018/04/19 09:43:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) r1 = syz_open_pts(r0, 0x10000000002) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000001340)="c61bfc0dcfdbcdc91f5baa68f995348ab408aaac8de72e74b1db248d92af7fda1965d8552e58176a2fd40d2100f1c88c64af63d6a46eaefe21f119e110d90e3a87dbdc62bf40513fe100f571c4e475260e586c39a615e621a3e676740c69898a96db88939f05df665949005abb22213edc40885702c893b47ff77c87caa9dc921880eccb58c04202bb80ad634dd80fcb3a027c2e6d56e9599f3caba309", 0x9d}], 0x1) 2018/04/19 09:43:14 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000080)=0x12, 0xf15617e3128495c) socket$inet6_icmp(0xa, 0x2, 0x3a) 2018/04/19 09:43:14 executing program 2: socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0xd}, 0xb62b}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r2, 0x5, 0xe2ae, 0x10001}, &(0x7f0000000200)=0x10) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000340)={[{0xca, 0x8, 0xdf47, 0x2, 0x0, 0x80, 0x1, 0xffffffff00000001, 0xe06, 0x3, 0x1, 0x7, 0x962}, {0x6, 0x43, 0x5, 0x8000, 0xffff, 0x8000, 0x7, 0x0, 0x9, 0x8428, 0x7, 0x1, 0x80}, {0x3, 0x3a, 0x100, 0x9, 0x8001, 0x5, 0xffffffffffffff80, 0x20, 0xfffffffffffffffa, 0x9, 0x9e3e, 0x7f, 0x100000000}], 0x9}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0xccc3, 0x101000) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x3ff) r5 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x20840) r6 = semget(0x2, 0x2, 0x8) semctl$SEM_STAT(r6, 0x1, 0x12, &(0x7f0000000000)=""/29) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000280)) 2018/04/19 09:43:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) 2018/04/19 09:43:14 executing program 3: add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240), 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x20) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={r2, r3, 0x4}) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000340)=""/2) 2018/04/19 09:43:14 executing program 6: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x2000000002, 0xffffffffffffff9c, 0x1}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000300)={@mcast1={0xff, 0x1, [], 0x1}, 0x73, r1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8910, &(0x7f0000000240)=@buf={0xe6, &(0x7f0000000140)="fc3e68c0f33aadadc741306feacf38f47e9cbb98ad4f589c157da8614bbff3efcf90476db59e91542272ebc7092e9d68f7e5c423da250447fd3de8f02a20c45701df1ea46bf2fdca13f6c87ecab1fbff1df749a8f818004ce048695a99f0321d66ee369bda95d06c15c5e9202d07afc453ded6a8c50ff98d7b7bf321de0dd980b554f24a35e1c54a6a69919c1320cbe0795d84e6a55caba84648781c82fcb777b1e6514182f3407bd945e4c7401d5ec833b48215a3e9094a998e0a3aecf5cd1ffe7176c8d70dceb72b09a2f1988c214722127cdb13d1acddc4a3de18b1375cbd207aa123f2e7"}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0xf46, 0x9, 0x449, 0x7}) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1c, &(0x7f0000000000)=0x7, 0x4) 2018/04/19 09:43:14 executing program 2: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f0000244000)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns/uts\x00') ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000080)={0x7, 0x3}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000000)={{0x0, 0x100000001, 0x1, 0x5, 0x80000001, 0x7fff}, 0x81, 0x97a, 0x1}) setns(r0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)={0x8, 0x35, "13aa6bb9eb82c293ddaba7a1079c336e0f7e4ad0a648a45ad51344efa50230598bcc2d1efc93d9199f82293532970d84a453627547"}) 2018/04/19 09:43:14 executing program 5: r0 = socket(0x3, 0x6, 0xfffffffffffffffe) write(r0, &(0x7f0000000080)="260000005e00090000b9c448eba13b00eaf83a0000000000a1db2ba9f8457092ff000008db1e", 0x26) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1f, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) openat$cgroup_subtree(r1, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) 2018/04/19 09:43:15 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xa, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0xfffffffffffffffb, 0x2, {0xffffffffffffffff, 0x0, 0x9d, 0x0, 0x1}}) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x101902) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a"}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3f, 0x5, 0x0, 0xf, 0x1d, 0x0, "8477b33ff185c63aaa46e6d5bf3066eb5aeed78b0dfcf8d9631e4386b1aaf6e5e38cd9d3a28a1c19f74a5f72f29c27395f0f12c76962d90c712760792c8736ef", "d1594333583449999ab7d96b7aead95efde658467dc838d9009e4100ad495b8ef3d3ecdba7fc4a10a555263397dc3a886e2c630aaf999324ec33571420dba022", "703b0a8ad50d39b1669bb042c7ba65e8c717b1b3e20f258f0f40b129e72f88b0", [0x3, 0x7]}) 2018/04/19 09:43:15 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0xa000, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000100)={0x2, 0x0, [{0xc0000000, 0x100000001, 0x0, 0x2, 0x7ff, 0x1b, 0x2}, {0xa, 0x46, 0x3, 0x5, 0x1, 0x6, 0x3}]}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0), 0x4) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)=0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x9) 2018/04/19 09:43:15 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x10001, 0x20000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000080)={0x53a, 0x8000, 0x3, 'queue1\x00', 0x10002}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000f24000)) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000), 0x4) 2018/04/19 09:43:15 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x800, 0x400) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$can_raw(r0, &(0x7f0000000040)={0x1d}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000), 0x0) 2018/04/19 09:43:15 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400000, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000080)) io_submit(r0, 0x1b7, &(0x7f0000000200)) [ 360.153839] FAULT_INJECTION: forcing a failure. [ 360.153839] name failslab, interval 1, probability 0, space 0, times 0 [ 360.165169] CPU: 0 PID: 26000 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 360.172360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.181708] Call Trace: [ 360.184292] dump_stack+0x1b9/0x294 [ 360.187906] ? dump_stack_print_info.cold.2+0x52/0x52 [ 360.193087] ? unwind_get_return_address+0x61/0xa0 [ 360.198005] ? __save_stack_trace+0x7e/0xd0 [ 360.202314] should_fail.cold.4+0xa/0x1a [ 360.206358] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 360.211449] ? save_stack+0xa9/0xd0 [ 360.215085] ? save_stack+0x43/0xd0 [ 360.218706] ? kasan_kmalloc+0xc4/0xe0 [ 360.222575] ? __kmalloc_node_track_caller+0x47/0x70 [ 360.227662] ? __alloc_skb+0x14d/0x780 [ 360.231534] ? alloc_skb_with_frags+0x137/0x760 [ 360.236197] ? sock_alloc_send_pskb+0x87a/0xae0 [ 360.240862] ? unix_dgram_sendmsg+0x4f9/0x1730 [ 360.245427] ? sock_sendmsg+0xd5/0x120 [ 360.249296] ? ___sys_sendmsg+0x525/0x940 [ 360.253429] ? __sys_sendmmsg+0x240/0x6f0 [ 360.257559] ? __x64_sys_sendmmsg+0x9d/0x100 [ 360.261950] ? do_syscall_64+0x1b1/0x800 [ 360.266011] ? find_held_lock+0x36/0x1c0 [ 360.270075] ? check_same_owner+0x320/0x320 [ 360.274391] ? print_usage_bug+0xc0/0xc0 [ 360.278440] ? rcu_note_context_switch+0x710/0x710 [ 360.283357] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 360.288623] __should_failslab+0x124/0x180 [ 360.292843] should_failslab+0x9/0x14 [ 360.296625] kmem_cache_alloc_node+0x272/0x780 [ 360.301194] ? __lock_acquire+0x7f5/0x5140 [ 360.305441] __alloc_skb+0x111/0x780 [ 360.309139] ? skb_scrub_packet+0x580/0x580 [ 360.313444] ? debug_check_no_locks_freed+0x310/0x310 [ 360.318616] ? __lock_acquire+0x7f5/0x5140 [ 360.322834] ? perf_trace_lock+0xd6/0x900 [ 360.326962] ? find_held_lock+0x36/0x1c0 [ 360.331020] alloc_skb_with_frags+0x137/0x760 [ 360.335505] ? graph_lock+0x170/0x170 [ 360.339293] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 360.344038] ? graph_lock+0x170/0x170 [ 360.347822] sock_alloc_send_pskb+0x87a/0xae0 [ 360.352304] ? find_held_lock+0x36/0x1c0 [ 360.356346] ? sock_wmalloc+0x1e0/0x1e0 [ 360.360303] ? lock_downgrade+0x8e0/0x8e0 [ 360.364436] ? kasan_check_read+0x11/0x20 [ 360.368565] ? do_raw_spin_unlock+0x9e/0x2e0 [ 360.372954] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 360.377522] ? kasan_check_write+0x14/0x20 [ 360.381740] ? do_raw_spin_lock+0xc1/0x200 [ 360.385960] ? _raw_spin_unlock+0x22/0x30 [ 360.390093] unix_dgram_sendmsg+0x4f9/0x1730 [ 360.394501] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 360.400043] ? unix_stream_connect+0x11c0/0x11c0 [ 360.404784] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 360.410306] ? _copy_from_user+0xdf/0x150 [ 360.414455] ? copy_msghdr_from_user+0x3bc/0x560 [ 360.419211] ? security_socket_sendmsg+0x94/0xc0 [ 360.423963] ? unix_stream_connect+0x11c0/0x11c0 [ 360.428705] sock_sendmsg+0xd5/0x120 [ 360.432417] ___sys_sendmsg+0x525/0x940 [ 360.436375] ? lock_repin_lock+0x410/0x410 [ 360.440597] ? copy_msghdr_from_user+0x560/0x560 [ 360.445342] ? __schedule+0x809/0x1e30 [ 360.449230] ? find_held_lock+0x36/0x1c0 [ 360.453289] ? lock_downgrade+0x8e0/0x8e0 [ 360.457445] ? rcu_note_context_switch+0x710/0x710 [ 360.462360] ? check_same_owner+0x320/0x320 [ 360.466674] ? __might_sleep+0x95/0x190 [ 360.470635] __sys_sendmmsg+0x240/0x6f0 [ 360.474598] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 360.478921] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 360.484439] ? fput+0x130/0x1a0 [ 360.487701] ? ksys_write+0x1a6/0x250 [ 360.491486] ? __ia32_sys_read+0xb0/0xb0 [ 360.495537] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 360.500457] __x64_sys_sendmmsg+0x9d/0x100 [ 360.504676] do_syscall_64+0x1b1/0x800 [ 360.508548] ? finish_task_switch+0x1ca/0x810 [ 360.513037] ? syscall_return_slowpath+0x5c0/0x5c0 [ 360.517960] ? syscall_return_slowpath+0x30f/0x5c0 [ 360.522883] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 360.528234] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 360.533070] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.538246] RIP: 0033:0x455329 [ 360.541422] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 360.549116] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 360.556366] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 360.563615] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 360.570866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 360.578116] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000024 2018/04/19 09:43:16 executing program 4 (fault-call:3 fault-nth:37): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x1200000000, 0x8000, 0x0, 0x2, 0x2, 0x3}) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x20}, 0x8) 2018/04/19 09:43:16 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) r1 = socket$netlink(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa2e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000000080)={0x14, 0x2c, 0xafb, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) 2018/04/19 09:43:16 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x202, 0x0) r1 = epoll_create(0xf26) write$binfmt_aout(r0, &(0x7f00000001c0)={{0x108, 0x400, 0x2, 0x73, 0x2a2, 0x0, 0x3a6, 0x101}, "85b0b4b160ee81637b825d45688e37df30e40800445c0ae77e422c205da08395323323c635b09de615e6bc7ef38e8c79be65271020bd90b9077cb04491a39d06b3225cefce1b79d9f8fa7703bff14e153aa19ef6689379d20fcfbad55887877e21ec414094bacaad9905950fe33dc5d89484fdf04aae73380d54bc6cf70341355329d9d37db7b266660c099204b1b99338cdec5460c60efa4b6d0d30a61913dc29c343be43ce0602c634e3", [[], [], [], [], [], []]}, 0x6cb) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000008c0)={0x5ca, 0x3, 'client0\x00', 0x5, "c76446ae91173649", "86c0c326f4607bfe4cc9e6b5396a1fbae880a4f0f66ae85bac782fdcefe72e8c", 0x1, 0xa5}) write$evdev(r0, &(0x7f0000000180)=[{{}, 0x8}], 0x18) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'vlan0\x00', {0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x1b}}}) 2018/04/19 09:43:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2480, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000001880)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00cb6400000000000000000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c002b00080001004b000000"], 0x2c}, 0x1}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000040)=0x5) 2018/04/19 09:43:16 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000140)={0x1, 0x800, 0x4}) bind$alg(r0, &(0x7f00001ca000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(serpent-generic)\x00'}, 0x58) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x8000, 0x300) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000), 0x0) r2 = dup(r0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000400)) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r3, &(0x7f00003b3fe4)={0x0, 0x0, &(0x7f0000946ff8)={&(0x7f00001a2ea8)=ANY=[], 0x2ab}, 0x1}, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000080)={0x200, 0x800}) ioctl$TCSBRKP(r1, 0x5425, 0x0) recvmmsg(r3, &(0x7f00000026c0)=[{{&(0x7f0000000340)=@rc, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/4096, 0x1000}}, {{&(0x7f0000001580)=@ethernet={0x0, @local}, 0x80, &(0x7f0000002680)=[{&(0x7f0000001600)=""/107, 0x6b}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x2}}], 0x2, 0x0, &(0x7f0000002740)={0x77359400}) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000001c0)=""/93) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x8001, 0x1, 0xea, 0x9}) 2018/04/19 09:43:16 executing program 1: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) ftruncate(r0, 0xffff) write(r0, &(0x7f0000cbd000)='v', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) mq_open(&(0x7f0000000000)='.-^\x00', 0x0, 0x1, &(0x7f0000000040)) 2018/04/19 09:43:16 executing program 3: add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240), 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x20) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={r2, r3, 0x4}) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000340)=""/2) 2018/04/19 09:43:16 executing program 2: r0 = socket$inet6(0xa, 0x80000, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x100000000000088) sendmsg$inet_sctp(r1, &(0x7f00000004c0)={&(0x7f0000000500)=@in={0x2, 0x4e23}, 0x10, &(0x7f0000f71000)}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) chroot(&(0x7f0000000040)='./file0\x00') ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000000c0)=@buf={0x40, &(0x7f0000000080)="be868913697c9503a7e3b1bbb7c3c1c714867329ec54c6ec1e9a1a77a853f6c8ebddd63ba68b213994c2e9b19375b6d4e421e5c60265563830e94e327f94efd6"}) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f00000001c0)=0x9, 0x4) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000100)=""/93) socket$inet6(0xa, 0xa, 0x4) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000200)=@llc, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=""/165, 0xa5}, 0x0) 2018/04/19 09:43:16 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000000c0)=""/136) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x800032, 0xffffffffffffffff, 0x0) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000000000)=""/174) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000180)=""/168) 2018/04/19 09:43:16 executing program 6: socket$unix(0x1, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) write(r0, &(0x7f0000412fd6)="29000000140007b7ffffffff0300e0eb01001000e0a40e07fff00f06000000ffff0100002a00f3ff09", 0x29) 2018/04/19 09:43:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000540)=[@text16={0x10, &(0x7f0000000480)="0fc718f4f0861566b8a79212b40f23c00f21f8663501000a000f23f80f0f64a4aebaa100b078ee67650fae71006766c7442400540000006766c74424028db6f2026766c744240600000000670f011c2466b9cb0a000066b872e9000066ba000000000f306766c7442400427100006766c74424020e0000006766c744240600000000670f011c24", 0x87}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000140)={[0x1, 0x0, 0x2000], 0x5922, 0x1, 0x9}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3, 0x6, 0xba0, 0x5, 0x1, 0xe145, 0x9, 0x400, 0x401, 0x0, 0x4b732256, 0xfffffffffffffffe, 0x100000000, 0x5, 0x7, 0x8], 0x10000, 0x40000}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000200)=""/4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000008000000d97e3f7a66f5d8890000000000000000004000000000000000672b00e0ff00000096d700000000fffeffffffffffff0000000700000000000000080000000079ac1bc1de4e6ca101e843001a00ffffff7f000000000000000000000001011731b2b6864fb93cc13fe8692bddbcd39a42a5"]) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/19 09:43:16 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x4, 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000001c0)={{0xfffffffffffff899, 0xffffffffffff0001}, 'port1\x00', 0x2, 0x800, 0x2, 0x9, 0xdd9, 0xfffffffffffff1b0, 0xee, 0x0, 0x3, 0xfffffffffffffe01}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00003c2ff6)='/dev/cuse\x00', 0x800000001, 0x0) write$fuse(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="300000000600000000000000000000000000004d199737fb8d7c66df81fe399e3c0fb100000009000000000000000000000000000000000000000000"], 0x30) 2018/04/19 09:43:16 executing program 6: shmat(0x0, &(0x7f0000b8f000/0x1000)=nil, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f000001dffc)=0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x1, 0x7, 0x5, 0x0, 0x1f}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001, 0x0, 0x0, 0x3, 0xffffffffffffffff}}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000140)=[0x2, 0xffffffffffffffff]) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x82) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0xfffffffffffffffd, 0x3, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2018/04/19 09:43:16 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0xd, 0x84) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000000c0)={0x1ff, 0x0, &(0x7f0000012000/0x3000)=nil}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000080)={@loopback={0x0, 0x1}}, 0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'erspan0\x00', 0xd28c}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/04/19 09:43:16 executing program 0: socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x200011, 0x80805, 0x3) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x103ffffd) write$tun(r1, &(0x7f0000000140)={@void, @hdr={0x3, 0x0, 0x1f, 0x6, 0xe538, 0x2}, @ipx={0xffff, 0xb4, 0x10001, 0x5, {@broadcast=0xffffffff, @current, 0x3}, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x2}, "9fc855f369132164814fad972979bd318d65f72bec2696ea722ba51b818ef5a09e4f345b751df9dd039af9c41f4ed2b89a4492f76ff34c455344e33c18e9827f97d9791a588da60c1d326caef7fb78532140594864d2ad3ebce4c94ab059ed7591c173645fd7dbf6b893d376acc015cb42805a73d37c46503ba0a74578571c41b7d739f1776df3169638a647a2595a372c7ab2e89121"}}, 0xbe) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x27, 0x7d) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f00000000c0)=""/112) dup3(r0, r1, 0x0) [ 361.020125] kvm: pic: single mode not supported [ 361.020352] kvm: pic: level sensitive irq not supported [ 361.062915] kvm: pic: single mode not supported [ 361.068547] kvm: pic: level sensitive irq not supported [ 361.544080] FAULT_INJECTION: forcing a failure. [ 361.544080] name failslab, interval 1, probability 0, space 0, times 0 [ 361.560796] CPU: 0 PID: 26070 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 361.567971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.577309] Call Trace: [ 361.579886] dump_stack+0x1b9/0x294 [ 361.583502] ? dump_stack_print_info.cold.2+0x52/0x52 [ 361.588678] ? perf_trace_lock_acquire+0xe3/0x980 [ 361.593509] ? kernel_text_address+0x79/0xf0 [ 361.597904] ? __unwind_start+0x166/0x330 [ 361.602048] should_fail.cold.4+0xa/0x1a [ 361.606097] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 361.611193] ? save_stack+0xa9/0xd0 [ 361.614806] ? save_stack+0x43/0xd0 [ 361.618439] ? kasan_slab_alloc+0x12/0x20 [ 361.622573] ? find_held_lock+0x36/0x1c0 [ 361.626636] ? check_same_owner+0x320/0x320 [ 361.630959] ? rcu_note_context_switch+0x710/0x710 [ 361.635885] __should_failslab+0x124/0x180 [ 361.640108] should_failslab+0x9/0x14 [ 361.643893] kmem_cache_alloc_node_trace+0x26f/0x770 [ 361.648986] __kmalloc_node_track_caller+0x33/0x70 [ 361.653907] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 361.658648] __alloc_skb+0x14d/0x780 [ 361.662345] ? skb_scrub_packet+0x580/0x580 [ 361.666656] ? debug_check_no_locks_freed+0x310/0x310 [ 361.671833] ? __lock_acquire+0x7f5/0x5140 [ 361.676056] ? perf_trace_lock_acquire+0xe3/0x980 [ 361.680883] ? perf_trace_lock+0x900/0x900 [ 361.685110] alloc_skb_with_frags+0x137/0x760 [ 361.689596] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 361.694346] ? graph_lock+0x170/0x170 [ 361.698133] sock_alloc_send_pskb+0x87a/0xae0 [ 361.702621] ? find_held_lock+0x36/0x1c0 [ 361.706663] ? sock_wmalloc+0x1e0/0x1e0 [ 361.710630] ? lock_downgrade+0x8e0/0x8e0 [ 361.714765] ? kasan_check_read+0x11/0x20 [ 361.718898] ? do_raw_spin_unlock+0x9e/0x2e0 [ 361.723292] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 361.727857] ? kasan_check_write+0x14/0x20 [ 361.732074] ? do_raw_spin_lock+0xc1/0x200 [ 361.736297] ? _raw_spin_unlock+0x22/0x30 [ 361.740431] unix_dgram_sendmsg+0x4f9/0x1730 [ 361.744827] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 361.750354] ? unix_stream_connect+0x11c0/0x11c0 [ 361.755091] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 361.760610] ? _copy_from_user+0xdf/0x150 [ 361.764744] ? copy_msghdr_from_user+0x3bc/0x560 [ 361.769499] ? security_socket_sendmsg+0x94/0xc0 [ 361.774246] ? unix_stream_connect+0x11c0/0x11c0 [ 361.778997] sock_sendmsg+0xd5/0x120 [ 361.782699] ___sys_sendmsg+0x525/0x940 [ 361.786660] ? copy_msghdr_from_user+0x560/0x560 [ 361.791406] ? find_held_lock+0x36/0x1c0 [ 361.795456] ? lock_downgrade+0x8e0/0x8e0 [ 361.799595] ? rcu_note_context_switch+0x710/0x710 [ 361.804505] ? check_same_owner+0x320/0x320 [ 361.808810] ? __might_sleep+0x95/0x190 [ 361.812775] __sys_sendmmsg+0x240/0x6f0 [ 361.816739] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 361.821048] ? __lock_is_held+0xb5/0x140 [ 361.825116] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 361.830656] ? fput+0x130/0x1a0 [ 361.833921] ? ksys_write+0x1a6/0x250 [ 361.837705] ? __ia32_sys_read+0xb0/0xb0 [ 361.841755] __x64_sys_sendmmsg+0x9d/0x100 [ 361.845975] do_syscall_64+0x1b1/0x800 [ 361.849843] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 361.854674] ? syscall_return_slowpath+0x5c0/0x5c0 [ 361.859586] ? syscall_return_slowpath+0x30f/0x5c0 [ 361.864501] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 361.869863] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 361.874701] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.879882] RIP: 0033:0x455329 [ 361.883054] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 361.890748] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 361.897999] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 361.905259] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 361.912512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 361.919764] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000025 2018/04/19 09:43:17 executing program 4 (fault-call:3 fault-nth:38): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x800, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)=""/17, &(0x7f0000005000)=0x11) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000005000)=""/20) read(r0, &(0x7f00000000c0)=""/240, 0x2cc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200140, 0x0) 2018/04/19 09:43:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) dup(r0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x29, &(0x7f0000000280)={0x0, @broadcast=0xffffffff, 0x0, 0xfbffff3f, 'dh\x00'}, 0x2c) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x2, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f0000000040)="f25de654e55d1a9d44108319b3302b80cd59a03ac07a74fb10e40eb2b22ca046fca12d1d509d68f506923937afeff894e85130e435589e39cbab750d10a32672ece78850c5bca8d7760ede5df73045f119e3a5c6fa8f1b0629e6e85d7507a4ea7e02b097d7e403d8556cb3fe57d7724c06085d9b26c8bd17bcf0f1aa8e6d36778ce6c523") 2018/04/19 09:43:17 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x4, r1, 0x1, 0x0, 0x6, @random="4cd53a5ecd3b"}, 0x14) syz_emit_ethernet(0xe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}}, &(0x7f00000000c0)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x202000, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000080)={0x9, 0x7, 0x3, 0xffffffffffff8000, 0x1}) 2018/04/19 09:43:17 executing program 6: capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x800, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x53, &(0x7f000000d000)=""/8, &(0x7f0000fe3000)=0x2c) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0, 0x20, &(0x7f0000ffd000/0x3000)=nil, 0x2}) 2018/04/19 09:43:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x47f}]}) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x331, 0x20000) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0xffffffffffff007c, 0x5, 0x1, 0xfffff00000000000]}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000040)={0xdb96, 0x8, 0x4, 'queue1\x00', 0x100000000}) 2018/04/19 09:43:17 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4091, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7927f234, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {0x0}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000100)={r1, 0x21}) r2 = syz_open_procfs(0x0, &(0x7f0000836000)='net\x00') fstat(r2, &(0x7f0000ed8fbc)) 2018/04/19 09:43:17 executing program 3: add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240), 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x20) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={r2, r3, 0x4}) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000340)=""/2) 2018/04/19 09:43:17 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x0, 0x100000008}) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x100000000, 0x210000) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000140)={0x9e, &(0x7f0000000080)="eddfe728bf0ce725ce1ab6ccf4fa4217041d8b409123c78b470f62afd6c6da40be328f267a221a4ef72da7fbfa3343ab6d61132f3dd81c5646f98dc94a94dd77ff26840243d8fce0401eecd67ef13eb6871ff43791ddb15590c5dd94079d57570e07e68794ee24aab74f343b4561390fda2498f961a0d489fb61328b621561fddb75c0c82d329ffe742998a6fd578b5ed6d9bc759d35ef43b9b01dc9ae5e"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/19 09:43:17 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x40000, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x5) r1 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x0, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "790eaada477f17eb046695eea58af88d0ba3b8f5ca34f33a9a82d81e455bc6ca3479893215467e3bb85ea1247aafde2b17277187bd8fc023bb972d19343108b0"}}, 0x80}, 0x1}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r0, r1, 0x9, 0xa1, &(0x7f0000000140)="9fbb429cdcfd82d93431153f10bbd4f533a0ca952503f179e54488da2938d17dcfd8956ef2e20fddb880237e162dad4695d75c775f81c12331cdcfb2c3265cc33429eeb0009050e76c3e2c4d3d00667c18ec54cef4e92831c40c464180cba67e73a60ae08e4423b3382b40b4c2a5fab644e922888f43b0d75e228fa866652da8947eb4771a9309a72a3ba4e85c8e6d306b9b", 0x4, 0x2f, 0x7fffffff, 0x6, 0x44a, 0x81, 0x3, "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"}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000040)) writev(r1, &(0x7f0000000000), 0x1b1) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/98) 2018/04/19 09:43:17 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x600, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000001140)={r1, r0, 0x7, 0x2, &(0x7f0000000140)="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", 0x5, 0x5, 0x3, 0x1, 0x8, 0x7fff, 0x1, "e4fa0c3c761f42eafaa436a3493421004c35e013cf88c39881ae8f61b6667c373818d78641e76832ac3486f2fb5828b0bb8b949501e12bf85a6b83437030f15a47f16777a227ab00db037a8b5e53c265e4b5fe4ad4702c1bf1949b0bad2ba565116120eee6559d6ff348364215140c9a35fbf0860b7c3b2d56554ed44984073770647be9fbc3797e07d76293667ac9b2918648930efd7418f91c96fb31242d8258444d0999418265dcfa34b9299811e6d3bd36"}) fcntl$setstatus(r1, 0x4, 0x800042c05) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000000100)=[{r1, 0xc288}], 0x1, 0x0) close(r0) 2018/04/19 09:43:17 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000000c0)=""/214) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000000080)={0x18, 0x2c, 0xafb, 0x0, 0x0, {0x4}, [@generic='G']}, 0x18}, 0x1}, 0x0) 2018/04/19 09:43:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4000000004d032, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x1) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8, 0x22002) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000400)='erspan0\x00') r4 = getpid() getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f0000000980)=0x0) r6 = getgid() setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80)={r4, r5, r6}, 0xc) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@rand_addr}}, &(0x7f0000000300)=0xe8) setsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f0000000440)="2a81f462d74ebc117b4ab19ffba600682a4f25c96236d7fc5fbea0eb502a2ac488730ad3fdfd4cdd2089905d678423", 0x2f) sendto(r2, &(0x7f0000000140)="39f94ed0d69263e0a980c3d9fde66770e197ed3020939c64cc2821252ee142077ecd6bfdf0b38828eca90483654e8270ab106cb309b5596864794bce762a31f8adb85d02524e455dba5273a8e627dfc681dfcf3344265dd1b9506f5bc562477ec1f2cf824388c6b87c2a51388a4db5a54f02451d17811c843b06f7e2000fc9ad749c16", 0x83, 0x84, &(0x7f0000000340)=@hci={0x1f, r7, 0x3}, 0x80) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000001f40)=""/4096) clone(0x0, &(0x7f0000001f37), &(0x7f0000000080), &(0x7f0000001000), &(0x7f0000e76000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000100)={0x7}) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="60c49f1c23119633f124fbb7f003732f3e8e39c9f701aa7f7239aa37343e8ec331714b77c196ef0a89293b50b94a2fe15c9cf5b67927a12239e522c699612a2573e4a54fc64e2d069f1aa7a089bd7f4f2e4a68a681d3400731653ad46d93140ba2", 0x61}], 0x1, &(0x7f0000001480)}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r8, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) lgetxattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB='os2.0\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000500)=""/165, 0xa5) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000a40)={{{@in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000b40)=0xe8) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) stat(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c80)) getresgid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) getresgid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)) 2018/04/19 09:43:17 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x7, r0}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000001c0)) r2 = semget(0x0, 0x1, 0x1) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f0000000040)=""/54) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) prctl$setptracer(0x59616d61, r3) 2018/04/19 09:43:17 executing program 7: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000000140)=&(0x7f00000000c0)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000336f58)=ANY=[@ANYBLOB="2621e6754d807f1e"]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000df5fd8)={0x0, 0x0, &(0x7f00003acf97)=""/105, &(0x7f0000bf6000)=""/228, &(0x7f000017d000)=""/199}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000cef000)={0x1, 0x0, &(0x7f000062a000)=""/167, &(0x7f0000aac000)=""/21, &(0x7f00002fdf52)=""/174}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000f82ffc)=0x1) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)) 2018/04/19 09:43:17 executing program 1: r0 = socket(0x10, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000d6dfdc)="2400000052001f0014f9f40700090400020007fc10000100ffffffff0800000000000000", 0x24) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x400040) ioctl$KDSETLED(r1, 0x4b32, 0x100) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x6788) [ 362.894144] FAULT_INJECTION: forcing a failure. [ 362.894144] name failslab, interval 1, probability 0, space 0, times 0 [ 362.905444] CPU: 0 PID: 26152 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 362.912619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.921954] Call Trace: [ 362.924531] dump_stack+0x1b9/0x294 [ 362.928143] ? dump_stack_print_info.cold.2+0x52/0x52 [ 362.933316] ? unwind_get_return_address+0x61/0xa0 [ 362.938228] ? __save_stack_trace+0x7e/0xd0 [ 362.942537] should_fail.cold.4+0xa/0x1a [ 362.946585] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 362.951670] ? save_stack+0xa9/0xd0 [ 362.955277] ? save_stack+0x43/0xd0 [ 362.958883] ? kasan_kmalloc+0xc4/0xe0 [ 362.962752] ? __kmalloc_node_track_caller+0x47/0x70 [ 362.967836] ? __alloc_skb+0x14d/0x780 [ 362.971704] ? alloc_skb_with_frags+0x137/0x760 [ 362.976354] ? sock_alloc_send_pskb+0x87a/0xae0 [ 362.981009] ? unix_dgram_sendmsg+0x4f9/0x1730 [ 362.985585] ? sock_sendmsg+0xd5/0x120 [ 362.989451] ? ___sys_sendmsg+0x525/0x940 [ 362.993581] ? __sys_sendmmsg+0x240/0x6f0 [ 362.997710] ? __x64_sys_sendmmsg+0x9d/0x100 [ 363.002101] ? do_syscall_64+0x1b1/0x800 [ 363.006148] ? find_held_lock+0x36/0x1c0 [ 363.010207] ? check_same_owner+0x320/0x320 [ 363.014511] ? print_usage_bug+0xc0/0xc0 [ 363.018557] ? rcu_note_context_switch+0x710/0x710 [ 363.023475] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 363.028745] __should_failslab+0x124/0x180 [ 363.032979] should_failslab+0x9/0x14 [ 363.036763] kmem_cache_alloc_node+0x272/0x780 [ 363.041335] ? __lock_acquire+0x7f5/0x5140 [ 363.045553] __alloc_skb+0x111/0x780 [ 363.049253] ? skb_scrub_packet+0x580/0x580 [ 363.053560] ? debug_check_no_locks_freed+0x310/0x310 [ 363.058732] ? __lock_acquire+0x7f5/0x5140 [ 363.062959] ? perf_trace_lock_acquire+0xe3/0x980 [ 363.067791] alloc_skb_with_frags+0x137/0x760 [ 363.072266] ? graph_lock+0x170/0x170 [ 363.076056] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 363.080796] ? graph_lock+0x170/0x170 [ 363.084578] sock_alloc_send_pskb+0x87a/0xae0 [ 363.089064] ? find_held_lock+0x36/0x1c0 [ 363.093106] ? sock_wmalloc+0x1e0/0x1e0 [ 363.097066] ? lock_downgrade+0x8e0/0x8e0 [ 363.101201] ? kasan_check_read+0x11/0x20 [ 363.105334] ? do_raw_spin_unlock+0x9e/0x2e0 [ 363.109725] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 363.114292] ? kasan_check_write+0x14/0x20 [ 363.118511] ? do_raw_spin_lock+0xc1/0x200 [ 363.122739] ? _raw_spin_unlock+0x22/0x30 [ 363.126873] unix_dgram_sendmsg+0x4f9/0x1730 [ 363.131277] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 363.136816] ? unix_stream_connect+0x11c0/0x11c0 [ 363.141561] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 363.147079] ? _copy_from_user+0xdf/0x150 [ 363.151210] ? copy_msghdr_from_user+0x3bc/0x560 [ 363.155959] ? security_socket_sendmsg+0x94/0xc0 [ 363.160703] ? unix_stream_connect+0x11c0/0x11c0 [ 363.165451] sock_sendmsg+0xd5/0x120 [ 363.169155] ___sys_sendmsg+0x525/0x940 [ 363.173115] ? copy_msghdr_from_user+0x560/0x560 [ 363.177858] ? find_held_lock+0x36/0x1c0 [ 363.181905] ? lock_downgrade+0x8e0/0x8e0 [ 363.186046] ? rcu_note_context_switch+0x710/0x710 [ 363.190967] ? check_same_owner+0x320/0x320 [ 363.195270] ? __might_sleep+0x95/0x190 [ 363.199228] __sys_sendmmsg+0x240/0x6f0 [ 363.203188] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 363.207491] ? __lock_is_held+0xb5/0x140 [ 363.211544] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 363.217061] ? fput+0x130/0x1a0 [ 363.220322] ? ksys_write+0x1a6/0x250 [ 363.224104] ? __ia32_sys_read+0xb0/0xb0 [ 363.228148] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 363.232977] __x64_sys_sendmmsg+0x9d/0x100 [ 363.237205] do_syscall_64+0x1b1/0x800 [ 363.241076] ? finish_task_switch+0x1ca/0x810 [ 363.245562] ? syscall_return_slowpath+0x5c0/0x5c0 [ 363.250472] ? syscall_return_slowpath+0x30f/0x5c0 [ 363.255386] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 363.260735] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 363.265565] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.270734] RIP: 0033:0x455329 [ 363.273905] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 363.281594] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 363.288845] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 363.296105] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 363.303356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 363.310607] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000026 2018/04/19 09:43:18 executing program 4 (fault-call:3 fault-nth:39): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:18 executing program 5: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000000b000/0x3000)=nil) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x0, 0x6}) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000080)) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) 2018/04/19 09:43:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000aba000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000831000)={0x20, 0x4, 0xa, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@typed={0xc, 0x200000001, @u32}]}, 0x20}, 0x1}, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000080)={0x0, 0x3, 0x2d, &(0x7f0000000040)}) 2018/04/19 09:43:18 executing program 6: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) chroot(&(0x7f0000000000)='./file0\x00') r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r2, 0x0, 0x0, 0x5) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = dup2(r0, r1) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f0000000040)=0x3) 2018/04/19 09:43:18 executing program 1: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000b28ff8)='./file0\x00', &(0x7f0000766ff8)='./file0\x00', &(0x7f00005a9ff9)='mqueue\x00', 0x8800, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x111802, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r1 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000386000)=""/1840, 0x740) 2018/04/19 09:43:18 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f000093f000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) r2 = msgget$private(0x0, 0x4) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000140)=""/4096) 2018/04/19 09:43:18 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x8, &(0x7f0000000580)=[{&(0x7f0000000100)="5d9135c64bf8aa6fde89d0f424db2e93eae3b8035c1093751ab08fdcf25be585f43036eb5a7d99deef2b604845e0242062b78c", 0x33, 0x100000001}, {&(0x7f0000000140)="d403e4e7f716f0dd67923f5b8f82f2c6c97cd21ce54504495dd0db04fd4d2872aad17c2580d51ce65bd5dd114d55ed8c3d925d22231c0a1f02e52d8ae436c604a169a652ab01880346baf95204", 0x4d, 0x3}, {&(0x7f00000001c0)="fdb70225c71a55c6c18499690f4e5b09079f2b3f33eaecafd4b7e8d57d8aae0969676797cf37b1d4f1b04c9c7430c87099d13a76bf3a264bbe1ffd93d8a71edc555e86a4fde45ffa5bed3a1cbda23b36e10981e969cdffc8b383b65f7050d5d716beffd81b6e2989fa81b2bf8da14954940b0933b2f4ef7a5cf3007eea62d0221b", 0x81, 0x80000000}, {&(0x7f0000001240)="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", 0x1000, 0x3a}, {&(0x7f0000000280)="873fa065d79f1df261ff9b09c60e11fefe78f84283e8d61d107df83ceefbcb80e55e2f4dbe048cf6e6a552c0b6f1c5433b05022a3af19d70fd491a02cdfe678c2f5a36fa79a27ae47f610f58d731a3b5f403bf561f4b75d0164a9f810813199efab09809e338dc360c9d78264c873cc50b36976b383e237aebb33111274ee7e87d0f3d07ebf468c2ec87b76675", 0x8d, 0x2}, {&(0x7f0000000340)="edb6fc114c1185fc5339c1854b99069f27f0cad780df303a9a318e24d7935a4f6774441f42b3af8c5e002585206cc21c0496a85ac49ca1e120945074751d9eae2a018c8a67aa6895ed36a420cbbfad33eb64411182bfed49fe8095aaf9bd41825dc0805dbc3d94f73ced10631c1f65053414b52d710930ec6c7123313e3baf5ae4be0d1bad560b802a78305f15f0006c14d6cfcd71a425e0b262febf8b67c5943433b3331d3498c1d358739b845ea4bbb4cf287b62e8c18b1e6f4901b6e2235caa07e06993b5cbabd420217568d6cd1f21a1bacea75197fcbf6b94c8a3fdd44942f7dad3b4fe5a", 