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", 0x1000) syncfs(r1) setreuid(0x0, r3) fcntl$setown(r0, 0x8, r2) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x5, 0x600000) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f00000004c0)) fcntl$getownex(r0, 0x10, &(0x7f0000001500)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000dacff8)=@assoc_value={0x0, 0x200}, 0x8) getpriority(0x1, r5) shutdown(r4, 0x1) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000080), 0x4) writev(r0, &(0x7f00007f2000)=[{&(0x7f0000001f40)="b6b23ebe2094b6c296b7f43c2ff9cec9a414ac8ab00820fbde9a0f4a1bd2773a23ca881cb2b8f6f7676ec3e23411c9a7b90c0d98413505ae48a6f9680b3b1c7d9d2083981adb57cc49d7c44eb888269d5ddad8a8ece4937a8c1bd5f6d54eb2fee4344a60a71f21a02b71241caa5bfb30ef20735987815557dd0712275e1cab0562f6e71d00f07d832fff291844ad8c73a6b27652f46020e42eebd5fd185751187d8455017d6e42c6492f282d3fcea50ef7e26862684165a175a262d5fdb1562a9dd53028ed11564d449b40c3dc6e1500aff5eb7c7ac29b27bcac0249c746425160e164ce64e5180f5b19b180bfa5a14ff6d6bac621a1723ffe9dbd05f91bed6ffd9ba2ca0ea7f3eca738786c6cf9be08976ab48f5ce579d5053ef537ba15f9ca286ef7299567bf2b50512cba39ca22e4eafa46593dfb19b29e524a5e0b527f06c3fd666357e9b397f2e720146853c8a4e590b620fd4f0c83a6a0d626fbc2d018596b5bd8b2b9496d3a83f8760b1fb0a6ec9de29b146334717e8cab34996e8474bbde59447f2cc876096f80b10134ed5d69027a9cdd109de0d161003880d10536725ab38afdff82208b82a05f7661bc482b841d815c35660d7f7b036d0426f3cbfcd1448782af41483936f20b09e239d53be9df805d1a4dced5167eb9b8c8c681451329adcea047a3a00461916692c523647ed2b81b1f880417072cf26db77335331fd9d49b1bea2ba448e3e7822109d5a115c5da661c65193ae60923e37b8751d7f6eb2511fc9b55963fca553c0c6d065240b94c889af1781a8671ce4ec91744820d8c3905b2eafb38d909b45175801885e1a1059a9b3db85a95f2172947697e56244fd7b4b412a33b9adc061fca8c742d05f50ce0d2b4280749ce13488259d37074ba94540a5b9cdf426fdf4563163e81c9769b7a84db101c03d88cec1eb18b7ded9b957734dde7b896b0b9c1a76e63104a02a06e917a0e3b608276ad2860a17c76e5c5a07dd6917fa497adc8ff56e2ec6f2bcc09d8061f504c5d5128b4e89bcb2207df70db9d7cceff2fc266443b6d34bb651d0def84768f750279e8b8ab42a8ba7f4f265e0051333f346bc113c56b179b81421601bd60cd071ee198d84ca6abd13eb3ecbc6aaab47aaae592f97c3747c37266e8ad2358029989919b7f5dcee8b60e1d32a0a94d91cc073174ef180d1b3cd4aedb77f1e898f6df02cf3fe57db328abb0ac8d88e5f0d3015f10e74f00e90ab3acbd2e8917e130d2961b1895b5e3252e8a74a0fe0579330407de6a6644cdb7cef78f6ebdf9ef2aa07b32c587d93be72cce852d1ccdf83d1740e0b5c2971b340d98e584b883878ebcac7c91c0c7ce6c23b459b8feb49133d78e965ece4c3f5e11f929d5ef541e2ad8311c4c7412c045b4abf9d14e0f8fd1fd5f851511519e45bee4f00ebb6fddcf38b0936c7aaec7e846631d8f0f0f032fd578dba501d6c7c63bdc858c6c80cc37ac3992b4dec23d5c2304f15849f696bf1327c3d2ad87908a529bcd398b40c1323462ae597ac24b707041063050c35c6337f02461a3c14cbb6f2a573aa4c154bebe75e8e8254c2df4106fcac6a295317cde6123d9148693790211cc12a7c3cbfaf7e5da983827f7d430c4a858842057ac860fa3891fe7f59c71b7256618198ceb0253d0f6afe9515af1d3a97a69f5d3f8def2f0b2dd0cbaddedc76ac3e57763ea544187493419bb6b0cc14df727f31e6395db760806edcdc37804870ee006fe60471f10f0313fc1f9f365038472cf978d091e94338af5dc37e12e30d4e16b13675eea7d36a18f3e39db3619cdf573058e89f95702cf8bf8ca88b4f4989e4a7086a682a13b477d4cac8bdb595c1eeb2463e57538e896ca3168292cdcf7779a43f4113bdbab6d78aa986ac2766bb55a40f0f59aa7eac6af7db18e7e308ba6df385fdd13a8cfa4", 0x55f}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="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", 0x200}], 0x1) recvfrom$unix(r0, &(0x7f0000000480)=""/61, 0x9, 0x0, 0x0, 0x7ade03ee) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000001540)=0x4, 0x4) r6 = accept(r0, &(0x7f0000000100)=@alg, &(0x7f0000000040)=0x80) accept$netrom(r6, &(0x7f0000000180)=@full, &(0x7f0000000200)=0x48) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000002f80)="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", 0x201}], 0x1) 2018/04/06 06:12:17 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x2000080100000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:17 executing program 7: setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000017000)={0x0, 0x7ff, 0x4}, 0x10) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0xa080) ioctl(r0, 0x800000000000937e, &(0x7f0000017000)) 2018/04/06 06:12:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f00000fa000)={&(0x7f0000c1b000)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@mpls_newroute={0x24, 0x18, 0xf09, 0x0, 0x0, {0x1c}, [@RTA_OIF={0x8, 0x4}]}, 0x24}, 0x1}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r2 = accept4(r1, &(0x7f0000000280)=@ipx, &(0x7f0000000300)=0x80, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000400)={0x0, 0xffff}, &(0x7f0000000440)=0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) gettid() ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[0x0, 0x6, 0x4]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0x80000, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000714fe0)={{0x0, 0x989680}, {0x0, 0x6}}, &(0x7f0000000fe0)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000200)={0x7001}) r3 = getpid() sched_setattr(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) readv(r4, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0xffffff1f}], 0x1) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x2) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) r7 = dup3(r5, r4, 0x0) ioctl$KDENABIO(r7, 0x4b36) write(r4, &(0x7f0000c34fff), 0xffffff0b) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000240)={{0x0, 0x2, 0x9, 0x0, 0xfff}}) 2018/04/06 06:12:17 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x8848}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x8, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:17 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x800e000000000000]}) [ 421.332065] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 421.343935] syz-executor6 cpuset=syz6 mems_allowed=0 [ 421.349127] CPU: 1 PID: 25623 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 421.355979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.364756] netlink: 16 bytes leftover after parsing attributes in process `syz-executor1'. [ 421.365332] Call Trace: [ 421.365357] dump_stack+0x1b9/0x29f 2018/04/06 06:12:17 executing program 7: r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) r1 = gettid() io_submit(0x0, 0x1, &(0x7f0000001dc0)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001440)='}', 0x1}]) timer_create(0x0, &(0x7f0000000400)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x7fff, 0x82) ioctl$sock_ipx_SIOCIPXCFGDATA(r2, 0x89e2, &(0x7f00000003c0)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) io_submit(r4, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000001000)}]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)) r5 = shmget(0x3, 0x2000, 0x400, &(0x7f00002e7000/0x2000)=nil) r6 = geteuid() r7 = getegid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() io_getevents(r4, 0x8001, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340)={0x77359400}) shmctl$IPC_SET(r5, 0x1, &(0x7f00000001c0)={{0x0, r6, r7, r8, r9, 0x80, 0xf2}, 0x3, 0x8, 0x6, 0x4, r1, r1, 0xfc00000000000000}) [ 421.365379] ? arch_local_irq_restore+0x52/0x52 [ 421.365400] ? kasan_check_read+0x11/0x20 [ 421.365418] warn_alloc.cold.119+0xb2/0x1b8 [ 421.365438] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 421.398051] ? trace_hardirqs_on+0xd/0x10 [ 421.402216] ? _raw_spin_unlock_irq+0x27/0x70 [ 421.406730] ? finish_task_switch+0x1ca/0x820 [ 421.411252] ? lock_repin_lock+0x410/0x410 [ 421.415507] __vmalloc_node_range+0x45e/0x720 [ 421.420022] ? graph_lock+0x170/0x170 [ 421.423843] ? kvm_arch_create_memslot+0xa3/0x4e0 2018/04/06 06:12:17 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0xd000000]}) [ 421.428699] __vmalloc_node_flags_caller+0x50/0x60 [ 421.433644] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 421.438500] kvmalloc_node+0xde/0x100 [ 421.442318] kvm_arch_create_memslot+0xa3/0x4e0 [ 421.447005] __kvm_set_memory_region+0x1d1b/0x2e50 [ 421.451959] ? kvm_vcpu_block+0x1050/0x1050 [ 421.456289] ? zap_class+0x720/0x720 [ 421.460011] ? check_same_owner+0x320/0x320 [ 421.464341] ? rcu_note_context_switch+0x710/0x710 [ 421.469270] ? lock_acquire+0x1dc/0x520 [ 421.473260] ? graph_lock+0x170/0x170 [ 421.477063] ? __might_sleep+0x95/0x190 2018/04/06 06:12:17 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) open_by_handle_at(r0, &(0x7f0000000100)={0xb4, 0x7, "a4196093af2bb4a865481c7ee4507831215d3fd200c43fb089863d9ed9c73ca792f8b4cec43665d17a4ed4e94bf93174b78534ba6d199deef71d88d31252ed53d9ee742372baa551adc0c47441c47a274c1cd766dd99747b80d76bb8318f0905ee2dd5dbe90377e4ee950490c1dcd09f5d8905120aa436e4df52e0f5840c9c18ea83d19529918be21e8738a8d5101cee296536983d092314fce48fa12591a896340ef2c3a84769eee30778be"}, 0x40) [ 421.481048] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.486590] ? futex_wait_queue_me+0x559/0x820 [ 421.491184] ? refill_pi_state_cache.part.7+0x300/0x300 [ 421.496561] ? find_held_lock+0x36/0x1c0 [ 421.500640] ? lock_downgrade+0x8e0/0x8e0 [ 421.504828] kvm_set_memory_region+0x2e/0x50 [ 421.509242] kvm_vm_ioctl+0x668/0x1d90 [ 421.513141] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 421.518250] ? futex_wake+0x2f6/0x750 [ 421.522062] ? kvm_set_memory_region+0x50/0x50 [ 421.526651] ? get_futex_key+0x1e90/0x1e90 2018/04/06 06:12:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x3, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) [ 421.530897] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 421.535924] ? perf_trace_lock+0xd6/0x900 [ 421.540087] ? zap_class+0x720/0x720 [ 421.543810] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 421.549006] ? do_futex+0x249/0x27d0 [ 421.552729] ? native_flush_tlb_others+0x690/0x690 [ 421.557664] ? graph_lock+0x170/0x170 [ 421.561470] ? check_same_owner+0x320/0x320 [ 421.565808] ? exit_robust_list+0x290/0x290 [ 421.570150] ? find_held_lock+0x36/0x1c0 [ 421.574227] ? lock_downgrade+0x8e0/0x8e0 [ 421.578387] ? rcu_is_watching+0x85/0x140 2018/04/06 06:12:17 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20800, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000100)=[@release={0x40046306, 0x1}, @free_buffer={0x40086303, r1}], 0x26, 0x0, &(0x7f0000000140)="3872c78ebec1e7dc30bd057da3548bc1fe57418dd8743bfce597b220cf3cad4190aaee7fd60a"}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x21c840, 0x0) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000080)='wchan\x00') fchdir(r4) setns(r4, 0x4000000) syz_fuseblk_mount(&(0x7f0000976000)='./file0\x00', &(0x7f0000dd3ff8)='./f-le0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_pts(r4, 0x8000) [ 421.582542] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 421.587748] ? __fget+0x40c/0x650 [ 421.591212] ? expand_files.part.8+0x9a0/0x9a0 [ 421.595795] ? lock_downgrade+0x8e0/0x8e0 [ 421.599946] ? __split_vma+0x5ac/0x7f0 [ 