0xe7, 0x1}, {&(0x7f0000000440)="dd092c69e75492e31065d2cc4a", 0xd, 0x3}, {&(0x7f0000000480)="8af78a9c460d3671b51ed494b62eb6db388ac6d7bf3d2a24aa447ae126589fc010adfc6af43cbf0476c9428d50d86c05a3c5511ef69e9c8ea6d8464c7e661a6c7da4cec966ae7ab7b5a9bc05daadf7579fd28e59547112c3e12be5d7d51d5e247c7128cd7d6a6d5249f268baa8a92c34b42aa9a24944099079a9ffaf75d2f20f326738698319c09c1f885d2d7772d93e7924f42dff991214a6034f8c58d8c73c93187a1109722e017cdc72b6655173b889c2d0b0110b0d67575ba184b3b384dfcecf44d085fcd4502e656fd788f58288334924d2ca9351d571e2311f74e0ce0fa20977d7de244ad3ebbb3714ad", 0xed, 0x7fff}], 0x40, 0x0) io_setup(0x1d, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000011c0)=[&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)='C', 0x1}]) 2018/04/19 09:43:18 executing program 3: add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240), 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x20) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={r2, r3, 0x4}) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) 2018/04/19 09:43:19 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x20202, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000003400)="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", 0xfbe}], 0x1, 0x4) lseek(r0, 0x0, 0x3) openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000001c0)) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000140)={0x17, 0xfc, &(0x7f0000000040)="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"}) 2018/04/19 09:43:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000640)="653aba1f00000066450ff37a00b9900900000f32420f07c744240076000000c7442402180d0000ff1c24b9800000c00f3235008000000f30c4e235ba618266baf80cb8bc6e4283ef66bafc0cb856cbc4fdef0f01d62e42de8a00000000"}], 0xaaaaaaaaaaaaac0, 0x0, &(0x7f0000000600), 0x100000000000024d) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000000)={0x2, 0x3}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000850400000000000005000002"]) 2018/04/19 09:43:19 executing program 0: r0 = open(&(0x7f0000448000)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00003f5000)='./file0\x00', 0x0, 0x0) r2 = semget$private(0x0, 0x3, 0xc) semctl$SETVAL(r2, 0x4, 0x10, &(0x7f00000000c0)=0x8) pread64(r1, &(0x7f0000000040)=""/99, 0x63, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$getflags(r1, 0x400) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x7, r0, 0x1}) 2018/04/19 09:43:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x80000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)={r3, 0x3}, &(0x7f0000000140)=0x8) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 2018/04/19 09:43:19 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x748, 0x8000) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x9, 0x1, &(0x7f0000000080)}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) getsockopt$packet_int(r0, 0x107, 0x15, &(0x7f0000004000), &(0x7f0000001ffc)=0x4) 2018/04/19 09:43:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000048d000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00009f9000)={0x0, 0x0, &(0x7f0000d58ff0)=[{&(0x7f00003faf57)="3e9438ea8d897269fe3a58c1f7a62d7306e09f28788f6af1950c8a1cefe5d1698d", 0x21}], 0x1, &(0x7f00005e5000)}, 0x8000) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x40007) sendfile(r1, r2, &(0x7f0000ccb000), 0x2) 2018/04/19 09:43:19 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xffff, 0x100) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r1) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300), 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x0) 2018/04/19 09:43:19 executing program 7: ioperm(0x0, 0xd5, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x800, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x4e24, @rand_addr=0x24eb}, {0x307, @random="dd9919b2b885"}, 0x4, {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, 'bpq0\x00'}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000040)={{0x100000, 0x8}, {0x4b51, 0x3ff}, 0x7, 0x0, 0xfffffffeffffffff}) clone(0x0, &(0x7f0000000600), &(0x7f0000000240), &(0x7f00000001c0), &(0x7f0000000ac0)) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f00000000c0)={0x1f, 0x4000, 0x88, 0xa37d, 0x10, 0x9}) ioctl$TCSBRK(r0, 0x5409, 0x1000) [ 364.294999] FAULT_INJECTION: forcing a failure. [ 364.294999] name failslab, interval 1, probability 0, space 0, times 0 [ 364.306371] CPU: 0 PID: 26225 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 364.313560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.322930] Call Trace: [ 364.325536] dump_stack+0x1b9/0x294 [ 364.329195] ? dump_stack_print_info.cold.2+0x52/0x52 [ 364.334392] ? perf_trace_lock_acquire+0xe3/0x980 [ 364.339249] ? kernel_text_address+0x79/0xf0 [ 364.343670] ? __unwind_start+0x166/0x330 [ 364.347842] should_fail.cold.4+0xa/0x1a [ 364.351930] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 364.357060] ? save_stack+0xa9/0xd0 [ 364.360710] ? save_stack+0x43/0xd0 [ 364.364350] ? kasan_slab_alloc+0x12/0x20 [ 364.368495] ? find_held_lock+0x36/0x1c0 [ 364.372555] ? check_same_owner+0x320/0x320 [ 364.376865] ? rcu_note_context_switch+0x710/0x710 [ 364.381790] __should_failslab+0x124/0x180 [ 364.386018] should_failslab+0x9/0x14 [ 364.389810] kmem_cache_alloc_node_trace+0x26f/0x770 [ 364.394904] __kmalloc_node_track_caller+0x33/0x70 [ 364.399840] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 364.404600] __alloc_skb+0x14d/0x780 [ 364.408305] ? skb_scrub_packet+0x580/0x580 [ 364.412622] ? debug_check_no_locks_freed+0x310/0x310 [ 364.417804] ? __lock_acquire+0x7f5/0x5140 [ 364.422045] ? perf_trace_lock_acquire+0xe3/0x980 [ 364.426885] ? perf_trace_lock+0x900/0x900 [ 364.431137] alloc_skb_with_frags+0x137/0x760 [ 364.435631] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 364.440387] ? graph_lock+0x170/0x170 [ 364.444188] sock_alloc_send_pskb+0x87a/0xae0 [ 364.448676] ? find_held_lock+0x36/0x1c0 [ 364.452722] ? sock_wmalloc+0x1e0/0x1e0 [ 364.456686] ? lock_downgrade+0x8e0/0x8e0 [ 364.460823] ? kasan_check_read+0x11/0x20 [ 364.464953] ? do_raw_spin_unlock+0x9e/0x2e0 [ 364.469355] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 364.473941] ? kasan_check_write+0x14/0x20 [ 364.478168] ? do_raw_spin_lock+0xc1/0x200 [ 364.482403] ? _raw_spin_unlock+0x22/0x30 [ 364.486542] unix_dgram_sendmsg+0x4f9/0x1730 [ 364.490954] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 364.496515] ? unix_stream_connect+0x11c0/0x11c0 [ 364.501268] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 364.506793] ? _copy_from_user+0xdf/0x150 [ 364.510937] ? copy_msghdr_from_user+0x3bc/0x560 [ 364.515700] ? security_socket_sendmsg+0x94/0xc0 [ 364.520447] ? unix_stream_connect+0x11c0/0x11c0 [ 364.525204] sock_sendmsg+0xd5/0x120 [ 364.528933] ___sys_sendmsg+0x525/0x940 [ 364.532906] ? copy_msghdr_from_user+0x560/0x560 [ 364.537657] ? find_held_lock+0x36/0x1c0 [ 364.541709] ? lock_downgrade+0x8e0/0x8e0 [ 364.545942] ? rcu_note_context_switch+0x710/0x710 [ 364.550863] ? check_same_owner+0x320/0x320 [ 364.555172] ? __might_sleep+0x95/0x190 [ 364.559139] __sys_sendmmsg+0x240/0x6f0 [ 364.563112] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 364.567431] ? __lock_is_held+0xb5/0x140 [ 364.571494] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 364.577027] ? fput+0x130/0x1a0 [ 364.580304] ? ksys_write+0x1a6/0x250 [ 364.584095] ? __ia32_sys_read+0xb0/0xb0 [ 364.588147] __x64_sys_sendmmsg+0x9d/0x100 [ 364.592371] do_syscall_64+0x1b1/0x800 [ 364.596245] ? finish_task_switch+0x1ca/0x810 [ 364.600727] ? syscall_return_slowpath+0x5c0/0x5c0 [ 364.605643] ? syscall_return_slowpath+0x30f/0x5c0 [ 364.610561] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 364.615922] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 364.620759] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.625941] RIP: 0033:0x455329 [ 364.629125] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 364.636818] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 364.644094] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 364.651350] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 364.658612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 364.665865] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000027 2018/04/19 09:43:20 executing program 4 (fault-call:3 fault-nth:40): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:20 executing program 0: io_setup(0x1, &(0x7f0000000000)=0x0) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000680)='/dev/autofs\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dsp\x00', 0x0, 0x0) r3 = dup2(r2, r1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@local, @in=@broadcast}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8) r4 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x3, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) accept$packet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000300)=0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={"77797a5f74756eb921f9848000", r6}) bind$packet(r5, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000c3bff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000ff0)=[{0x20, 0x0, 0x1000, 0x4f42}, {0x80000006}]}, 0x10) sendto(r8, &(0x7f000002af28), 0xfd09, 0x0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @loopback={0x0, 0x1}, 0x5}, 0x1c) r11 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r11, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) setsockopt$inet6_udp_int(r10, 0x11, 0x65, &(0x7f0000000000)=0xffff, 0x4) sendmsg$nl_crypto(r11, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14, 0x200, 0x0, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x81) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000300)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000380)={r12}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffff9c}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000017000)={&(0x7f0000748000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000010000000000773ade5800000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006c6f00000000000000000000000000000800120004000500"], 0x3c}, 0x1}, 0x0) r15 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) bind$packet(r5, &(0x7f0000000640)={0x11, 0x1c, r7, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) getsockopt$inet6_opts(r15, 0x29, 0x3b, &(0x7f0000000440)=""/115, &(0x7f0000000180)=0x73) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f00000003c0)={0xff, {0x2, 0x4e23, @multicast2=0xe0000002}, {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e22, @multicast2=0xe0000002}, 0x2, 0x0, 0x1f, 0x4, 0x447d, &(0x7f0000000340)='gretap0\x00', 0x3, 0xc98, 0x953}) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd1fa99970afed277, 0x0, r13, &(0x7f00000001c0)="837e8fa5642da75b55976c68e7f7835a556afa318fa9e64f6051e4854dde02a6e9a1167a432b920f8bc0000995034ce61bf58fe6268853505d7e9ec0fd8f7b3b93777841eb4cf1cf242660016fb01dde0c39e0a24b7f746b621644520db8dd8ac33b327a751cdc34fbaba0a3a38a15e8ecaf151f47d157fb95582528535aa186524f1a117fba4ace5772cf5eaa01fbec0761fc8db4ced49bbcfb625968567b10eab224ac271cf0a6ecf7bde6d3c10d3627b157b902239b9283360576186a4ddce6b2d289fe11fd0e1a26c54eb7dafd0d5063a30484eb977652821df0a4", 0xdd, 0x81, 0x0, 0x0, r15}, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dsp\x00', 0x1a1100, 0x0) ioctl$TUNDETACHFILTER(r15, 0x401054d6, 0x0) 2018/04/19 09:43:20 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000d18000)=0x200004000000800, 0x39d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close(r3) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, &(0x7f0000c97ff8)) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="0f2147660f7fd466b92f0200000f32ba610066b80000008066ef3e660f3a0e663e9f0f0865660f71f1c60f01df670fae43fa65646765660f15e3", 0x3a}], 0x1, 0x0, &(0x7f0000000140), 0x0) 2018/04/19 09:43:20 executing program 2: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x1001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00', 0x200}) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f00000016c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000380)="a6", 0x1}]) 2018/04/19 09:43:20 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000629000)) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f50000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000f50000)={0x20080522}, &(0x7f0000bb7fe8)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$KDENABIO(r1, 0x4b36) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000b3a000)=0x9d3a) close(r0) 2018/04/19 09:43:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"73797a5f62756e020000000000000018", {0x2, 0x4e23, @loopback=0x7f000001}}) memfd_create(&(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000200)={0x0, &(0x7f0000000040)}) 2018/04/19 09:43:20 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x40002, 0x0) fallocate(r0, 0x1, 0x20000000, 0x80000000001002) 2018/04/19 09:43:20 executing program 3: add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240), 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x20) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) 2018/04/19 09:43:20 executing program 6: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x40, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x200000, 0x0) unlink(&(0x7f0000000140)='./control\x00') close(r1) 2018/04/19 09:43:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2000000001, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/status\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) r2 = socket$inet6(0xa, 0x401000000001, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffffffffffff, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r2, &(0x7f0000f98000), 0x0, 0x2000000c, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = dup(r2) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@local={0xfe, 0x80, [], 0xaa}, 0x47, r5}) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000002c0), &(0x7f0000000340)=0xc) r6 = openat(r1, &(0x7f0000000280)='./file0\x00', 0x10000, 0x50) read$eventfd(r6, &(0x7f0000000240), 0x8) ioctl$VT_DISALLOCATE(r6, 0x5608) sendmmsg(r4, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0xa2}}], 0x2, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000a80)=ANY=[], &(0x7f0000000440)) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000640)=@assoc_value, &(0x7f00000001c0)=0xfffffffffffffdb1) readlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000680)=""/167, 0xa7) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40047705, &(0x7f0000000140)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000900)={{{@in6=@dev, @in6=@local}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000400)={@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x14) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000580)={0x4, 0x8001}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000080)) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x215) setsockopt$inet6_int(r4, 0x29, 0x13, &(0x7f00000003c0)=0x7, 0x4) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000b00)=0x0) r9 = syz_open_procfs(r8, &(0x7f0000000300)='net/tcp\x00') sendfile(r2, r9, &(0x7f0000000040)=0x2, 0x400000ff) 2018/04/19 09:43:20 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) fallocate(r0, 0x2, 0x7f9, 0x0) syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0xb2f7, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00008f4000)={&(0x7f000076fff4)={0x10}, 0xc, &(0x7f000009b000)={&(0x7f0000e2effe)=ANY=[@ANYBLOB="28001ec780160000cc5d25502e", @ANYRES32=r1, @ANYBLOB="000000000000000008001a0004000a00"], 0x28}, 0x1}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x40400) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000000c0)={{0x2, 0x2, 0x80000001, 0x2, 0x20}, 0x5, 0x5, 'id1\x00', 'timer0\x00', 0x0, 0x2, 0x4, 0x1f000}) 2018/04/19 09:43:20 executing program 5: r0 = memfd_create(&(0x7f0000000080)='\x00', 0x0) write$sndseq(r0, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @raw8={"06d3cb89f296bbb7d8acde89"}}], 0x60) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000000)) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0xf000) 2018/04/19 09:43:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis-generic)\x00'}, 0x58) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000280)={0x6, r0}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x7, 0x0, 0x10000, 0x800, 0x4, 0x5, 0xea8, 0x80000000, 0x4, 0xfffffffffffffffe, 0x44d, 0x2, 0x7, 0x200, 0x3, 0xffff], 0x2000, 0x10600}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000040)={0x4, 0x200, 0x6}) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00004f0000)={0x0, 0x0, &(0x7f0000e46000), 0x0, &(0x7f0000967000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendto(r3, &(0x7f0000000100)="224b49fd1e310f215feac34bbc176bfc0006f72f9a0f4a6f3f21009562f8c0e3e8f2000000c896d61f3f2d0b9d7bcffc88dbe6b7acdc870f6aee9cc9c4d0021036486bc45228c0dd1e38e4ce49ba4d1ec4373d242e635bdbc45641adf232f7a6f3da8285001a2e70b58306e1793f7abe92abc48367298e347485d520a88c47d7", 0x80, 0x0, &(0x7f0000001280)=ANY=[], 0x0) recvmsg(r3, &(0x7f0000000180)={&(0x7f000076c000)=@hci, 0x80, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0x75}], 0x1, &(0x7f00000001c0)=""/169, 0xa9}, 0x0) 2018/04/19 09:43:20 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000000c0), 0x10) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x8, 0x400000) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000180)={0x5b, &(0x7f0000000100)=""/91}) [ 365.040100] QAT: Invalid ioctl [ 365.054008] QAT: Invalid ioctl 2018/04/19 09:43:20 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="03000000"], &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r1, 0x8311, 0xb71}, 0xc) bind$inet6(r0, &(0x7f000070ffe3)={0xa, 0x4e20}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @dev}, &(0x7f0000000040)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x6, r2}) sendto$inet6(r0, &(0x7f000023effe)="d5", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001980)={0x0, 0x8c, "2f3aa23c2ff23a5b280e5ea5251f72c62b8bf7bd26dc51020aeb51c8e418e0c7a59c3b10e70fc9ce191db4cff838a36ae0012d7fd4f29776f56eb189149a838828b73e8f1e559fef88dce4cbf8e95ff9e8037c27ea7aa3d44655fded7fbe85d3808b36dbe282ff399627ab37c0f79b21918ed7f3cbd4629584e264786be6379b7615add837638885aa832c56"}, &(0x7f0000000280)=0x94) 2018/04/19 09:43:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/115) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000eaffc), &(0x7f00009ffffc)=0x4) [ 365.640864] FAULT_INJECTION: forcing a failure. [ 365.640864] name failslab, interval 1, probability 0, space 0, times 0 [ 365.652138] CPU: 1 PID: 26294 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 365.659317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.668654] Call Trace: [ 365.671243] dump_stack+0x1b9/0x294 [ 365.674861] ? dump_stack_print_info.cold.2+0x52/0x52 [ 365.680055] ? unwind_get_return_address+0x61/0xa0 [ 365.684991] ? __save_stack_trace+0x7e/0xd0 [ 365.689318] should_fail.cold.4+0xa/0x1a [ 365.693370] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 365.698473] ? save_stack+0xa9/0xd0 [ 365.702123] ? save_stack+0x43/0xd0 [ 365.705744] ? kasan_kmalloc+0xc4/0xe0 [ 365.709618] ? __kmalloc_node_track_caller+0x47/0x70 [ 365.714715] ? __alloc_skb+0x14d/0x780 [ 365.718606] ? alloc_skb_with_frags+0x137/0x760 [ 365.723271] ? sock_alloc_send_pskb+0x87a/0xae0 [ 365.727936] ? unix_dgram_sendmsg+0x4f9/0x1730 [ 365.732512] ? sock_sendmsg+0xd5/0x120 [ 365.736387] ? ___sys_sendmsg+0x525/0x940 [ 365.740522] ? __sys_sendmmsg+0x240/0x6f0 [ 365.744656] ? __x64_sys_sendmmsg+0x9d/0x100 [ 365.749053] ? do_syscall_64+0x1b1/0x800 [ 365.753103] ? find_held_lock+0x36/0x1c0 [ 365.757160] ? check_same_owner+0x320/0x320 [ 365.761477] ? print_usage_bug+0xc0/0xc0 [ 365.765530] ? rcu_note_context_switch+0x710/0x710 [ 365.770455] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 365.775721] __should_failslab+0x124/0x180 [ 365.779955] should_failslab+0x9/0x14 [ 365.783740] kmem_cache_alloc_node+0x272/0x780 [ 365.788316] ? __lock_acquire+0x7f5/0x5140 [ 365.792539] __alloc_skb+0x111/0x780 [ 365.796242] ? skb_scrub_packet+0x580/0x580 [ 365.800561] ? debug_check_no_locks_freed+0x310/0x310 [ 365.806865] ? __lock_acquire+0x7f5/0x5140 [ 365.811084] ? perf_trace_lock_acquire+0xe3/0x980 [ 365.815923] alloc_skb_with_frags+0x137/0x760 [ 365.820401] ? graph_lock+0x170/0x170 [ 365.824191] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 365.828932] ? graph_lock+0x170/0x170 [ 365.832719] sock_alloc_send_pskb+0x87a/0xae0 [ 365.837214] ? find_held_lock+0x36/0x1c0 [ 365.841259] ? sock_wmalloc+0x1e0/0x1e0 [ 365.845222] ? lock_downgrade+0x8e0/0x8e0 [ 365.849364] ? kasan_check_read+0x11/0x20 [ 365.853497] ? do_raw_spin_unlock+0x9e/0x2e0 [ 365.857905] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 365.862475] ? kasan_check_write+0x14/0x20 [ 365.866694] ? do_raw_spin_lock+0xc1/0x200 [ 365.870917] ? _raw_spin_unlock+0x22/0x30 [ 365.875064] unix_dgram_sendmsg+0x4f9/0x1730 [ 365.879463] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 365.885005] ? unix_stream_connect+0x11c0/0x11c0 [ 365.889752] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 365.895289] ? _copy_from_user+0xdf/0x150 [ 365.899434] ? copy_msghdr_from_user+0x3bc/0x560 [ 365.904179] ? security_socket_sendmsg+0x94/0xc0 [ 365.908924] ? unix_stream_connect+0x11c0/0x11c0 [ 365.913665] sock_sendmsg+0xd5/0x120 [ 365.917366] ___sys_sendmsg+0x525/0x940 [ 365.921332] ? copy_msghdr_from_user+0x560/0x560 [ 365.926083] ? find_held_lock+0x36/0x1c0 [ 365.930135] ? lock_downgrade+0x8e0/0x8e0 [ 365.934276] ? rcu_note_context_switch+0x710/0x710 [ 365.939194] ? check_same_owner+0x320/0x320 [ 365.943499] ? __might_sleep+0x95/0x190 [ 365.947466] __sys_sendmmsg+0x240/0x6f0 [ 365.951434] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 365.955743] ? __lock_is_held+0xb5/0x140 [ 365.959805] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 365.965328] ? fput+0x130/0x1a0 [ 365.968592] ? ksys_write+0x1a6/0x250 [ 365.972388] ? __ia32_sys_read+0xb0/0xb0 [ 365.976440] __x64_sys_sendmmsg+0x9d/0x100 [ 365.980663] do_syscall_64+0x1b1/0x800 [ 365.984536] ? finish_task_switch+0x1ca/0x810 [ 365.989037] ? syscall_return_slowpath+0x5c0/0x5c0 [ 365.993955] ? syscall_return_slowpath+0x30f/0x5c0 [ 365.998876] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 366.004839] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 366.009672] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 366.014854] RIP: 0033:0x455329 [ 366.018034] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 366.025730] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 366.032988] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 366.040245] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 366.047500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 366.055370] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000028 2018/04/19 09:43:21 executing program 4 (fault-call:3 fault-nth:41): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:21 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x8, 0x80) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/164) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl(r1, 0x180004524, &(0x7f0000383000)) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7fffffff, 0x801) 2018/04/19 09:43:21 executing program 7: r0 = socket$inet(0x2, 0xa, 0x873) syz_emit_ethernet(0x32, &(0x7f000018f000)=ANY=[@ANYBLOB="0180c20000000000140000000800450000240000000000009005a8a32ba4bcb0bc01000000000408907800d73cde00f53475"], 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 2018/04/19 09:43:21 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$VT_RELDISP(r0, 0x5605) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x40000, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f00000000c0)=""/231) r1 = socket$inet(0x2, 0xa, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000040)={0x7, 0x81, 0xfffffffffffffffc, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'ip6gre0\x00'}) 2018/04/19 09:43:21 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x0, 0x28001) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x30e2914153651714, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000080)={0x9c9, 0x8001}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="7c707fd76e73925a0f9bfd0b611521d14cb7df434998b94f6c41af76bff4efeeb977a42eab152abb61632a858a45d34e5c7ebf5c15ed67b4704821a33194be2ceb5bee6cdeec18c91ddb9457b81f7d989c976c0f9e61b62df6cf8b620349a9dce2162421892cc463341c4ec1267f13193f802e460a6252a4", 0x78}], 0x1) lseek(r1, 0x0, 0x3) 2018/04/19 09:43:21 executing program 2: r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1, 0x9}, 0x10) sendmsg(r0, &(0x7f0000834fc9)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "030000091f00000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b480000541ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3d2316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f0000353cf8)}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/206) 2018/04/19 09:43:21 executing program 3: add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240), 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x20) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) 2018/04/19 09:43:21 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e1c, 0x2, @loopback={0x0, 0x1}}, 0xffffffffffffffbf) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040), 0x10) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 2018/04/19 09:43:21 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x8000) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000671000/0x4000)=nil, 0xffffffffffffff6a, 0x0, 0xffffffffffffffff) 2018/04/19 09:43:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={r2}) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/19 09:43:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0x9}, 0x14) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x4000) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000000c0)=0x5) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000140)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x4840, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x2) 2018/04/19 09:43:21 executing program 6: getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1e, &(0x7f00001e3000)=""/192, &(0x7f00001ae000)=0xc0) 2018/04/19 09:43:21 executing program 7: syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x103000) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x3, 0x0, 0x67e}) 2018/04/19 09:43:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010300000000ef00060000000008000500e045f019ee6b2e7efde80000006348605ce382a1e7b046c0545e8fa3b85e5719609a76bcc5d4e08ad10a2e667b18258d31cb335af0574ed5330344d327792450d79883ecd0cc66d14725c4d71934435804f907d71c66aa7db3b7ce25e35b8c5129fcbb7ca703c28a38f9723b85516f6b61acf6412bd5089061ad79ba4016bd4527d09a53031ad7cfffee8892467f43c521e95aa13e6d0207b53c2a58fddda7045c1611620acb1544ec8615277b5cbaaacadc3c5128b2da6095d5f5313fce6e7250560b47cedd382a1a320f348482460f0362a261c81b2473326c808ccec7e22af3a6"], 0x24}, 0x1}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x434, 0x0) openat$cgroup(r1, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x210040, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) 2018/04/19 09:43:21 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x180000, 0x8000) msgget(0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0x43) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x1}, 0x4) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000200)=""/253) r2 = socket$inet6_sctp(0xa, 0x800000000005, 0x84) sendto$inet6(r2, &(0x7f0000000040)='F', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/19 09:43:22 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x12, &(0x7f0000000000)=""/72) [ 367.046902] FAULT_INJECTION: forcing a failure. [ 367.046902] name failslab, interval 1, probability 0, space 0, times 0 [ 367.058248] CPU: 0 PID: 26364 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 367.065427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.074771] Call Trace: [ 367.077357] dump_stack+0x1b9/0x294 [ 367.080980] ? dump_stack_print_info.cold.2+0x52/0x52 [ 367.086162] ? is_bpf_text_address+0xd7/0x170 [ 367.090657] ? kernel_text_address+0x79/0xf0 [ 367.095083] ? __unwind_start+0x166/0x330 [ 367.099222] should_fail.cold.4+0xa/0x1a [ 367.103268] ? __save_stack_trace+0x7e/0xd0 [ 367.107583] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 367.112689] ? save_stack+0xa9/0xd0 [ 367.116313] ? save_stack+0x43/0xd0 [ 367.119927] ? kasan_kmalloc+0xc4/0xe0 [ 367.123818] ? kasan_slab_alloc+0x12/0x20 [ 367.127957] ? find_held_lock+0x36/0x1c0 [ 367.132043] ? check_same_owner+0x320/0x320 [ 367.136363] ? rcu_note_context_switch+0x710/0x710 [ 367.141307] __should_failslab+0x124/0x180 [ 367.145533] should_failslab+0x9/0x14 [ 367.149323] kmem_cache_alloc_node_trace+0x26f/0x770 [ 367.154420] __kmalloc_node_track_caller+0x33/0x70 [ 367.159343] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 367.164095] __alloc_skb+0x14d/0x780 [ 367.167814] ? skb_scrub_packet+0x580/0x580 [ 367.172130] ? debug_check_no_locks_freed+0x310/0x310 [ 367.177325] ? __lock_acquire+0x7f5/0x5140 [ 367.181553] ? perf_trace_lock+0xd6/0x900 [ 367.185725] alloc_skb_with_frags+0x137/0x760 [ 367.190228] ? graph_lock+0x170/0x170 [ 367.194050] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 367.198819] ? graph_lock+0x170/0x170 [ 367.202664] sock_alloc_send_pskb+0x87a/0xae0 [ 367.207191] ? find_held_lock+0x36/0x1c0 [ 367.211258] ? sock_wmalloc+0x1e0/0x1e0 [ 367.215233] ? lock_downgrade+0x8e0/0x8e0 [ 367.219385] ? kasan_check_read+0x11/0x20 [ 367.223528] ? do_raw_spin_unlock+0x9e/0x2e0 [ 367.227922] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 367.232489] ? kasan_check_write+0x14/0x20 [ 367.236704] ? do_raw_spin_lock+0xc1/0x200 [ 367.240923] ? _raw_spin_unlock+0x22/0x30 [ 367.245059] unix_dgram_sendmsg+0x4f9/0x1730 [ 367.249454] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.254976] ? unix_stream_connect+0x11c0/0x11c0 [ 367.259713] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.265242] ? _copy_from_user+0xdf/0x150 [ 367.269376] ? copy_msghdr_from_user+0x3bc/0x560 [ 367.274119] ? security_socket_sendmsg+0x94/0xc0 [ 367.278891] ? unix_stream_connect+0x11c0/0x11c0 [ 367.283649] sock_sendmsg+0xd5/0x120 [ 367.287356] ___sys_sendmsg+0x525/0x940 [ 367.291317] ? copy_msghdr_from_user+0x560/0x560 [ 367.296066] ? find_held_lock+0x36/0x1c0 [ 367.300116] ? lock_downgrade+0x8e0/0x8e0 [ 367.304253] ? rcu_note_context_switch+0x710/0x710 [ 367.309163] ? check_same_owner+0x320/0x320 [ 367.313466] ? __might_sleep+0x95/0x190 [ 367.317425] __sys_sendmmsg+0x240/0x6f0 [ 367.321386] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 367.325720] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 367.331239] ? fput+0x130/0x1a0 [ 367.334499] ? ksys_write+0x1a6/0x250 [ 367.338284] ? __ia32_sys_read+0xb0/0xb0 [ 367.342330] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 367.347158] __x64_sys_sendmmsg+0x9d/0x100 [ 367.351375] do_syscall_64+0x1b1/0x800 [ 367.355243] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 367.360077] ? syscall_return_slowpath+0x5c0/0x5c0 [ 367.364991] ? syscall_return_slowpath+0x30f/0x5c0 [ 367.369912] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 367.375261] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 367.380091] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.385263] RIP: 0033:0x455329 [ 367.388444] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 367.396136] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 367.403397] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 367.410651] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 367.417910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 367.425160] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000029 2018/04/19 09:43:23 executing program 4 (fault-call:3 fault-nth:42): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:23 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) io_setup(0x1f, &(0x7f0000000040)=0x0) socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000001200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)="ea", 0x1}]) 2018/04/19 09:43:23 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) r2 = dup2(r0, r1) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x10001, 0x0, [0x9, 0x1f, 0x800, 0x4, 0x6, 0x8, 0x100000000, 0x40]}) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={'veth1_to_bridge\x00', {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/19 09:43:23 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) setrlimit(0x7, &(0x7f000046eff0)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="c1b801006b9b3a8d77"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/04/19 09:43:23 executing program 1: capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f0000e26000)={&(0x7f0000016000)={0x10}, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000d20de8c2de001800010500000000000000000a00000000000000000000006515330ed8837aaaaf57ab89f7b568db4116cf4ebf633cfca83099c45f"], 0x1c}, 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0xffffffff, 0x4, 0x20, &(0x7f0000ffc000/0x2000)=nil, 0x4}) 2018/04/19 09:43:23 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt(r0, 0x3, 0x20000000010, &(0x7f0000320ffc)=""/4, &(0x7f0000d5f000)=0x4) 2018/04/19 09:43:23 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x6, 0x494240) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f00000000c0)={"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"}) socket$inet_tcp(0x2, 0x1, 0x0) mlock(&(0x7f0000b19000/0x4000)=nil, 0x4000) sync_file_range(r0, 0x400, 0xfffffffffffffeff, 0x2) madvise(&(0x7f0000b1a000/0x1000)=nil, 0x1000, 0x9) ioctl$sock_proto_private(r0, 0x89e6, &(0x7f00000004c0)="4651214f6a45dc08ceadcdc6ec5563fb8d7affc41ff8fc9c4aff3ba73247593c3f5c72f6b7dfaf285139b26e26f50daceb93495f517155d2176c23cf1c66b68f0706a3cfa45a1a7b0cdc33c6ca218039c3a6c6c8a21209dd29debb94ff3b1fd4e030301c114cf7de314e6756010be16b6797c9b9") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rtc\x00', 0x80201, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x43f) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000540)={0x9, 0x7ff, 0x5, 0x3ff}) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_bond\x00', 0xff}) 2018/04/19 09:43:23 executing program 3: add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240), 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x20) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) 2018/04/19 09:43:23 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x31a, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x0, 0x13, 0x43, 0x0, 0x0, 0x70bd2b}, @sadb_x_nat_t_type={0x0, 0x14, 0xfff}, @sadb_spirange={0x0, 0x10, 0x4d3, 0x4d4}, @sadb_key={0x0, 0x9, 0x0, 0x0, "38044659371bb93abf9297c6e5ea3eeba1ef573fed62ac7e8d4a183e0c53c1775bc42ee3f7ec3a05623b3bfc542fb56bcaea2949d389aa5deed439510b5fbe9e1d904e2e5ae6c800a43fd0535be7ca86a63c4094c93bd1606245e6cf2c40eae72ae78041001a27cd15292ed6b9318c764197eebb0f9b"}, @sadb_x_sa2={0x0, 0x13, 0x0, 0x0, 0x0, 0x70bd25, 0x3504}]}, 0xfffffffffffffd9c}, 0x1}, 0x0) 2018/04/19 09:43:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) lseek(r0, 0x0, 0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0x80000001, 0x1ff}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) 2018/04/19 09:43:23 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x7, 0x101202) openat$cgroup_ro(r0, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x105, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f00009d5ff0)=[{&(0x7f0000be9000)="440ada610000fe82fd9b56e22f9d6cd47c2ec78b000000096bc82d5d480000888413", 0x22}], 0x1) ioctl$TCSETA(r1, 0x5402, &(0x7f0000f9f000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) 2018/04/19 09:43:23 executing program 5: perf_event_open(&(0x7f000025c000)={0xfffffffffffffffe, 0x70, 0x3e5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'gre0\x00'}, 0x18) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x8001) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000001d00)={0x1, 'vcan0\x00'}, 0x18) 2018/04/19 09:43:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x200481) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x100, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @multicast1=0xe0000001}}) 2018/04/19 09:43:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x80000, 0xfffffffffffffffd, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x1}, 0x1}, 0x0) recvmsg(r0, &(0x7f00000000c0)={&(0x7f00004afff8)=@sco, 0x80, &(0x7f000020ff70), 0x0, &(0x7f00002d0000)=""/4096, 0x1000}, 0x2000000000000) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) 2018/04/19 09:43:23 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x2b) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="100254c99500ced034420000000000000000f193761150ac2b1260edeb8ed281e93aa41654e8b29259ec5b0a6543cdac5a0134fb78f9276217f39eeab4a1a06151d93d00a09066f59a9129916bafb85a72e0ecfba249752d620b7b55c91b10e39610d05d221bf97261c360db54fca037b1e9a671c2645180ac57be0927189543a042d43aad867e99869af6ea1aa2a006d2fa6911ec"], 0x10}}], 0x2, 0x0) 2018/04/19 09:43:23 executing program 6: bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(des3_ede-asm)\x00'}, 0x58) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) dup(r0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079", 0x18) sendmmsg$unix(r0, &(0x7f0000000600)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000240)="52b7539a7572cde7694fb9d8e6ab4ad6136d7eae88902c42991f984ecf4fa2ebaf28059f08080cc3", 0x28}], 0x1}], 0x1, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x1f) recvmsg(r0, &(0x7f0000000d40)={&(0x7f0000000a40)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000000)=""/23, 0x17}, {&(0x7f00000009c0)=""/18, 0x12}], 0x2, &(0x7f0000000cc0)=""/97, 0x61}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x10400, 0x0) [ 367.844788] IPVS: stopping master sync thread 26452 ... [ 367.850550] IPVS: sync thread started: state = MASTER, mcast_ifn = gre0, syncid = 0, id = 0 [ 367.902800] IPVS: sync thread started: state = MASTER, mcast_ifn = gre0, syncid = 0, id = 0 [ 367.914178] IPVS: stopping master sync thread 26460 ... [ 368.384242] FAULT_INJECTION: forcing a failure. [ 368.384242] name failslab, interval 1, probability 0, space 0, times 0 [ 368.395541] CPU: 1 PID: 26421 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 368.402726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.412071] Call Trace: [ 368.414677] dump_stack+0x1b9/0x294 [ 368.418311] ? dump_stack_print_info.cold.2+0x52/0x52 [ 368.423506] ? perf_trace_lock_acquire+0xe3/0x980 [ 368.428349] ? perf_trace_lock+0x900/0x900 [ 368.432590] should_fail.cold.4+0xa/0x1a [ 368.436654] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 368.441749] ? find_held_lock+0x36/0x1c0 [ 368.445802] ? find_held_lock+0x36/0x1c0 [ 368.449863] ? check_same_owner+0x320/0x320 [ 368.454182] ? print_usage_bug+0xc0/0xc0 [ 368.458245] ? rcu_note_context_switch+0x710/0x710 [ 368.463171] ? finish_task_switch+0x1ca/0x810 [ 368.467656] ? finish_task_switch+0x182/0x810 [ 368.472142] __should_failslab+0x124/0x180 [ 368.476367] should_failslab+0x9/0x14 [ 368.480162] kmem_cache_alloc_node+0x272/0x780 [ 368.484746] ? __lock_acquire+0x7f5/0x5140 [ 368.488997] __alloc_skb+0x111/0x780 [ 368.492707] ? skb_scrub_packet+0x580/0x580 [ 368.497038] ? debug_check_no_locks_freed+0x310/0x310 [ 368.502243] ? __lock_acquire+0x7f5/0x5140 [ 368.506470] ? perf_trace_lock_acquire+0xe3/0x980 [ 368.511311] ? perf_trace_lock+0x900/0x900 [ 368.515568] alloc_skb_with_frags+0x137/0x760 [ 368.520067] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 368.524812] ? graph_lock+0x170/0x170 [ 368.528611] sock_alloc_send_pskb+0x87a/0xae0 [ 368.533110] ? find_held_lock+0x36/0x1c0 [ 368.537165] ? sock_wmalloc+0x1e0/0x1e0 [ 368.541131] ? lock_downgrade+0x8e0/0x8e0 [ 368.545271] ? kasan_check_read+0x11/0x20 [ 368.549411] ? do_raw_spin_unlock+0x9e/0x2e0 [ 368.553840] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 368.558422] ? kasan_check_write+0x14/0x20 [ 368.562654] ? do_raw_spin_lock+0xc1/0x200 [ 368.566889] ? _raw_spin_unlock+0x22/0x30 [ 368.571070] unix_dgram_sendmsg+0x4f9/0x1730 [ 368.575479] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 368.581015] ? unix_stream_connect+0x11c0/0x11c0 [ 368.585769] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 368.591296] ? _copy_from_user+0xdf/0x150 [ 368.595435] ? copy_msghdr_from_user+0x3bc/0x560 [ 368.600200] ? security_socket_sendmsg+0x94/0xc0 [ 368.604955] ? unix_stream_connect+0x11c0/0x11c0 [ 368.609703] sock_sendmsg+0xd5/0x120 [ 368.613407] ___sys_sendmsg+0x525/0x940 [ 368.617369] ? lock_repin_lock+0x410/0x410 [ 368.621604] ? copy_msghdr_from_user+0x560/0x560 [ 368.626349] ? __schedule+0x809/0x1e30 [ 368.630251] ? find_held_lock+0x36/0x1c0 [ 368.634317] ? lock_downgrade+0x8e0/0x8e0 [ 368.638460] ? rcu_note_context_switch+0x710/0x710 [ 368.643377] ? check_same_owner+0x320/0x320 [ 368.647686] ? __might_sleep+0x95/0x190 [ 368.651653] __sys_sendmmsg+0x240/0x6f0 [ 368.655621] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 368.659966] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 368.665496] ? fput+0x130/0x1a0 [ 368.668776] ? ksys_write+0x1a6/0x250 [ 368.672572] ? __ia32_sys_read+0xb0/0xb0 [ 368.676625] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 368.681461] __x64_sys_sendmmsg+0x9d/0x100 [ 368.685686] do_syscall_64+0x1b1/0x800 [ 368.689564] ? finish_task_switch+0x1ca/0x810 [ 368.694067] ? syscall_return_slowpath+0x5c0/0x5c0 [ 368.698996] ? syscall_return_slowpath+0x30f/0x5c0 [ 368.703938] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 368.709308] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 368.714158] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 368.719342] RIP: 0033:0x455329 [ 368.722515] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 368.730217] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 368.737477] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 368.744737] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 368.752005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 368.759454] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 000000000000002a 2018/04/19 09:43:24 executing program 4 (fault-call:3 fault-nth:43): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:24 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000b28000)={0x1, {&(0x7f000074a000)=""/207, 0xcf, &(0x7f000072bfce)=""/50, 0x0, 0x2}}, 0x68) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x400, 0x400100) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x101ff, 0x0, &(0x7f0000ffc000/0x4000)=nil}) write$vnet(r0, &(0x7f00005ebf98)={0x1, {&(0x7f0000f29fe4)=""/28, 0x1c, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 2018/04/19 09:43:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xfd38, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x25, 0x331, 0x0, 0x0, {0x16}}, 0x14}, 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0xffffffffffffffff, r0) sendmsg$kcm(r1, &(0x7f0000001b00)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x1, 0x0, {0xa, 0x4e20, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x6}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000300)="f9244e7e7d827d46e4af962d543b22b192056c3d09300c73680d88d928ff59692cd4872cc149e6135f673b99dce3d94a041eb41227804b9424e9d6a77dc4235445c4528f057bbbcae92af6dac210e52e3b210d3aed88f1a975233bc704ba14fbf2ecbcf75b7a270c2c5a358c856ebc0f818137d79026aa6f029f4cb891f465e13769f743cfea238912850017dbae758c0f8e3a863fedd9f5bfd7780291d3336f34cd4ec123495ef37a0f739977c6a127e990ab3639548a57fa968eb2a5ec4df10c8359576d512e886cccf69e37ac1a31b4de4d20056a496ebc08b50517b2500ddf5cce06d990", 0xe6}, {&(0x7f0000000400)="e7d4161959925bbcff0bfb8f9c26fed46d835f9c0266841eadbcdfd89d7c43", 0x1f}, {&(0x7f0000000540)="bd4dcb2b70abccb2abd5dcb27354a63951fce24dede8b0943da6157b0255e93f34eb332afa6257968a8430bf49f2a6f820c86e58081459ae44a26a28d36b18b8c8fc384ecfa68518ec27d058dd", 0x4d}], 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x11b8, 0x4000040}, 0x44040) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, "6272696467803000"}}) r3 = getpgid(0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000180)=r3) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x6000, 0x0) prctl$getreaper(0x19, &(0x7f0000000000)) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet6(r4, &(0x7f00000000c0), &(0x7f0000000100)=0x1c, 0x80000) 2018/04/19 09:43:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004980)=[{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f00000038c0)="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", 0x340}], 0x1, &(0x7f0000000040)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'bond_slave_1\x00', {0x2, 0x4e22}}) chroot(&(0x7f0000000080)='./file0\x00') 2018/04/19 09:43:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) recvmmsg(r0, &(0x7f00000040c0)=[{{&(0x7f0000003b00)=@rc, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003f40)=""/11, 0xb}], 0x1, &(0x7f0000004040)=""/73, 0x49}}], 0x1, 0x0, &(0x7f0000004180)={0x0, 0x989680}) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000000)) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) 2018/04/19 09:43:24 executing program 6: r0 = socket$inet6(0x10, 0x8000000003, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'ipddp0\x00', 0x1100}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000200)=""/90) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000016000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="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", 0x125}], 0x1, &(0x7f0000006000)}, 0x0) 2018/04/19 09:43:24 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, r0, 0x3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) 2018/04/19 09:43:24 executing program 3: add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240), 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) 2018/04/19 09:43:24 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) syz_emit_ethernet(0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffc7bd72e657aaaaaabb81003f0008004500"], &(0x7f0000000240)={0x0, 0x4, [0xc63]}) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8a, 0x400000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000100)={r2, &(0x7f0000000400)=""/4096}) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f0000000200)=""/14, 0xe}], 0x2) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000000)) socket$can_raw(0x1d, 0x3, 0x1) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) 2018/04/19 09:43:24 executing program 0: r0 = socket$inet(0xa, 0x0, 0x108) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0xb08, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000d00], 0x0, &(0x7f0000000040), &(0x7f0000000d00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, '\x00', '\x00', 'veth1\x00', '\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], 0x988, 0x988, 0x9b8, [@quota={'quota\x00', 0x18}, @among={'among\x00', 0x8b0, {{0x400, 0x40, 0x0, {[], 0x3, [{[], @loopback=0x7f000001}, {}, {[], @dev={0xac, 0x14, 0x14}}]}, {[], 0x9, [{[], @broadcast=0xffffffff}, {[], @broadcast=0xffffffff}, {}, {[], @broadcast=0xffffffff}, {[], @broadcast=0xffffffff}, {[], @loopback=0x7f000001}, {[], @loopback=0x7f000001}, {[], @multicast1=0xe0000001}, {}]}}}}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x7, 0x0, 0x0, '\x00', '\x00', '\x00', '\x00', @random="46ca750fc811", [], @empty, [], 0x70, 0x70, 0xc0}}, @common=@log={'log\x00', 0x28, {{0x0, "19358fd7efa35ca2d7eb1767a4c43b69655391056303b97ef841b924cf71"}}}}]}]}, 0xb80) socket$unix(0x1, 0x5, 0x0) 2018/04/19 09:43:24 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0xa, &(0x7f0000002ffc)="033b20b4", 0x4) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000000)={0x4, 0x3ff, [{0x40, 0x0, 0x9}, {0x7, 0x0, 0x6}, {0x100000001, 0x0, 0x9}, {0xe48, 0x0, 0x5}]}) 2018/04/19 09:43:24 executing program 7: syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="2580c2000000e2701bb60689080045033493186c00000004907800000000ffffffff00039078e0000001b09b4b6c7141798669db561a6ca642645bc366509f66e414699d955c"], &(0x7f0000ea3000)) r0 = semget(0x1, 0x7, 0x100) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f0000000000)=0x2) 2018/04/19 09:43:24 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x400001) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000040)=""/42) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000d11000)=0x3fb, 0x4) fcntl$dupfd(r2, 0x0, r2) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xfffffffffffffffe}, 0x1c) listen(r2, 0x7ffc) listen(r0, 0x3) 2018/04/19 09:43:24 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, 0x100000001, 0x9, 0x7}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000080)=0x4) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x17, 0x1a, &(0x7f00000000c0)="c9c7e32754970daaed3ed8365279c822cd18742058835bdc6359"}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000180)=""/44) fallocate(r1, 0x1, 0x2, 0x8a90) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f00000001c0)=""/21) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000240)={'vlan0\x00', {0x2, 0x4e23, @broadcast=0xffffffff}}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000380)={r0, r1, 0x20, 0x7, &(0x7f0000000280)="50bba7ffa06804e3e32c269b5ff667db7c4419e5237abff2e8b069fa3a1fcac88082c13aa088f12a9d3d3d34fc7a84f108cfe6487339b57b8bc5a0b050ed5db3a69f469d654b3de1ce7753fa03c28a9a105bc411993ffbc54e9db1c483bc54cbfaa54c4edf683a1ad83b56b4e953973825e2540a8ae97b063647b274aad4bde50663c43069071a237f13d74afcb43924a7720bbbe5a5e2fa6d92eff15ab62a8fa6e2e126e9fa929aadad3ef706c505af26babe96d9b788fad5f583f28451d66c6d84b4c6efdb81b97de6bd1bc83bb42c6f406d9a0c83c918aaad6b9acc6a9e", 0x5, 0xaaa, 0x8001, 0x0, 0x3f16, 0x10000, 0x7, "59890b6f6bea95e6d0768828cbc50d5e3a4c2c84f5bade54d4dc70689103348f26cb10970dc8325b0472c87de763e31ad89ca96068d79ab7b38dbc559e1f42a9782b84e86b483b19eba7808874a1f3d64e52b1ed0c232c4e76bb5adbcc8629852da8cf8aaf27d492b4d54ab19e04e05715d4318805f02118639ebbca49f9948a3ed10db6485c50162662a2ca750f1ac3158ab6665697c2f5"}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000440)={0x8, 0x1}) write$vnet(r0, &(0x7f00000005c0)={0x1, {&(0x7f0000000480)=""/233, 0xe9, &(0x7f0000000580)=""/26, 0x3, 0x2}}, 0x68) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000640)={0x8, 0x0, [{0xc0010bff, 0x0, 0x8}, {0x1e0, 0x0, 0x80}, {0x8a4, 0x0, 0x1ff}, {0x81d, 0x0, 0x10001}, {0x356, 0x0, 0xffffffff}, {0x3c5, 0x0, 0xffffffffffffffe1}, {0xb9b, 0x0, 0x8}, {0x315953e06a7c6f52, 0x0, 0x20}]}) syz_mount_image$gfs2(&(0x7f0000000700)='gfs2\x00', &(0x7f0000000740)='./file0\x00', 0x6f38, 0x5, &(0x7f0000000ac0)=[{&(0x7f0000000780)="7c85108c229df1aaeb0159d8c78c1549b46643f63f62d41ff3367f91d63e29f866049e164a9f3debc391dbcd2c8a4779814b99f7c1eb48e88d57841ffce9b1a854e7a070685bdfd59abe6edaef27e3ef5477a75654ee76d3a3c8a21e954ad0ab0df7f9f0ffab11f57fc485592aee22fb13fc03ef5dc3c8ed0856de9116108e78f1f1a81ebae21ed76b258551ba2c8d", 0x8f, 0x3}, {&(0x7f0000000840)="25c80e5470ff5920f8753b639605632f0b54336fee410a0289c44fcf3a9f6e8aa5fd53f1f1637064cb86ef73574fd9b24e45d274c2724d073622eb8d3f38d443244bda850b257b2517a91fd5cb906687174608f4745aa71f811d15ce501b0301d006255c995b609e81bba68d004ac6304c9522348f9a79a8533f572e4576c87fd73533255959da647e345e9bf98cd4e45298efa6f6fbddd78160c7e2d381179203843c9c772a355737f9b3641732696e4a1313ae9ab6bf6c296da762333c744cd8c370d8ce4e94a6ffbef0b787d3acc81c6b5d3786e27aba3faa3883a7aeac7dbb", 0xe1, 0xfffffffffffffffa}, {&(0x7f0000000940)="afd68e434f15ef96dd4b3c8efb2c2ce4c7fd9b9c1d3f1ed915bdea5d95abb2f989b63cffc45fd23b2cd7661334c7152d52807b2b84ae6901ebd69d2d03787fdc0f3f0dac1f50c6d12c7072630cb578fb1b31dd86364d1f5d4abea40928cbd95722d2240f4dd40fbee93fa202a2d569080de407ff55a6912fd10b2d13b8c46fc29a9372ae", 0x84, 0x7c73}, {&(0x7f0000000a00)="dcebd8bcee4ef4a6de255dde5e27eea7df41ddb6efe921a7742a5fcaa5abf340797dbd4f51c9", 0x26, 0x200}, {&(0x7f0000000a40)="599289759b7a447461208b2ddddd641a16589028c211cd8eeadae3f20db58a027ad76e3259b9ea2d72bf5f113e82ae7232a61521bb487357fb7d130f9d3b5f93b618b8b9e437113d21bef94bbba7c441f0909988cc2858dadc47d7dadfc6d894131b2815966f51833c8da779b9ea57a8cc6f9adadd", 0x75, 0x24f0}], 0x80000, &(0x7f0000000b40)={[{@noloccookie='noloccookie', 0x2c}, {@norecovery='norecovery', 0x2c}]}) ioctl$sock_ifreq(r1, 0x8971, &(0x7f0000000bc0)={'rose0\x00', @ifru_settings={0x4, 0x4, @fr_pvc_info=&(0x7f0000000b80)={0xc8, 'tunl0\x00'}}}) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000c00)={0x2, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000c40)={{0x1, 0x8000}, 'port1\x00', 0x20, 0x8, 0x1, 0x6, 0x5, 0xf2c4, 0x3b0, 0x0, 0x6, 0x122}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000d00)={0x16, 0x1ff, 0x800, 'queue1\x00', 0x1}) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000dc0)=""/4096) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x100000000) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000001e00)={r2, 0x80000, r1}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000001e40)=0x100000000) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000001e80)={0x400, 0x4}) 2018/04/19 09:43:24 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1) timer_create(0x3, &(0x7f000004c000)={0x0, 0x16}, &(0x7f000004cffc)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x533e, 0x200400) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4000000004d032, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000001f37), &(0x7f0000000080), &(0x7f0000001000), &(0x7f0000e76000)) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000180)) 2018/04/19 09:43:24 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x80040004, 0x101000) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x3bb, 0x0, 0x7, 0x14, 0x10, "641539ed0c53bb1784701faa16eeadb3d777f4bddee558fe377c17750a128a27f597ef0620e8327db652ff72197e81bafa9c630dbbeec89725d5eb353bd1512a", "fb7e2482c7908b44ffdac89a66a5a69516e2a841891edf134bddae722f1e4531bd290484659d2ce92d7fa32726260aa95e17ee86332a18e5f042f6813fe3c683", "7e3df61ebe20c73b89a01524aefc4382f8bb82fca74552e8d83adbefb58a0011", [0x7d742009, 0x5]}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4, &(0x7f0000000040)="44cf9e2a1430ea27135eb63cf74f15403deacf61f401721745e778357a8ab4511b0c40b169eb466d", &(0x7f00002b7ffc), &(0x7f0000000200), &(0x7f00000001c0)) [ 369.737437] FAULT_INJECTION: forcing a failure. [ 369.737437] name failslab, interval 1, probability 0, space 0, times 0 [ 369.748853] CPU: 0 PID: 26498 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 369.756056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.765416] Call Trace: [ 369.768020] dump_stack+0x1b9/0x294 [ 369.771671] ? dump_stack_print_info.cold.2+0x52/0x52 [ 369.776866] ? is_bpf_text_address+0xd7/0x170 [ 369.781380] should_fail.cold.4+0xa/0x1a [ 369.785464] ? __save_stack_trace+0x7e/0xd0 [ 369.789804] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 369.794920] ? save_stack+0x43/0xd0 [ 369.798885] ? kasan_kmalloc+0xc4/0xe0 [ 369.802758] ? kasan_slab_alloc+0x12/0x20 [ 369.806912] ? find_held_lock+0x36/0x1c0 [ 369.810971] ? check_same_owner+0x320/0x320 [ 369.815293] ? rcu_note_context_switch+0x710/0x710 [ 369.820213] __should_failslab+0x124/0x180 [ 369.824437] should_failslab+0x9/0x14 [ 369.828243] kmem_cache_alloc_node_trace+0x26f/0x770 [ 369.833352] __kmalloc_node_track_caller+0x33/0x70 [ 369.838281] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 369.843038] __alloc_skb+0x14d/0x780 [ 369.846756] ? skb_scrub_packet+0x580/0x580 [ 369.851075] ? debug_check_no_locks_freed+0x310/0x310 [ 369.856257] ? __lock_acquire+0x7f5/0x5140 [ 369.860491] ? zap_class+0x720/0x720 [ 369.864212] ? zap_class+0x720/0x720 [ 369.867927] alloc_skb_with_frags+0x137/0x760 [ 369.872430] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 369.877192] ? graph_lock+0x170/0x170 [ 369.880988] ? perf_trace_lock+0xd6/0x900 [ 369.885135] sock_alloc_send_pskb+0x87a/0xae0 [ 369.889621] ? find_held_lock+0x36/0x1c0 [ 369.893678] ? sock_wmalloc+0x1e0/0x1e0 [ 369.897650] ? lock_downgrade+0x8e0/0x8e0 [ 369.901799] ? kasan_check_read+0x11/0x20 [ 369.905934] ? do_raw_spin_unlock+0x9e/0x2e0 [ 369.910329] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 369.914900] ? kasan_check_write+0x14/0x20 [ 369.919122] ? do_raw_spin_lock+0xc1/0x200 [ 369.923348] ? _raw_spin_unlock+0x22/0x30 [ 369.927499] unix_dgram_sendmsg+0x4f9/0x1730 [ 369.932000] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 369.937536] ? unix_stream_connect+0x11c0/0x11c0 [ 369.942292] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 369.947828] ? _copy_from_user+0xdf/0x150 [ 369.951972] ? copy_msghdr_from_user+0x3bc/0x560 [ 369.956726] ? security_socket_sendmsg+0x94/0xc0 [ 369.961475] ? unix_stream_connect+0x11c0/0x11c0 [ 369.966228] sock_sendmsg+0xd5/0x120 [ 369.969952] ___sys_sendmsg+0x525/0x940 [ 369.973917] ? lock_repin_lock+0x410/0x410 [ 369.978142] ? copy_msghdr_from_user+0x560/0x560 [ 369.982885] ? __schedule+0x809/0x1e30 [ 369.986765] ? find_held_lock+0x36/0x1c0 [ 369.990817] ? lock_downgrade+0x8e0/0x8e0 [ 369.994964] ? rcu_note_context_switch+0x710/0x710 [ 369.999879] ? check_same_owner+0x320/0x320 [ 370.004186] ? __might_sleep+0x95/0x190 [ 370.008161] __sys_sendmmsg+0x240/0x6f0 [ 370.012919] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 370.017252] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 370.022773] ? fput+0x130/0x1a0 [ 370.026039] ? ksys_write+0x1a6/0x250 [ 370.029826] ? __ia32_sys_read+0xb0/0xb0 [ 370.033875] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 370.038706] __x64_sys_sendmmsg+0x9d/0x100 [ 370.042928] do_syscall_64+0x1b1/0x800 [ 370.046812] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 370.051644] ? syscall_return_slowpath+0x5c0/0x5c0 [ 370.056563] ? syscall_return_slowpath+0x30f/0x5c0 [ 370.061483] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 370.066836] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 370.071672] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.076853] RIP: 0033:0x455329 [ 370.080028] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 370.087732] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 370.094985] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 370.102243] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 370.109497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 370.116752] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 000000000000002b 2018/04/19 09:43:26 executing program 4 (fault-call:3 fault-nth:44): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:26 executing program 6: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x7) 2018/04/19 09:43:26 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4201, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000040)={0x3, 0x9}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000df5fd8)={0x0, 0x100000, &(0x7f00003acf97)=""/105, &(0x7f0000bf6000)=""/228, &(0x7f000017d000)=""/199}) 2018/04/19 09:43:26 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') signalfd(0xffffffffffffffff, &(0x7f0000000ff8), 0x8) timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) r1 = open(&(0x7f0000000300)='./file0\x00', 0x2, 0x0) unshare(0x20000) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000380)=0x0) r3 = syz_open_procfs(r2, &(0x7f00000008c0)="6e732f6d6e740077089d5475570ba400e5756418d9bae5b4d0b7e13f38b65692230260de869e31e55400709b225bebe4434f8060ab131dfc2d76e661d84f17c4de706501f8821fbcec24859915779583cda2c3") r4 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(cast6-generic)\x00'}, 0x58) r6 = dup2(r5, r4) r7 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="873a3d2f8a1a4d5211133f7e9c4eb5be", 0x10) sendmsg$can_raw(r7, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xff89}, 0x1}, 0x0) recvmmsg(r7, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x8, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x20, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xffffff4a}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) setns(r3, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xfffffffffffffff9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r8, 0x4) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000040)) clone(0x30000100, &(0x7f0000e69000), &(0x7f00009c4ffc), &(0x7f00001cc000), &(0x7f0000a46000)) mlock2(&(0x7f0000a91000/0x4000)=nil, 0x4000, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000500)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000bc0)={{{@in=@rand_addr, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000f40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x7273dd8e000e074a}, 0xc, &(0x7f0000000f00)={&(0x7f0000001000)=ANY=[@ANYBLOB="00020000290020002dbd7000fddbdf25180000006ed66deb2c5c66eb63b94728d3108a1bcb2787a76d322188be1af26a3a6f7f49f9f5b3c51b437cee3dabb1c52795383abe677c414cc17d9d3b23a0d302e29e2e45ce075d4873982ab737ff77c440d35900b9efab9e90f083212055f6b14b38189a389df0b565cbe1e5fef7271a289a05743aca4bdb0eaab96adfb0fce6446ca1fe504962e3279df99aa35edaf7041e21311cf508008d00", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="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"], 0x200}, 0x1}, 0x20040010) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=""/128, &(0x7f0000000180)=0x80) getrusage(0xfffffffffffffffb, &(0x7f0000000b00)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000480)=&(0x7f0000000440)) 2018/04/19 09:43:26 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0xc0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x3, r0}) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000001c0)={r2, r3, 0xfffffffffffffffa, 0x3ff, &(0x7f0000000180)="f7", 0x1, 0xca1, 0x4, 0x9, 0x20, 0xe4, 0x9, "57eac049e1d3fe6698fd919a981295456e0bb488ba792146523bfeba87374b035a8143e41dce9a3e146992c1b03334fb8fee75bb2cf9321915bc3f6ec28bcf7dc043b36199b3"}) r4 = gettid() capset(&(0x7f0000000080)={0x19980330, r4}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5}) 2018/04/19 09:43:26 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x6, 0x101000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0x9, 0x0, 0x1, 0x2, [], [], [], 0x7, 0x4, 0x429c, 0x9, "49462dfa532eb11b234479d84d5ad349"}) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x3, 0x88000) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB="1063044000004000"], 0x0, 0x0, &(0x7f00000000c0)}) 2018/04/19 09:43:26 executing program 3: add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240), 0x0, 0xffffffffffffffff) syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) write$evdev(r0, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) 2018/04/19 09:43:26 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000240)=0x1000000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) sendmsg(r0, &(0x7f0000001480)={&(0x7f00000000c0)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000000480)}, 0x20000041) setsockopt$inet_tcp_buf(r0, 0x6, 0x1, &(0x7f0000000280)="9265cb98", 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) [ 370.731539] binder: 26558:26565 unknown command 0 [ 370.748633] binder: 26558:26565 ioctl c0306201 20a20000 returned -22 2018/04/19 09:43:26 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'tunl0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge_slave_0\x00', r1}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_dellink={0x20, 0x11, 0x319, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x20}, 0x1}, 0x0) ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f0000000200)="d00afc6595691e1dc33caed8ce17045054a7bebc5984e1bf4cbc896489770be556481894c4ee835095155d9a922908768c41cc43f81414a89c115b3ac8e698914b4b73dfe1befbbaa901dcac63e9213cf090c4c69810e3e5963dfb02d508a69ab0e8896f640485e4334c190be293a3d61cbc7a5ac4755fb389cb046d6b0e41a5") syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x5, 0x1, &(0x7f0000000340), 0x200000, &(0x7f00000000c0)) 2018/04/19 09:43:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000400)="26660f38381e3219660f759b00000f302e0f01cbf081a70c000800660ffc9608000f09ba2100ed0f352c78", 0x2b}], 0x1, 0x0, &(0x7f0000000080), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x2}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x1000}) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x200008031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/unix\x00') ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000100)={r4, &(0x7f0000000280)=""/186}) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 370.802198] binder: 26558:26574 unknown command 0 2018/04/19 09:43:26 executing program 0: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f00005d8f80)=@generic={0x1e, "0103000000000000e1ffffffffffffff09a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2030077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r2 = socket(0x1e, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind(r2, &(0x7f00008a1f80)=@generic={0x42001e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d64fb8f8401a3ff59829a2b0afe7ce43a5b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31510000500000000000bdb9c8ea31000077aeb81c90001d6f7c980400000000f70dc136cb184a"}, 0x80) r3 = socket(0x1e, 0x5, 0x0) sendmsg(r3, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "0100000000001e0000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624280027800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000008c00), 0x0, &(0x7f0000d31000)}, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0xa00, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x80000, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000200)={r5, r7}) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, [0x8, 0x3, 0xbf, 0x9]}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000140)={0x200, 0x0, 0x9000}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000240)={r8, r9}) 2018/04/19 09:43:26 executing program 3: add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240), 0x0, 0xffffffffffffffff) syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) write$evdev(r0, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) [ 370.862568] binder: 26558:26574 ioctl c0306201 20a20000 returned -22 2018/04/19 09:43:26 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x191080) ioctl(r0, 0x2270, &(0x7f0000000180)) 2018/04/19 09:43:26 executing program 2: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'gre0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000001d00)={0x1, 'vcan\a\x00'}, 0x18) [ 370.993386] QAT: Invalid ioctl 2018/04/19 09:43:26 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'nr0\x00', r1}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000021c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_setlink={0x20, 0x13, 0x301, 0x0, 0x0, {0x7, 0x0, 0x0, r3}}, 0xffffff95}, 0x1}, 0x0) [ 371.023004] QAT: Invalid ioctl [ 371.040552] QAT: Invalid ioctl 2018/04/19 09:43:26 executing program 3: add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240), 0x0, 0xffffffffffffffff) syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) write$evdev(r0, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) [ 371.070701] QAT: Invalid ioctl [ 371.119208] QAT: Invalid ioctl [ 371.140876] QAT: Invalid ioctl [ 371.161811] QAT: Invalid ioctl [ 371.179968] QAT: Invalid ioctl [ 371.504760] FAULT_INJECTION: forcing a failure. [ 371.504760] name failslab, interval 1, probability 0, space 0, times 0 [ 371.516083] CPU: 1 PID: 26557 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 371.523293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.532656] Call Trace: [ 371.535252] dump_stack+0x1b9/0x294 [ 371.538868] ? dump_stack_print_info.cold.2+0x52/0x52 [ 371.544052] ? unwind_get_return_address+0x61/0xa0 [ 371.548977] ? __save_stack_trace+0x7e/0xd0 [ 371.553309] should_fail.cold.4+0xa/0x1a [ 371.557360] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 371.562454] ? save_stack+0xa9/0xd0 [ 371.566069] ? save_stack+0x43/0xd0 [ 371.569690] ? kasan_kmalloc+0xc4/0xe0 [ 371.573569] ? __kmalloc_node_track_caller+0x47/0x70 [ 371.578667] ? __alloc_skb+0x14d/0x780 [ 371.582566] ? alloc_skb_with_frags+0x137/0x760 [ 371.587219] ? sock_alloc_send_pskb+0x87a/0xae0 [ 371.591897] ? unix_dgram_sendmsg+0x4f9/0x1730 [ 371.596476] ? sock_sendmsg+0xd5/0x120 [ 371.600349] ? ___sys_sendmsg+0x525/0x940 [ 371.604483] ? __sys_sendmmsg+0x240/0x6f0 [ 371.608618] ? __x64_sys_sendmmsg+0x9d/0x100 [ 371.613019] ? do_syscall_64+0x1b1/0x800 [ 371.617080] ? find_held_lock+0x36/0x1c0 [ 371.621149] ? check_same_owner+0x320/0x320 [ 371.625455] ? print_usage_bug+0xc0/0xc0 [ 371.629501] ? rcu_note_context_switch+0x710/0x710 [ 371.634423] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 371.639690] __should_failslab+0x124/0x180 [ 371.643928] should_failslab+0x9/0x14 [ 371.647717] kmem_cache_alloc_node+0x272/0x780 [ 371.652287] ? __lock_acquire+0x7f5/0x5140 [ 371.656512] __alloc_skb+0x111/0x780 [ 371.660215] ? skb_scrub_packet+0x580/0x580 [ 371.664523] ? debug_check_no_locks_freed+0x310/0x310 [ 371.669697] ? __lock_acquire+0x7f5/0x5140 [ 371.673914] ? find_held_lock+0x36/0x1c0 [ 371.677969] alloc_skb_with_frags+0x137/0x760 [ 371.682458] ? graph_lock+0x170/0x170 [ 371.686274] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 371.691035] ? graph_lock+0x170/0x170 [ 371.694843] sock_alloc_send_pskb+0x87a/0xae0 [ 371.699350] ? find_held_lock+0x36/0x1c0 [ 371.703411] ? sock_wmalloc+0x1e0/0x1e0 [ 371.707391] ? lock_downgrade+0x8e0/0x8e0 [ 371.711549] ? kasan_check_read+0x11/0x20 [ 371.715698] ? do_raw_spin_unlock+0x9e/0x2e0 [ 371.720114] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 371.724702] ? kasan_check_write+0x14/0x20 [ 371.728939] ? do_raw_spin_lock+0xc1/0x200 [ 371.733181] ? _raw_spin_unlock+0x22/0x30 [ 371.737341] unix_dgram_sendmsg+0x4f9/0x1730 [ 371.741759] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 371.747317] ? unix_stream_connect+0x11c0/0x11c0 [ 371.752083] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 371.757625] ? _copy_from_user+0xdf/0x150 [ 371.761780] ? copy_msghdr_from_user+0x3bc/0x560 [ 371.766549] ? security_socket_sendmsg+0x94/0xc0 [ 371.771307] ? unix_stream_connect+0x11c0/0x11c0 [ 371.776079] sock_sendmsg+0xd5/0x120 [ 371.779798] ___sys_sendmsg+0x525/0x940 [ 371.783770] ? lock_repin_lock+0x410/0x410 [ 371.788000] ? copy_msghdr_from_user+0x560/0x560 [ 371.792759] ? __schedule+0x809/0x1e30 [ 371.796649] ? find_held_lock+0x36/0x1c0 [ 371.800716] ? lock_downgrade+0x8e0/0x8e0 [ 371.804860] ? rcu_note_context_switch+0x710/0x710 [ 371.809775] ? check_same_owner+0x320/0x320 [ 371.814093] ? __might_sleep+0x95/0x190 [ 371.818061] __sys_sendmmsg+0x240/0x6f0 [ 371.822031] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 371.826343] ? __lock_is_held+0xb5/0x140 [ 371.830402] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 371.835932] ? fput+0x130/0x1a0 [ 371.839196] ? ksys_write+0x1a6/0x250 [ 371.842983] ? __ia32_sys_read+0xb0/0xb0 [ 371.847039] __x64_sys_sendmmsg+0x9d/0x100 [ 371.851273] do_syscall_64+0x1b1/0x800 [ 371.855147] ? syscall_return_slowpath+0x5c0/0x5c0 [ 371.860067] ? syscall_return_slowpath+0x30f/0x5c0 [ 371.864998] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 371.870358] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 371.875194] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.880370] RIP: 0033:0x455329 [ 371.883550] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 371.891245] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 371.898502] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 371.905760] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 371.913040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 371.920295] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 000000000000002c 2018/04/19 09:43:27 executing program 4 (fault-call:3 fault-nth:45): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:27 executing program 6: capset(&(0x7f0000fcdff8)={0x4000019980330}, &(0x7f0000000000)={0x800000, 0xfffffffffff7fffb}) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000080)=""/59) ioprio_set$pid(0x3, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x100, 0x0) r1 = msgget$private(0x0, 0x1) msgrcv(r1, &(0x7f0000000180)={0x0, ""/236}, 0xf4, 0x0, 0x1000) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) 2018/04/19 09:43:27 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='mqueue\x00', 0x0, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x20000) syz_mount_image$msdos(&(0x7f0000000240)='msdos\x00', &(0x7f0000000280)='./file1\x00', 0xffffffffffffff75, 0x6, &(0x7f00000025c0)=[{&(0x7f00000002c0)="d91c101abd4cfcf3860fd7aa2c10bb700d1d0fa1a4542800e0db19e52f2cb85b21e1e44cd7e932bab037136bc67f35efb6cbe81397143899c2727cf5356aca5d2edef45df5f581c193efb163e4a9bc5e01cbe5682cf6f4863cd2e050fbe977668c8a70d0f94056d15049d18ef0d161a7b58b67750a15595539f2e58e0b5575417bfb22e3ebd918bf95b051372123af6447ffcf5acb99873449f87d429b7ec03cbbba87fc18521d55f3d9aff3c37af096bffcf31addaddbdc8a9ffd571799937f572c6e01ab424f80134a7aaa6d8738ef", 0xd0, 0x7ff}, {&(0x7f00000003c0)="f86dde55076359602797bbd1186f", 0xe, 0x5}, {&(0x7f0000000400)="88938c786c09cbc24756fc0c4f14cab11a7c60dd0afac195f55e8afdcbc10a9b376f574e98aeff985c6135a4b5151dc39021373a8019b10b879c83a5c5c6eb925ee9c34c8d1aea8db45a4577c98d814d4162353421ccc346d9b5455d2f76c2b94bca9fd01960e8adfffc2085f12b4e15c49683def6a949d77a3938e5eb7f61abb67d1649a948fa646822c8fc790c58f650fe9c30ed7eae4f4b975c760814176dc119b3f6727716c3680c365787", 0xad, 0x1}, {&(0x7f00000004c0)="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", 0x1000, 0x7}, {&(0x7f00000014c0)="d2c49a5f9b68e7b4dacaae58675b2d50b0d3033b604d6e41ade612027000cb3b74827b8760a22073158205825fa8945f10279e1cc06fe28794b901bebb3bf12a3609bc07e69db3c92a486a764d8a1df7518ff63eb74743f3433f1c9e1febca39eed09e7089d55b6ea203581eca51f04f0bc84423ad494bd11e74ddaab2c8ef9faafcf0980cb6978bfa3c77e0b6d3d1df15f38438a66a7603dd894868e6d624259dff803dde730543213491b8789416a1cfe1fc5d7e21ffb08e42b207d8b15c41de46276614870e1514f248ea7421cfe4cff3", 0xd2, 0xb03f}, {&(0x7f00000015c0)="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", 0x1000, 0xfffffffffffffffe}], 0x8000, &(0x7f0000002680)={[{@flush='flush', 0x2c}]}) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000140)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/04/19 09:43:27 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x20, 0x200000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f000000e000)='/dev/sequencer\x00', 0x100000002, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0x40085112, &(0x7f000000b000)={0x5, &(0x7f000000cfc8)=[{}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000080)={r2, 0x2}) 2018/04/19 09:43:27 executing program 3: add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240), 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000080), 0xff50) write$evdev(0xffffffffffffffff, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) 2018/04/19 09:43:27 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x806) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)={0xffffffffffffffff}) readv(r2, &(0x7f000042bff8)=[{&(0x7f0000e3b000)=""/61, 0x3d}], 0x1) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000ff0000)) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x100000001, 0x4000) ioctl$sock_SIOCGIFCONF(r3, 0x8910, &(0x7f0000000040)=@buf={0x1000, &(0x7f0000000180)="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"}) dup3(r1, r0, 0x0) 2018/04/19 09:43:27 executing program 7: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x140000000000, 0x101000) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000140)={0x6, 0x8}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000180)=0x4a945e5f) r1 = socket$inet(0x2, 0x10000000000, 0xfffffffffffffff9) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0xf, &(0x7f0000a0c000)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@broadcast=0xffffffff}}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}}, 0x0, @in6=@mcast2={0xff, 0x2, [], 0x1}}}, 0xe8) r2 = socket$inet6(0xa, 0x7, 0xc315) bind$inet6(r2, &(0x7f000000d000)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) bind$inet(r1, &(0x7f0000a0dff0)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x400) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000040)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x45) 2018/04/19 09:43:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000002000)) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) utime(&(0x7f0000c4c000)='./file0\x00', &(0x7f0000a98000)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000a98000/0x2000)=nil}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)) 2018/04/19 09:43:27 executing program 6: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x3e, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4, 0x0, 0x0, 0x2}) mq_unlink(&(0x7f0000000100)="73656375726974795b2c6367726f7570747275737465645d2f7472757374658434ab43645b776c616e31766d6e") r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x6, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000fbc000)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x92b, 0x10000) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = dup(r1) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) close(r1) 2018/04/19 09:43:27 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getpgrp(0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="66baf80cb850c47f80ef66bafc0cb80000c0feefc4a19f51f2440f019fc62c248566f247ac4ede5600c4e3791d7ee004c40151e299992c0000b805000000b9336600000f01c1420f5bddb99f0a0000b88eabb2c9ba000000000f30", 0x5b}], 0x173, 0x0, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x459) write$cgroup_pid(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="41c24d0f5a22516beeb5e5b81319cd92bdcc605a79940bcfd12e939d6735706079629c71420000000000f8ff000000000000000000"], 0x3) 2018/04/19 09:43:27 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4180, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)={0x0, 0x1, 0x100, &(0x7f0000000180)}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000140)={0x7fff}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="065f14e185000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8000000000000766eb9e600000000003fc9053c552ddd4ba7acec7ba7db00000000000000000000000000000000000000000000000000000000000001007672f2097ce12755fedd4271feb997507a4e35b26242731eb6a10125a422874f2dc2bf538192e53e9a0408604b73e273c43be33729000000000000006542922b9badc1625362c42cd96abd6850203c6bb85b6af41bf670b95c8fa2dbebd9c9d70b99647859d278de51153ae5816f"]) ioctl$TIOCGPTPEER(r2, 0x5441, 0x8) close(r0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/19 09:43:27 executing program 2: perf_event_open(&(0x7f0000223000)={0x0, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x840000000003, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000010c0)=ANY=[@ANYBLOB="660000000000000000000000000000000000000000000400000068a6f8de00000000000000000000"], &(0x7f0000000100)=0x28) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x800000, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0xffffffff, 0x8000) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000780)={{{@in=@multicast1, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000600)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000640)={'bpq0\x00', r4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00000004c0)={0x5, 0x1, 'client0\x00', 0x3, "b2b66288651341a6", "a357b954db2922415071cf925f37acd4938f8bb10fb0d2f1b18010fb13ea108d", 0x0, 0x4}) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000580)=0x800000000000084, 0x2d8) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @broadcast=0xffffffff}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x7, {0x2, 0x0, @rand_addr}, 'tunl0\x00'}) socket$can_raw(0x1d, 0x3, 0x1) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x2000, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000340)={'nat\x00'}, &(0x7f00000003c0)=0x54) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$urandom(&(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x4007) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r6, 0x4008ae48, &(0x7f0000000400)=0x3001) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000140)="f466b80500000066b9ae2700000f01d90fc729262edcfbd36709640f2245673e0f0f737b1c26260f01ca260f300f009f0000", 0x32}], 0x1, 0x20, &(0x7f00000001c0), 0x0) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000000200)={0x0, r5}) ioctl$KVM_GET_PIT(r5, 0xc048ae65, &(0x7f0000000680)) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r1) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000000c0)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f00006a3000)='/dev/audio\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) fcntl$lock(r7, 0x7, &(0x7f00000001c0)={0x3, 0x3, 0x100, 0x1, r8}) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"]) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f00000002c0)=0x2081, 0x4) 2018/04/19 09:43:27 executing program 5: keyctl$reject(0x13, 0x0, 0x4, 0xf5b, 0x0) 2018/04/19 09:43:27 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000001c0)={'veth1_to_bond\x00', {0x2, 0x4e21, @rand_addr=0x401}}) close(r1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000580)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r0) sendmsg$can_raw(r3, &(0x7f0000002000)={&(0x7f0000000100)={0x1d}, 0x10, &(0x7f0000001fc0)={&(0x7f0000001f40)=@can={{}, 0x0, 0x0, 0x0, 0x0, "3aefdcb5401e1c35"}, 0x39d}, 0x1}, 0x0) recvmsg(r2, &(0x7f0000b2dfc8)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f0000f75000)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1, &(0x7f0000ec7000)}, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000200)={0x37, 0x5}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20800, 0x0) 2018/04/19 09:43:27 executing program 5: syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0xfffffffffffffffe) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/43) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}], 0x18) sendfile(r0, r0, &(0x7f00009bcffe), 0x2000000000004c35) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) 2018/04/19 09:43:28 executing program 6: socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x6a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @rand_addr, {[@timestamp={0x44, 0x4}]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0x0, 0x963]}) [ 372.931942] FAULT_INJECTION: forcing a failure. [ 372.931942] name failslab, interval 1, probability 0, space 0, times 0 [ 372.943369] CPU: 0 PID: 26643 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 372.950567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.959926] Call Trace: [ 372.962525] dump_stack+0x1b9/0x294 [ 372.966166] ? dump_stack_print_info.cold.2+0x52/0x52 [ 372.971367] ? perf_trace_lock_acquire+0xe3/0x980 [ 372.976223] ? kernel_text_address+0x79/0xf0 [ 372.980638] ? __unwind_start+0x166/0x330 [ 372.984805] should_fail.cold.4+0xa/0x1a [ 372.988884] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 372.994010] ? save_stack+0xa9/0xd0 [ 372.997651] ? save_stack+0x43/0xd0 [ 373.001295] ? kasan_slab_alloc+0x12/0x20 [ 373.005459] ? find_held_lock+0x36/0x1c0 [ 373.009560] ? check_same_owner+0x320/0x320 [ 373.013894] ? rcu_note_context_switch+0x710/0x710 [ 373.018840] __should_failslab+0x124/0x180 [ 373.023090] should_failslab+0x9/0x14 [ 373.026911] kmem_cache_alloc_node_trace+0x26f/0x770 [ 373.032064] __kmalloc_node_track_caller+0x33/0x70 [ 373.037009] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 373.041777] __alloc_skb+0x14d/0x780 [ 373.045508] ? skb_scrub_packet+0x580/0x580 [ 373.049844] ? debug_check_no_locks_freed+0x310/0x310 [ 373.055048] ? __lock_acquire+0x7f5/0x5140 [ 373.059292] ? perf_trace_lock_acquire+0xe3/0x980 [ 373.064146] ? perf_trace_lock+0x900/0x900 [ 373.068409] alloc_skb_with_frags+0x137/0x760 [ 373.072926] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 373.077695] ? graph_lock+0x170/0x170 [ 373.081507] sock_alloc_send_pskb+0x87a/0xae0 [ 373.086016] ? find_held_lock+0x36/0x1c0 [ 373.090086] ? sock_wmalloc+0x1e0/0x1e0 [ 373.094075] ? lock_downgrade+0x8e0/0x8e0 [ 373.098243] ? kasan_check_read+0x11/0x20 [ 373.102398] ? do_raw_spin_unlock+0x9e/0x2e0 [ 373.106816] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 373.111409] ? kasan_check_write+0x14/0x20 [ 373.115651] ? do_raw_spin_lock+0xc1/0x200 [ 373.119899] ? _raw_spin_unlock+0x22/0x30 [ 373.124057] unix_dgram_sendmsg+0x4f9/0x1730 [ 373.128481] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 373.134042] ? unix_stream_connect+0x11c0/0x11c0 [ 373.138806] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 373.144353] ? _copy_from_user+0xdf/0x150 [ 373.148511] ? copy_msghdr_from_user+0x3bc/0x560 [ 373.153288] ? security_socket_sendmsg+0x94/0xc0 [ 373.158058] ? unix_stream_connect+0x11c0/0x11c0 [ 373.162827] sock_sendmsg+0xd5/0x120 [ 373.166554] ___sys_sendmsg+0x525/0x940 [ 373.170546] ? copy_msghdr_from_user+0x560/0x560 [ 373.175322] ? find_held_lock+0x36/0x1c0 [ 373.179417] ? lock_downgrade+0x8e0/0x8e0 [ 373.183594] ? rcu_note_context_switch+0x710/0x710 [ 373.188546] ? check_same_owner+0x320/0x320 [ 373.192880] ? __might_sleep+0x95/0x190 [ 373.196870] __sys_sendmmsg+0x240/0x6f0 [ 373.200949] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 373.205306] ? __lock_is_held+0xb5/0x140 [ 373.209398] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 373.214943] ? fput+0x130/0x1a0 [ 373.218229] ? ksys_write+0x1a6/0x250 [ 373.222062] ? __ia32_sys_read+0xb0/0xb0 [ 373.226139] __x64_sys_sendmmsg+0x9d/0x100 [ 373.230388] do_syscall_64+0x1b1/0x800 [ 373.234281] ? finish_task_switch+0x1ca/0x810 [ 373.238787] ? syscall_return_slowpath+0x5c0/0x5c0 [ 373.243727] ? syscall_return_slowpath+0x30f/0x5c0 [ 373.248670] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 373.254047] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 373.258905] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 373.264094] RIP: 0033:0x455329 [ 373.267286] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 373.275004] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 373.282289] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 373.282298] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 373.282311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 373.282317] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 000000000000002d 2018/04/19 09:43:28 executing program 4 (fault-call:3 fault-nth:46): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000200)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)="6e650010000000000000626c65735f6d61746368657300") ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000180)=""/69) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000040)=""/165) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="4f7f9d9356f571a3743d5372a0905d449fff5cf903afe06c48ae7516c421784bcc188189bfb8e03f92b728cbaefb2d19fce6a4fc82d9c413db02aad9c81dd9dab68dfeada6f2e84edafd4b1a918f5d132aa58abeace89d5c75c79c371d7f5cf646ef64dfdc4f7a0f47c57f098e77fe1499a3b774dcfbc1a2b0e569fdb4b3a156e1038cc0bb2ee63dbc11c36a18fa854783a92ac71d1e64e1d84c200c3ff82e6f0b00002e980ff34e61dcb3cb523de377e900480000"], &(0x7f0000000240)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/19 09:43:28 executing program 7: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000009c0)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000cc0], 0x0, &(0x7f0000000240), &(0x7f0000000cc0)}, 0x78) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'veth1_to_bond\x00', 0x80}) 2018/04/19 09:43:28 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x140, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00143200fe8000000000000000000000000000aafe8006000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="52d5a6cd00"], &(0x7f00000002c0)) 2018/04/19 09:43:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000a7c000)=0x2, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40400, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000100)={0x4, &(0x7f0000000080)=[0x1ff, 0x52, 0xffffffffffffffff, 0xfffffffffffffeff]}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) 2018/04/19 09:43:28 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9afe, 0x800) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0x6, 0x1, 0x0, 0x7, [{0x2, 0x4, 0x7fff, 0x0, 0x0, 0x280}, {0x31, 0x80000000, 0x5}, {0x4, 0x1df, 0x4, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x9, 0x0, 0x0, 0x200}, {0x2, 0x2, 0x2, 0x0, 0x0, 0x2001}, {0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2801}, {0x1, 0x8001, 0xfffffffffffff001, 0x0, 0x0, 0x2000000000000003}]}) r1 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x100000000, 0x80000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000340)={0x2, r1}) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000003c0)="4380792c4d057aedafcc79b4ddbb2e751103f3fe90c021326ebdccc80f17752532e5fbec6dca8f8a67144bc07839b9942e00aa2090f994cbbec488b472bfb833cbb68c2661ee56fc489bf2620d80fc5a733efb72ef9c68eb67b203694e104b9b7093ff1676ac5e50f5f1f17f6db54f11d45caa23c5329d8dd3f68ac58312770778c054405d341ccc45a9bb41e8486b4a0f5c20c8316ccec640b4fb120563") clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futex(&(0x7f0000000040)=0x1, 0x1, 0x0, &(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000080)=0xffffffdffffffffd, 0xc0fffffc) 2018/04/19 09:43:28 executing program 3: add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240), 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) 2018/04/19 09:43:28 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000000c0)=""/6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00'}) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/04/19 09:43:29 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7bd035ae, 0x101c00) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={r3, 0x1}) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r0) 2018/04/19 09:43:29 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000070ffe3)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)='j', 0x1}], 0x1) shutdown(r0, 0x1) write(r0, &(0x7f0000000000)="88", 0x1) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x3, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000100)={{0x7, 0x200}, 'port1\x00', 0x2, 0x2, 0x4, 0x2, 0x8, 0x2, 0x4, 0x0, 0x0, 0xe6c3}) sendmsg$nl_generic(r1, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xfffffffffffffe56, &(0x7f0000023ff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000002d00ff00000800030008000000fd1d7eba9abea7c515d9c9f4717978ccac7b0644b9653bcc6c2b3eee7c9cf5bdbdcae2329988611facd1a52d10394a3600b1ae694b5593119bce7a1cb1fbd498fe185561cde441996106f11470929825bc90bbfec1b1dbd8509def0aafd7afa507c43dd977159ad5d53fd23d9b239d3cfdf3b1e228a69b31143387d28b0e3213811ce728551fc0f4c09193e2ca7b7892f19d0d7f8256098baaf468f487d5efb019892df202d7a0daebc77a08fc71000a0feee331820904039dee0132dc4419eda65616710b9039ba2f080d7472a1186878c821b591176e0756d65c681fa935"], 0x20}, 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xffff, 0x1) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000000)='eql\x00') ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000080)) 2018/04/19 09:43:29 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)="76589dad6a54746f5f7465616d00", 0xffffffffffffff88) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000340)={0x1, 0x5, 0xff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}]}, &(0x7f0000000140)=0x10) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000440)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x430000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000380)) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000280)="b9920900000f32c74424009a8b0000c74424023c7b0fe6c7442406000000000f0114243e26f3afc4a17dded6da122e2e660f38827331c4c215bf084a0fc719470f07360f2182", 0x46}], 0x1, 0x4, &(0x7f0000000300), 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2}, 0x8) 2018/04/19 09:43:29 executing program 6: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x10000000082) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r0, r1, &(0x7f0000023000), 0x26a950b) [ 373.596502] kernel msg: ebtables bug: please report to author: Entries_size never zero 2018/04/19 09:43:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) [ 373.655124] kernel msg: ebtables bug: please report to author: Entries_size never zero 2018/04/19 09:43:29 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ifreq(r0, 0x89b7, &(0x7f00000002c0)={"73688130000000003f6a3ea4d7af879c", @ifru_ivalue=0x9}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8000, 0x0) 2018/04/19 09:43:29 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x40000) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x7) getsockopt$inet_tcp_int(r0, 0x6, 0xb, &(0x7f0000001000), &(0x7f0000012000)=0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/19 09:43:29 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000280)={&(0x7f0000230000/0x600000)=nil, 0x600000}) [ 374.281853] FAULT_INJECTION: forcing a failure. [ 374.281853] name failslab, interval 1, probability 0, space 0, times 0 [ 374.293182] CPU: 0 PID: 26705 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 374.300373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.309714] Call Trace: [ 374.312299] dump_stack+0x1b9/0x294 [ 374.315919] ? dump_stack_print_info.cold.2+0x52/0x52 [ 374.321139] ? perf_trace_lock_acquire+0xe3/0x980 [ 374.325972] ? unwind_get_return_address+0x61/0xa0 [ 374.330899] ? __save_stack_trace+0x7e/0xd0 [ 374.335217] should_fail.cold.4+0xa/0x1a [ 374.339274] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 374.344374] ? save_stack+0xa9/0xd0 [ 374.347998] ? save_stack+0x43/0xd0 [ 374.351609] ? kasan_kmalloc+0xc4/0xe0 [ 374.355485] ? __kmalloc_node_track_caller+0x47/0x70 [ 374.360586] ? __alloc_skb+0x14d/0x780 [ 374.364460] ? alloc_skb_with_frags+0x137/0x760 [ 374.369117] ? sock_alloc_send_pskb+0x87a/0xae0 [ 374.373775] ? unix_dgram_sendmsg+0x4f9/0x1730 [ 374.378344] ? sock_sendmsg+0xd5/0x120 [ 374.382224] ? ___sys_sendmsg+0x525/0x940 [ 374.386357] ? __sys_sendmmsg+0x240/0x6f0 [ 374.390493] ? do_syscall_64+0x1b1/0x800 [ 374.394541] ? find_held_lock+0x36/0x1c0 [ 374.398599] ? check_same_owner+0x320/0x320 [ 374.402904] ? print_usage_bug+0xc0/0xc0 [ 374.406951] ? rcu_note_context_switch+0x710/0x710 [ 374.411867] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 374.417129] __should_failslab+0x124/0x180 [ 374.421367] should_failslab+0x9/0x14 [ 374.425157] kmem_cache_alloc_node+0x272/0x780 [ 374.429750] ? __lock_acquire+0x7f5/0x5140 [ 374.433982] __alloc_skb+0x111/0x780 [ 374.437694] ? skb_scrub_packet+0x580/0x580 [ 374.442010] ? debug_check_no_locks_freed+0x310/0x310 [ 374.447185] ? __lock_acquire+0x7f5/0x5140 [ 374.451404] ? perf_trace_lock_acquire+0xe3/0x980 [ 374.456257] ? perf_trace_lock+0x900/0x900 [ 374.456287] alloc_skb_with_frags+0x137/0x760 [ 374.464994] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 374.469743] ? graph_lock+0x170/0x170 [ 374.473535] sock_alloc_send_pskb+0x87a/0xae0 [ 374.478023] ? find_held_lock+0x36/0x1c0 [ 374.482076] ? sock_wmalloc+0x1e0/0x1e0 [ 374.486056] ? lock_downgrade+0x8e0/0x8e0 [ 374.490208] ? kasan_check_read+0x11/0x20 [ 374.494344] ? do_raw_spin_unlock+0x9e/0x2e0 [ 374.498739] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 374.503310] ? kasan_check_write+0x14/0x20 [ 374.507535] ? do_raw_spin_lock+0xc1/0x200 [ 374.511771] ? _raw_spin_unlock+0x22/0x30 [ 374.515931] unix_dgram_sendmsg+0x4f9/0x1730 [ 374.520331] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 374.525858] ? unix_stream_connect+0x11c0/0x11c0 [ 374.530601] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 374.536123] ? _copy_from_user+0xdf/0x150 [ 374.540260] ? copy_msghdr_from_user+0x3bc/0x560 [ 374.545094] ? security_socket_sendmsg+0x94/0xc0 [ 374.549848] ? unix_stream_connect+0x11c0/0x11c0 [ 374.554602] sock_sendmsg+0xd5/0x120 [ 374.558317] ___sys_sendmsg+0x525/0x940 [ 374.562276] ? lock_repin_lock+0x410/0x410 [ 374.566499] ? copy_msghdr_from_user+0x560/0x560 [ 374.571251] ? __schedule+0x809/0x1e30 [ 374.575141] ? find_held_lock+0x36/0x1c0 [ 374.579225] ? lock_downgrade+0x8e0/0x8e0 [ 374.583396] ? rcu_note_context_switch+0x710/0x710 [ 374.588318] ? check_same_owner+0x320/0x320 [ 374.592625] ? __might_sleep+0x95/0x190 [ 374.596599] __sys_sendmmsg+0x240/0x6f0 [ 374.600568] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 374.604891] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 374.610414] ? fput+0x130/0x1a0 [ 374.613688] ? ksys_write+0x1a6/0x250 [ 374.617509] ? __ia32_sys_read+0xb0/0xb0 [ 374.617529] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 374.626414] __x64_sys_sendmmsg+0x9d/0x100 [ 374.630643] do_syscall_64+0x1b1/0x800 [ 374.634522] ? finish_task_switch+0x1ca/0x810 [ 374.639014] ? syscall_return_slowpath+0x5c0/0x5c0 [ 374.643953] ? syscall_return_slowpath+0x30f/0x5c0 [ 374.648882] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 374.654246] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.659089] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 374.664267] RIP: 0033:0x455329 [ 374.667448] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 374.675142] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 374.682396] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 374.689651] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 374.696906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 374.704168] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 000000000000002e 2018/04/19 09:43:30 executing program 4 (fault-call:3 fault-nth:47): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:30 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x60000000000) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)) 2018/04/19 09:43:30 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000200)="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", &(0x7f0000000140)=""/134}, 0x18) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1000, 0xad5f69bba3a3bb5b) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000040)={0x3, 0x43}) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000740)=""/170) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000100)=0xcd) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000340)={"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"}) 2018/04/19 09:43:30 executing program 6: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000400)=""/129) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002fc0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000016c0)="cec19e64479dda2dcdb48e2e2ce54a19b854db77403c065c24914ef7e5303ed4aba83e961dfd62337937eb78b7d013976d", 0x31}], 0x1, &(0x7f00000004c0)}], 0x1, 0x0) r3 = semget(0x0, 0x3, 0x80) semctl$SETVAL(r3, 0x1, 0x10, &(0x7f0000000280)=0x9) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000004c0)=0x7) recvmsg(r2, &(0x7f00000003c0)={&(0x7f0000000100)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/237, 0xed}], 0x1, &(0x7f0000000300)=""/149, 0x95}, 0x0) 2018/04/19 09:43:30 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="02000000010413330100efda8d20ae"], 0x20) write$rdma_cm(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="b17b7004"], 0x104) 2018/04/19 09:43:30 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x1000, 0x40002) 2018/04/19 09:43:30 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x59000)=nil, 0x59000, 0x2000004, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000027ffc), 0x4) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x3ff, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0xf3, 0xffffffff, 0x7f, 'queue0\x00', 0x1}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000100)={0x1, 0x2, 0x2a01, 0x0, 0x0, [], [], [], 0x4, 0x5}) 2018/04/19 09:43:30 executing program 3: add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240), 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) 2018/04/19 09:43:30 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000300)={{0x7fff, 0x6, 0x0, 0x8001, "8830dd889ec181702328fca30355a9e051eeff9726001013a5c7e3df510fc591c5bf7c403fe38d89857d5e20", 0x200000000000000}, 0x0, 0x0, 0x7, r3, 0x5, 0x88, "659f1ac32e517b24ee52563fb1f115b8ab8dbeecd16bd466eaf2a5e49c6e216e79edb19c0412625c9f3046175923116127455f876ce02376ebf767a396c5507a", &(0x7f0000000180)="2a73656375726974791c2c73656c696e757873656375726974792a70707031297070703173797374656d245c3a7d00", 0x2f, [], [0x7fff, 0x1c0, 0x2, 0x3]}) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000000)={0x1, {{0x2, 0x4e20, @multicast2=0xe0000002}}, {{0x2}}}, 0x108) 2018/04/19 09:43:30 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80c0, 0x0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000040)=0x3) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x3, 0x4000) unshare(0xc000000) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) 2018/04/19 09:43:30 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00006fcff3)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0xffff, 0x4000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000e94ffc)=0x2000000000000000) dup3(r0, r1, 0x0) 2018/04/19 09:43:30 executing program 5: perf_event_open(&(0x7f0000223000)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x6f774093, 0x80000) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000800)={[0x32, 0x38, 0x39, 0x36, 0x34, 0x31, 0x37]}, 0x7) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x8, &(0x7f0000000700)=[{&(0x7f0000000180)="95b961be6a087d4372f422b8b1aa6d593b1c093d805764aa65efe06eb76c6e97f87975c01ba087e1c237f1aec1081330158dc343e567fa5709e27c5307a3f6dc1aa89dd16a99ab88e47674977e8bbacf6e0525945c1cb25fbb8b22f44f22e237ddddcb7dd90ce194cfbf921d90035f29b809fb7066d8d2c9d67ff9449a503dcd400aef5ccccc11d4bbfdc605", 0x8c}, {&(0x7f0000000240)="007b12135a613601196b5b8490cef193d241661e46d13436e52a9dd164df1f0f279d04924e51ed62f61f5331a0c777e00aa764b421b117b1f221cb6d994b4b1ec1544a89ea2773aa4571b9240ad509f3da1d22755e833f578fac3dacc1a2b04cb06ae7f836d7c1f9a7939951ec853a458c460ccd200ea8def803e468676c2ad1b7556f4c3124dea409564083367c8c4e9d2625a8ad836b5aaf71019a36ea108b6b13ce9b23deeb4ee2e616c3e0b30a01553e4be1d9fb6118d15f8489adfbe0b8979f0447dec4768b", 0xc8, 0x1ff}, {&(0x7f0000000340)="0d3208cebdcac7345344a9e03a513f33b428e5f8b51699e18acf243e470adfd6c254d05b60a8b9869983718d78114e9fd295eb3802766d4d95a857cfc7264398f83137f84a92d5c092ac300e496ac2c6ff106d3306fd4d437bb97aaa39e514b9d55c6a0bc6eac3163a2b25a94a6446671394beb5a17cae99031d86453a80be2aea44030d0c03230ebf86bb1a6662aa2ddb3ec93403cf53902b6b9fa25404", 0x9e, 0x100000000}, {&(0x7f0000000400)="61b60ee9b6c4d310d217c80dce3583b154f804388cf66a4f2dcd6cd7f4412ccacd81e311b01ab89158911ab2b6c4a76bb111a548c311b25ddeeab76587f4804434e1f82823c54e80388cd049e744f0e31e252afc2ccd1642b5417601a7828a50b899437e3577e3561094db8e8a6c7923b9a8a20bb1177833cab4f4cfc96dda784e8b8f4bd8376f5d98a31aa7bccab2698a35daa026686a93baec703d2f96c1e6ece1e41433119e362b682d544dea57061df8b4e2ce134626488e43d91c4ec7d6bde0610cbcd9d3f2ee102a", 0xcb, 0x3f}, {&(0x7f0000000500)="d57c62768b6f35c3e060cf895d79749f3c262301a648bea6fc585d6f43043c7a1b0a4be858f67d6e425c0f06380638bac93d0381731345704e904d24992d58d5611b568b4bf1dcbe2dc1f0e79a634619d0a52642b56def22b660de", 0x5b, 0x80000001}, {&(0x7f0000000580)="efc18533ae3c281448e6c340bee2f584b362aa8f559e5dbecb413ddc74917a104a89c6c4d3dc16075299c117280f65943a40136c97e64ed8a669f4c1f083016bf36fa5aeba003637f0e47e6919a4a5e70188be36c7c36aec4bc6c63071a60fb8eb7a5fede1658895c614825b955e2ad3644a4b518c75840d5b3772b96ced9e4f0629d4399b35230bb41f3a703c5dc30964855afcb628d1d26461b747b0854a04e4b3c9b064fa9794e58e230340cd63f474c52a41cbaf196245f7aa", 0xbb, 0x8}, {&(0x7f0000000640)="443e41f0def4a3f0440397e9ab2953b5ab1ef58ddb75630d547b81f2357377e8962ce8a1da5a5737e8af6884fb0a66bbd1b204707ce3636c96346664a016dfa600e0583425c46de28bae", 0x4a}, {&(0x7f00000006c0)="9aef617277712be49b76efac5d854989d035f48d547208892df74bc62b56", 0x1e}], 0x1000, &(0x7f00000007c0)={'nouuid,', {[{@allocsize={'allocsize', 0x3d, [0x2d, 0x39, 0x78, 0x0, 0x36, 0x67, 0x77, 0x7f, 0x65]}, 0x2c}, {@gquota='gquota', 0x2c}, {@dax='dax', 0x2c}, {@grpquota='grpquota', 0x2c}]}}) syz_emit_ethernet(0x61, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff000014000000001100ae89ed5acc82aec38319fb9b154149604258d523e763ab128d71cf50d4dcf265a7427b22fd4d9405000000f41442232a82234cdc82818729b691464f263f891201e7c1a39b1f9ed1"], 0x0) 2018/04/19 09:43:30 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="3000000000000000cd64d4c8062d672bb5ff000000000000", 0x200002, 0x0) read(r0, &(0x7f0000000180)=""/142, 0x8e) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0xc0, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000140)={0x8, &(0x7f00000000c0)=[{0x80000000, 0x800}, {0x4}, {0x10001, 0x4}, {0x2, 0x1}, {0x80, 0x101}, {0x1, 0x80000000}, {0x3f, 0x7f}, {0x0, 0x80000001}]}) openat$cgroup_int(r0, &(0x7f0000000300)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xf0e, 0x20001) ioctl$TIOCSBRK(r2, 0x5427) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) read(r2, &(0x7f0000000740)=""/232, 0xfffffffffffffe08) 2018/04/19 09:43:30 executing program 7: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x109001, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000009000)='/dev/dsp\x00', 0x1, 0x0) ioctl$int_in(r0, 0x80000080044dfe, &(0x7f0000002000)) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 2018/04/19 09:43:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = accept(r0, 0x0, &(0x7f0000000300)) sendto$llc(r1, &(0x7f0000000040), 0x0, 0x8000, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) accept$packet(r1, 0x0, &(0x7f0000000040)=0xfffffffffffffffe) 2018/04/19 09:43:30 executing program 6: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="87f6fede71bdffffffffffff0800450020300000000000029078ac1414bbac1414001200907800000000450000000000000000000000ac1414aaac141400"], &(0x7f0000000200)) r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000240)=""/16) syz_emit_ethernet(0x135, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x4, 0x6, "badcf4", 0xff, 0x6c, 0x40, @loopback={0x0, 0x1}, @empty, {[@routing={0x0, 0xa, 0x3, 0x8001, 0x0, [@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @remote={0xfe, 0x80, [], 0xbb}]}, @srh={0x87, 0x6, 0x4, 0x3, 0x9, 0x800, 0x20, [@dev={0xfe, 0x80, [], 0x19}, @local={0xfe, 0x80, [], 0xaa}, @mcast2={0xff, 0x2, [], 0x1}]}, @hopopts={0x37, 0x3, [], [@enc_lim={0x4, 0x1, 0x8001}, @pad1={0x0, 0x1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfffffffffffffff7}, @ra={0x5, 0x2, 0x8}, @padn={0x1}]}, @srh={0x32, 0x2, 0x4, 0x1, 0xfffffffffffffffd, 0x2, 0x4, [@loopback={0x0, 0x1}]}], @udp={0x4e21, 0x4e20, 0x37, 0x0, [@guehdr={0x1, 0x9, 0x0, 0x80000001, 0x100}], "f673c7cc47dc41245687941090332f59014ae5758d56ae651be4a6708ebf2cb597c12c4cee3b8d992bce2c"}}}}}}, &(0x7f0000000180)={0x1, 0x2, [0x21, 0xa49, 0xf24, 0xdf7]}) [ 375.675245] FAULT_INJECTION: forcing a failure. [ 375.675245] name failslab, interval 1, probability 0, space 0, times 0 [ 375.686547] CPU: 0 PID: 26783 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 375.693752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.703090] Call Trace: [ 375.705672] dump_stack+0x1b9/0x294 [ 375.709299] ? dump_stack_print_info.cold.2+0x52/0x52 [ 375.714474] ? is_bpf_text_address+0xd7/0x170 [ 375.718971] ? kernel_text_address+0x79/0xf0 [ 375.723364] ? __unwind_start+0x166/0x330 [ 375.727500] should_fail.cold.4+0xa/0x1a [ 375.731545] ? __save_stack_trace+0x7e/0xd0 [ 375.735852] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 375.740949] ? save_stack+0xa9/0xd0 [ 375.744563] ? save_stack+0x43/0xd0 [ 375.748180] ? kasan_kmalloc+0xc4/0xe0 [ 375.752051] ? kasan_slab_alloc+0x12/0x20 [ 375.756187] ? find_held_lock+0x36/0x1c0 [ 375.760253] ? check_same_owner+0x320/0x320 [ 375.764564] ? rcu_note_context_switch+0x710/0x710 [ 375.769483] __should_failslab+0x124/0x180 [ 375.773717] should_failslab+0x9/0x14 [ 375.777515] kmem_cache_alloc_node_trace+0x26f/0x770 [ 375.782603] __kmalloc_node_track_caller+0x33/0x70 [ 375.787520] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 375.792271] __alloc_skb+0x14d/0x780 [ 375.795976] ? skb_scrub_packet+0x580/0x580 [ 375.800283] ? debug_check_no_locks_freed+0x310/0x310 [ 375.805456] ? __lock_acquire+0x7f5/0x5140 [ 375.809679] ? find_held_lock+0x36/0x1c0 [ 375.813733] alloc_skb_with_frags+0x137/0x760 [ 375.818212] ? kasan_check_read+0x11/0x20 [ 375.822345] ? do_raw_spin_unlock+0x9e/0x2e0 [ 375.826738] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 375.831478] ? graph_lock+0x170/0x170 [ 375.835263] sock_alloc_send_pskb+0x87a/0xae0 [ 375.839751] ? find_held_lock+0x36/0x1c0 [ 375.843793] ? sock_wmalloc+0x1e0/0x1e0 [ 375.847761] ? lock_downgrade+0x8e0/0x8e0 [ 375.851905] ? kasan_check_read+0x11/0x20 [ 375.856039] ? do_raw_spin_unlock+0x9e/0x2e0 [ 375.860429] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 375.864994] ? kasan_check_write+0x14/0x20 [ 375.869213] ? do_raw_spin_lock+0xc1/0x200 [ 375.873430] ? _raw_spin_unlock+0x22/0x30 [ 375.877562] unix_dgram_sendmsg+0x4f9/0x1730 [ 375.881962] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 375.887485] ? unix_stream_connect+0x11c0/0x11c0 [ 375.892230] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 375.897750] ? _copy_from_user+0xdf/0x150 [ 375.901884] ? copy_msghdr_from_user+0x3bc/0x560 [ 375.906624] ? security_socket_sendmsg+0x94/0xc0 [ 375.911363] ? unix_stream_connect+0x11c0/0x11c0 [ 375.916109] sock_sendmsg+0xd5/0x120 [ 375.919826] ___sys_sendmsg+0x525/0x940 [ 375.923781] ? lock_repin_lock+0x410/0x410 [ 375.928694] ? copy_msghdr_from_user+0x560/0x560 [ 375.933432] ? __schedule+0x809/0x1e30 [ 375.937309] ? find_held_lock+0x36/0x1c0 [ 375.941364] ? lock_downgrade+0x8e0/0x8e0 [ 375.945504] ? rcu_note_context_switch+0x710/0x710 [ 375.950417] ? check_same_owner+0x320/0x320 [ 375.954721] ? __might_sleep+0x95/0x190 [ 375.958681] __sys_sendmmsg+0x240/0x6f0 [ 375.962651] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 375.966976] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 375.972496] ? fput+0x130/0x1a0 [ 375.975756] ? ksys_write+0x1a6/0x250 [ 375.979540] ? __ia32_sys_read+0xb0/0xb0 [ 375.983588] __x64_sys_sendmmsg+0x9d/0x100 [ 375.987814] do_syscall_64+0x1b1/0x800 [ 375.991695] ? finish_task_switch+0x1ca/0x810 [ 375.996183] ? syscall_return_slowpath+0x5c0/0x5c0 [ 376.001095] ? syscall_return_slowpath+0x30f/0x5c0 [ 376.006012] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 376.011900] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 376.016734] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.021904] RIP: 0033:0x455329 [ 376.025074] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 376.032763] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 376.040018] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 376.047280] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 376.054532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 376.061783] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 000000000000002f 2018/04/19 09:43:31 executing program 4 (fault-call:3 fault-nth:48): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:31 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) write(r0, &(0x7f0000000000)="0646269bb65abafd84b0b3a3fdb66e3b9368e0c04c2a97890451787ec1ebb637be4a9e48b5ea6ef3365b7397951869640f2efe994103df814a39d03b1051e97470d8392032cba99b245c51831af9f600b035f3fc0e727febe7baabc464cca298e7459fc1e83adc0672bc1ffdaa56a322a35f043d01bf5e5bf9d9f38c88a25c51875db8e43f24697676c2c0f66cd443586526cded5e46ee50b330ef043e0b61249c21e7f4e3b8aca2da4ba8ce", 0xfffffffffffffebf) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'teql0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'teql0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8937, &(0x7f00000004c0)={'team0\x00', r1}) 2018/04/19 09:43:31 executing program 5: r0 = perf_event_open(&(0x7f00003a8000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x200, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000140)={{0x4, 0x1}, 'port0\x00', 0x20, 0x0, 0x8, 0x0, 0xd2b, 0x7, 0x8, 0x0, 0x3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)="6370752630000006fdfeff003c12b8d0cc69bf7fffcc364d7878b2fe44897367ffa75134df22ad89c89b0df602d72272e82ad32838002955c2db00000000000000050fb902ae9f2109333b00e30335ecfd7e89bff18829cb97541bd006bf3dcf376e93a15906083ba783fa3e7318893c26819bee569f728184be5efc06cc650d421908182b69c3730e559e2b6ca237f264987ed574e36cd3efd745ead1044fd7e82f7f65b71c79a10e2e605929cf8ccab2eadac54d1c3e7dae98996be67c10d7c236cde0355ab2fb0aaaaccdb64cd11d4db1b927234daae71562f2c40fa04b9aa17664350a37eb52480895070000008a0fc021db95d80d9b") ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='.)\\(\x00') 2018/04/19 09:43:31 executing program 6: r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="260000000001000009000000070006e501313fff08000000070000000000405f6f000000010000006efa0000"]}) 2018/04/19 09:43:31 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2c) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9c85, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) write$binfmt_elf32(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB=':E4F'], 0x4) 2018/04/19 09:43:31 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) capset(&(0x7f0000594ff8)={0x19980330, r0}, &(0x7f0000244000)={0x0, 0x400000}) r1 = socket(0xa, 0x2000000001, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x4, 0x48, [], 0x0, &(0x7f0000000000), &(0x7f00000001c0)=""/98}, &(0x7f0000000040)=0xffffffffffffffc7) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xfff, 0x4000) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0x20002, 0x0, [0x3, 0x39b, 0x4, 0x3, 0x159c000000, 0x3, 0x0, 0x3]}) 2018/04/19 09:43:31 executing program 7: prctl$intptr(0x21, 0x1) r0 = syz_open_pts(0xffffffffffffffff, 0x400001) syz_open_pts(r0, 0x41) prctl$void(0x22) 2018/04/19 09:43:31 executing program 3: add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240), 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0xff50) write$evdev(r0, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) 2018/04/19 09:43:31 executing program 2: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}}, {{@in6}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000180)=0x100) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000007d73cf61100f08004500000c000002907800000000ffff390d0000000000000002000000"], &(0x7f0000000000)) 2018/04/19 09:43:31 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000180000fa000000000000fff0", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@set_option={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$rdma_cm(r0, &(0x7f0000000000)=@listen={0x7, 0x8, 0xfa00, {r1}}, 0x10) 2018/04/19 09:43:31 executing program 3: add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240), 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0xff50) write$evdev(r0, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) 2018/04/19 09:43:31 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x0) r0 = inotify_init1(0x1) inotify_add_watch(r0, &(0x7f0000103000)='./control\x00', 0x40) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x440a03) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000100)={0x2, [0xfc4c, 0x800]}) ioctl$LOOP_CLR_FD(r1, 0x4c01) inotify_add_watch(r0, &(0x7f0000000040)='./control\x00', 0x22000002) 2018/04/19 09:43:31 executing program 0: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) r1 = socket$inet(0x2, 0x200000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000000), 0x4) 2018/04/19 09:43:31 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='[*[\x00', 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000e80)=@ethtool_per_queue_op={0x4b}}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000180)=0x5) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) write(r0, &(0x7f0000000000)="f7ea42337eb805da8d24d09f3c2100580900ccd45da0739a805009d8", 0x1c) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0x989680}}, &(0x7f0000000140)) 2018/04/19 09:43:31 executing program 1: unshare(0x20020000) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0xffffffdffffffffd, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000140)={0x10001, 0x0, &(0x7f0000ff9000/0x4000)=nil}) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='nfs4\x00', 0x8a1000, 0x0) ioctl$KDENABIO(r0, 0x4b36) poll(&(0x7f0000000400), 0x0, 0xd10) rename(&(0x7f0000e6dff8)='./file0\x00', &(0x7f0000b76000)='./file1\x00') 2018/04/19 09:43:31 executing program 3: add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240), 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0xff50) write$evdev(r0, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) [ 377.022696] FAULT_INJECTION: forcing a failure. [ 377.022696] name failslab, interval 1, probability 0, space 0, times 0 [ 377.033992] CPU: 1 PID: 26852 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 377.041183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.050522] Call Trace: [ 377.053098] dump_stack+0x1b9/0x294 [ 377.056717] ? dump_stack_print_info.cold.2+0x52/0x52 [ 377.061898] ? unwind_get_return_address+0x61/0xa0 [ 377.066812] ? __save_stack_trace+0x7e/0xd0 [ 377.071139] should_fail.cold.4+0xa/0x1a [ 377.075193] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 377.080281] ? save_stack+0xa9/0xd0 [ 377.083896] ? save_stack+0x43/0xd0 [ 377.087518] ? kasan_kmalloc+0xc4/0xe0 [ 377.091400] ? __kmalloc_node_track_caller+0x47/0x70 [ 377.096496] ? __alloc_skb+0x14d/0x780 [ 377.100365] ? alloc_skb_with_frags+0x137/0x760 [ 377.105023] ? sock_alloc_send_pskb+0x87a/0xae0 [ 377.109684] ? unix_dgram_sendmsg+0x4f9/0x1730 [ 377.114253] ? sock_sendmsg+0xd5/0x120 [ 377.118136] ? ___sys_sendmsg+0x525/0x940 [ 377.122273] ? __sys_sendmmsg+0x240/0x6f0 [ 377.126415] ? __x64_sys_sendmmsg+0x9d/0x100 [ 377.130831] ? do_syscall_64+0x1b1/0x800 [ 377.134908] ? find_held_lock+0x36/0x1c0 [ 377.138974] ? check_same_owner+0x320/0x320 [ 377.143281] ? print_usage_bug+0xc0/0xc0 [ 377.147325] ? rcu_note_context_switch+0x710/0x710 [ 377.152241] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 377.157512] __should_failslab+0x124/0x180 [ 377.161743] should_failslab+0x9/0x14 [ 377.165528] kmem_cache_alloc_node+0x272/0x780 [ 377.170101] ? __lock_acquire+0x7f5/0x5140 [ 377.174332] __alloc_skb+0x111/0x780 [ 377.178042] ? skb_scrub_packet+0x580/0x580 [ 377.182352] ? debug_check_no_locks_freed+0x310/0x310 [ 377.187536] ? __lock_acquire+0x7f5/0x5140 [ 377.191759] ? find_held_lock+0x36/0x1c0 [ 377.195829] alloc_skb_with_frags+0x137/0x760 [ 377.200312] ? kasan_check_read+0x11/0x20 [ 377.204446] ? do_raw_spin_unlock+0x9e/0x2e0 [ 377.208861] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 377.213608] ? graph_lock+0x170/0x170 [ 377.217402] sock_alloc_send_pskb+0x87a/0xae0 [ 377.221897] ? find_held_lock+0x36/0x1c0 [ 377.225951] ? sock_wmalloc+0x1e0/0x1e0 [ 377.229911] ? lock_downgrade+0x8e0/0x8e0 [ 377.234050] ? kasan_check_read+0x11/0x20 [ 377.238181] ? do_raw_spin_unlock+0x9e/0x2e0 [ 377.243267] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 377.247832] ? kasan_check_write+0x14/0x20 [ 377.252049] ? do_raw_spin_lock+0xc1/0x200 [ 377.256282] ? _raw_spin_unlock+0x22/0x30 [ 