421.603848] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.609390] ? vma_set_page_prot+0x183/0x260 [ 421.613807] ? kvm_set_memory_region+0x50/0x50 [ 421.618397] do_vfs_ioctl+0x1cf/0x1650 [ 421.622295] ? ioctl_preallocate+0x2e0/0x2e0 [ 421.626713] ? fget_raw+0x20/0x20 2018/04/06 06:12:18 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) ioctl$sock_netrom_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)) [ 421.630177] ? SyS_futex+0x3a4/0x56d [ 421.633898] ? do_futex+0x27d0/0x27d0 [ 421.637710] ? security_file_ioctl+0x9b/0xd0 [ 421.642130] ksys_ioctl+0xa9/0xd0 [ 421.645593] SyS_ioctl+0x24/0x30 [ 421.648958] ? ksys_ioctl+0xd0/0xd0 [ 421.652593] do_syscall_64+0x29e/0x9d0 [ 421.656481] ? vmalloc_sync_all+0x30/0x30 [ 421.660637] ? _raw_spin_unlock_irq+0x27/0x70 [ 421.665159] ? finish_task_switch+0x1ca/0x820 [ 421.669672] ? syscall_return_slowpath+0x5c0/0x5c0 [ 421.674608] ? syscall_return_slowpath+0x30f/0x5c0 [ 421.679547] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 421.684917] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 421.689778] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 421.694971] RIP: 0033:0x4552d9 [ 421.698162] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.705880] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 421.713151] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 421.720423] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 421.727695] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 421.734964] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 421.742450] warn_alloc_show_mem: 1 callbacks suppressed [ 421.742458] Mem-Info: [ 421.750310] active_anon:134435 inactive_anon:80 isolated_anon:0 [ 421.750310] active_file:22840 inactive_file:11569 isolated_file:0 [ 421.750310] unevictable:0 dirty:203 writeback:0 unstable:0 [ 421.750310] slab_reclaimable:12362 slab_unreclaimable:101270 [ 421.750310] mapped:73940 shmem:88 pagetables:1187 bounce:0 [ 421.750310] free:1249790 free_pcp:470 free_cma:0 [ 421.784196] Node 0 active_anon:537780kB inactive_anon:320kB active_file:91360kB inactive_file:46276kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295760kB dirty:812kB writeback:0kB shmem:352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 382976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 421.812341] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 421.838646] lowmem_reserve[]: 0 2833 6338 6338 [ 421.843295] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:700kB free_cma:0kB [ 421.871055] lowmem_reserve[]: 0 0 3505 3505 [ 421.875445] Node 0 Normal free:2080628kB min:37284kB low:46604kB high:55924kB active_anon:537748kB inactive_anon:320kB active_file:91360kB inactive_file:46276kB unevictable:0kB writepending:812kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5760kB pagetables:4748kB bounce:0kB free_pcp:1024kB local_pcp:544kB free_cma:0kB [ 421.905396] lowmem_reserve[]: 0 0 0 0 [ 421.909269] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 421.923013] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 421.938925] Node 0 Normal: 176*4kB (UME) 1257*8kB (UME) 1156*16kB (UME) 955*32kB (UME) 559*64kB (UME) 126*128kB (UME) 34*256kB (UME) 16*512kB (UM) 2*1024kB (UM) 6*2048kB (UME) 473*4096kB (UM) = 2080360kB [ 421.957397] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 421.966039] 34495 total pagecache pages [ 421.970052] 0 pages in swap cache [ 421.973549] Swap cache stats: add 0, delete 0, find 0/0 [ 421.978938] Free swap = 0kB [ 421.981992] Total swap = 0kB 2018/04/06 06:12:18 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x8060000]}) 2018/04/06 06:12:18 executing