377.260427] unix_dgram_sendmsg+0x4f9/0x1730 [ 377.264845] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 377.270385] ? unix_stream_connect+0x11c0/0x11c0 [ 377.275141] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 377.280663] ? _copy_from_user+0xdf/0x150 [ 377.284797] ? copy_msghdr_from_user+0x3bc/0x560 [ 377.289540] ? security_socket_sendmsg+0x94/0xc0 [ 377.294289] ? unix_stream_connect+0x11c0/0x11c0 [ 377.299038] sock_sendmsg+0xd5/0x120 [ 377.302739] ___sys_sendmsg+0x525/0x940 [ 377.306701] ? copy_msghdr_from_user+0x560/0x560 [ 377.311454] ? find_held_lock+0x36/0x1c0 [ 377.315503] ? lock_downgrade+0x8e0/0x8e0 [ 377.319640] ? rcu_note_context_switch+0x710/0x710 [ 377.324555] ? check_same_owner+0x320/0x320 [ 377.328861] ? __might_sleep+0x95/0x190 [ 377.332829] __sys_sendmmsg+0x240/0x6f0 [ 377.336791] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 377.341097] ? __lock_is_held+0xb5/0x140 [ 377.345152] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 377.350673] ? fput+0x130/0x1a0 [ 377.353938] ? ksys_write+0x1a6/0x250 [ 377.357722] ? __ia32_sys_read+0xb0/0xb0 [ 377.361772] __x64_sys_sendmmsg+0x9d/0x100 [ 377.365997] do_syscall_64+0x1b1/0x800 [ 377.369888] ? finish_task_switch+0x1ca/0x810 [ 377.374367] ? syscall_return_slowpath+0x5c0/0x5c0 [ 377.379292] ? syscall_return_slowpath+0x30f/0x5c0 [ 377.384216] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 377.389565] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 377.394404] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 377.399581] RIP: 0033:0x455329 [ 377.402755] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 377.410450] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 377.417713] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 377.424967] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 377.432222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 377.439488] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000030 2018/04/19 09:43:33 executing program 4 (fault-call:3 fault-nth:49): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:33 executing program 0: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f000059aff4)='/dev/ashmem\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x4b, 0x40) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f00000000c0)=0x10000) r4 = dup3(r2, r1, 0x80000) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, ',mime_type-}'}, {0x20, '/dev/ashmem\x00'}], 0xa, "103ff85c9802c30f7168e77f8519bf96e1179a"}, 0x38) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000040)=0x3) 2018/04/19 09:43:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) syz_open_procfs(r1, &(0x7f0000000080)='net/protocols\x00') getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000002040)=""/4096, &(0x7f0000000000)=0xffffffffffffff22) 2018/04/19 09:43:33 executing program 3: r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) 2018/04/19 09:43:33 executing program 7: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sync_file_range(r0, 0x0, 0xfe, 0x4) close(r1) socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000080), 0x4) socket$kcm(0x29, 0x7, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000010000c0000000000400000001feffff050000000900000000000000000000000000000000000000010000c06200000002000000020000002000000002000000d77b3791000000000000000000000000"]) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x4, 0xb0, 0xbd, 0x4, 0x40, 0xaa0, 0x6, 0x1, 0x8, 0x2}) 2018/04/19 09:43:33 executing program 6: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f000057f000)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)='\x00', 0x1, r1) keyctl$setperm(0x5, r2, 0x0) keyctl$unlink(0x9, r2, r1) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x18700) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x10000, 0x200}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000100)={r4, 0x8}) 2018/04/19 09:43:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x8001, 0x80000001, 0x5, 0x2, 0x0, 0x7, 0x90000, 0x4, 0x80, 0x7, 0x4, 0x5, 0xff7, 0x0, 0x3ff, 0x4, 0x4, 0x6c7, 0x2, 0xfff, 0x0, 0x7ff, 0x4f, 0x0, 0x400, 0x7c, 0x5, 0x1, 0x7, 0xfbb8, 0xfffffffffffffff7, 0x8247, 0x101, 0x80000000, 0x3, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x81, 0x100000001}, 0x0, 0x2, 0x7c, 0x1, 0x4, 0x3f}, r2, 0xf, r1, 0x8) r3 = syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x1, 0x109080) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000280)) write(r0, &(0x7f0000000080)="1f00000010000900040000000000e7fb0300000408000200000004ad06ffef", 0x1f) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5bfd, 0xa00) r4 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f0000000180)={0x0, 0x0, 0x2}) 2018/04/19 09:43:33 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000f000)="240000001a00030207fffd946fa283bc04eee6d87986c49727008568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000fc0), 0x0, &(0x7f000000cf80)=""/128, 0x80}, 0x0) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000000600)=""/77, 0x4d}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x181802, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000002c0)={0x1f, 0x14, [0x9, 0x6, 0x2, 0x5a0, 0x1]}) recvmsg(r0, &(0x7f0000000680)={&(0x7f0000000040)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000580)=""/85, 0x55}, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000ff0), 0xff71) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x20000, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x8000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000240)={0x5, 0x8, 0x4, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'dummy0\x00'}) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000100)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000007c0)}, 0x0) [ 377.590989] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/19 09:43:33 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000480)='rdma.max\x00', 0x2, 0x0) write(r0, &(0x7f0000000200), 0xffffffffffffffd4) 2018/04/19 09:43:33 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x2440) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x27) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000280)={0x2, &(0x7f0000000040)=""/222, &(0x7f0000000240)=[{0x962f, 0x7e, 0x40, &(0x7f0000000140)=""/126}, {0x80000000, 0x55, 0x2, &(0x7f00000001c0)=""/85}]}) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000002c0)={&(0x7f0000ffc000/0x1000)=nil, 0x10000, 0x2, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0xffffffffffffffc7}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000300)={0x8, 0x100000001, 0xf786, 0x6, [], [], [], 0xfffffffffffffffb, 0x6, 0x81, 0x1000, "83f94420f30bccd9ed368fd73b4fe9dd"}) r1 = syz_open_dev$adsp(&(0x7f0000000440)='/dev/adsp#\x00', 0x4, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x80000000, 0x24000) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000004c0)={0x4000, 0x11000}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000500)={0xf9fc, 0x0, 0x10003, 0x100000001}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000540)={r3, 0x2}) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000580)) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f00000005c0)={0x7, r3}) socket$can_raw(0x1d, 0x3, 0x1) socket$bt_bnep(0x1f, 0x3, 0x4) socket$l2tp(0x18, 0x1, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x2000, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1f) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000640)) ioctl$sock_proto_private(r1, 0x89ea, &(0x7f0000000680)="e7eb47656adf0b2512807e39148c50aa33a94a39401c2ee5a66ba65d028370145ab25cd1e0b0d3e1c4e3e0689b0cbdaa8725c59de181dcfc953050e3565ed46f71c6abea5655") ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000700)=0x5) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740)='/dev/ptmx\x00', 0x200, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x2f) write(r5, &(0x7f0000000780)="d8134b5b2cd868", 0x7) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000007c0)={0x1, 0x7, [@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="e9fadb0eddf4", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1f}]}) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000840)='./file0\x00', 0x0, 0x3, &(0x7f0000000980)=[{&(0x7f0000000880)="a0c5876541fdb145561ab6f70d5a3cc9b8d1170f714c6ae9ba345218987159848dc35450ae2a998cdc8ea8776806949eb1ee196837af89b11dd9beb1ed6fc3509979ebaa83ccb87b2ef19d45e9aaccf6d79e5c4d66e0119f5d25a9595f080cec66", 0x61, 0x1}, {&(0x7f0000000900)="3de08728ef8493c48b330a3a5119422fb0e29e565de853c7", 0x18, 0x46d}, {&(0x7f0000000940), 0x0, 0x6b1}], 0x20, &(0x7f0000000a00)={[{@bh='bh', 0x2c}]}) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000a40)={0x8, 0xdd, "51ef6240f1af8ad7df87ecc9d1a3c19cf9f7d248ab461ddc633639d9272975b2929359f6d2f7bb58b113d97511ddee800da21955eea47910c6ffdb57a5cef59e2b908e259116628bfdc0ec1358392b103e274a0b2cee137989b36c2564589594e1c8359faa8fabda12f02bd0c595e9a70338bc34406a56505148504b285d0d44f1a27a941ffd8bfed4caca7d9ba54ff50661f4642d6881cd6a4f6ad448c4158575f093190fb1962e6137054ada5be6e1daf25e8681fa5d12f9a807b52f5e033e64ef3cb1e12d53d851d877e15e5820ca4df4840dd01ce650cdf6cc066d"}) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000b40)={'bond0\x00', {0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}) syz_open_dev$sndpcmp(&(0x7f0000000b80)='/dev/snd/pcmC#D#p\x00', 0x8, 0x4000) write$binfmt_script(r0, &(0x7f0000000bc0)={'#! ', './file0', [{0x20, 'bond0\x00'}], 0xa, "5bbfd3b0566befe03520b5f984aff1e5b105093d33b1679d9db367a47d6193df0655ce43a10017bab524bfa50375e9b8ca416882039c6a2e28235088cb7239ef352e51de9fab72b96222ca5c11606953eaac4666275568f2056ef57e4a8ff550df83d8bfb81aee909df660d4dae8a148eb05bb83437b6024e428f38cada633a18450e60f1dca2ea8c58765f73f"}, 0x9f) 2018/04/19 09:43:33 executing program 0: capset(&(0x7f00001e8ff8)={0x20080522}, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./file0\x00', 0x1) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x400) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000180)={0xb3ed, 0x5}) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000013c0)={0x0, 0x9, 0x5ee, &(0x7f0000000240)}) openat$cgroup_subtree(r0, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) chdir(&(0x7f0000000040)='./file0\x00') chroot(&(0x7f0000be2ff8)='./file0\x00') syz_mount_image$ntfs(&(0x7f00000001c0)='ntfs\x00', &(0x7f0000000200)='.\x00', 0x4, 0x3, &(0x7f0000001300)=[{&(0x7f0000000240)}, {&(0x7f0000000280)="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", 0x1000, 0x100000001}, {&(0x7f0000001280)="178965e28edc0e0d63bd85965ebb63a46c00e9c799a0c22607b197d213a71d557af9f09ee4c5c18be7983dd98e00d89dc831a6b6716ed575ddd2536954be6defc8cbce1e07535ae1af3ac74d32bab74d79d6813c9af2447a96e9d549ea08", 0x5e, 0xfffffffffffffffc}], 0x14015, &(0x7f0000001380)={[{@errors_continue='errors=continue', 0x2c}, {@show_sys_files_yes={'show_sys_files=yes', 0x3d, [0x3f, 0x35, 0x35, 0x39, 0x36, 0x36, 0x0, 0x30]}, 0x2c}]}) [ 377.650808] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/19 09:43:33 executing program 7: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f0000519fa8)=[@in6={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4f}]}, &(0x7f0000f91ffc)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f0000519fa8)=@framed={{0x18}, [@ldst={0x3, 0x0, 0xb, 0x1, 0x1}], {0x95}}, &(0x7f00005fc000)='GPL\x00', 0x8000, 0x1000, &(0x7f000062b000)=""/4096}, 0x48) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000040)=""/51) 2018/04/19 09:43:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80002, 0x401) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xd0, &(0x7f0000000000), 0x4) 2018/04/19 09:43:33 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x2, 0x1]) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000240)=0x1000000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) sendmsg(r0, &(0x7f0000001480)={&(0x7f0000000140)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000280)="fadb547a0a24ac0203f63b38e56cfbb2be0b297c8dfe11f798a92f94cf88d9a0ebf71f50aefeac80ebcf79b4648988aed8286cd28863b1a277a7c4daf36bb6e2c2b37ff50aa6e18574e669285d20cf5f3cd534a3fe49d8a8655823a7d0c6c0df2d7b68b4f9302524652e6726d8b952a30696b7cf93b36fe671471e4b9d4a866d492d15916529ddc829517c7a432c21b0dccad8eec3238d972e0db2d60d531d3a4a9dd6f76c5ff87ba78ea2f0fb4ff51e984d1a8bac", 0xb5}, {&(0x7f0000000080)="6959c78d487f89873cdc5296b8c2d17113967ae05795b46bb498a644f5aa3a5567c32e7c37b2d23dcb45512d1b85518937", 0x31}, {&(0x7f0000000540)="84e7d589e5ae419063db8006894f1cf7482cdb11f9b3ddf44e4a244c6a84d65686402cab1fee534367d03a4350a118893d8721c4b97bb582b01c4d0bcca2b077132a9305f7d069f1e3fbe19f9a9b6513f42384b664477f7095081838d2837475058a8acf0c87681c48997b7ecd30c6b48e9b0a2f76ea6db2d0e89b0fe72b8788f3cff5d210c7b84d590cda53707a846c733e2499f87e52c350095a41660b923ec3865cae1d471659dc", 0xa9}, {&(0x7f0000000700)="7c0eec194e061bde4b6707f465c409f3904d902496b8fb43b0a8293a0e7675589a7a639843756179701b0a54074e739d52c662b11739e4aae47f9f804b9a92f8383994d1ce1978085e8d903044ea0b893d964c7ec5e85c5573", 0x59}, {&(0x7f0000000880)="a0e1bfe3a358a3133d341581ffd5f492100727741a8f640800f2e22adaf4cc79d812fca4830fa481bbe80fcfcf429ebb7e0b1b9f725600effcc8d87ea5778612d321b8710836", 0x46}], 0x5}, 0x20000041) 2018/04/19 09:43:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x2) ioctl$TCFLSH(r0, 0x540b, 0x0) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) creat(&(0x7f00000006c0)='./file0\x00', 0x44) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) add_key(&(0x7f00000003c0)='syzkaller\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) unshare(0x0) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) epoll_create1(0x0) ioprio_set$pid(0x2, 0x0, 0x0) 2018/04/19 09:43:33 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000100)='anon_inodefs\x00', 0x0, &(0x7f000032e000)) chdir(&(0x7f0000f95000)='./file0\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000300)}]) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="b5cc3431b5b41a03da653e85c418c6031006613f81b67803d80cb57c53e9f707ed416bc1ff3ebd2641d469981d0965b45af121867d3b8388d499008895cb8abd2f5b69e89e61043252db69a96510c8989d085826") [ 378.426636] FAULT_INJECTION: forcing a failure. [ 378.426636] name failslab, interval 1, probability 0, space 0, times 0 [ 378.438152] CPU: 0 PID: 26921 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 378.445351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.454695] Call Trace: [ 378.457275] dump_stack+0x1b9/0x294 [ 378.460894] ? dump_stack_print_info.cold.2+0x52/0x52 [ 378.466082] ? is_bpf_text_address+0xd7/0x170 [ 378.470566] ? kernel_text_address+0x79/0xf0 [ 378.474961] ? __unwind_start+0x166/0x330 [ 378.479095] should_fail.cold.4+0xa/0x1a [ 378.483142] ? __save_stack_trace+0x7e/0xd0 [ 378.487453] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 378.492557] ? save_stack+0xa9/0xd0 [ 378.496188] ? save_stack+0x43/0xd0 [ 378.499800] ? kasan_kmalloc+0xc4/0xe0 [ 378.503669] ? kasan_slab_alloc+0x12/0x20 [ 378.507800] ? find_held_lock+0x36/0x1c0 [ 378.511866] ? check_same_owner+0x320/0x320 [ 378.516176] ? rcu_note_context_switch+0x710/0x710 [ 378.521089] __should_failslab+0x124/0x180 [ 378.525307] should_failslab+0x9/0x14 [ 378.529093] kmem_cache_alloc_node_trace+0x26f/0x770 [ 378.534184] __kmalloc_node_track_caller+0x33/0x70 [ 378.539101] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 378.543842] __alloc_skb+0x14d/0x780 [ 378.547546] ? skb_scrub_packet+0x580/0x580 [ 378.551855] ? debug_check_no_locks_freed+0x310/0x310 [ 378.557033] ? __lock_acquire+0x7f5/0x5140 [ 378.561252] ? perf_trace_lock_acquire+0xe3/0x980 [ 378.566089] alloc_skb_with_frags+0x137/0x760 [ 378.570590] ? graph_lock+0x170/0x170 [ 378.574379] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 378.579125] ? graph_lock+0x170/0x170 [ 378.582908] sock_alloc_send_pskb+0x87a/0xae0 [ 378.587388] ? find_held_lock+0x36/0x1c0 [ 378.591431] ? sock_wmalloc+0x1e0/0x1e0 [ 378.595390] ? lock_downgrade+0x8e0/0x8e0 [ 378.599524] ? kasan_check_read+0x11/0x20 [ 378.603656] ? do_raw_spin_unlock+0x9e/0x2e0 [ 378.608050] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 378.612614] ? kasan_check_write+0x14/0x20 [ 378.616838] ? do_raw_spin_lock+0xc1/0x200 [ 378.621057] ? _raw_spin_unlock+0x22/0x30 [ 378.625191] unix_dgram_sendmsg+0x4f9/0x1730 [ 378.629595] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 378.635121] ? unix_stream_connect+0x11c0/0x11c0 [ 378.639869] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 378.645388] ? _copy_from_user+0xdf/0x150 [ 378.649521] ? copy_msghdr_from_user+0x3bc/0x560 [ 378.654264] ? security_socket_sendmsg+0x94/0xc0 [ 378.659004] ? unix_stream_connect+0x11c0/0x11c0 [ 378.663750] sock_sendmsg+0xd5/0x120 [ 378.667451] ___sys_sendmsg+0x525/0x940 [ 378.671420] ? copy_msghdr_from_user+0x560/0x560 [ 378.676166] ? find_held_lock+0x36/0x1c0 [ 378.680222] ? lock_downgrade+0x8e0/0x8e0 [ 378.684368] ? rcu_note_context_switch+0x710/0x710 [ 378.689281] ? check_same_owner+0x320/0x320 [ 378.693590] ? __might_sleep+0x95/0x190 [ 378.697553] __sys_sendmmsg+0x240/0x6f0 [ 378.701531] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 378.705837] ? __lock_is_held+0xb5/0x140 [ 378.709987] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 378.715512] ? fput+0x130/0x1a0 [ 378.718772] ? ksys_write+0x1a6/0x250 [ 378.722555] ? __ia32_sys_read+0xb0/0xb0 [ 378.726603] __x64_sys_sendmmsg+0x9d/0x100 [ 378.730823] do_syscall_64+0x1b1/0x800 [ 378.734699] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 378.739536] ? syscall_return_slowpath+0x5c0/0x5c0 [ 378.744446] ? syscall_return_slowpath+0x30f/0x5c0 [ 378.749363] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 378.754715] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 378.759543] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 378.764731] RIP: 0033:0x455329 [ 378.767902] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 378.775592] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 378.782842] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 378.790102] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 378.797354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 378.804605] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000031 2018/04/19 09:43:34 executing program 4 (fault-call:3 fault-nth:50): socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:34 executing program 5: r0 = socket$inet(0x10, 0x0, 0xb6) sendmsg(r0, &(0x7f0000000180)={0x0, 0x36d, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001000ff3044ba0a0c6fc283a724a600800200000000000000000000002c002800ff01000000000000cefdd06cbedea21326a498a654d47bb5b10f838f00944d8eb3ba0141", 0x4c}], 0x1}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x8181) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040)=0x6) 2018/04/19 09:43:34 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) preadv(r0, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x0) 2018/04/19 09:43:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="d3ab27191a010023560fd9d5e03eba602dff05b82756df62", 0x18) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000002cc0)="ae", 0x1}], 0x1, &(0x7f0000000440)=ANY=[]}}], 0x1, 0x8000) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x7, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f00000001c0)={r0, 0xfffffffffffff95b}) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0xb, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x43dfe7263569c514) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000100)) 2018/04/19 09:43:34 executing program 7: r0 = socket(0x40000000015, 0x5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x80040) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000040)=0x94c) socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet(r0, &(0x7f0000f7db7f), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f00000069c0)=[{{&(0x7f0000004680)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000004740), 0x0, &(0x7f0000004780)=""/4096, 0x1000}}, {{&(0x7f0000005780)=@nfc, 0x80, &(0x7f0000006980)}}], 0x2, 0x140, &(0x7f0000006c00)={0x77359400}) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000140)=""/6) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000100)="36e28a7eaaf11b46") socket$can_raw(0x1d, 0x3, 0x1) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f00000000c0)={0x5, 0x9, 0x9, 0xaaa, 0xc0000000000}) 2018/04/19 09:43:34 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x210000, 0x0) sendto$inet(r0, &(0x7f0000021fea)="01", 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000034f6b)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0xfffffffffffffffd) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x74, &(0x7f000002ff48)={0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}}}, &(0x7f0000023ffc)=0x1f7) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x1) 2018/04/19 09:43:34 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, './file0\x00'}, 0x100000001) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0x81, 0x6}) 2018/04/19 09:43:34 executing program 3: r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0x0, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) 2018/04/19 09:43:34 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4003d, 0x0) pwrite64(r0, &(0x7f0000000000), 0xfffffdcb, 0x0) fdatasync(r0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000040)={0x0, 0xff, 0x6, 0x1, 0x5}) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='ipddp0\x00'}) 2018/04/19 09:43:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=@bridge_newneigh={0x30, 0x1c, 0x801, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @loopback={0x0, 0x1}}]}, 0x30}, 0x1}, 0x0) ioctl$void(r0, 0xc0045878) 2018/04/19 09:43:34 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f000090d000/0x1000)=nil, 0x1000, 0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x5}) 2018/04/19 09:43:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00002ec000)="00fcdf7f00200000000003ff9f3f000100014700008a19f5d46f79ae9d8670539dc75596f524d81ad9e301b37f37a87223") ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='coredump_filter\x00') openat(r0, &(0x7f0000000140)='./file0\x00', 0xc0, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000000c0)) openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) 2018/04/19 09:43:34 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300091059f2ce871a40000000000000000000b349dc00000200130002000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010005000500000000000a40000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000075a8a420a2af8e22ef02fc9ded2b33a8cb5b68eb7e15427fbfc692acf4fcdd625b595c7bad9bb5c67ff237d3d6"], 0x80}, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r2}) [ 379.091131] QAT: Invalid ioctl 2018/04/19 09:43:34 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000001700)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000016c0)={0xffffffff}, 0x111}}, 0x20) write$rdma_cm(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000280000fa00000000000000000a00000009000000fe80000000000000000000000000000007000000fa1b7f5af9b95d89a20ec1f362328d90bce8773eef0723ce132ddaa59a4dba68db753ac506b9eb2dc0a2c9e70dc087fbaf73f1e508b9616ab88d9742dbff63fae208077d9d9cc52ae9c7d2e3509d523db773f21c62cc3e3141f62a562cd78a7720439b3c1dd9a116c839d233357607cbf9a7d7d5d5ff9f2ec3f97c7ea4bdfd3aeba27f891c4f2f912b24f6cfbd72115c15aeeb11c1974d78917cc3707a48291892806fe9cb546b3329cc4508f89e58e6595d25cf45", @ANYRES32=r1], 0x30) write$rdma_cm(r0, &(0x7f0000000040)=@listen={0x7, 0x8, 0xfa00, {r1}}, 0xff88) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x800, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f00000000c0)) 2018/04/19 09:43:34 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000a4000)='/dev/audio\x00', 0x105100, 0x0) ioctl$int_in(r1, 0x80000080045002, &(0x7f0000709ff8)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000880fe0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000060b000), 0x267}, 0x20) 2018/04/19 09:43:34 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000f9e000)) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x2, r1, 0x1}) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000040)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, {0x306, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xe}}, 0x20, {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 'team0\x00'}) r3 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) dup2(r3, r0) [ 379.265649] bridge0: port 1(team_slave_0) entered blocking state [ 379.271978] bridge0: port 1(team_slave_0) entered disabled state [ 379.789980] FAULT_INJECTION: forcing a failure. [ 379.789980] name failslab, interval 1, probability 0, space 0, times 0 [ 379.801299] CPU: 1 PID: 26997 Comm: syz-executor4 Not tainted 4.17.0-rc1+ #7 [ 379.808491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.817839] Call Trace: [ 379.820440] dump_stack+0x1b9/0x294 [ 379.824066] ? dump_stack_print_info.cold.2+0x52/0x52 [ 379.829255] ? unwind_get_return_address+0x61/0xa0 [ 379.834172] ? __save_stack_trace+0x7e/0xd0 [ 379.838481] should_fail.cold.4+0xa/0x1a [ 379.842538] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 379.847645] ? save_stack+0xa9/0xd0 [ 379.851280] ? save_stack+0x43/0xd0 [ 379.854910] ? kasan_kmalloc+0xc4/0xe0 [ 379.858812] ? __kmalloc_node_track_caller+0x47/0x70 [ 379.863917] ? __alloc_skb+0x14d/0x780 [ 379.867811] ? alloc_skb_with_frags+0x137/0x760 [ 379.872486] ? sock_alloc_send_pskb+0x87a/0xae0 [ 379.877170] ? unix_dgram_sendmsg+0x4f9/0x1730 [ 379.881766] ? sock_sendmsg+0xd5/0x120 [ 379.885663] ? ___sys_sendmsg+0x525/0x940 [ 379.889821] ? __sys_sendmmsg+0x240/0x6f0 [ 379.893985] ? __x64_sys_sendmmsg+0x9d/0x100 [ 379.898397] ? do_syscall_64+0x1b1/0x800 [ 379.902448] ? find_held_lock+0x36/0x1c0 [ 379.906506] ? check_same_owner+0x320/0x320 [ 379.910813] ? print_usage_bug+0xc0/0xc0 [ 379.914875] ? rcu_note_context_switch+0x710/0x710 [ 379.919818] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 379.925096] __should_failslab+0x124/0x180 [ 379.929321] should_failslab+0x9/0x14 [ 379.933117] kmem_cache_alloc_node+0x272/0x780 [ 379.937693] ? __lock_acquire+0x7f5/0x5140 [ 379.941917] __alloc_skb+0x111/0x780 [ 379.945619] ? skb_scrub_packet+0x580/0x580 [ 379.949931] ? debug_check_no_locks_freed+0x310/0x310 [ 379.955128] ? __lock_acquire+0x7f5/0x5140 [ 379.959348] ? .slowpath+0x15/0x15 [ 379.962891] alloc_skb_with_frags+0x137/0x760 [ 379.967385] ? graph_lock+0x170/0x170 [ 379.971183] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 379.975921] ? graph_lock+0x170/0x170 [ 379.979710] sock_alloc_send_pskb+0x87a/0xae0 [ 379.984190] ? find_held_lock+0x36/0x1c0 [ 379.988235] ? sock_wmalloc+0x1e0/0x1e0 [ 379.992197] ? lock_downgrade+0x8e0/0x8e0 [ 379.996334] ? kasan_check_read+0x11/0x20 [ 380.000466] ? do_raw_spin_unlock+0x9e/0x2e0 [ 380.005038] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 380.009614] ? kasan_check_write+0x14/0x20 [ 380.013844] ? do_raw_spin_lock+0xc1/0x200 [ 380.018078] ? _raw_spin_unlock+0x22/0x30 [ 380.022218] unix_dgram_sendmsg+0x4f9/0x1730 [ 380.026614] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 380.032139] ? unix_stream_connect+0x11c0/0x11c0 [ 380.036879] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 380.042399] ? _copy_from_user+0xdf/0x150 [ 380.046537] ? copy_msghdr_from_user+0x3bc/0x560 [ 380.051297] ? security_socket_sendmsg+0x94/0xc0 [ 380.056059] ? unix_stream_connect+0x11c0/0x11c0 [ 380.060824] sock_sendmsg+0xd5/0x120 [ 380.064549] ___sys_sendmsg+0x525/0x940 [ 380.068551] ? copy_msghdr_from_user+0x560/0x560 [ 380.073328] ? find_held_lock+0x36/0x1c0 [ 380.077410] ? lock_downgrade+0x8e0/0x8e0 [ 380.081569] ? rcu_note_context_switch+0x710/0x710 [ 380.086485] ? check_same_owner+0x320/0x320 [ 380.090790] ? __might_sleep+0x95/0x190 [ 380.094755] __sys_sendmmsg+0x240/0x6f0 [ 380.098718] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 380.103033] ? __lock_is_held+0xb5/0x140 [ 380.107093] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 380.112614] ? fput+0x130/0x1a0 [ 380.115877] ? ksys_write+0x1a6/0x250 [ 380.119671] ? __ia32_sys_read+0xb0/0xb0 [ 380.123722] __x64_sys_sendmmsg+0x9d/0x100 [ 380.127953] do_syscall_64+0x1b1/0x800 [ 380.131830] ? syscall_return_slowpath+0x5c0/0x5c0 [ 380.136748] ? syscall_return_slowpath+0x30f/0x5c0 [ 380.141667] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 380.147040] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 380.151888] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.157062] RIP: 0033:0x455329 [ 380.160237] RSP: 002b:00007f5b6561ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 380.167930] RAX: ffffffffffffffda RBX: 00007f5b6561f6d4 RCX: 0000000000455329 [ 380.175185] RDX: 0000000000000080 RSI: 00000000200bd000 RDI: 0000000000000014 [ 380.182447] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/19 09:43:35 executing program 4: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:35 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="14abb9cb", 0x4, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) ioctl$EVIOCGLED(r0, 0x4004510f, &(0x7f00000000c0)) 2018/04/19 09:43:35 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x1, 0x80000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000969ff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae08, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2018/04/19 09:43:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000100)=@in={0x2}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000040)=0x7fffffff) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f00000001c0)=0xc32f) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4, 0x4, 0x80, &(0x7f0000ffc000/0x4000)=nil, 0x7}) sendfile(r0, r1, &(0x7f0000000780), 0x8d05) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x800, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x8001) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000180)=0x2) 2018/04/19 09:43:35 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300091059f2ce871a40000000000000000000b349dc00000200130002000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010005000500000000000a40000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000075a8a420a2af8e22ef02fc9ded2b33a8cb5b68eb7e15427fbfc692acf4fcdd625b595c7bad9bb5c67ff237d3d6"], 0x80}, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r2}) 2018/04/19 09:43:35 executing program 5: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f000009d000)=""/224, 0xe0, 0x0, &(0x7f0000e6eff8)={0x77359400}) setpriority(0x0, 0x0, 0x8) mq_timedreceive(r0, &(0x7f0000c04f55)=""/171, 0xab, 0x0, &(0x7f0000f76000)={0x77359400}) mq_timedreceive(r0, &(0x7f0000a2e000)=""/40, 0x28, 0x0, &(0x7f0000b6bff0)) 2018/04/19 09:43:35 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000cc5000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r1) r4 = memfd_create(&(0x7f000003e000)='\t', 0x0) r5 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r5, r4) write$sndseq(r4, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000000)) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x1f, 0x0, 0x0, 0x3fd}], 0x30) 2018/04/19 09:43:35 executing program 3: r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0x0, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) [ 380.189701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 380.196951] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000032 2018/04/19 09:43:35 executing program 6: perf_event_open(&(0x7f0000fdef88)={0x2, 0x70, 0xe3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='5', 0x1) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x4, 0x100) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000100)=ANY=[@ANYBLOB="012fc7fc21bfa4246243c734f0ffffff"]) 2018/04/19 09:43:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)=@ipv6_newroute={0x1c, 0x18, 0x307, 0x0, 0x0, {0xa, 0x94}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2018/04/19 09:43:35 executing program 1: r0 = socket(0x8000000000011, 0x4000000000080002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00', r1}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 2018/04/19 09:43:35 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000600)) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x24201, 0x0) fallocate(r0, 0x11, 0x0, 0x8000000) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) [ 380.364425] bridge0: port 1(team_slave_0) entered blocking state [ 380.371685] bridge0: port 1(team_slave_0) entered disabled state 2018/04/19 09:43:35 executing program 2: r0 = inotify_init1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000080)) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) r3 = getpgrp(0x0) kcmp(r2, r3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_open_procfs(r2, &(0x7f0000000000)='net/llc\x00') ioctl$KDDELIO(r4, 0x4b35, 0x100) 2018/04/19 09:43:35 executing program 6: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0) write(r0, &(0x7f0000000040)="1600e5d1", 0x4) sendfile(r0, r0, &(0x7f0000001000), 0xffff) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x4, 0x9, 0x5, 0x2, 0x7234, 0x7}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/81) ioperm(0x80000000, 0x40, 0x8) select(0x40, &(0x7f0000000180), &(0x7f0000001240), &(0x7f0000001340), &(0x7f0000001380)={0x77359400}) 2018/04/19 09:43:36 executing program 1: r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r1 = syz_open_dev$sndmidi(&(0x7f0000000580)='/dev/snd/midiC#D#\x00', 0x3, 0x100) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000005c0)=""/222) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000440)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rfkill\x00', 0x10000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000004c0)) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000540)={'sit0\x00', {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80100, 0x0) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000040)={"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"}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x2b0200, 0x0) sendto$inet6(r0, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000)={0xa}, 0x1c) 2018/04/19 09:43:36 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300091059f2ce871a40000000000000000000b349dc00000200130002000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010005000500000000000a40000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000075a8a420a2af8e22ef02fc9ded2b33a8cb5b68eb7e15427fbfc692acf4fcdd625b595c7bad9bb5c67ff237d3d6"], 0x80}, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r2}) [ 380.648009] bridge0: port 1(team_slave_0) entered blocking state [ 380.654357] bridge0: port 1(team_slave_0) entered disabled state 2018/04/19 09:43:36 executing program 4: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x43, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:36 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0xeb, 0x101082) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140)={0x2, 0xc5, 0x20, 0x1ff, 0x9, 0xb8, 0x7, 0x1, 0x1, 0x7f}) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="0201000007000000000000000000000005000500000000000a00000000000000fe80000000000000000000000000000000000000000000000c26e976dc013578d189bd36791b56366f0050ca209e6219d13cf359017acc3bf1a101f2593070972d241a890f4fb3a395d372091265b4e37124e6e244452691aa786e445779eb34c0fa668978fd522f24c671214cc8408a38a56d209315705116df2d1607696e8315484d0e6f7d01f7b7ebcc6bd87cc33dfb1877d4589d830830c7ed2c96d881b46cf86991e971ae8675d84f64556b5e01bcfa757574ca204540ab8d98cd687b265c5e0a27383968bbc1fb3b290db8e49a3c25dd0fc45c"], 0x38}, 0x1}, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000000c0)={r3}) 2018/04/19 09:43:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="d179abab3a0b059aa7fb6536a56cfc09d06eb466", 0x14) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8000, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000180)=""/185) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) readv(r2, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/57, 0x39}], 0x1) 2018/04/19 09:43:36 executing program 3: r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0x0, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) 2018/04/19 09:43:36 executing program 2: time(&(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000ade000)={0x4, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, &(0x7f0000000000)=0x84) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/04/19 09:43:36 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x10000) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)={0x14, 0x1d, 0x100, 0x0, 0x0, {0x8067}}, 0x14}, 0x1}, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x10) r2 = semget(0x3, 0x5, 0x322) syz_mount_image$minix(&(0x7f0000000240)='minix\x00', &(0x7f0000000280)='./file0\x00', 0xfff, 0x7, &(0x7f0000000780)=[{&(0x7f0000000340)="75f65e63aa914b235273dc3f35d6ab495d06602299b4481b7d811d4a468ea8d071aca16392182da10d58f1ad42c10ac04a6f56765b427037d73b76b0df4601be8f362d589080e7ea573135df8fa952b883553ac0c144bb7c56c0f2cbb44bf194f9663d9b581ce0fc48cb8d067dc565cd6dec72160ec2c39db78e", 0x7a, 0x2}, {&(0x7f00000003c0)="04f095c15b714973e3548cdfbb991c4fe1837ef45e2d2d23bdbe081f27052d081983a8232d570d81d7a0cf2879fb24799db6d270fb7a22192fc7e188f1657ad2597c51e8238f3f4d1c1b9bf4ddf9f1f61c63a8419215bd4a5de4433d833b0e545f798d048216738eaf7cb8f9b56b1b42782db3f2b7e4d32ed8fdbf22700239f09740daeacc9acbc3a85a1b09e6a5f2fbf85f7a2aa005e3ac2f052ab494e6939a46c88eb12c94913e80bd825a58f236e24a295809b47ec2e24a37b9fab08ddc9f", 0xc0, 0x6}, {&(0x7f00000002c0)="74bfceb33bce3191ccf800a76c1f49b15d", 0x11, 0x3}, {&(0x7f0000000480)="43404d292fd2166745c5dc5eab158d5dcbaaf543f5c57654b982db805ff15d9f3b3c2b22b580b965ff9b9d675a7489118866bd5dd5b32465d7dc8146bb22a5a4f9ee3f3df0112112d1ed5095e5ec92046d", 0x51, 0x5}, {&(0x7f0000000500)="0d610ef6baa58501f0e6ae2a4c977440abb59fe725126a64ac7b90e7a728b5e06928e39b3f6cdae10f4c54d0666469976f3a9b66633fbb077a0c1f3734e4ac15320b669befe754d358f9f3", 0x4b, 0x6}, {&(0x7f0000000580)="cde848509f3fc66f3edd2600a9ce19c8ee2b59efe704efca73c5b38fde5bc087556dd697d9baa1705b704056ed09454768c5d2730708973589eb8c6632d508aa86a928431c805c9a6efae5d89f4c23bb9456e149e91d9ed85f0c42ee5f0a17b195d4b04a7ce887c3fc8c9d5489516bcaaf61435e7cf65c1c059b1ba1e458588e815b8f34710d331ea9fb879b782bdbfcd53672d8dd0a53d01347f6f38a2e44a44dc134b27b9bb14ff6b1719578b1d266ce4e441088b1a1def601d07534381a67ed5d57c148ab03c756", 0xc9, 0x1}, {&(0x7f0000000680)="026e5257758af5abf6593c94d73dea1151b39bc7efcb4c957a2b9b3654e459c8c49d5e59246c5fe20ca71438badc07d96d3f8c3e3bbe0fcecf7c73905b9968e2bfebe617103228312cea1037a25192f2a9083b47758bdce1e8bb69e2163820edd645a0cabada173ddc7fafcfb9e4f28b5bbaf7754f2c00bd0351cb63b919258ded7e", 0x82, 0xe00000}], 0x4000, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000200)=""/34) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000140)) 2018/04/19 09:43:36 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300091059f2ce871a40000000000000000000b349dc00000200130002000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010005000500000000000a40000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000075a8a420a2af8e22ef02fc9ded2b33a8cb5b68eb7e15427fbfc692acf4fcdd625b595c7bad9bb5c67ff237d3d6"], 0x80}, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r2}) 2018/04/19 09:43:36 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x92, 0x410000) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000240)=""/119) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8, 0x400000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000100)={0x6d, 0x4}) r3 = openat$cgroup_int(r0, &(0x7f0000000080)='rdma.max\x00', 0x2, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x12100) sendfile(r4, r3, 0x0, 0x101) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f00000001c0)) 2018/04/19 09:43:36 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f00008c3ff4)={0x10}, 0xc, &(0x7f0000d7d000)={&(0x7f00000002c0)=@getae={0xfc, 0x1f, 0x10, 0x70bd26, 0x25dfdbfc, {{@in=@loopback=0x7f000001, 0x4d6, 0xa, 0x6f}, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0xa277, 0x3502}, [@policy={0xac, 0x7, {{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@dev={0xac, 0x14, 0x14, 0x21}, 0x4e21, 0x9, 0x4e21, 0x0, 0x2, 0x20, 0x20, 0x88, r1}, {0xbce, 0x4, 0xffffffffffffffdf, 0xd6c, 0x7, 0x80000000, 0x9, 0x6c}, {0x9, 0x0, 0xad3670b, 0x9a}, 0x4, 0x0, 0x2, 0x0, 0x1, 0x3}}, @etimer_thresh={0x8, 0xc, 0x3}, @tfcpad={0x8, 0x16, 0x5}]}, 0xea}, 0x1}, 0x0) 2018/04/19 09:43:36 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xd8, 0x40840) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/124) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x40000071, 0x0, 0x50047263}]}) 2018/04/19 09:43:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x101, 0x40800) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x16ee, 0x7, 0xffff, 0x9]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1}) write$sndseq(r0, &(0x7f0000000240)=[{0xffff, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"416bc8caab396cdb5b1d1941"}}], 0xfffffef6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) [ 381.449563] bridge0: port 1(team_slave_0) entered blocking state [ 381.455953] bridge0: port 1(team_slave_0) entered disabled state 2018/04/19 09:43:37 executing program 2: r0 = msgget$private(0x0, 0x200) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000080)=""/59) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x200004, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x3f) socket$packet(0x11, 0x2, 0x300) 2018/04/19 09:43:37 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f000026eff8)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=""/146, 0x92}], 0x1, &(0x7f0000000800)=""/35, 0x23}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f0000000200)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) shutdown(r0, 0x2) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0xfff, {0x2, 0x4e22, @loopback=0x7f000001}, {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x11, 0x100, 0x200, 0x287, 0x8, 0x0, 0x1c4a, 0x3, 0x8}) r3 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000100)=""/98) 2018/04/19 09:43:37 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300091059f2ce871a40000000000000000000b349dc00000200130002000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010005000500000000000a40000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000075a8a420a2af8e22ef02fc9ded2b33a8cb5b68eb7e15427fbfc692acf4fcdd625b595c7bad9bb5c67ff237d3d6"], 0x80}, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/19 09:43:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x100000000, 0x3, 0x1, 0x7}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x80000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) signalfd4(r1, &(0x7f0000001640)={0x200}, 0x8, 0x80800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) connect$inet6(r0, &(0x7f00001cd000)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff]}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) sched_setscheduler(r3, 0x3, &(0x7f0000000180)=0x9) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) fchdir(0xffffffffffffffff) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x1, r1, 0x1}) r5 = creat(&(0x7f0000001840)='./file0\x00', 0xffffffffffffffff) inotify_init1(0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xe7) r6 = memfd_create(&(0x7f0000001800)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) write$cgroup_pid(r5, &(0x7f0000000100)=ANY=[], 0x1023c) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000001680)=ANY=[]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001340)={0x0}, &(0x7f0000001380)=0xc) fcntl$setown(r4, 0x8, r7) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000200)={0x80000000}) gettid() ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r6, 0x800443d2, &(0x7f00000001c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000001680)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) 2018/04/19 09:43:37 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x7, 0x800) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000080)=0x4) ioctl$LOOP_SET_STATUS(r0, 0xc0481273, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000100000000001bf3ffffff000065000000fdff00007db0e6330ee7f9b319d8000018e58d1c43473000e05026fb0000008001d1a7335d5bffff0001d7", "cea40005003500f7ff0002ff000000000000000000810000dc01867dfffe0200"}) [ 381.684346] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/04/19 09:43:38 executing program 4: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x4f, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x4e22, @multicast2=0xe0000002}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x8, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 'syzkaller1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000980)=@newspdinfo={0x5c, 0x24, 0x1, 0x0, 0x0, 0x0, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x5c}, 0x1}, 0x0) 2018/04/19 09:43:38 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300091059f2ce871a40000000000000000000b349dc00000200130002000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010005000500000000000a40000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000075a8a420a2af8e22ef02fc9ded2b33a8cb5b68eb7e15427fbfc692acf4fcdd625b595c7bad9bb5c67ff237d3d6"], 0x80}, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/19 09:43:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000264ff7)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = semget(0x1, 0x0, 0x34) semctl$IPC_RMID(r2, 0x0, 0x0) semget(0x0, 0x1, 0x84) ioctl$KVM_IRQ_LINE_STATUS(r1, 0x5421, &(0x7f0000000000)) semctl$GETPID(r2, 0x1, 0xb, &(0x7f0000000040)=""/100) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x4) semctl$IPC_RMID(r2, 0x0, 0x0) 2018/04/19 09:43:38 executing program 3: r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x0) read$eventfd(r0, &(0x7f0000000080), 0xff50) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) 2018/04/19 09:43:38 executing program 6: prlimit64(0x0, 0x6, &(0x7f0000000040), &(0x7f0000000080)) clone(0x0, &(0x7f00000012c0), &(0x7f0000001240), &(0x7f0000001380), &(0x7f0000001280)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000180)) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000100)={0x9, {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e20, @rand_addr=0x10001}, {0x2, 0x4e20, @loopback=0x7f000001}, 0x10, 0x80000001, 0x7, 0x0, 0x6, &(0x7f00000000c0)='bond0\x00', 0x0, 0xfffffffffffffffc, 0x400}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'nr0\x00', {0x2, 0x4e24, @broadcast=0xffffffff}}) write(r0, &(0x7f0000000240)="7fcf902871ab030a76e19149fbb6e3b366f92497c256e65da4ff58b6f6f6935ba05eee5ad5c6052265c9ae2e3cf95f3bf4cc5306eae046e64053be76097deae4fd2a12008a6bd8", 0x47) 2018/04/19 09:43:38 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) futex(&(0x7f00001d7000), 0x4000000002, 0xfffffffffffffffc, &(0x7f0000198ff0), &(0x7f0000a28ffc)=0xffffffffffffffff, 0x55da77f243942651) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x8000, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000000c0)=""/159) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000240)={0x2, 0x99, &(0x7f0000000180)="10e979b415fdeed1ee6b6a6cfaeae271ef91783ac73d757fa88bb789a5ab5ef23b3690eb0a5b77ccd8d926c215421c3c003cf7b73036fcdd03beda23e92648aec8c7d7da8a5fbfe4a165ea3bdc721787a887508135c8eed30ceb38b08278da16e32c973350d28137a902bc002e81352ab4df46a9770078ccf2f35c70e61ed428696efda7529168f8968c80200c3500fff97e55d48de6f96eba"}) 2018/04/19 09:43:38 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x200000) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000100)=[0x2, 0x3]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000021ff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x3, 0x64031, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000268000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="baf80c66b8d4d9f78d66efbafc0ced66b9800000c00f326635002000000f300f35dbe23e0fe3e40f20c06635040000000f22c0f3ab660f3a600474baf80c66b860489e8666efbafc0ced440f20c066350a000000440f22c0", 0x58}], 0x1, 0x0, &(0x7f00000000c0), 0x0) r4 = dup3(r3, r1, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/19 09:43:38 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="0401000000e3cd682c46090000b24066514d670600c0e180283db150877e", 0x1e, 0x0, &(0x7f0000000200)={0xa, 0x800, 0x2, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x1) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) [ 382.546433] QAT: Invalid ioctl 2018/04/19 09:43:38 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x800000, 0x0) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x4, 0x0, 0x0, 0x3}}, 0x26) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'syzkaller0\x00'}) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)) [ 382.591192] QAT: Invalid ioctl [ 382.621147] QAT: Invalid ioctl 2018/04/19 09:43:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001680)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(cast6-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000200)={&(0x7f0000000240)=@canfd={{0x2}, 0x0, 0x0, 0x0, 0x0, "a86bd3be67f6f187163916e75b68fabc7fb1f1960e3fffbe3ead1e635259b537173ef807eebb520a71c70dca7a369c7b1a0342387359a2d1c7ae7a2b3493a7d7"}, 0x48}, 0x1}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001500)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r3 = accept$alg(r2, 0x0, 0x0) recvmsg(r3, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001400)=""/6, 0x6}, 0x0) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003100)=""/226, 0xe2}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) 2018/04/19 09:43:38 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300091059f2ce871a40000000000000000000b349dc00000200130002000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010005000500000000000a40000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000075a8a420a2af8e22ef02fc9ded2b33a8cb5b68eb7e15427fbfc692acf4fcdd625b595c7bad9bb5c67ff237d3d6"], 0x80}, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/19 09:43:38 executing program 1: socket$netlink(0x10, 0x3, 0x400000000000403) r0 = socket$netlink(0x10, 0x3, 0x1f) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) sendmsg(r0, &(0x7f0000000940)={&(0x7f0000000140)=@nl=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc, &(0x7f0000000740)=[{&(0x7f0000000500)="15f0d9ab8bbd26d1f092dc5c1f67c28b", 0x10}], 0x1, &(0x7f0000000780)}, 0x0) [ 382.698169] QAT: Invalid ioctl 2018/04/19 09:43:38 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0xa28, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001d40], 0x0, &(0x7f0000001d00), &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000d00000000000000000069705f7674693000000000000000000074756e6c30000800000000000000000065716c00000000000000000000000000697064647030000000000000000000000000000000000004000000000000000000000000000000000000f00800002009000098090000616d6f6e6700000000000000000000000000000000000000000000000000000058080000000000000000000028000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000e0000002000000000000000000000000000000efff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000007f00000100000000000000007f0000010000000000000000e00000024e46515545554500000000000000000000000000000000000000000000000000080000000000000008000000000000006e666c6f6700000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000004d3afd162146a851354155087b2aa13d0a36a38f972508b322a771a08d6024907b6b6d0ebb12c33df025cc43b663b3f332deeed3732de11cfbcb0854c7d3691800000000"]}, 0xaa0) [ 382.738977] QAT: Invalid ioctl [ 382.757612] QAT: Invalid ioctl 2018/04/19 09:43:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0f31087128dc38c9b29503382619168bbbbdbe76be22bb95cd427b6c81f5b4d4da1ce3d2be14b2aa5e0d25bb8a3e3378a950f5b2302366536d7e6302bca58f4ece1d18d1b83ac6520aa010"], 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x100) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 382.814640] kernel msg: ebtables bug: please report to author: Valid hook without chain 2018/04/19 09:43:38 executing program 6: openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000000)) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000080)) ioctl(r0, 0xc0984124, &(0x7f0000003f75)="acf397fb0f694bdbea8a40a6e32f3940a6051982e39581d09762bc64cb8ae4aff2001042283085926755f53c4b19459b54f9088762a4e35859115b6a50ea832ad11397ecb31414c0e5262421bb41fbe93ac3d8b854c7f6619243d6708a") 2018/04/19 09:43:38 executing program 4: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x4b, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:38 executing program 1: mkdir(&(0x7f0000cfc000)='./file0\x00', 0x0) r0 = open(&(0x7f0000011ffa)='./file0\x00', 0x0, 0x0) fallocate(r0, 0x43, 0x0, 0xef75) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0xd, r1}) 2018/04/19 09:43:38 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000003d00)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @random="1ef5dc913a79"}, 0x2, {0x2}, 'gre0\x00'}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x16907e, 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)='D', 0x1}], 0x1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000001300)=@int=0x7, 0x4) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)="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", 0xff0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000001200)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r3) r5 = socket(0x10, 0x3, 0x4) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000001240)={0x1, 0x0, [{0xf, 0x2, 0x2, 0x3, 0x500, 0x0, 0xfffffffffffffff8}]}) write(r5, &(0x7f0000000000)="120000004e001f0014f9f400000000000300", 0x12) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000011c0)={0x1, r5, 0x1}) keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0) r7 = socket$vsock_dgram(0x28, 0x2, 0x0) close(r7) r8 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001340)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@rand_addr=0x8, 0x4e20, 0xffffffff80000000, 0x4e21, 0x7, 0xa, 0x0, 0x80, 0x6c, 0x0, r8}, {0x5, 0x1, 0x7f, 0x80, 0xfe98, 0x5, 0x6, 0xf3b3}, {0x5, 0x8, 0x5, 0x38}, 0x8, 0x6e6bbf, 0x0, 0x1, 0x0, 0x3}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4d3}, 0xa, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x3507, 0x1, 0x3, 0xf6, 0x9, 0x12f, 0x20}}, 0xe8) accept4$ax25(r1, &(0x7f0000000080), &(0x7f0000000100)=0x10, 0x80800) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'veth1_to_bridge\x00', {0x2, 0x14e1e, @remote={0xac, 0x14, 0x14, 0xbb}}}) socket$key(0xf, 0x3, 0x2) r9 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000001280)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r9, 0xc08c5336, &(0x7f0000000040)={0x1, 0x100000001, 0x2, 'queue0\x00', 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r9, 0xc0a85322, &(0x7f0000001440)) 2018/04/19 09:43:38 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/19 09:43:38 executing program 6: r0 = socket$inet(0x2, 0x800, 0xfffffffffffffffe) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x7, r0}) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f00000000c0)={0x0, 0xc29, 0x69, 0x4}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000011ffd)={0x2, 0x4e20}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000eedffc)=0x3, 0x4) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000eec000), 0x0, &(0x7f00009fdfaf)=""/81, 0x51}, 0x40002106) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x6}) r3 = shmget$private(0x0, 0x12000, 0x11, &(0x7f0000feb000/0x12000)=nil) ioctl$TUNSETLINK(r2, 0x400454cd, 0x320) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000200)={0x1, 0x1, [@empty]}) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000240)={0x1, 0xff, [{0x8}]}) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000100)=""/147) socket$inet6(0xa, 0x6, 0x0) 2018/04/19 09:43:38 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x1000000000000000, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x2, 0x800) getpeername$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='&ppp1eth1)em1wlan0em0eth1!vmnet1lo\x00') mmap(&(0x7f0000448000/0x3000)=nil, 0x3000, 0x2000008, 0x11, r0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2f6c) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000003c0)={0xc8b, 0x7}) splice(r0, &(0x7f0000000040), r0, &(0x7f00000000c0), 0x8001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000280)={0x3f, 0x0, 0x10000, 0x81}) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000004000000000000000700000000000000"]) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000380)={@mcast2={0xff, 0x2, [], 0x1}, 0x47, r3}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000002c0)={0x5, r2, 0x10000, 0x100}) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000240)={@dev={0xfe, 0x80, [], 0x16}, 0x42, r4}) 2018/04/19 09:43:38 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000acafed)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/182) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/141) 2018/04/19 09:43:38 executing program 3: r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0xff50) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) 2018/04/19 09:43:39 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000003e, 0x3462, 0x34}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000200)={0x18, 0x1, 0x2, 0x7ffffffffffff, 0x0, 0x0, {}, [@nested={0x4, 0xffffffff00000001}]}, 0x18}, 0x1}, 0x0) 2018/04/19 09:43:39 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x20040) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) setrlimit(0x8, &(0x7f00000a3ff0)) mlock(&(0x7f000090e000/0x4000)=nil, 0x4000) [ 383.496889] encrypted_key: master key parameter 'Ú߯؀'ÛpÂЬ&s•a ²é^[Ëq%ýS®D†_åCßm2—ƒqȸ<Ô„ [ 383.496889] “9î‹{ó¦[â?Âjö>Ï{ÃPyé):IøäP©áÊ [ 383.496889] ‚îÞŠŒ.>µÇk¯H=¸Çà†Á:ù¦ÃÔŸJVTo©Ù[»²öÁÕuš ý²¤£¶Ý±°M [ 383.496889] ×Þè°+ùÏÿÄ¡fx«Rñp/i®!]ßÁ¶:o׉6rõ6mSàÐt³*Iœ' is invalid 2018/04/19 09:43:39 executing program 2: r0 = syz_open_dev$urandom(&(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$int_out(r0, 0x2, &(0x7f00000000c0)) r1 = syz_open_dev$evdev(&(0x7f0000bfcfee)='/dev/input/event#\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000040)) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f000039ef7a)=""/134) 2018/04/19 09:43:39 executing program 3: r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0xff50) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) [ 383.579013] encrypted_key: master key parameter 'Ú߯؀'ÛpÂЬ&s•a ²é^[Ëq%ýS®D†_åCßm2—ƒqȸ<Ô„ [ 383.579013] “9î‹{ó¦[â?Âjö>Ï{ÃPyé):IøäP©áÊ [ 383.579013] ‚îÞŠŒ.>µÇk¯H=¸Çà†Á:ù¦ÃÔŸJVTo©Ù[»²öÁÕuš ý²¤£¶Ý±°M [ 383.579013] ×Þè°+ùÏÿÄ¡fx«Rñp/i®!]ßÁ¶:o׉6rõ6mSàÐt³*Iœ' is invalid 2018/04/19 09:43:39 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x3, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={r1, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r1}, &(0x7f0000000240)=0x8) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000100)={'lo\x00', {0x2, 0x4e20, @multicast2=0xe0000002}}) r3 = memfd_create(&(0x7f000088f000)='b\n\x00', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5011, r3, 0x0) fchmod(r0, 0x41) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ftruncate(r3, 0x200000) r4 = semget$private(0x0, 0x0, 0x2) semctl$SEM_INFO(r4, 0x5, 0x13, &(0x7f00000002c0)=""/109) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340)) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) 2018/04/19 09:43:39 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x60000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/04/19 09:43:39 executing program 3: r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0xff50) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) [ 383.686157] bridge0: port 1(team_slave_0) entered blocking state [ 383.692516] bridge0: port 1(team_slave_0) entered disabled state 2018/04/19 09:43:39 executing program 2: socket$bt_hidp(0x1f, 0x3, 0x6) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x4d072, 0xffffffffffffffff, 0x0) msync(&(0x7f000044a000/0x3000)=nil, 0x3000, 0x4) [ 383.764629] IPVS: ftp: loaded support on port[0] = 21 2018/04/19 09:43:40 executing program 4: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x1c, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:40 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000021000)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x50) socket$unix(0x1, 0x7, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8100, 0x0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f00000000c0)={0x4, 0x0, 0x1, 0x1ff, 0x1}) creat(&(0x7f000037ffea)='./file0/control/file0\x00', 0x0) mkdir(&(0x7f0000d6fff2)='./file0/file0\x00', 0x0) rename(&(0x7f0000347fea)='./file0/control/file0\x00', &(0x7f00007d7fec)='./file0/file0/file0\x00') 2018/04/19 09:43:40 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/19 09:43:40 executing program 1: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/19 09:43:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) sched_setattr(0x0, &(0x7f0000000080), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000140)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xfffffff0}, 0x1}, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xbbf, 0x100) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x8) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x48, &(0x7f0000000100), 0x0, &(0x7f0000000540)=""/94, 0x5e}}, {{&(0x7f00000003c0)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x20, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xffffff4a}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) 2018/04/19 09:43:40 executing program 3: r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) write$evdev(0xffffffffffffffff, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x401}, {}], 0x19a) 2018/04/19 09:43:40 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000fc0)='/selinux/enforce\x00', 0x16907a, 0x0) ftruncate(r0, 0x10001) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) pwritev(r0, &(0x7f0000001400)=[{&(0x7f0000001440)="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", 0xdda}], 0x0, 0x0) 2018/04/19 09:43:40 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x60000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}, 0x1}, 0x0) [ 384.542777] bridge0: port 1(team_slave_0) entered blocking state [ 384.544556] IPVS: ftp: loaded support on port[0] = 21 [ 384.549242] bridge0: port 1(team_slave_0) entered disabled state 2018/04/19 09:43:40 executing program 6: r0 = socket(0x1e, 0x2000000000000005, 0x0) connect$ax25(r0, &(0x7f000038aff0)={0x1e, {"86370506060008"}}, 0x10) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3ff, 0x400) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f00000000c0)={0x0, 0x6, 0xe2}) 2018/04/19 09:43:40 executing program 5: r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000001140)='tasks\x00', 0x2, 0x0) read(r0, &(0x7f0000001180)=""/192, 0xc0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x400, 0x80000) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000000c0)=""/4096) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f00000010c0)=ANY=[@ANYBLOB="1c400000000100060000000000000000000000000000ff000010ff010000000000009d238aefb1d6584cc004d1"], 0x1c}, 0x1}, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000001240)={0x2, 0xc9}) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x413) [ 384.595752] bridge0: port 3(team_slave_0) entered blocking state [ 384.602170] bridge0: port 3(team_slave_0) entered disabled state 2018/04/19 09:43:40 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/19 09:43:40 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/19 09:43:40 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"74c700a4fb7aba0015ccc74f0000e800", r1}) sendmsg$nl_route(r0, &(0x7f0000004dc0)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000004d80)={&(0x7f0000000980)=@newlink={0x2c, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}]}, 0x2c}, 0x1}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000240)={'bcsh0\x00', {0x2, 0x2c, @multicast2=0xe0000002}}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x100000001, 0x800) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000100)={{0xeb6f, 0x4, 0xe943ae7, 0x3, "ae517906ae3313f395137103a4609c9486f8edd76b62b7cbd7914692c599248e427d725436f93ac62b02c4dd", 0x50ee}, 0x0, 0x0, 0xffffffffffffffff, r4, 0x10001, 0x9, "1ada1a6d1501a422589be718437a610d0b0d654b060588b1beeb041b988635c2ac629f60f6303d8fa6a4375cad7babc794135e206b98e4292091bc2eea0579f2", &(0x7f00000000c0)='em0proc\x00', 0x8, [], [0x1, 0x9, 0x80000000, 0xffffffffffffffff]}) 2018/04/19 09:43:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @empty, 0x0, 0x1ff}) socket$inet6(0xa, 0xa, 0x8) [ 384.800938] bridge0: port 3(team_slave_0) entered blocking state [ 384.807346] bridge0: port 3(team_slave_0) entered disabled state [ 384.833810] bridge0: port 1(team_slave_0) entered blocking state [ 384.840172] bridge0: port 1(team_slave_0) entered disabled state 2018/04/19 09:43:40 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000c22000)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) writev(r1, &(0x7f0000ea1fe0)=[{&(0x7f000009f000)="4478ac3e5490bc2ab21f52b357cc09b11d26a20e08537cfd948fca23081bfc02166beac62d9594dd2e790206bf4bb33409db7a4986ec13", 0x37}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x301000, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x2) socket$inet6(0xa, 0x0, 0x8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x100, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 2018/04/19 09:43:40 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xfffffffffffffe00, 0x101000) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/76) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000240)="1f0000000104fffffd3b54c007110000f30501000b000300000010d10200cf", 0x1f) [ 385.001849] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 385.032552] netlink: 'syz-executor6': attribute type 3 has an invalid length. [ 385.059331] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/19 09:43:41 executing program 4: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0xa, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:41 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x7, 0xfffffffffffffffd}) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000006000)) read(r0, &(0x7f0000000200)=""/90, 0x5a) 2018/04/19 09:43:41 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r0}) 2018/04/19 09:43:41 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0xc200) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0xfffffffffffffff9, 0x80000000, 0x8000, 0x465a, 0x3, 0x2}) write(r0, &(0x7f0000df8fd9)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000330000), 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ff00ffe90009144a000ae9", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000fa3000)={&(0x7f0000d0b000)=@ax25, 0x10, &(0x7f00002e6f80), 0x0, &(0x7f0000878000)}, 0x0) 2018/04/19 09:43:41 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x8000, 0x1e, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) 2018/04/19 09:43:41 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7, 0x200) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)=@ioapic) seccomp(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000000)=[{0x9}, {0xffffffff}]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000180)=0x8) 2018/04/19 09:43:41 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0x9, 0x4000000000080, 0x2, 0x11}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000051e000)={r3, &(0x7f0000fc5000), &(0x7f00002ab000)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fccff0)={r3, &(0x7f0000fcc000)}, 0x10) socketpair(0x0, 0xb, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r5, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r6, 0x80, 0x10}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x90000000}) poll(&(0x7f0000000140)=[{r4, 0x8}, {r4, 0x2400}, {r3, 0x184}, {r7, 0x2000}], 0x4, 0x100000000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffff9c}) r9 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x10000, 0x200000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r8, 0x80000, r9}) mprotect(&(0x7f0000a97000/0x4000)=nil, 0x4000, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000a98000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc}) ioctl$KVM_TRANSLATE(r10, 0xc018ae85, &(0x7f0000000000)) 2018/04/19 09:43:41 executing program 3: r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) write$evdev(r1, &(0x7f00008c1fd0)=[{}], 0x18) 2018/04/19 09:43:41 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r0}) 2018/04/19 09:43:41 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x8, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20040000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) syz_open_procfs(r1, &(0x7f0000000100)='net/ipv6_route\x00') syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2000) 2018/04/19 09:43:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r4, r1, 0x2000000000000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x0, 0xfffffffffffffff9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="0f0fc3a7c4e3fd5c9cc47e4d0000a80f00170f2093b93e0b0000b805000000ba000000000f300f320f09a7660fe4ce0f35", 0x31}], 0x1, 0x0, &(0x7f0000000100), 0x0) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x7f, 0x40400) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000280)=@ioapic) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x8, 0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x1, 0x5f, &(0x7f0000000300), 0x100000000000007e) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 385.644848] ion_mmap: failure mapping buffer to userspace 2018/04/19 09:43:41 executing program 2: clone(0x200, &(0x7f0000151000), &(0x7f0000000080), &(0x7f0000f8b000), &(0x7f0000000100)) mknod(&(0x7f0000b75ff8)='./file0\x00', 0x2001001, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000240), &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='syscall\x00') lseek(r1, 0x2, 0x0) pread64(r1, &(0x7f0000000100)=""/53, 0x35, 0x0) creat(&(0x7f0000b7a000)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0x0, 0x2}) 2018/04/19 09:43:41 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000001c0)={r1, &(0x7f0000000140)=""/69}) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 2018/04/19 09:43:41 executing program 6: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000001640)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f0000001600)}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$tun(&(0x7f0000001540)='/dev/net/tun\x00', 0x0, 0x420082) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14, 0x8001, 0x20000000}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x250, 0x5, &(0x7f0000001440)=[{&(0x7f00000000c0)="6bafabffb343ad77c806eea4c699bdde9c36afa5342fc29e159de6c69f90c2a1168b0bdf849dec7a1971602611fa477575748e0e4020e012f36f227cd7c0007a4c1016f359dac463ae1d7333b481ce36b80e85cf901e712850504cc46d7f1e9210689a2ebb7668ca66f70854b6bc0022c804d0a8ebd763cdc22c60233d8cfab3b16d92018192b0f4f39e893f3a314f1a7a9cd0528d5e704b5eeaa79e299060d14590b0c04646b7b0185b502f38bcd8ff7748bf872d1de13ccedd1647b583989f54afc1293614ed7115d6212b77d074bfa99491a8c96a96d663b291c905", 0xdd}, {&(0x7f00000001c0)="2e647d20e419e69963624e9b444c214b1f73f8747c009f99d61d702883d8a80dec220aa08d6ff1fc718a3570bf4fbfe6a5397a6fb03ba55313aa3b4823c3702038a1d4bb5ae97cda0f96363280a1e26ce65c13e13f9b739a0e010baa625090e2a30fe54339aeda8866f739ce0c87b15c1cf8e18c824fb2380cb9e9437a99576f7b00ceae18cc87acfa401847b3a66f8905c79f9f895b2325f35a30aff45d", 0x9e, 0x1f}, {&(0x7f0000000280)="cc1a20efe5530edbbb40549b7ab65a92e6674e8dca2a1e5791915dbc55ca42daeb5ee2c39921a2a683df58164aa4eead2d264625a234b0b3a3cab5f9ab4529070bf60f434acfc19adbca6a3fbd8dc084cb671d9f8ebe385090cdf92f3f4ef1da98a976027cadda0e21c28d4cc3e3989c71799d49ed7461603908aef3ce8037173d72aea113f2e8daf9f0380a193ddc43b616667822", 0x95, 0x9c}, {&(0x7f0000000340)="5f74f3ed59d78246a68fc91de0bb8f83eba2356639eafc89094d1d8d4371c5c5a17d3411f475b08cf67c04dafc216c0b0da17086402f94381739bb32b11060a65854893d56fea577c7e0b148fca3abc26dc3b5b24e4c8b03b95d3eb14e0ea3b31ab8fabc4937eda1a62568ec530972f83b058bb849f2e1ef5f9f1ff1af992f5fde647705191bd05b00e22ddc61227b2d7e1b9327afcc62e22c310a41b19ace7e150be5b582dc0325c5fdb4844cb68c5c780755672e339c3dfe812f2ddd4bfdf0b2805e0e0ba24eeea839d421e25a589f8baddb8136d207624df36bbfe209d30473fbf4eca0b25a21ececa91fc036cbd40b4e142e8528", 0xf6, 0xa5d}, {&(0x7f0000000440)="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", 0x1000, 0x2}], 0x2000000, &(0x7f00000014c0)={[{@data_ordered='data=ordered', 0x2c}, {@user_xattr='user_xattr', 0x2c}, {@acl='acl', 0x2c}, {@barrier_flush='barrier=flush', 0x2c}, {@acl='acl', 0x2c}, {@barrier_flush='barrier=flush', 0x2c}, {@balloc_noborder='block-allocator=noborder', 0x2c}]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001580)={'ip6tnl0\x00', 0x1800}) openat$dir(0xffffffffffffff9c, &(0x7f00000015c0)='./file0\x00', 0x404240, 0x0) 2018/04/19 09:43:41 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r0}) 2018/04/19 09:43:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)="2ff0726f632f7379732f6e65742f697076342f76732f73796e635f716c656e5f6d617800", 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001d0001060000000000000000021ef506fa90209b1549301e00000000f0b426b636a12cff1a89d06062b9b3d9cc63737dff66be5ae0cc7a3a2fc262c1fd4aa024165466a6b47c5e71308db30a632e6482f3da3595560f30aba4b7f5e2b6b8043f0bbad153813d8fd208e4bf622d62a1ece2dac50dd839447d972ea497c134893d2c65e684e7e3f209e525614600bf9c818031ff0e66d04eb45278dcdafe2f3f67377c779d14d75db99581dbe2e0895f7996373a6dd100000000009f0aa6c86fce48df82c7ad22f4ee8a"], 0x1}, 0x1}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) [ 385.978207] QAT: Invalid ioctl [ 385.998367] QAT: Invalid ioctl 2018/04/19 09:43:42 executing program 4: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x9, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:42 executing program 2: clone(0x200, &(0x7f0000151000), &(0x7f0000000080), &(0x7f0000f8b000), &(0x7f0000000100)) mknod(&(0x7f0000b75ff8)='./file0\x00', 0x2001001, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000240), &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='syscall\x00') lseek(r1, 0x2, 0x0) pread64(r1, &(0x7f0000000100)=""/53, 0x35, 0x0) creat(&(0x7f0000b7a000)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0x0, 0x2}) 2018/04/19 09:43:42 executing program 3: r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) write$evdev(r1, &(0x7f00008c1fd0)=[{}], 0x18) 2018/04/19 09:43:42 executing program 6: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) clock_nanosleep(0x0, 0x1, &(0x7f0000002c80)={0x77359400}, &(0x7f0000002cc0)) r1 = fcntl$getown(r0, 0x9) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="0903f7e01f4ee9f41adf4a5065ed2954df2e5ad90be9e646f92dc4177e72102e7944a6561cd4a44f315bb2ce3bb90d1541ac290a6661339e84cda05c382bad107f125e20d6f19cc29b99700bc5", 0x4d, 0x0, &(0x7f0000cc7fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc0109207, &(0x7f0000000040)) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x200, 0x0) r4 = fcntl$getown(r0, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000002780)={{0x9, 0x22f822702da6acf8, 0x6, 0x0, "da9f01015661d9a9e0134d1edc295586d075755c22f455bc4713de43b5932649b13d2a145eef3ebd9f2ed741", 0x8}, 0x0, 0x0, 0x20, r4, 0x0, 0xdd, "5df20fa4d6a3f524262d187d60062deb5361d7bc287ccdc2c3cd16b1a179c73d61242750deb2261cea4000d9a85f650aafa5dc3f9d8dfb7e0f2c4b06b0e1efd6", &(0x7f0000002c40)='gretap0\x00', 0x8, [], [0x6, 0x80, 0x4, 0x1]}) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getuid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x0, 0x0, 0x0, r6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r1}) ioctl$sock_ipx_SIOCSIFADDR(r5, 0x8916, &(0x7f00000005c0)={'gretap0\x00', {0x4, 0x200, 0xccd, "941689225a0c", 0xa61}}) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) process_vm_writev(r7, &(0x7f0000000280)=[{&(0x7f0000000080)=""/191, 0xbf}, {&(0x7f0000000140)=""/238, 0xfffffffffffffc82}, {&(0x7f0000000240)=""/32, 0x20}], 0x3, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000300)=""/47, 0x2f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/159, 0x9f}], 0x7, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$TIOCNOTTY(r2, 0x5422) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r9 = gettid() ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000000640)={0x6, 0xffffffffffffff2e, r9, 0x0, r6, 0x20, 0x0, 0x2d}) shmget(0x3, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r8) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002940), &(0x7f0000002980)=0x4) ptrace$setopts(0x4206, r7, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000002a80)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}}, [0x3, 0x6, 0x496c, 0x8, 0x7, 0x10001, 0x1, 0x7, 0x4, 0x1, 0x0, 0xa7, 0x8, 0x0, 0x4]}, &(0x7f0000002b80)=0x100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000002bc0)={r10, 0x2}, &(0x7f0000002c00)=0x8) futex(&(0x7f0000000680), 0x0, 0x1, &(0x7f00000006c0), &(0x7f00000028c0), 0x2) ptrace$setopts(0x4206, r4, 0xf800000000000, 0xbc7d3bf21d2942d) getpeername$netrom(r8, &(0x7f00000029c0)=@full, &(0x7f0000002a40)=0x48) 2018/04/19 09:43:42 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [{[{0x9100, 0x89e5, 0x9, 0x1}], {0x8100, 0xc0, 0x0, 0x1}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "5ca19c", 0x0, "0cadd8"}}}}}}, 0x0) 2018/04/19 09:43:42 executing program 5: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"76cd8daea9a222213062726964676500", 0x400}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) 2018/04/19 09:43:42 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/19 09:43:42 executing program 1: open(&(0x7f0000000fc0)='./file0\x00', 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x80000000000a, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000048000), 0x1) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x40080, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}) 2018/04/19 09:43:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x101902) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a"}) 2018/04/19 09:43:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="47fdffff420700000002000000000000010020000800030900000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$btrfs(&(0x7f0000000100)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="5f9b81e2b9cf2f3d102d87f6f6217b1279053e44b969b518878e0bbd9663f9c3a57f864da15f0f59b15b70cbe9dec9d473adbc8d3c93ae8abe5e009663f8f36841a53e8c58321771851722d6f2f8e1ff11eea38714e2c62a393dac96a5ea6d7fc303cc4d014ab2ef65f58588655793683f9641e620cc1500a2d222a4ad9f5d4d5fec30bc99e05bf4cf7bdf4b26577ef5b83fa682d79f8fbce43ed519bbddabda4ca74e6c2f9627a973c08c4d68e1aff856e111eb8aca9f1dc2d6243355f820b3270da1176c3d18b7", 0xc8, 0x8}], 0x40, &(0x7f00000002c0)={[{@nodatasum='nodatasum', 0x2c}, {@compress_force_algo={'compress-force', 0x3d, 'lzo'}, 0x2c}, {@fragment_all='fragment=all', 0x2c}, {@nospace_cache='nospace_cache', 0x2c}]}) 2018/04/19 09:43:42 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/19 09:43:42 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000001500)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000012c0)=0x3) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f000004c000)=0x23, 