program 0: r0 = socket(0x2, 0x803, 0x1) connect$inet(r0, &(0x7f0000390000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x6}, 0x10) r1 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) ftruncate(r1, 0xffff) sendfile(r0, r1, 0x0, 0x72439a6b) 2018/04/06 06:12:18 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'bcsf0\x00', {0x2, 0x4e24, @multicast2=0xe0000002}}) 2018/04/06 06:12:18 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0xffffff84]}) [ 421.985038] 1965969 pages RAM [ 421.988181] 0 pages HighMem/MovableOnly [ 421.992176] 338524 pages reserved [ 422.034324] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 422.046219] syz-executor6 cpuset=syz6 mems_allowed=0 [ 422.051438] CPU: 0 PID: 25623 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 422.058281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.067639] Call Trace: [ 422.070229] dump_stack+0x1b9/0x29f [ 422.073869] ? arch_local_irq_restore+0x52/0x52 [ 422.078550] ? kasan_check_read+0x11/0x20 [ 422.082700] warn_alloc.cold.119+0xb2/0x1b8 [ 422.087024] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 422.091886] ? kasan_check_write+0x14/0x20 [ 422.096141] ? lock_repin_lock+0x410/0x410 [ 422.100386] __vmalloc_node_range+0x45e/0x720 [ 422.104890] ? graph_lock+0x170/0x170 [ 422.108689] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 422.113525] __vmalloc_node_flags_caller+0x50/0x60 [ 422.118447] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 422.123290] kvmalloc_node+0xde/0x100 [ 422.127093] kvm_arch_create_memslot+0xa3/0x4e0 [ 422.131770] __kvm_set_memory_region+0x1d1b/0x2e50 [ 422.136714] ? kvm_vcpu_block+0x1050/0x1050 [ 422.141046] ? zap_class+0x720/0x720 [ 422.144765] ? check_same_owner+0x320/0x320 [ 422.149089] ? rcu_note_context_switch+0x710/0x710 [ 422.154017] ? lock_acquire+0x1dc/0x520 [ 422.158018] ? graph_lock+0x170/0x170 [ 422.161837] ? __might_sleep+0x95/0x190 [ 422.165830] ? refill_pi_state_cache.part.7+0x300/0x300 [ 422.171215] ? find_held_lock+0x36/0x1c0 [ 422.175300] ? lock_downgrade+0x8e0/0x8e0 [ 422.179518] kvm_set_memory_region+0x2e/0x50 [ 422.183932] kvm_vm_ioctl+0x668/0x1d90 [ 422.187811] ? perf_tp_event+0xc30/0xc30 [ 422.191861] ? kasan_check_write+0x14/0x20 [ 422.196105] ? kvm_set_memory_region+0x50/0x50 [ 422.196513] netlink: 16 bytes leftover after parsing attributes in process `syz-executor1'. [ 422.200704] ? memset+0x31/0x40 [ 422.200737] ? perf_trace_lock+0x495/0x900 [ 422.200769] ? zap_class+0x720/0x720 [ 422.220438] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 422.225642] ? graph_lock+0x170/0x170 [ 422.229444] ? exit_robust_list+0x290/0x290 [ 422.233779] ? find_held_lock+0x36/0x1c0 [ 422.237891] ? lock_downgrade+0x8e0/0x8e0 [ 422.242050] ? lock_downgrade+0x8e0/0x8e0 [ 422.246222] ? rcu_is_watching+0x85/0x140 [ 422.250383] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 422.255612] ? __fget+0x40c/0x650 [ 422.259096] ? expand_files.part.8+0x9a0/0x9a0 [ 422.263694] ? lock_downgrade+0x8e0/0x8e0 [ 422.267869] ? lock_release+0xa10/0xa10 [ 422.271857] ? kvm_set_memory_region+0x50/0x50 [ 422.276433] do_vfs_ioctl+0x1cf/0x1650 [ 422.280313] ? ioctl_preallocate+0x2e0/0x2e0 [ 422.284709] ? fget_raw+0x20/0x20 [ 422.288169] ? security_file_mprotect+0x9b/0xd0 [ 422.292832] ? SyS_futex+0x3a4/0x56d [ 422.296536] ? do_futex+0x27d0/0x27d0 [ 422.300324] ? security_file_ioctl+0x9b/0xd0 [ 422.304730] ksys_ioctl+0xa9/0xd0 [ 422.308176] SyS_ioctl+0x24/0x30 [ 422.311540] ? ksys_ioctl+0xd0/0xd0 [ 422.315167] do_syscall_64+0x29e/0x9d0 [ 422.319045] ? vmalloc_sync_all+0x30/0x30 [ 422.323179] ? _raw_spin_unlock_irq+0x27/0x70 [ 422.327663] ? finish_task_switch+0x1ca/0x820 [ 422.332149] ? syscall_return_slowpath+0x5c0/0x5c0 [ 422.337069] ? syscall_return_slowpath+0x30f/0x5c0 [ 422.341992] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 422.347367] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 422.352219] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 422.357667] RIP: 0033:0x4552d9 [ 422.360849] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.368546] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 422.375801] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 2018/04/06 06:12:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x400, 0x2000000000) ioctl(r0, 0x20000000002285, &(0x7f0000000000)="53000000012e2a6824") ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x9, 0x8000, 0x4, 0x800000000000, 0x8, 0x20}) [ 422.383070] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 422.390329] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 422.397587] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:12:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:18 executing program 7: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4001) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x9, 0x4) r1 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x1000000000004144, &(0x7f0000000080)) 2018/04/06 06:12:18 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x5000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:18 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) getsockname$ipx(r0, &(0x7f0000000040), &(0x7f0000000180)=0x10) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) pipe2(&(0x7f00000001c0), 0x800) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r2}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) 2018/04/06 06:12:18 executing program 0: r0 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000140)=[{{r1, r2/1000+10000}, 0x5, 0x100000000, 0x6}, {{}, 0x100, 0x80000001, 0x3}, {{}, 0x5, 0x2, 0x3}, {{0x77359400}, 0xffffffffffff0000, 0x8, 0xffffffff}, {{}, 0x8, 0x4, 0x5}, {{0x0, 0x7530}, 0x7, 0x30c, 0x3}, {{0x0, 0x2710}, 0x1, 0xffff, 0x5}, {{0x77359400}, 0x1, 0x2, 0xf6fd}], 0xc0) write(r0, &(0x7f0000000240)="d7", 0x1) sendfile(r0, r0, &(0x7f0000000000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x8, 0x8041) rt_sigtimedwait(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x989680}, 0x8) 2018/04/06 06:12:18 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x800e}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:18 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x8906000000000000]}) 2018/04/06 06:12:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:18 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x4}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:18 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x400041) ioctl$KDDELIO(r1, 0x4b35, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r2}) 2018/04/06 06:12:18 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x88ffffff00000000]}) 2018/04/06 06:12:18 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20001, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x6, 0x8, 0x9, 0x1, 0x2000, 0xcae6, 0x26a, {0x0, @in={{0x2, 0x4e24, @broadcast=0xffffffff}}, 0x9, 0x3, 0x7, 0x3ff, 0x6}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in={{0x2, 0x4e24, @multicast2=0xe0000002}}}, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x505, 0x200, 0x800, 0x81, r2}, &(0x7f0000000240)=0x10) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54) r4 = semget$private(0x0, 0x4, 0x50) semctl$GETPID(r4, 0x3, 0xb, &(0x7f0000000340)=""/99) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000003c0)={r1, 