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x40000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000013c0)=""/229) bind$inet(r4, &(0x7f000086eff0)={0x2, 0x4e22, @multicast2=0xe0000002}, 0x10) bind$inet6(r2, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000001380)=0xfffffffffffff001) r5 = semget(0x0, 0x3, 0x10) semctl$GETNCNT(r5, 0x3, 0xe, &(0x7f0000000080)=""/4096) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001140)='/dev/autofs\x00', 0x1, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000001180)={0x9, 0x0, [{0xd, 0x3, 0x7, 0x1000, 0x2}, {0x0, 0x7fffffff, 0x0, 0x8ba, 0x2}, {0x0, 0x3, 0x5c, 0x9, 0x40}, {0xc000001b, 0xfffffffffffff16f, 0x9, 0x8, 0x6}, {0x4, 0x8af, 0x100, 0xefd, 0x1}, {0xc0000001, 0x7fff, 0x52f, 0x4558f207, 0x6}, {0xb, 0x4, 0x20, 0xffffffffffff7fff, 0x3}, {0x80000019, 0x8d, 0x3, 0x3ff, 0xba7}, {0x0, 0x5, 0x100000000, 0x1, 0x10000}]}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f00000010c0)=0x4) syz_open_dev$sg(&(0x7f0000001080)='/dev/sg#\x00', 0x9, 0x181000) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f0000001340)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x19}, 'team_slave_0\x00'}}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/04/19 09:43:42 executing program 5: syz_emit_ethernet(0x6e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @random="ccc6a6d14243", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x29, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}, [], "a82f7ae1cd16d2e2"}}}}}}}, &(0x7f0000000100)) syz_emit_ethernet(0x1129, &(0x7f0000000140)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}, @empty, [{[], {0x8100, 0x293, 0x7, 0x3}}], {@ipv4={0x800, {{0xb, 0x4, 0x4, 0x5, 0x1117, 0x3, 0x3, 0x1ff, 0xff, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @multicast1=0xe0000001, {[@cipso={0x86, 0x16, 0x9, [{0x6, 0x10, "c4dcf914dae43805daa886e777f3"}]}, @end]}}, @gre={{0x0, 0x0, 0x1, 0x1, 0x0, 0xfd, 0x0, 0x1, 0x880b, 0x3f, 0x0, [0x7, 0x9cb3], "4779c3e2ca4c768e06b88e0ec0ecd907bd1be355d7e0f0c79484ceebb1a46c5ac1523be95fdbdeb6c7c27313349d4b51d28b484df9430a7fea8b90bdd57b22"}, {0x2, 0x0, 0x1, 0x10001, 0x0, 0x0, 0x800, [0x996, 0x200], "2d5727db8fd8e9d529b83726189927c85df1ff25fba74347db6c7ee1c88a3a9118c7"}, {0x9, 0x0, 0xd2f, 0x9, 0x0, 0x0, 0x86dd, [], "f1d6208681621552cc72dbcd75f4f9db802d8eefb2eda412eb37f38d7c7cecfb4928556a7eb91df1ad6790985ca426ca546c952b52c3f371933f5192dfe6"}, {0x8, 0x88be, 0x3, {{0x9, 0x1, 0x7, 0xffffffffffffff77, 0x8, 0x6, 0x8f2, 0x328}, 0x1}}, {0x8, 0x22eb, 0x2, {{0x8, 0x2, 0x0, 0xffffffffffffffff, 0x9, 0x100000000, 0x8, 0x1}, 0x2, 0x5, 0x4, 0x8, 0x4df, 0x2, 0x5, 0x2, 0x6}}, {0x8, 0x6558, 0x3, "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"}}}}}}, &(0x7f0000000000)={0x0, 0x1, [0x20, 0xfda, 0xfcb, 0x344]}) r0 = shmget(0x2, 0x4000, 0x804, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 2018/04/19 09:43:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d16abe130ffffc469f43b17362251a9eb57000029622c8fb5820865a50350f0c52a527d689d1da0b88765d6932c96899957000000000000000200000008000300da00eda2"], 0x1c}, 0x1}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x303) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x3, 0x3}], 0xb1, 0x0, &(0x7f0000000180)="ae76f9abc89ed4ec600139299e0be2bd170eaf61d750f3d7e689b2cad25cadf412c114c48a94e03f646da563928ce0fafa941cd03e8c164018a5b9387a179cdcedfe3b72edbb78134f840f7aa1464c1a5a5d15da9ce32eea96e14b005b03a943e72d97fbbab05e0f56f6fadd8c96079455c603ddff5f6de8e5c5ad41323a7756772d7fa34fd4c263a1cfab4ac0d830616acb73bd2cbd35206a37e894c66d93fd97bc8e28bcdc3ca5a1cbe424e0abad3839"}) 2018/04/19 09:43:42 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/19 09:43:42 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x100000000, 0x400201) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f00000000c0)=0xe8a) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x107d}, 0x2c) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x25, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x7) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x1f, 0x1, 0x1, 0x1}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x5c6e, 0x453, &(0x7f00001a7f05)=""/251}, 0x48) [ 387.612621] ptrace attach of "/root/syz-executor6"[4566] was attempted by "/root/syz-executor6"[27516] [ 387.809328] ptrace attach of "/root/syz-executor6"[4566] was attempted by "/root/syz-executor6"[27526] 2018/04/19 09:43:43 executing program 4: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x1a, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:43 executing program 2: clone(0x200, &(0x7f0000151000), &(0x7f0000000080), &(0x7f0000f8b000), &(0x7f0000000100)) mknod(&(0x7f0000b75ff8)='./file0\x00', 0x2001001, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000240), &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='syscall\x00') lseek(r1, 0x2, 0x0) pread64(r1, &(0x7f0000000100)=""/53, 0x35, 0x0) creat(&(0x7f0000b7a000)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0x0, 0x2}) 2018/04/19 09:43:43 executing program 1: socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipx_SIOCAIPXITFCRT(r1, 0x89e0, &(0x7f00000002c0)=0xef2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00004da000)={0x0, 0x2, 0x9000}, 0x4) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000005c0)={'yam0\x00', 0x800}) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000380)="3e85a55129d4321d4fa567452a44feb5440dc4115b225d49666bc0bc301917c0350d8d68ce31576072f2c5c6c247b0de797f1f1af3f2e75ead54e7df93c352628fb8416d26bfb95d3ce64b3a654f41998c191a9580656e25642bc834c42fd7b40fd84f00a51838e417ea0e55ff59a644f1c8e8cca4be1099329d4550c849511f20eb9d53e1031724624796dc327d", 0x8e}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000640)={'HL\x00'}, &(0x7f0000000680)=0x1e) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'eql\x00', {0x2, 0x4e21, @loopback=0x7f000001}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14}}}) socketpair(0x15, 0xa, 0x78, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000006c0)=0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000180)={0x1d}, 0x10) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x0, 0x200}, @sadb_x_policy={0x8, 0x12, 0x3, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@dev={0xac, 0x14, 0x14}, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback=0x7f000001, @in6=@dev={0xfe, 0x80}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x0, @broadcast=0xffffffff}, @in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, @sadb_x_nat_t_type={0x1, 0x14}]}, 0xd8}, 0x1}, 0x0) r8 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@sco, &(0x7f0000000480)=0x1ed, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000340)=0x4) ioctl$sock_proto_private(r8, 0x89ef, &(0x7f0000000240)="b55f2da3b158b8bcceb8f4e1f66f5519a46e4b39bc64555dd8e37e2db951a3e41df01dca0b60a48e33a7fd5cc1b15087eef6aee719091774770dbf901e7ec599ea23d678f60bd1235edde74dce3981307d4d0c854c95234d866b1fc8034ae0592c0993db25c358be4e15c7f818b4a5b9133a169c853dfe6582f7b70f99789d52711bb8f2aa4cb2f97db8a9193c219ddbfe2d1c17a1f756a59647e2ce1299ff15f3d34f01e84dfb23b222c9f92d031e1c5753206c7fe3f1c581a91f9255c912476fb6abbdc664b7") setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000a80)=[@in6={0xa, 0x4e24, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x6}, @in6={0xa, 0x4e21, 0x100, @dev={0xfe, 0x80, [], 0xe}, 0x7}, @in6={0xa, 0x4e20, 0x10000, @loopback={0x0, 0x1}, 0x4}, @in={0x2, 0x4e23, @multicast2=0xe0000002}, @in6={0xa, 0x4e24, 0x8, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, @in6={0xa, 0x4e20, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e23, 0x8000, @remote={0xfe, 0x80, [], 0xbb}, 0x3f01}, @in6={0xa, 0x4e20, 0x2, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1}, @in={0x2, 0x4e20}], 0x21a) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000780)={0x0, 0x40, 0x33}, &(0x7f0000000840)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) connect$can_bcm(r8, &(0x7f00000001c0)={0x1d, r9}, 0x10) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000700)=r6) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000040)={{0x6, 0x7, 0x8, 0x9, 0x200, 0xd4}, 0xd2dc}) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000480)=""/226, &(0x7f0000000580)=0xe2) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000600)=@assoc_id=r3, 0xfe17) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000300)={r3}, &(0x7f0000000340)=0x8) 2018/04/19 09:43:43 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local={0x1, 0x80, 0xc2}, @dev={0xac, 0x14, 0x14}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @local={0xac, 0x223, 0x14, 0xaa}}}}}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400501, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x101fe, 0x1, 0xf000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) socket$inet6(0xa, 0xa, 0x6) 2018/04/19 09:43:43 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x6) sendmsg$key(r0, &(0x7f000010bfc8)={0x0, 0x0, &(0x7f0000a8fff0)={&(0x7f0000e16000)={0x2, 0xb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x0, 0xffffffffffffff9a}]}, 0x18}, 0x1}, 0x0) 2018/04/19 09:43:43 executing program 3: r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) write$evdev(r1, &(0x7f00008c1fd0)=[{}], 0x18) 2018/04/19 09:43:43 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/19 09:43:43 executing program 0: r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000000080)}}], 0x1, 0x0) r1 = semget$private(0x0, 0x3, 0x80) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000340)=""/240) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) sendto(r0, &(0x7f000097f000), 0x360cc1, 0x0, &(0x7f0000bdb000)=@sco={0x1f}, 0x8) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x2, 0x80000) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000300)={0x9, 0x5, 0x49705556, 0x63, &(0x7f0000000180)=""/99, 0xf8, &(0x7f0000000200)=""/248, 0x3f, &(0x7f0000000100)=""/63}) 2018/04/19 09:43:43 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/19 09:43:43 executing program 6: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4080, 0x0) openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x3) 2018/04/19 09:43:43 executing program 5: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x3, 0xffffffffffffff9c, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000140)={0x7, 0x5, 0x18000, 'queue1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x84000000000008) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)="1500000000009c9c000000000000000000000010", 0x14) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x20180) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x1, r3}) ioctl$TIOCSBRK(r3, 0x5427) 2018/04/19 09:43:43 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x800, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000540)={0x101, 0x4, 0x0, r1}) nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) r2 = syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x1000, 0xa001) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3159, 0x40340) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000300)={0x10000, 0x3, 'client0\x00', 0x0, "dcdd86e19c1e3093", "db25582cc564610cf5092680969bf94bad874338871954275fbe488c27bcbc55", 0x80000000, 0x40}) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000140)=@generic={0x10001, 0x7, 0x1951}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x2, 0x0, 0x3, 0x1}) remap_file_pages(&(0x7f0000a55000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000280)={@local={0xfe, 0x80, [], 0xaa}, @loopback={0x0, 0x1}, @dev={0xfe, 0x80, [], 0x1d}, 0x80000000, 0x6, 0x7, 0x100, 0x8ff, 0x2, r4}) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000100)={0x1, [0x0]}) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaab08, &(0x7f0000000840), 0x0, &(0x7f0000000200)=ANY=[]) 2018/04/19 09:43:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/79) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x200010, 0x0, 0x6}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) connect$ax25(r1, &(0x7f00000002c0)={0x3, {"99e76c91a50941"}}, 0x6495a0e71dcc53f9) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000400)="baf80c66b8f5e29b8266efbafc0cb04cee0f21a90f22570fe2a2880b230f0f009678002e0f01cbba4300ec0f01cf66b8c63554fa0f23c00f21f86635030006000f23f8", 0x43}], 0x1, 0x0, &(0x7f0000000480), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/19 09:43:43 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x6, 0xfffffffffffffffc}, 0xebc276ba643f977d) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000081000000000d0000000000000000eac55f2424babae84552618f5ad4903c2d4f50677dad9beb80ec83eb189a948457f9735d9e81bee2b9a38f46031ad8e9d6d7367da5b0f49249544ad96db268449a14dbdae165edb5c9653eb2ad038b9aae5c3c7bec9bd46387a7828523a0a94dd2d89f385e3c8356f4bfe58fb65f016478470ba296aa7fa8c7b8e4281331b188e8dd35a1d77dc2d8a00ecec71f8aebf6a626161b75efff8a267bd698f2b994d76d22486f02e8ad1ee7"], &(0x7f0000000380)) 2018/04/19 09:43:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0), 0xffffffffffffffbd) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000140)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xfffffff0}, 0x1}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000003c0)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xe2}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x1, 0x0, 0x0) 2018/04/19 09:43:43 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/19 09:43:44 executing program 4: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x10, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:44 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x70180) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x14) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/19 09:43:44 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/19 09:43:44 executing program 5: r0 = socket(0xfffffffffffffffe, 0x0, 0x1) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg$alg(r0, &(0x7f0000001880)=[{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)}, {0x0, 0x0, &(0x7f0000000480)}, {0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=[@assoc={0x18, 0x117, 0x4}], 0x18}], 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0)={0xffff, 0xf97}, 0x2) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x2, {{0x2, 0x4e23, @multicast2=0xe0000002}}}, 0x88) 2018/04/19 09:43:44 executing program 2: clone(0x200, &(0x7f0000151000), &(0x7f0000000080), &(0x7f0000f8b000), &(0x7f0000000100)) mknod(&(0x7f0000b75ff8)='./file0\x00', 0x2001001, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000240), &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='syscall\x00') lseek(r1, 0x2, 0x0) pread64(r1, &(0x7f0000000100)=""/53, 0x35, 0x0) creat(&(0x7f0000b7a000)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0x0, 0x2}) 2018/04/19 09:43:44 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000010dfc)=ANY=[@ANYBLOB="70594d91a3b0a13d770000000b126f3f9503"], 0x14}, 0x1}, 0x0) 2018/04/19 09:43:44 executing program 3: r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x0, 0x0, 0x401}, {}], 0x19a) 2018/04/19 09:43:44 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x8004e20}, 0x1c) syz_extract_tcp_res(&(0x7f0000000080), 0x7, 0x401) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6050000000000000000000bba91d00000000000000000000000000aa00004e2800089078814c778fec55dd00859f2c2892797f7acadcbf251f38039b4a0cf4978679d412767a27b6ee2e09ff5db18f5593beb5a83318b3cfc7c9fc46a1d2a63343d49261c348d0a1f312186cb17d194747650c38331fde09ddbd4cc842086238c1e444adde3ec2daaf6b29c826edbcccc8a3010c8738136cd0fbcd3364111c88c7f12169a8a0356171421ac92cd4da4b00c11771012690cf1a0d9dec0f61430929948de0def05b1c3c9dd8e10000"], &(0x7f0000000040)={0xfffffffffffffffd}) 2018/04/19 09:43:45 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000707ff0)={0x0, 0x10, &(0x7f0000808000)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}, &(0x7f0000000040)=0x10) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x646, 0x100) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) shutdown(r0, 0x2000000000000002) 2018/04/19 09:43:45 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x80000002, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xf5, 0x25}, [@ldst={0x7, 0x1}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x6, 0xfe12, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-fixed-time)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r1, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000700)="b6ed95a221e73dfcaca2d1f5aa9ee29a67d2aa4c5da49f2cb5a8923ffd3df771504ee5295ea26ffee71f1a943878a518edce7c75a3e8c19d8312d0a8d244b963375ba3dca667ea566776acd0255db986688071ee059336b31f5710b8465707270f", 0x61}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x412, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/92, 0x5c}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x2, &(0x7f0000000340)=""/80, 0x50, 0x4}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x10000) r3 = shmget(0x3, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r3, 0x0) shmctl$IPC_RMID(r3, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000100)="7369742ffffffffff400") 2018/04/19 09:43:45 executing program 1: socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x1}) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x40) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000040)={0x3, 0x4, 0x8, 0x2}) 2018/04/19 09:43:45 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f000059aff4)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x400, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x2) mmap(&(0x7f00003f5000/0x2000)=nil, 0x2000, 0x0, 0x1011, r0, 0x0) 2018/04/19 09:43:45 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/19 09:43:45 executing program 7: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/19 09:43:45 executing program 0: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f0000000240)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x8c0, 0x0) recvfrom(r0, &(0x7f0000000280)=""/191, 0xbf, 0x1, &(0x7f0000000340)=@can={0x1d}, 0x80) r1 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0xfffffffffffffffb, 0x0) ioctl$sock_ipx_SIOCIPXNCPCONN(r1, 0x89e3, &(0x7f00000001c0)=0xd354) r2 = syz_open_dev$loop(&(0x7f0000000780)='/dev/loop#\x00', 0x2, 0x20000) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r6}, &(0x7f0000000140)=0x51) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000600)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/loop-control\x00', 0x200100, 0x0) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x901}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={r6, 0x4}, &(0x7f0000000440)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'bridge0\x00\x00 \x00'}) sendfile(r2, r2, &(0x7f0000000080)=0x5f, 0x102000004) sync() r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) dup2(r3, r7) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) socket$pppoe(0x18, 0x1, 0x0) seccomp(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{}]}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) 2018/04/19 09:43:45 executing program 7 (fault-call:2 fault-nth:0): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) [ 389.800091] FAULT_INJECTION: forcing a failure. [ 389.800091] name failslab, interval 1, probability 0, space 0, times 0 [ 389.811547] CPU: 1 PID: 27676 Comm: syz-executor7 Not tainted 4.17.0-rc1+ #7 [ 389.818743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.828086] Call Trace: [ 389.830667] dump_stack+0x1b9/0x294 [ 389.834288] ? dump_stack_print_info.cold.2+0x52/0x52 [ 389.839474] ? print_usage_bug+0xc0/0xc0 [ 389.843528] should_fail.cold.4+0xa/0x1a [ 389.847580] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 389.852672] ? graph_lock+0x170/0x170 [ 389.856457] ? check_same_owner+0x320/0x320 [ 389.860769] ? find_held_lock+0x36/0x1c0 [ 389.864822] ? __lock_is_held+0xb5/0x140 [ 389.868880] ? check_same_owner+0x320/0x320 [ 389.873192] ? rcu_note_context_switch+0x710/0x710 [ 389.878108] ? __lock_acquire+0x7f5/0x5140 [ 389.882333] __should_failslab+0x124/0x180 [ 389.886562] should_failslab+0x9/0x14 [ 389.890351] kmem_cache_alloc_trace+0x2cb/0x780 [ 389.895028] ? debug_check_no_locks_freed+0x310/0x310 [ 389.900216] br_add_if+0x402/0x19e0 [ 389.903831] ? graph_lock+0x170/0x170 [ 389.907627] ? lock_acquire+0x1dc/0x520 [ 389.911598] ? cap_capable+0x1f9/0x260 [ 389.915475] ? br_features_recompute+0x220/0x220 [ 389.920221] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 389.925749] ? security_capable+0x99/0xc0 [ 389.929889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 389.935425] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 389.940427] ? __dev_get_by_index+0x169/0x1c0 [ 389.944913] add_del_if+0x10f/0x140 [ 389.948537] br_dev_ioctl+0xbf/0xe0 [ 389.952152] ? br_ioctl_deviceless_stub+0xad0/0xad0 [ 389.957155] dev_ifsioc+0x43e/0xb90 [ 389.960774] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 389.966214] ? register_gifconf+0x70/0x70 [ 389.970356] dev_ioctl+0x1b5/0xcc0 [ 389.973886] sock_do_ioctl+0x1d3/0x3e0 [ 389.977783] ? compat_ifr_data_ioctl+0x170/0x170 [ 389.982530] ? lock_downgrade+0x8e0/0x8e0 [ 389.986670] ? kasan_check_read+0x11/0x20 [ 389.990808] ? rcu_is_watching+0x85/0x140 [ 389.994954] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 390.000140] sock_ioctl+0x30d/0x680 [ 390.003755] ? dlci_ioctl_set+0x40/0x40 [ 390.007720] ? expand_files.part.8+0x9a0/0x9a0 [ 390.012311] ? kasan_check_write+0x14/0x20 [ 390.016541] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 390.021457] ? wait_for_completion+0x870/0x870 [ 390.026032] ? dlci_ioctl_set+0x40/0x40 [ 390.030010] do_vfs_ioctl+0x1cf/0x16a0 [ 390.033892] ? ioctl_preallocate+0x2e0/0x2e0 [ 390.038290] ? fget_raw+0x20/0x20 [ 390.041730] ? __sb_end_write+0xac/0xe0 [ 390.045694] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 390.051216] ? fput+0x130/0x1a0 [ 390.054482] ? ksys_write+0x1a6/0x250 [ 390.058273] ? security_file_ioctl+0x94/0xc0 [ 390.062668] ksys_ioctl+0xa9/0xd0 [ 390.066110] __x64_sys_ioctl+0x73/0xb0 [ 390.069985] do_syscall_64+0x1b1/0x800 [ 390.073862] ? finish_task_switch+0x1ca/0x810 [ 390.078352] ? syscall_return_slowpath+0x5c0/0x5c0 [ 390.083354] ? syscall_return_slowpath+0x30f/0x5c0 [ 390.088275] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 390.093627] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 390.098460] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 390.103635] RIP: 0033:0x455329 [ 390.106808] RSP: 002b:00007f768dc00c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.114512] RAX: ffffffffffffffda RBX: 00007f768dc016d4 RCX: 0000000000455329 [ 390.121766] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 390.129022] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 390.136276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 390.143530] R13: 000000000000036a R14: 00000000006f8290 R15: 0000000000000000 2018/04/19 09:43:45 executing program 4: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x3c, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-asm)\x00'}, 0x58) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x127103, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000000c0)=0x400) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)="44e5779ea959b81565a70ad552e6f11222c4c65365e11e005aefad9889de45e773", 0x21}], 0x1, &(0x7f0000000000)}, 0xfffffffffffffffc) 2018/04/19 09:43:45 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0xffffffffffffff6e) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x1fd) close(r0) socket$inet(0x2, 0x3, 0x6) 2018/04/19 09:43:45 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x400) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0xb}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0xa, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) pread64(r0, &(0x7f0000000200)=""/8, 0x5a, 0x9f) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8001, 0x0) 2018/04/19 09:43:45 executing program 7 (fault-call:2 fault-nth:1): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/19 09:43:45 executing program 2: r0 = syz_open_dev$mice(&(0x7f00003cc000)='/dev/input/mice\x00', 0x0, 0x1) write$tun(r0, &(0x7f0000b54d98), 0x2e) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000820000), &(0x7f000066b000)={0x4}, 0x8) 2018/04/19 09:43:45 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000b586dd60d8652b00140600fe6300000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000f46b9db4afcee6131a0090780000157e6724bb10feff461e3f00913a9a9a9a50baf4646d73b99a7cde9382a4d446ea0e4c37b30af0b36143a6d1f4266c2a14fb58ceaa1bbfbbca0158ced2e25484e7941ab27ca340f605a467558b25702257bd41772249ed4b8edfea1361e6934a01739b1dfcd7e4d76198c179c0086e724dd91d339ef9d2d1f968e91dbf57e1b968a17c3480644e249a0cc192290e213459"], &(0x7f00000002c0)={0x0, 0x6, [0x0, 0x4]}) 2018/04/19 09:43:45 executing program 3: r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x0, 0x0, 0x401}, {}], 0x19a) 2018/04/19 09:43:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f17000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x8400, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000100)={{0x6, 0x6, 0x1ff, 0x80000001, "c343b3d9efba3a4aae8f4d23b850e4da93eb5bd214cdbc251780a1a93d4929d463534cba487db63576c544e4", 0x60}, 0x0, 0x0, 0x9, r2, 0x6, 0x2, "72f7a8bfe1694aeaacbcf74386e221ccbfd8aed0cb5cfa2a3742f4e540784ce040c8f5d2d927576bfc93ef36e1e45dbc6981fe382a64d4cc4f02edd78b4bef8b", &(0x7f00000000c0)='/dev/ptmx\x00', 0xa, [], [0x2, 0x3, 0x100000000, 0xfffffffffffffffd]}) ioctl$int_in(r0, 0x800000000005420, &(0x7f0000000000)) [ 390.474057] FAULT_INJECTION: forcing a failure. [ 390.474057] name failslab, interval 1, probability 0, space 0, times 0 [ 390.485449] CPU: 1 PID: 27703 Comm: syz-executor7 Not tainted 4.17.0-rc1+ #7 [ 390.492653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.502019] Call Trace: [ 390.504628] dump_stack+0x1b9/0x294 [ 390.508281] ? dump_stack_print_info.cold.2+0x52/0x52 [ 390.513488] ? perf_trace_lock_acquire+0xe3/0x980 [ 390.518348] ? kernel_text_address+0x79/0xf0 [ 390.522772] ? __unwind_start+0x166/0x330 [ 390.526943] should_fail.cold.4+0xa/0x1a [ 390.531026] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 390.536850] ? graph_lock+0x170/0x170 [ 390.540668] ? save_stack+0x43/0xd0 [ 390.544312] ? __kasan_slab_free+0x11a/0x170 [ 390.548741] ? kfree+0xd9/0x260 [ 390.552038] ? find_held_lock+0x36/0x1c0 [ 390.556216] ? __lock_is_held+0xb5/0x140 [ 390.560303] ? check_same_owner+0x320/0x320 [ 390.564631] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 390.569385] ? rcu_note_context_switch+0x710/0x710 [ 390.574312] __should_failslab+0x124/0x180 [ 390.578548] should_failslab+0x9/0x14 [ 390.582339] kmem_cache_alloc_trace+0x2cb/0x780 [ 390.586995] ? kfree+0x124/0x260 [ 390.590363] br_add_if+0x567/0x19e0 [ 390.593976] ? graph_lock+0x170/0x170 [ 390.597764] ? lock_acquire+0x1dc/0x520 [ 390.601736] ? br_features_recompute+0x220/0x220 [ 390.606485] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 390.612017] ? security_capable+0x99/0xc0 [ 390.616160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 390.621686] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 390.626691] ? __dev_get_by_index+0x169/0x1c0 [ 390.631182] add_del_if+0x10f/0x140 [ 390.634803] br_dev_ioctl+0xbf/0xe0 [ 390.638426] ? br_ioctl_deviceless_stub+0xad0/0xad0 [ 390.644150] dev_ifsioc+0x43e/0xb90 [ 390.647776] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 390.652958] ? register_gifconf+0x70/0x70 [ 390.657396] dev_ioctl+0x1b5/0xcc0 [ 390.660956] sock_do_ioctl+0x1d3/0x3e0 [ 390.664834] ? compat_ifr_data_ioctl+0x170/0x170 [ 390.669578] ? lock_downgrade+0x8e0/0x8e0 [ 390.673720] ? kasan_check_read+0x11/0x20 [ 390.677854] ? rcu_is_watching+0x85/0x140 [ 390.682002] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 390.687207] sock_ioctl+0x30d/0x680 [ 390.690827] ? dlci_ioctl_set+0x40/0x40 [ 390.694797] ? expand_files.part.8+0x9a0/0x9a0 [ 390.699378] ? kasan_check_write+0x14/0x20 [ 390.703607] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 390.708528] ? wait_for_completion+0x870/0x870 [ 390.713106] ? dlci_ioctl_set+0x40/0x40 [ 390.717071] do_vfs_ioctl+0x1cf/0x16a0 [ 390.720956] ? ioctl_preallocate+0x2e0/0x2e0 [ 390.725361] ? fget_raw+0x20/0x20 [ 390.728806] ? __sb_end_write+0xac/0xe0 [ 390.732773] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 390.738299] ? fput+0x130/0x1a0 [ 390.741595] ? ksys_write+0x1a6/0x250 [ 390.745389] ? security_file_ioctl+0x94/0xc0 [ 390.749789] ksys_ioctl+0xa9/0xd0 [ 390.753237] __x64_sys_ioctl+0x73/0xb0 [ 390.757119] do_syscall_64+0x1b1/0x800 [ 390.760997] ? finish_task_switch+0x1ca/0x810 [ 390.766900] ? syscall_return_slowpath+0x5c0/0x5c0 [ 390.771825] ? syscall_return_slowpath+0x30f/0x5c0 [ 390.776749] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 390.782110] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 390.786961] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 390.792137] RIP: 0033:0x455329 [ 390.795315] RSP: 002b:00007f768dc00c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.803017] RAX: ffffffffffffffda RBX: 00007f768dc016d4 RCX: 0000000000455329 [ 390.810283] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 390.817541] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/19 09:43:46 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000380), &(0x7f0000b02000), &(0x7f00000aaffc), &(0x7f0000002886)) r0 = getpid() r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x200, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000002c0)) waitid(0x2, r0, &(0x7f0000000140), 0x204000000c, &(0x7f0000000000)) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x5, 0x100) 2018/04/19 09:43:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d00}]}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000000)=""/41) 2018/04/19 09:43:46 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000009ffb)='comm\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x102, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x3) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000200)) [ 390.824798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 390.832065] R13: 000000000000036a R14: 00000000006f8290 R15: 0000000000000001 2018/04/19 09:43:46 executing program 7 (fault-call:2 fault-nth:2): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/19 09:43:46 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x18041, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0xfffffffffffffffb, 0x4}, {0x6, 0x1b2d}, 0x5ba8, 0x7, 0x6}) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000000c0)=""/178) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000001c0)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000240)=0x4) ioctl$sock_bt(r0, 0xdd1f, &(0x7f0000000280)="d68ee08b7f423f1320c89665e7943c942170084053fef921c0b5dc848dbc08f81a9fa2029ee12e4bf2816051ddaac3b0d373a2dbfa5bb763124684640b38b8b68e859c9799b000335d34e39983f2fd48d1b579d521a1fc081ff3ecfde4cc608d6f86dda28e546e67db2e94c333ffcd56e7d0bb75c3c47030df2d3731dbe2212cafabba68c3d62403a71977a4e4bec039c5220cbcead1753e7b772ec359cc28c40057b098e9deb5f6a3ec763c740fa887b983e045ceda8d88593da471c921bc3617") ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000380)="2f3a3ee74e525bbf8eae54730272e0edc8389bcc848512cf091744d778615ef47d9868dd1cb6fea297c3c93e80d97825ab6e01f609180c7dc9ae69e96de2704025884f2c7b9b956a77c341fcc15c093ff4a2e265a9abad954700d75a619be63122f9e6ad2247e8d60afabf3f3bba0ff5e5a74928d1d6c0468004e43e80875f6883d4815d7b53dd802d") ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000440)={{0x401, 0x3}, {0x0, 0xc9}, 0x540000, 0x1, 0x5}) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000004c0)={0x100, 0x2, 0x1, 0x3, 0x9, [{0x7, 0x3ff, 0x7ff}, {0xf6, 0x8, 0xf7}, {0x4ea, 0x5, 0x8000, 0x0, 0x0, 0x2000}, {0x80000001, 0xca1d, 0x23, 0x0, 0x0, 0x4}, {0x3, 0xffffffff80000000, 0x3, 0x0, 0x0, 0x900}, {0x2, 0x401, 0x8000}, {0x81, 0x400000000000000, 0x8, 0x0, 0x0, 0xa}, {0x2, 0x5, 0x10001, 0x0, 0x0, 0x800}, {0xc907, 0x7f, 0x5, 0x0, 0x0, 0x800}]}) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000700)) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000740)=""/203) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000840)=0x9830) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000880)={0x12714, 0x2, 0x4000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/autofs\x00', 0x200, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000900)=0x880) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000940)) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000980)={0x2, 0x3f, 0x2, 0x7, [], [], [], 0x6, 0x200, 0xfffffffffffffff9, 0x1000, "176c50298605a6cec0110aa5d69fd190"}) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000ac0)=""/4096) ioctl$int_in(r1, 0x5421, &(0x7f0000001ac0)=0x5) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000001b00)={0x5, 0xb60, 0x2, 0x3, 0x2}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000001b40)={0x6, 0x6}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000001d80)={0x4, 0x7, 0x2, 0x6, &(0x7f0000001bc0)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000001e00)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000001e40)={r3}) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001e80)=""/4096) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000002e80)=0x9) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000002ec0)=0x0) syz_open_procfs(r4, &(0x7f0000002f00)='net/udplite\x00') [ 390.959650] FAULT_INJECTION: forcing a failure. [ 390.959650] name failslab, interval 1, probability 0, space 0, times 0 [ 390.971049] CPU: 1 PID: 27732 Comm: syz-executor7 Not tainted 4.17.0-rc1+ #7 [ 390.978247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.987613] Call Trace: [ 390.990231] dump_stack+0x1b9/0x294 [ 390.993885] ? dump_stack_print_info.cold.2+0x52/0x52 [ 390.999108] should_fail.cold.4+0xa/0x1a [ 391.003213] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 391.008335] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 391.013538] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 391.018729] ? is_bpf_text_address+0xd7/0x170 [ 391.023231] ? kernel_text_address+0x79/0xf0 [ 391.027631] ? __unwind_start+0x166/0x330 [ 391.031769] ? __kernel_text_address+0xd/0x40 [ 391.036253] ? unwind_get_return_address+0x61/0xa0 [ 391.041173] ? __save_stack_trace+0x7e/0xd0 [ 391.045504] ? save_stack+0xa9/0xd0 [ 391.049118] ? save_stack+0x43/0xd0 [ 391.052736] ? kasan_kmalloc+0xc4/0xe0 [ 391.056615] ? kmem_cache_alloc_trace+0x152/0x780 [ 391.061448] ? br_add_if+0x567/0x19e0 [ 391.065236] ? add_del_if+0x10f/0x140 [ 391.069031] ? br_dev_ioctl+0xbf/0xe0 [ 391.072823] ? dev_ifsioc+0x43e/0xb90 [ 391.076607] ? dev_ioctl+0x1b5/0xcc0 [ 391.080311] __should_failslab+0x124/0x180 [ 391.084549] should_failslab+0x9/0x14 [ 391.088340] kmem_cache_alloc_trace+0x4b/0x780 [ 391.092912] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 391.098438] ? rtnl_is_locked+0xae/0xe0 [ 391.102396] ? rtnl_trylock+0x20/0x20 [ 391.106189] switchdev_port_attr_set+0x145/0x3e0 [ 391.110935] ? switchdev_port_attr_set_deferred+0x110/0x110 [ 391.116633] ? __ethtool_get_link_ksettings+0x142/0x2e0 [ 391.121999] ? convert_legacy_settings_to_link_ksettings+0x5e0/0x5e0 [ 391.128502] br_set_state+0x1d9/0x2d0 [ 391.132294] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 391.137473] ? br_designated_port_selection+0x620/0x620 [ 391.142838] br_init_port+0xc5/0x260 [ 391.146556] br_add_if+0x6bb/0x19e0 [ 391.150173] ? graph_lock+0x170/0x170 [ 391.153970] ? lock_acquire+0x1dc/0x520 [ 391.157933] ? br_features_recompute+0x220/0x220 [ 391.162678] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 391.168213] ? security_capable+0x99/0xc0 [ 391.172352] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 391.177881] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 391.182909] ? __dev_get_by_index+0x169/0x1c0 [ 391.187400] add_del_if+0x10f/0x140 [ 391.191024] br_dev_ioctl+0xbf/0xe0 [ 391.194641] ? br_ioctl_deviceless_stub+0xad0/0xad0 [ 391.199647] dev_ifsioc+0x43e/0xb90 [ 391.203274] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 391.208461] ? register_gifconf+0x70/0x70 [ 391.212603] dev_ioctl+0x1b5/0xcc0 [ 391.216131] sock_do_ioctl+0x1d3/0x3e0 [ 391.220009] ? compat_ifr_data_ioctl+0x170/0x170 [ 391.224769] ? lock_downgrade+0x8e0/0x8e0 [ 391.228911] ? kasan_check_read+0x11/0x20 [ 391.233046] ? rcu_is_watching+0x85/0x140 [ 391.237190] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 391.242368] sock_ioctl+0x30d/0x680 [ 391.245985] ? dlci_ioctl_set+0x40/0x40 [ 391.249950] ? expand_files.part.8+0x9a0/0x9a0 [ 391.254528] ? kasan_check_write+0x14/0x20 [ 391.258750] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 391.263676] ? wait_for_completion+0x870/0x870 [ 391.268248] ? dlci_ioctl_set+0x40/0x40 [ 391.272212] do_vfs_ioctl+0x1cf/0x16a0 [ 391.276087] ? ioctl_preallocate+0x2e0/0x2e0 [ 391.280486] ? fget_raw+0x20/0x20 [ 391.283935] ? __sb_end_write+0xac/0xe0 [ 391.287918] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 391.293450] ? fput+0x130/0x1a0 [ 391.296720] ? ksys_write+0x1a6/0x250 [ 391.300513] ? security_file_ioctl+0x94/0xc0 [ 391.304911] ksys_ioctl+0xa9/0xd0 [ 391.308360] __x64_sys_ioctl+0x73/0xb0 [ 391.312248] do_syscall_64+0x1b1/0x800 [ 391.316148] ? syscall_return_slowpath+0x5c0/0x5c0 [ 391.321066] ? syscall_return_slowpath+0x30f/0x5c0 [ 391.325989] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 391.331358] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 391.336193] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 391.341370] RIP: 0033:0x455329 [ 391.344546] RSP: 002b:00007f768dc00c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.352243] RAX: ffffffffffffffda RBX: 00007f768dc016d4 RCX: 0000000000455329 2018/04/19 09:43:46 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x40005, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x269, 0xf2a, 0x5, 'queue1\x00', 0x1}) fallocate(r0, 0x3, 0x100, 0xffff) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x5, {0x2, 0x4e23, @multicast1=0xe0000001}, {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc9}}, 0x8, 0x80000000, 0x3ff, 0x401, 0x7, &(0x7f0000000100)='sit0\x00', 0xe49, 0x0, 0x1000}) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'team_slave_0\x00', 0x1ff}) 2018/04/19 09:43:46 executing program 6: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2175, 0x200842) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x6, 0x1f, 0x9, 0x2, "869461c82e01f29e7f87b6af699134b6e51a7f8b6cdef42c7ae09afbd42ac508"}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e5ff0)={&(0x7f0000abdefc)=@delsa={0x4c, 0x12, 0x515485708c54ddb, 0x0, 0x0, {@in=@rand_addr=0xffffff7f}, [@sec_ctx={0x24, 0x8, {0x1d, 0x8, 0x0, 0x0, 0x15, "69cc8910cf7a5164ef891111a0edabf37c1fd93a0d"}}]}, 0x4c}, 0x1}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0xfffffffffffffffb, 0x200) [ 391.359499] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 391.366929] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 391.374185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 391.381451] R13: 000000000000036a R14: 00000000006f8290 R15: 0000000000000002 [ 391.388883] bridge0: error setting offload STP state on port 1(team_slave_0) [ 391.396171] bridge0: port 1(team_slave_0) entered disabled state 2018/04/19 09:43:47 executing program 4: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x7, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:47 executing program 2: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) prctl$seccomp(0x21, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{}]}) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f000059b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00005b1fd0)="e6210000000000000000030005000bfaf9f300010033c23cff00000000fe000225070097c11fd4e4c4dc5926a8000194", 0x30) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000400), 0x4) dup3(r0, r1, 0x0) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x66, 0x400000) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000040)) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 2018/04/19 09:43:47 executing program 3: r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x0, 0x0, 0x401}, {}], 0x19a) 2018/04/19 09:43:47 executing program 0: 2018/04/19 09:43:47 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x4, 0x200000) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000100)=""/83) syz_emit_ethernet(0x4c, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [{[{0x9100, 0x3, 0x200, 0x1}], {0x8100, 0x9, 0x726, 0x4}}], {@ipx={0x8137, {0xffff, 0x36, 0x81, 0x4, {@random=0x10000, @random="499740a3e6ba", 0x2}, {@broadcast=0xffffffff, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x1f}, "45fe8676f1b85e7914cf49470777a24331d465df76209571"}}}}, 0x0) sendto$inet6(r0, &(0x7f0000003fd9), 0x0, 0x0, &(0x7f0000008000)={0xa, 0x4e20, 0x6}, 0x1c) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x9, 0x8c80) 2018/04/19 09:43:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000d2effc)=0x81, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x200600, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000d32000), 0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x60080, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'\x00', {0x2, 0x4e23, @rand_addr=0x10000}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000040)={{0x7, 0x7f}, 'port1\x00', 0x0, 0x80408, 0x80000000, 0x0, 0x68c0, 0x4fa, 0x3, 0x0, 0x1, 0x4}) 2018/04/19 09:43:47 executing program 6: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) r1 = msgget(0x1, 0x1) msgctl$IPC_RMID(r1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa}}, 0x0, 0x0, 0x0, 0x0, 0x93cca066bcd113d5}, 0x98) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000004c00), &(0x7f0000004c40)=0xc) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x101000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000040)={0x5, 0x2, 0x7}) 2018/04/19 09:43:47 executing program 7 (fault-call:2 fault-nth:3): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/19 09:43:47 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020a"], 0x2}, 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000600)='ramfs\x00', 0x81a, &(0x7f0000000080)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000000c0)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000000640)='ubifs\x00', 0x1004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='vxfs\x00', 0x8003080, &(0x7f0000000200)) syz_mount_image$ntfs(&(0x7f00000001c0)='ntfs\x00', &(0x7f0000000200)='./file0/file0\x00', 0x1ff, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000240)="d1149b6ed2ed15d017c5e973b9ad5edc053eb80e28866006012cf75c8edbc4d394ff2641e6acccb32d5e52000a24f8f606501d9f090d586a5c162849e07917", 0x3f, 0x401}, {&(0x7f0000000280)="bdaf2e2dd45f1c621a5ee5ba453c54d1f96ab53ae29341b470578c8085f7d5f063d451ac583cec3362dee4d165ff9bf886ca864e8d746bf5facf7c5cc9e3de1f7fd263082cbd57f66ec8be4af6753e20df45bb80059e4c673660171751b47d4456ae36bbb849b145fb0b97f6458e58c4db5d059dc0ab4a6507fc91ed43944c87eedb09f1", 0x84, 0x3f}, {&(0x7f0000000340)="340621545c35ba544739ca5d5545206e547188a31460be2958466266d0969b3d08694caf0cab6ad0586035878c15804aa1b961fadad4ed1758acae1b7d07396edf0849e7912cb19119", 0x49, 0x4}], 0x2000, &(0x7f0000000440)={[{@gid={'gid', 0x3d, [0x78]}, 0x2c}, {@nls={'nls', 0x3d, 'cp737'}, 0x2c}, {@show_sys_files_no={'show_sys_files=no', 0x3d, [0x36, 0x3f, 0x2d]}, 0x2c}, {@case_sensitive_no={'case_sensitive=no', 0x3d}, 0x2c}, {@show_sys_files_no={'show_sys_files=no', 0x3d, [0x37, 0x33, 0x34, 0x7d, 0x30, 0x7f, 0x37]}, 0x2c}, {@show_sys_files_no={'show_sys_files=no', 0x3d, [0x32, 0x37, 0x78]}, 0x2c}, {@errors_continue='errors=continue', 0x2c}, {@fmask={'fmask', 0x3d, [0x36, 0x31]}, 0x2c}, {@uid={'uid', 0x3d, [0x3f, 0x35, 0x37, 0x39, 0x33, 0x30, 0x35, 0x33, 0x33]}, 0x2c}]}) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x500f, &(0x7f00000e7000)) mount(&(0x7f0000000040)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000000100)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f0000003040)=""/4096, 0x1004}], 0x1000000000000062, 0x0) 2018/04/19 09:43:47 executing program 5: r0 = memfd_create(&(0x7f000003e000)=')\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000868ff3)='/dev/snd/seq\x00', 0x0, 0x8000040000105) r2 = dup2(r1, r0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x5) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@mcast1={0xff, 0x1, [], 0x1}, 0x6, r3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f000022df74)={0x0, 0x0, 0x0, "7175f97565310000000000000000000a000000000000000002000000fbfffffffe00"}) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x23, 0x0, 0x0, 0x0, @time={0x77359400}}], 0x30) socket$nl_netfilter(0x10, 0x3, 0xc) [ 391.722420] bridge0: port 1(team_slave_0) entered blocking state [ 391.728716] FAULT_INJECTION: forcing a failure. [ 391.728716] name failslab, interval 1, probability 0, space 0, times 0 [ 391.739993] CPU: 0 PID: 27780 Comm: syz-executor7 Not tainted 4.17.0-rc1+ #7 [ 391.747195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.756583] Call Trace: [ 391.759214] dump_stack+0x1b9/0x294 [ 391.762875] ? dump_stack_print_info.cold.2+0x52/0x52 [ 391.768101] ? console_unlock+0xb37/0x1100 [ 391.772363] should_fail.cold.4+0xa/0x1a [ 391.776455] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 391.781589] ? mark_held_locks+0xc9/0x160 [ 391.785772] ? vprintk_emit+0x694/0xdd0 [ 391.789767] ? vprintk_emit+0x694/0xdd0 [ 391.793767] ? __down_trylock_console_sem+0x155/0x200 [ 391.798971] ? vprintk_emit+0x3e5/0xdd0 [ 391.802942] ? console_unlock+0x1100/0x1100 [ 391.807260] ? lock_downgrade+0x8e0/0x8e0 [ 391.811410] __should_failslab+0x124/0x180 [ 391.815644] should_failslab+0x9/0x14 [ 391.819446] kmem_cache_alloc_trace+0x4b/0x780 [ 391.824025] ? vprintk_default+0x28/0x30 [ 391.828089] ? vprintk_func+0x81/0xe7 [ 391.831884] switchdev_port_attr_set+0x145/0x3e0 [ 391.836636] ? switchdev_port_attr_set_deferred+0x110/0x110 [ 391.842341] ? convert_legacy_settings_to_link_ksettings+0x5e0/0x5e0 [ 391.848826] __set_ageing_time+0x198/0x260 [ 391.853059] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 391.858243] ? br_set_max_age+0x100/0x100 [ 391.862389] br_init_port+0x194/0x260 [ 391.866177] br_add_if+0x6bb/0x19e0 [ 391.869810] ? graph_lock+0x170/0x170 [ 391.873609] ? lock_acquire+0x1dc/0x520 [ 391.877573] ? br_features_recompute+0x220/0x220 [ 391.882321] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 391.887854] ? security_capable+0x99/0xc0 [ 391.891992] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 391.897519] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 391.902523] ? __dev_get_by_index+0x169/0x1c0 [ 391.907009] add_del_if+0x10f/0x140 [ 391.910631] br_dev_ioctl+0xbf/0xe0 [ 391.914248] ? br_ioctl_deviceless_stub+0xad0/0xad0 [ 391.919260] dev_ifsioc+0x43e/0xb90 [ 391.922875] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 391.928061] ? register_gifconf+0x70/0x70 [ 391.932198] dev_ioctl+0x1b5/0xcc0 [ 391.935730] sock_do_ioctl+0x1d3/0x3e0 [ 391.939609] ? compat_ifr_data_ioctl+0x170/0x170 [ 391.944353] ? lock_downgrade+0x8e0/0x8e0 [ 391.948501] ? kasan_check_read+0x11/0x20 [ 391.952637] ? rcu_is_watching+0x85/0x140 [ 391.956800] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 391.961977] sock_ioctl+0x30d/0x680 [ 391.965600] ? dlci_ioctl_set+0x40/0x40 [ 391.969566] ? expand_files.part.8+0x9a0/0x9a0 [ 391.974138] ? kasan_check_write+0x14/0x20 [ 391.978362] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 391.983281] ? wait_for_completion+0x870/0x870 [ 391.987865] ? dlci_ioctl_set+0x40/0x40 [ 391.991830] do_vfs_ioctl+0x1cf/0x16a0 [ 391.995708] ? ioctl_preallocate+0x2e0/0x2e0 [ 392.000105] ? fget_raw+0x20/0x20 [ 392.003547] ? __sb_end_write+0xac/0xe0 [ 392.007510] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 392.013878] ? fput+0x130/0x1a0 [ 392.017243] ? ksys_write+0x1a6/0x250 [ 392.021036] ? security_file_ioctl+0x94/0xc0 [ 392.025443] ksys_ioctl+0xa9/0xd0 [ 392.028887] __x64_sys_ioctl+0x73/0xb0 [ 392.032763] do_syscall_64+0x1b1/0x800 [ 392.036649] ? finish_task_switch+0x1ca/0x810 [ 392.041133] ? syscall_return_slowpath+0x5c0/0x5c0 [ 392.046050] ? syscall_return_slowpath+0x30f/0x5c0 [ 392.050983] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 392.056338] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 392.061173] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 392.066350] RIP: 0033:0x455329 [ 392.069527] RSP: 002b:00007f768dc00c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.077223] RAX: ffffffffffffffda RBX: 00007f768dc016d4 RCX: 0000000000455329 [ 392.084481] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 392.091739] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 392.099000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 392.106260] R13: 000000000000036a R14: 00000000006f8290 R15: 0000000000000003 [ 392.113707] team_slave_0: failed to offload ageing time 2018/04/19 09:43:47 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x2) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000040)) ioctl$KVM_SMI(r0, 0xaeb7) r1 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x5, 0x18080) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000580)={0xe6, &(0x7f0000000480)="68910fcca8218a57fa494dff297cee81870384457c620171799a6f65870330490a0a960bce9c5b573160e7bfcf6adbd27b8fbefc6d20b04ea2cbaaff7a8245b1a16188e9f55ca0cf32b6230118e9a5c9e90f8a72de0b30f733aef07d08060d8db44c58abefd804d1b6e339cdec890c2f92bf642d8274b366db78ea157cc3d73f4c6b9b4c1256ffda7dbd4b0c0ed9908838c2ff12363d40ecd2ec846940f4fa4cbeaf158120f5e980f6d95cfbef29e15985ead45f7bc178fa99d21c4a82e5ae4ac8aa19dbb2b6bd4788b1a6195d09b46a70801ef5d07cc70255a9c35914a7b18ceab69e93a5f2"}) r2 = syz_open_dev$dmmidi(&(0x7f00000005c0)='/dev/dmmidi#\x00', 0x7, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000600)={"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"}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000a00)={0x5, 0x4b2, 0x7}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000a40)={{0x6, 0x8}, {0x3f, 0x2}, 0x8001, 0x1, 0x1}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000b40)={0x53, &(0x7f0000000ac0)=""/83}) ioctl$sock_netdev_private(r2, 0x89f4, &(0x7f0000000b80)="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") r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/sequencer2\x00', 0x80, 0x0) r4 = semget$private(0x0, 0x2, 0x400) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000001bc0)=[0x100000000, 0x5]) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000001c00)={0x3, 0x6, 0x9}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000001cc0)={&(0x7f0000001c80)=[0x100000000, 0xfffffffffffffffb, 0x3, 0x5, 0xdd, 0x4], 0x6, 0x7, 0xf1, 0x6e0, 0x0, 0x1, {0x2, 0xa6, 0x6, 0xdc, 0x4, 0x200, 0x8, 0x1000, 0x7f, 0x8f26, 0x6, 0x9, 0xfffffffffffff800, 0x6, "28c1ab0bbcebda16c0bb77e20bf02ad8ee9162199745cd0aeee091752e5c09a5"}}) mount(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0)='devtmpfs\x00', 0x800000, &(0x7f0000001e00)="1843bf") syz_open_dev$sndseq(&(0x7f0000001e40)='/dev/snd/seq\x00', 0x0, 0x0) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) semctl$IPC_INFO(r4, 0x4, 0x3, &(0x7f0000001e80)=""/30) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000001ec0)={{0xffffffffffffffff, 0x1, 0x8, 0x0, 0x1}, 0x3, 0x4}) r6 = syz_open_dev$dmmidi(&(0x7f0000001f40)='/dev/dmmidi#\x00', 0x100000001, 0x210040) openat$cgroup_type(r0, &(0x7f0000001f80)='cgroup.type\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/audio\x00', 0x200, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000002000)={0x4, r2, 0x1}) openat$cgroup_procs(r2, &(0x7f0000002040)='cgroup.procs\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000002180)={r6, r6, 0x9, 0x5, &(0x7f0000002080)="36d87f04d8666d12aeeaeb2aad4842e338299d011f91f05029c4413633c43ffd9839d0ff2881ae45b6f672ce3fab10901da1830ceb1f5841344b38fe07fb879c38deb70503aaf2e857b36c6e7aa49b7ee9b914ffc2aa87e62a0a67d4a8d559b06ace04be7be96afe02c57ef566e7a9b2f8c4e21c77a62626318e056cd76c415b15b9b478c2f388f096b0ac067f87ab462fb2689d149524fda1be2f9711b030384762c6858a46c8150217c76093c7c2b4c162c6e3b202dcf328afb8287451c99cb3f689722415c603a1c942fb", 0x9, 0x100000000, 0x2, 0x3, 0x4, 0xbf, 0xfffffffffffffffb, "8cd340682858866dfc139557d17a77646af922d0f5d76d97160b71c3c74a28f92611117db22b4c10b0f8a527cb951c61466f11b6d179f9f3f25890e705d35157f561769b5714bc6720e1f4ed25ab18c412376a571631ddd67f6fc530"}) ioctl$sock_bt_cmtp_CMTPCONNADD(r6, 0x400443c8, &(0x7f0000002240)={r3, 0x3}) [ 392.119143] bridge0: port 1(team_slave_0) entered disabled state 2018/04/19 09:43:47 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000000c0)={0x101, 0x2, {0x3, 0x3, 0x4, 0x3, 0x1083}}) socket$inet6(0xa, 0x5, 0xe2) getsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000004000), &(0x7f0000000000)=0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) 2018/04/19 09:43:47 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x1000100000001, {{0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x90) 2018/04/19 09:43:47 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x0, r0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000080)=0x6) r2 = socket(0x1e, 0x1, 0x0) getsockopt(r2, 0x10f, 0x83, &(0x7f0000003fb3)=""/4, &(0x7f0000000ffc)=0x4) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{}]}) 2018/04/19 09:43:47 executing program 7 (fault-call:2 fault-nth:4): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) [ 392.306465] QAT: Invalid ioctl [ 392.320567] bridge0: port 1(team_slave_0) entered blocking state [ 392.326884] FAULT_INJECTION: forcing a failure. [ 392.326884] name failslab, interval 1, probability 0, space 0, times 0 [ 392.338154] CPU: 0 PID: 27810 Comm: syz-executor7 Not tainted 4.17.0-rc1+ #7 [ 392.345351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.354712] Call Trace: [ 392.357314] dump_stack+0x1b9/0x294 [ 392.360762] QAT: Invalid ioctl [ 392.360958] ? dump_stack_print_info.cold.2+0x52/0x52 [ 392.369326] should_fail.cold.4+0xa/0x1a [ 392.373400] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 392.378515] ? kmem_cache_alloc_trace+0x152/0x780 [ 392.383370] ? __set_ageing_time+0x198/0x260 [ 392.387786] ? br_init_port+0x194/0x260 [ 392.391768] ? br_add_if+0x6bb/0x19e0 [ 392.395576] ? add_del_if+0x10f/0x140 [ 392.399380] ? br_dev_ioctl+0xbf/0xe0 [ 392.403184] ? dev_ifsioc+0x43e/0xb90 [ 392.406985] ? dev_ioctl+0x1b5/0xcc0 [ 392.410703] ? sock_ioctl+0x30d/0x680 [ 392.414511] ? do_vfs_ioctl+0x1cf/0x16a0 [ 392.418600] ? graph_lock+0x170/0x170 [ 392.422422] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 392.427796] ? print_usage_bug+0xc0/0xc0 [ 392.431867] ? vprintk_emit+0x3e5/0xdd0 [ 392.435849] ? graph_lock+0x170/0x170 [ 392.439659] ? print_usage_bug+0xc0/0xc0 [ 392.443731] ? find_held_lock+0x36/0x1c0 [ 392.447806] ? lock_downgrade+0x8e0/0x8e0 [ 392.451970] __should_failslab+0x124/0x180 [ 392.456217] should_failslab+0x9/0x14 [ 392.460027] kmem_cache_alloc_trace+0x4b/0x780 [ 392.464619] ? trace_hardirqs_on+0xd/0x10 [ 392.468781] ? queue_work_on+0x12c/0x1e0 [ 392.473804] switchdev_port_attr_set+0x145/0x3e0 [ 392.478834] ? switchdev_port_attr_set_deferred+0x110/0x110 [ 392.484567] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 392.490163] br_set_state+0x1d9/0x2d0 [ 392.493973] ? br_designated_port_selection+0x620/0x620 [ 392.499359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 392.504906] br_add_if+0x6c5/0x19e0 [ 392.508535] ? graph_lock+0x170/0x170 [ 392.512344] ? lock_acquire+0x1dc/0x520 [ 392.516329] ? br_features_recompute+0x220/0x220 [ 392.521094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 392.526640] ? security_capable+0x99/0xc0 [ 392.530800] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 392.536345] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 392.541364] ? __dev_get_by_index+0x169/0x1c0 [ 392.545871] add_del_if+0x10f/0x140 [ 392.549502] br_dev_ioctl+0xbf/0xe0 [ 392.553135] ? br_ioctl_deviceless_stub+0xad0/0xad0 [ 392.558155] dev_ifsioc+0x43e/0xb90 [ 392.561796] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 392.567011] ? register_gifconf+0x70/0x70 [ 392.571170] dev_ioctl+0x1b5/0xcc0 [ 392.574721] sock_do_ioctl+0x1d3/0x3e0 [ 392.578611] ? compat_ifr_data_ioctl+0x170/0x170 [ 392.583371] ? lock_downgrade+0x8e0/0x8e0 [ 392.587526] ? kasan_check_read+0x11/0x20 [ 392.591683] ? rcu_is_watching+0x85/0x140 [ 392.595853] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 392.601054] sock_ioctl+0x30d/0x680 [ 392.604704] ? dlci_ioctl_set+0x40/0x40 [ 392.608690] ? expand_files.part.8+0x9a0/0x9a0 [ 392.613278] ? kasan_check_write+0x14/0x20 [ 392.617559] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 392.622496] ? wait_for_completion+0x870/0x870 [ 392.627093] ? dlci_ioctl_set+0x40/0x40 [ 392.631074] do_vfs_ioctl+0x1cf/0x16a0 [ 392.634977] ? ioctl_preallocate+0x2e0/0x2e0 [ 392.639398] ? fget_raw+0x20/0x20 [ 392.642859] ? __sb_end_write+0xac/0xe0 [ 392.646837] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 392.652376] ? fput+0x130/0x1a0 [ 392.655648] ? ksys_write+0x1a6/0x250 [ 392.659444] ? security_file_ioctl+0x94/0xc0 [ 392.663847] ksys_ioctl+0xa9/0xd0 [ 392.667303] __x64_sys_ioctl+0x73/0xb0 [ 392.671182] do_syscall_64+0x1b1/0x800 [ 392.675059] ? finish_task_switch+0x1ca/0x810 [ 392.679562] ? syscall_return_slowpath+0x5c0/0x5c0 [ 392.684500] ? syscall_return_slowpath+0x30f/0x5c0 [ 392.689426] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 392.694783] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 392.699618] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 392.704792] RIP: 0033:0x455329 [ 392.707963] RSP: 002b:00007f768dc00c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.715667] RAX: ffffffffffffffda RBX: 00007f768dc016d4 RCX: 0000000000455329 [ 392.722931] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 392.730195] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 392.737460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 392.747861] R13: 000000000000036a R14: 00000000006f8290 R15: 0000000000000004 2018/04/19 09:43:48 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(r0) ioctl$TIOCEXCL(r1, 0x540c) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(seqiv(rfc4106-gcm-aesni))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9cc6e", 0x14) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="556293948d8580bd42c4d892c8da3316dbe37d3613d5b3ed2ae11984dc05d8e3", 0x20}], 0x1}], 0x1, 0x0) recvmsg(r2, &(0x7f00001b0000)={&(0x7f00003a4fa0)=@nfc_llcp, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)=""/88, 0x58}], 0x1, &(0x7f00009f2000)=""/190, 0xbe}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfac070afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") r4 = semget(0x3, 0x0, 0x420) semctl$SEM_INFO(r4, 0x2, 0x13, &(0x7f0000000140)=""/118) fsetxattr(r3, &(0x7f0000000100)=@known='security.capability\x00', &(0x7f00000002c0)="0b90e10000000200761976f346ee7cf0f6476e878df26db127f60175a8611598e1c10f13039bdc25e19160f1daabd8f7422b3e5577ab2eb4ea8bbd6fcc29d7ef9b01000000000000007cfb52c347c69e053644d8895338365d1bca9241027949b11a4be1cf6f8c9e52fd1fe5fbfcd99e7901b02f57ec572d38c5463f8fea4dea01b933605bf4555a945dc2b110698c522e29da37ec9a933d8c39acb15c92bf45da12e921", 0x0, 0x0) [ 392.755436] bridge0: error setting offload STP state on port 1(team_slave_0) 2018/04/19 09:43:48 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000080)={0x9, 0x80000001, 0x1ff, 0x1f, 0x3, 0x3}) sendto$inet(r0, &(0x7f00004b3fff), 0x12c, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/19 09:43:48 executing program 4: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x2, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/210}, {&(0x7f00000011c0)=""/166}], 0x0, &(0x7f00004f9000)}}], 0x2a5, 0x0, 0x0) 2018/04/19 09:43:48 executing program 3: r0 = syz_open_dev$mice(&(0x7f000046bff0)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) read$eventfd(r0, &(0x7f0000000080), 0xff50) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2}, {}], 0x19a) 2018/04/19 09:43:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="6664001a000000") fchdir(r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000140)={0xffffffff, 0x3, 0x6, 'queue1\x00', 0x3ff}) perf_event_open(&(0x7f00000000c0)={0x2, 0xfffffffffffffe0b, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3}, 0x2, 0x0, 0x4000}, 0x0, 0x5, 0xffffffffffffffff, 0x0) syz_fuseblk_mount(&(0x7f0000976000)='./file0\x00', &(0x7f0000dd3ff8)='8/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/19 09:43:48 executing program 6: clock_gettime(0x0, &(0x7f0000000040)) setitimer(0x1, &(0x7f0000000100)={{0x77359400}}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000001000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, r0/1000+10000}}, 0x0) 2018/04/19 09:43:48 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x2, 0x640, [0x0, 0x20000940, 0x20000970, 0x20000df0], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x6c3) 2018/04/19 09:43:48 executing program 7 (fault-call:2 fault-nth:5): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/19 09:43:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') write$cgroup_int(r0, &(0x7f0000000000)={[0x30, 0x3f]}, 0x2) r1 = socket$kcm(0x29, 0x4000000000002, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0xfffffffffffffffc, 0xffffffff) socket$rds(0x15, 0x5, 0x0) 2018/04/19 09:43:48 executing program 6: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @rand_addr}}, 0xf0ad, 0x5, 0x80000001, 0xfffffffffffffffc, 0x10}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={r1, 0x0, 0x80000001, 0x9, 0xffffffff, 0x5, 0xd5, 0x7, {r2, @in6={{0xa, 0x4e22, 0x1f, @mcast2={0xff, 0x2, [], 0x1}, 0x9}}, 0x3d, 0x0, 0x0, 0x1, 0xfffffffffffffffe}}, &(0x7f0000000240)=0xb0) unshare(0x28020000) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={r3, 0x1}, &(0x7f0000000340)=0x8) socketpair(0x10, 0x4, 0xffff, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netrom_NETROM_T2(r5, 0x103, 0x2, &(0x7f0000000400), 0x4) unshare(0x2c020000) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x400, 0x2e48, 0xffffffffffffff7f}, 0x10) syz_mount_image$ext4(&(0x7f0000000380)='ext3\x00', &(0x7f0000000440)='./file0\x00', 0x9, 0x1, &(0x7f0000000500)=[{&(0x7f0000000480)="9dc32d0f1b1cafc173b2b24757119c383373228cd3a72f69c6221e3b2cd26851ad28e247b4f3883dd254751cedc1bd4b5b3d38794f1a567eceb5268bac0a8c486b229cd97978cc4ebbc47845037f0b00db8aa9a8a2920e2419c8e4bbd2d4b11d44", 0x61, 0x9}], 0x800, &(0x7f0000000540)={[{@dioread_lock='dioread_lock', 0x2c}]}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000580)={0x0, 0x0, 0xea2a}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000600)={r7, r8, 0x9}) [ 393.096273] kernel msg: ebtables bug: please report to author: Wrong len argument [ 393.106409] bridge0: port 1(team_slave_0) entered blocking state [ 393.112789] bridge0: port 1(team_slave_0) entered disabled state [ 393.119015] FAULT_INJECTION: forcing a failure. [ 393.119015] name failslab, interval 1, probability 0, space 0, times 0 [ 393.130298] CPU: 0 PID: 27847 Comm: syz-executor7 Not tainted 4.17.0-rc1+ #7 [ 393.137496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.146859] Call Trace: [ 393.149462] dump_stack+0x1b9/0x294 [ 393.153110] ? dump_stack_print_info.cold.2+0x52/0x52 [ 393.158316] ? print_usage_bug+0xc0/0xc0 [ 393.162404] should_fail.cold.4+0xa/0x1a [ 393.166492] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 393.171611] ? mark_held_locks+0xc9/0x160 [ 393.175754] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 393.180331] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 393.185435] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 393.190439] ? trace_hardirqs_on+0xd/0x10 [ 393.194592] ? __debug_object_init+0x57f/0x12c0 [ 393.199260] ? debug_object_free+0x5f0/0x5f0 [ 393.203664] ? console_unlock+0x1100/0x1100 [ 393.207988] __should_failslab+0x124/0x180 [ 393.212220] should_failslab+0x9/0x14 [ 393.216015] kmem_cache_alloc_trace+0x4b/0x780 [ 393.220602] switchdev_port_attr_set+0x145/0x3e0 [ 393.225350] ? switchdev_port_attr_set_deferred+0x110/0x110 [ 393.231050] ? __lockdep_init_map+0x105/0x590 [ 393.235543] br_mc_disabled_update+0x193/0x250 [ 393.240115] ? br_multicast_port_query_expired+0x190/0x190 [ 393.245736] ? br_multicast_router_expired+0xf0/0xf0 [ 393.250847] br_multicast_add_port+0x142/0x2a0 [ 393.255429] br_add_if+0x6d5/0x19e0 [ 393.259050] ? graph_lock+0x170/0x170 [ 393.262843] ? lock_acquire+0x1dc/0x520 [ 393.266813] ? br_features_recompute+0x220/0x220 [ 393.271563] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.277092] ? security_capable+0x99/0xc0 [ 393.281249] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.286780] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 393.291792] ? __dev_get_by_index+0x169/0x1c0 [ 393.296291] add_del_if+0x10f/0x140 [ 393.299925] br_dev_ioctl+0xbf/0xe0 [ 393.303545] ? br_ioctl_deviceless_stub+0xad0/0xad0 [ 393.308547] dev_ifsioc+0x43e/0xb90 [ 393.312176] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 393.317353] ? register_gifconf+0x70/0x70 [ 393.321499] dev_ioctl+0x1b5/0xcc0 [ 393.325035] sock_do_ioctl+0x1d3/0x3e0 [ 393.328911] ? compat_ifr_data_ioctl+0x170/0x170 [ 393.333653] ? lock_downgrade+0x8e0/0x8e0 [ 393.337798] ? kasan_check_read+0x11/0x20 [ 393.341935] ? rcu_is_watching+0x85/0x140 [ 393.346082] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 393.351268] sock_ioctl+0x30d/0x680 [ 393.354886] ? dlci_ioctl_set+0x40/0x40 [ 393.358854] ? expand_files.part.8+0x9a0/0x9a0 [ 393.363425] ? kasan_check_write+0x14/0x20 [ 393.367654] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 393.372575] ? wait_for_completion+0x870/0x870 [ 393.377159] ? dlci_ioctl_set+0x40/0x40 [ 393.381123] do_vfs_ioctl+0x1cf/0x16a0 [ 393.385020] ? ioctl_preallocate+0x2e0/0x2e0 [ 393.389421] ? fget_raw+0x20/0x20 [ 393.392862] ? __sb_end_write+0xac/0xe0 [ 393.396840] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 393.402366] ? fput+0x130/0x1a0 [ 393.405637] ? ksys_write+0x1a6/0x250 [ 393.409431] ? security_file_ioctl+0x94/0xc0 [ 393.413831] ksys_ioctl+0xa9/0xd0 [ 393.417279] __x64_sys_ioctl+0x73/0xb0 [ 393.421155] do_syscall_64+0x1b1/0x800 [ 393.425033] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 393.429864] ? syscall_return_slowpath+0x5c0/0x5c0 [ 393.434783] ? syscall_return_slowpath+0x30f/0x5c0 [ 393.439705] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 393.445064] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 393.449900] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 393.455076] RIP: 0033:0x455329 [ 393.458254] RSP: 002b:00007f768dc00c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.465951] RAX: ffffffffffffffda RBX: 00007f768dc016d4 RCX: 0000000000455329 [ 393.473238] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 393.480503] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 393.487781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 2018/04/19 09:43:48 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0xfffffffffffffff8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x1, 0x8000c) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, &(0x7f0000000080)=""/244, &(0x7f0000000180)=""/208, &(0x7f0000000280)=""/126, 0x2}) sendmsg(r0, &(0x7f0000f18000)={0x0, 0x0, &(0x7f000076dff0)=[{&(0x7f0000000000)="240000000b06f500000000000000060020200af8090001000be800600700000000ab001f", 0x24}], 0x1}, 0x0) 2018/04/19 09:43:48 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000007d73cf61100f08004500001c000000000000907800000000ffffffff00009078e0000002d8c7dddebb1e19d8d7f5e294eb8b82949ca745c1640a3ebaeac9fcf5c1a717f5982fbb825eb63e0838a1080877ac2ea8e8c98fa1985202837e740893e4c69c3648c179368bda8cc12ff3bf03d590603b03d4cd0e898dab3a8a26004af2c6e8dbd379126aa1d540e2c55df8e8bb7910"], &(0x7f0000000000)) [ 393.495038] R13: 000000000000036a R14: 00000000006f8290 R15: 0000000000000005 2018/04/19 09:43:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001080)=ANY=[@ANYBLOB="370000000000000096188d0b9a4d9379499385fb7c799f06b4ca69113564b4d2869cf14921c0b9035595dd81ddab01b1c81928cfa89de4"], 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x101000) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x4e20}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x5c) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) 2018/04/19 09:43:49 executing program 7 (fault-call:2 fault-nth:6): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/19 09:43:49 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00003cb000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000080304d65, &(0x7f00008d3ff8)) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x4000) 2018/04/19 09:43:49 executing program 6: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000040)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000200)="6f6f6d5f73636f72655f616476cffa182afbbdf375471374760ef297cf245bf689243922e45d819c0bcb7d507da6ec15f58abeb42195fe9ebae33457ad13529d53fd99c9369d6a90f1759c07d83652695fec66ba76a0f9db8bb9cbb84ab5ea21e731af77c17071d2eceed3bc33669a42312f297c5183fe2f292ea878c121ac56cbc9") writev(r2, &(0x7f0000000000), 0x1000000000000075) 2018/04/19 09:43:49 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xaa7b, 0x200000) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000200)={0x7, 0x7, 0x1ff}) r1 = memfd_create(&(0x7f0000002901)='dev ', 0x0) write(r1, &(0x7f0000000240)="16", 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000280)={0x3c8, 0x7, 0x1, 0x9, 0x7, 0x8854}) read(r1, &(0x7f0000000100)=""/53, 0x35) sendfile(r1, r1, &(0x7f0000001000), 0xffef) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) [ 393.720691] bridge0: port 1(team_slave_0) entered blocking state [ 393.727013] bridge0: port 1(team_slave_0) entered disabled state [ 393.775272] FAULT_INJECTION: forcing a failure. [ 393.775272] name failslab, interval 1, probability 0, space 0, times 0 [ 393.786793] CPU: 1 PID: 27875 Comm: syz-executor7 Not tainted 4.17.0-rc1+ #7 [ 393.793986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.803360] Call Trace: [ 393.805962] dump_stack+0x1b9/0x294 [ 393.809601] ? dump_stack_print_info.cold.2+0x52/0x52 [ 393.816201] should_fail.cold.4+0xa/0x1a [ 393.820281] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 393.825394] ? debug_check_no_locks_freed+0x310/0x310 [ 393.830591] ? print_usage_bug+0xc0/0xc0 [ 393.834661] ? graph_lock+0x170/0x170 [ 393.838465] ? graph_lock+0x170/0x170 [ 393.842281] ? find_held_lock+0x36/0x1c0 [ 393.846350] ? __lock_is_held+0xb5/0x140 [ 393.850429] ? check_same_owner+0x320/0x320 [ 393.854759] ? rcu_note_context_switch+0x710/0x710 [ 393.859804] ? debug_check_no_locks_freed+0x310/0x310 [ 393.865001] ? print_usage_bug+0xc0/0xc0 [ 393.869074] __should_failslab+0x124/0x180 [ 393.873322] should_failslab+0x9/0x14 [ 393.877130] kmem_cache_alloc+0x2af/0x760 [ 393.881287] ? lock_downgrade+0x8e0/0x8e0 [ 393.885459] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 393.890476] __kernfs_new_node+0xe7/0x580 [ 393.894612] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 393.899357] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 393.904368] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.909894] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.915416] ? refcount_inc_not_zero+0x1dd/0x2d0 [ 393.920158] ? refcount_add_not_zero+0x320/0x320 [ 393.924916] kernfs_new_node+0x80/0xf0 [ 393.928805] kernfs_create_dir_ns+0x3d/0x140 [ 393.933205] sysfs_create_dir_ns+0xbe/0x1d0 [ 393.937617] kobject_add_internal+0x353/0xba0 [ 393.942102] ? kobj_ns_type_registered+0x60/0x60 [ 393.946845] ? kfree_const+0x59/0x70 [ 393.950543] ? rcu_read_lock_sched_held+0x108/0x120 [ 393.955544] ? kfree+0x1e9/0x260 [ 393.958896] ? kfree_const+0x5e/0x70 [ 393.962608] kobject_init_and_add+0xed/0x130 [ 393.967005] ? kobject_add_internal+0xba0/0xba0 [ 393.971666] ? _raw_spin_unlock_bh+0x30/0x40 [ 393.976065] ? __dev_set_allmulti+0x1e1/0x310 [ 393.980550] br_add_if+0x76a/0x19e0 [ 393.984172] ? graph_lock+0x170/0x170 [ 393.987958] ? lock_acquire+0x1dc/0x520 [ 393.991925] ? br_features_recompute+0x220/0x220 [ 393.996674] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 394.002205] ? security_capable+0x99/0xc0 [ 394.006341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 394.011874] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 394.016879] ? __dev_get_by_index+0x169/0x1c0 [ 394.021363] add_del_if+0x10f/0x140 [ 394.025006] br_dev_ioctl+0xbf/0xe0 [ 394.028626] ? br_ioctl_deviceless_stub+0xad0/0xad0 [ 394.033626] dev_ifsioc+0x43e/0xb90 [ 394.037239] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 394.042416] ? register_gifconf+0x70/0x70 [ 394.046646] dev_ioctl+0x1b5/0xcc0 [ 394.050185] sock_do_ioctl+0x1d3/0x3e0 [ 394.054061] ? compat_ifr_data_ioctl+0x170/0x170 [ 394.058801] ? lock_downgrade+0x8e0/0x8e0 [ 394.063033] ? kasan_check_read+0x11/0x20 [ 394.067174] ? rcu_is_watching+0x85/0x140 [ 394.071315] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 394.076493] sock_ioctl+0x30d/0x680 [ 394.080108] ? dlci_ioctl_set+0x40/0x40 [ 394.084071] ? expand_files.part.8+0x9a0/0x9a0 [ 394.088638] ? kasan_check_write+0x14/0x20 [ 394.092858] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 394.097775] ? wait_for_completion+0x870/0x870 [ 394.102354] ? dlci_ioctl_set+0x40/0x40 [ 394.106317] do_vfs_ioctl+0x1cf/0x16a0 [ 394.110194] ? ioctl_preallocate+0x2e0/0x2e0 [ 394.114588] ? fget_raw+0x20/0x20 [ 394.118033] ? __sb_end_write+0xac/0xe0 [ 394.122171] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 394.127715] ? fput+0x130/0x1a0 [ 394.130980] ? ksys_write+0x1a6/0x250 [ 394.134776] ? security_file_ioctl+0x94/0xc0 [ 394.139176] ksys_ioctl+0xa9/0xd0 [ 394.142628] __x64_sys_ioctl+0x73/0xb0 [ 394.146504] do_syscall_64+0x1b1/0x800 [ 394.150375] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 394.155205] ? syscall_return_slowpath+0x5c0/0x5c0 [ 394.160129] ? syscall_return_slowpath+0x30f/0x5c0 [ 394.165049] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 394.170400] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 394.175244] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 394.180416] RIP: 0033:0x455329 [ 394.183589] RSP: 002b:00007f768dc00c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.191282] RAX: ffffffffffffffda RBX: 00007f768dc016d4 RCX: 0000000000455329 [ 394.198535] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 394.205787] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 394.213042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 394.220299] R13: 000000000000036a R14: 00000000006f8290 R15: 0000000000000006 [ 394.227618] ------------[ cut here ]------------ [ 394.232406] kobject_add_internal failed for brport (error: -12 parent: team_slave_0) [ 394.240722] WARNING: CPU: 1 PID: 27875 at lib/kobject.c:242 kobject_add_internal+0x42c/0xba0 [ 394.249305] Kernel panic - not syncing: panic_on_warn set ... [ 394.249305] [ 394.256680] CPU: 1 PID: 27875 Comm: syz-executor7 Not tainted 4.17.0-rc1+ #7 [ 394.263866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.273228] Call Trace: [ 394.275822] dump_stack+0x1b9/0x294 [ 394.279456] ? dump_stack_print_info.cold.2+0x52/0x52 [ 394.284662] ? kobject_add_internal+0x3f0/0xba0 [ 394.289350] panic+0x22f/0x4de [ 394.292555] ? add_taint.cold.5+0x16/0x16 [ 394.296716] ? __warn.cold.8+0x148/0x1b3 [ 394.300788] ? kobject_add_internal+0x42c/0xba0 [ 394.305465] __warn.cold.8+0x163/0x1b3 [ 394.309359] ? kobject_add_internal+0x42c/0xba0 [ 394.314035] report_bug+0x252/0x2d0 [ 394.317677] do_error_trap+0x1de/0x490 [ 394.321570] ? math_error+0x420/0x420 [ 394.325377] ? vprintk_default+0x28/0x30 [ 394.329444] ? vprintk_func+0x81/0xe7 [ 394.333250] ? printk+0x9e/0xba [ 394.336539] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 394.341386] do_invalid_op+0x1b/0x20 [ 394.345102] invalid_op+0x14/0x20 [ 394.348561] RIP: 0010:kobject_add_internal+0x42c/0xba0 [ 394.353835] RSP: 0018:ffff8801ca2a7580 EFLAGS: 00010286 [ 394.359204] RAX: 0000000000000048 RBX: ffff8801c66caa78 RCX: ffffc900042d2000 [ 394.366479] RDX: 0000000000040000 RSI: ffffffff8160f451 RDI: ffff8801ca2a70e0 [ 394.373755] RBP: ffff8801ca2a7678 R08: ffff8801c905a440 R09: 0000000000000006 [ 394.381056] R10: ffff8801c905a440 R11: 0000000000000000 R12: 00000000fffffff4 [ 394.388341] R13: ffff8801ac9432e8 R14: ffff8801ce823040 R15: ffff8801ac9432e8 [ 394.395639] ? vprintk_func+0x81/0xe7 [ 394.400156] ? kobj_ns_type_registered+0x60/0x60 [ 394.404923] ? kfree_const+0x59/0x70 [ 394.408642] ? rcu_read_lock_sched_held+0x108/0x120 [ 394.413664] ? kfree+0x1e9/0x260 [ 394.417040] ? kfree_const+0x5e/0x70 [ 394.420767] kobject_init_and_add+0xed/0x130 [ 394.425186] ? kobject_add_internal+0xba0/0xba0 [ 394.429860] ? _raw_spin_unlock_bh+0x30/0x40 [ 394.434283] ? __dev_set_allmulti+0x1e1/0x310 [ 394.438793] br_add_if+0x76a/0x19e0 [ 394.442426] ? graph_lock+0x170/0x170 [ 394.446233] ? lock_acquire+0x1dc/0x520 [ 394.450220] ? br_features_recompute+0x220/0x220 [ 394.454986] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 394.460530] ? security_capable+0x99/0xc0 [ 394.464688] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 394.470232] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 394.475254] ? __dev_get_by_index+0x169/0x1c0 [ 394.479782] add_del_if+0x10f/0x140 [ 394.483420] br_dev_ioctl+0xbf/0xe0 [ 394.487054] ? br_ioctl_deviceless_stub+0xad0/0xad0 [ 394.492073] dev_ifsioc+0x43e/0xb90 [ 394.495712] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 394.500923] ? register_gifconf+0x70/0x70 [ 394.505085] dev_ioctl+0x1b5/0xcc0 [ 394.508632] sock_do_ioctl+0x1d3/0x3e0 [ 394.512528] ? compat_ifr_data_ioctl+0x170/0x170 [ 394.517291] ? lock_downgrade+0x8e0/0x8e0 [ 394.521450] ? kasan_check_read+0x11/0x20 [ 394.525602] ? rcu_is_watching+0x85/0x140 [ 394.529765] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 394.534966] sock_ioctl+0x30d/0x680 [ 394.538602] ? dlci_ioctl_set+0x40/0x40 [ 394.542589] ? expand_files.part.8+0x9a0/0x9a0 [ 394.547179] ? kasan_check_write+0x14/0x20 [ 394.551423] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 394.556368] ? wait_for_completion+0x870/0x870 [ 394.560954] ? dlci_ioctl_set+0x40/0x40 [ 394.564936] do_vfs_ioctl+0x1cf/0x16a0 [ 394.568833] ? ioctl_preallocate+0x2e0/0x2e0 [ 394.573250] ? fget_raw+0x20/0x20 [ 394.576708] ? __sb_end_write+0xac/0xe0 [ 394.580676] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 394.586200] ? fput+0x130/0x1a0 [ 394.589464] ? ksys_write+0x1a6/0x250 [ 394.593260] ? security_file_ioctl+0x94/0xc0 [ 394.597658] ksys_ioctl+0xa9/0xd0 [ 394.601100] __x64_sys_ioctl+0x73/0xb0 [ 394.604975] do_syscall_64+0x1b1/0x800 [ 394.608850] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 394.613681] ? syscall_return_slowpath+0x5c0/0x5c0 [ 394.618596] ? syscall_return_slowpath+0x30f/0x5c0 [ 394.623517] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 394.628872] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 394.633704] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 394.638898] RIP: 0033:0x455329 [ 394.642080] RSP: 002b:00007f768dc00c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.649774] RAX: ffffffffffffffda RBX: 00007f768dc016d4 RCX: 0000000000455329 [ 394.657033] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 394.664287] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 394.671714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 394.678976] R13: 000000000000036a R14: 00000000006f8290 R15: 0000000000000006 [ 394.687305] Dumping ftrace buffer: [ 394.691209] (ftrace buffer empty) [ 394.694902] Kernel Offset: disabled [ 394.698512] Rebooting in 86400 seconds..