0x100}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000440)={r5, @in={{0x2, 0x4e23}}}, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000500)={r2, 0x7, 0x5, [0x5, 0x1, 0x3, 0x436, 0x925a]}, &(0x7f0000000540)=0x12) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000580)={r1, 0xffffffff, 0x6}, &(0x7f00000005c0)=0x8) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000600)=""/198) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000700)={r3, 0x100000001, 0x9, 0xffffffff00000001, 0x6, 0xfffffffffffffff7}, &(0x7f0000000740)=0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000780)={r6, 0xffff}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000007c0)={r7, 0x2fc1e36f}, &(0x7f0000000800)=0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000840)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000880)=r8) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000008c0)) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000900)={{0x8e, @empty, 0x4e20, 0x0, 'dh\x00', 0x0, 0x7, 0x15}, {@broadcast=0xffffffff, 0x4e24, 0x5, 0x1, 0x7fff, 0x1f}}, 0x44) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000980)=0x3f, 0x4) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000a00)={&(0x7f00000009c0)=[0x80000001, 0x4, 0x9, 0xfb], 0x4, 0x4, 0x2, 0x6, 0xfffffffffffffff7, 0x10000, {0x400, 0x0, 0x81, 0x100, 0xfffffffffffffff9, 0x2, 0x7d90, 0x7fffffff, 0x0, 0xfffffffffffffffd, 0xff, 0x3, 0x5, 0x7, "e9e537fe046677d84cc514661b3c043ee87c7c0e3608e9f9bb32905163e17c08"}}) ioctl$sock_netrom_TIOCOUTQ(r0, 0x5411, &(0x7f0000000a80)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000ac0)={0x8, 0xfd, 0x2d}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) shmget$private(0x0, 0x1000, 0x140, &(0x7f0000ffe000/0x1000)=nil) r9 = syz_open_dev$admmidi(&(0x7f0000000b00)='/dev/admmidi#\x00', 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r9, 0x40505330, &(0x7f0000000b40)={{0xffffffffffffa7de, 0x3}, {0x1, 0x8}, 0xfffffffffffffffe, 0x1, 0x2}) ioctl$LOOP_SET_FD(r9, 0x4c00, r9) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000bc0)=""/85) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000c40)={r2, 0x44e}, &(0x7f0000000c80)=0x8) [ 422.583765] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 422.595636] syz-executor6 cpuset=syz6 mems_allowed=0 [ 422.600830] CPU: 1 PID: 25712 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 422.607672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.617026] Call Trace: [ 422.619635] dump_stack+0x1b9/0x29f [ 422.623284] ? arch_local_irq_restore+0x52/0x52 [ 422.627974] ? kasan_check_read+0x11/0x20 [ 422.632142] warn_alloc.cold.119+0xb2/0x1b8 [ 422.636478] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 422.641325] ? trace_hardirqs_on+0xd/0x10 [ 422.645482] ? _raw_spin_unlock_irq+0x27/0x70 [ 422.649993] ? finish_task_switch+0x1ca/0x820 [ 422.654512] ? lock_repin_lock+0x410/0x410 [ 422.658767] __vmalloc_node_range+0x45e/0x720 [ 422.663275] ? graph_lock+0x170/0x170 [ 422.667090] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 422.671945] __vmalloc_node_flags_caller+0x50/0x60 [ 422.676883] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 422.681739] kvmalloc_node+0xde/0x100 [ 422.685552] kvm_arch_create_memslot+0xa3/0x4e0 [ 422.690245] __kvm_set_memory_region+0x1d1b/0x2e50 [ 422.695195] ? kvm_vcpu_block+0x1050/0x1050 [ 422.699530] ? zap_class+0x720/0x720 [ 422.703254] ? check_same_owner+0x320/0x320 [ 422.707588] ? rcu_note_context_switch+0x710/0x710 [ 422.712526] ? lock_acquire+0x1dc/0x520 [ 422.716516] ? graph_lock+0x170/0x170 [ 422.720321] ? __might_sleep+0x95/0x190 [ 422.724309] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.729853] ? futex_wait_queue_me+0x559/0x820 2018/04/06 06:12:19 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xfffffffffffff000}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:19 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = gettid() ptrace$peekuser(0x3, r1, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000100)="30b66641846a522174759350075cc0dc075c3d93a430437ff6a3e25aceefa4d76f4c69dde717b756a531e0fc2bc2a0ab7fcbd25a59a1ea5b567a26a09b1ad4b15015e7638e30875330e535e575bd9d1b1b4ca8d4c695ecb1e69aea6284b9ba908189bdbd56ba1fd2f299c9897c2eda1c36e0017086de523c2dc0cb1a9a0a33a624559b45ff0f3df6ebff49d505cb4dd2b3dfb5b80e48da50c407079a602d000000", 0x2, 0x0) write(r2, &(0x7f00000001c0)="a0", 0x1) 2018/04/06 06:12:19 executing program 5: r0 = socket(0xa, 0x1, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) [ 422.734446] ? refill_pi_state_cache.part.7+0x300/0x300 [ 422.739828] ? find_held_lock+0x36/0x1c0 [ 422.743909] ? lock_downgrade+0x8e0/0x8e0 [ 422.748104] kvm_set_memory_region+0x2e/0x50 [ 422.752529] kvm_vm_ioctl+0x668/0x1d90 [ 422.756430] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 422.761542] ? futex_wake+0x2f6/0x750 [ 422.765355] ? kvm_set_memory_region+0x50/0x50 [ 422.769943] ? get_futex_key+0x1e90/0x1e90 [ 422.774182] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 422.779211] ? perf_trace_lock+0xd6/0x900 [ 422.783372] ? zap_class+0x720/0x720 [ 422.787103] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 422.792298] ? do_futex+0x249/0x27d0 [ 422.796016] ? native_flush_tlb_others+0x690/0x690 [ 422.800948] ? graph_lock+0x170/0x170 [ 422.804747] ? check_same_owner+0x320/0x320 [ 422.809084] ? exit_robust_list+0x290/0x290 [ 422.813417] ? find_held_lock+0x36/0x1c0 [ 422.817492] ? lock_downgrade+0x8e0/0x8e0 [ 422.821652] ? rcu_is_watching+0x85/0x140 [ 422.825815] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 422.831019] ? __fget+0x40c/0x650 [ 422.834488] ? expand_files.part.8+0x9a0/0x9a0 [ 422.839079] ? lock_downgrade+0x8e0/0x8e0 [ 422.843233] ? __split_vma+0x5ac/0x7f0 [ 422.847131] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.852676] ? vma_set_page_prot+0x183/0x260 [ 422.857100] ? kvm_set_memory_region+0x50/0x50 [ 422.861693] do_vfs_ioctl+0x1cf/0x1650 [ 422.865595] ? ioctl_preallocate+0x2e0/0x2e0 [ 422.870014] ? fget_raw+0x20/0x20 [ 422.873481] ? SyS_futex+0x3a4/0x56d [ 422.877209] ? do_futex+0x27d0/0x27d0 [ 422.881021] ? security_file_ioctl+0x9b/0xd0 [ 422.885438] ksys_ioctl+0xa9/0xd0 [ 422.888897] SyS_ioctl+0x24/0x30 [ 422.892263] ? ksys_ioctl+0xd0/0xd0 [ 422.895894] do_syscall_64+0x29e/0x9d0 [ 422.899784] ? vmalloc_sync_all+0x30/0x30 [ 422.903943] ? kasan_check_write+0x14/0x20 [ 422.908189] ? syscall_return_slowpath+0x5c0/0x5c0 [ 422.913130] ? syscall_return_slowpath+0x30f/0x5c0 [ 422.918080] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 422.923457] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 422.928302] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 422.933473] RIP: 0033:0x4552d9 [ 422.936643] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.944340] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 422.951592] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 422.958842] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 422.966095] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 422.973376] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 422.981135] warn_alloc_show_mem: 1 callbacks suppressed [ 422.981139] Mem-Info: [ 422.988992] active_anon:132354 inactive_anon:81 isolated_anon:0 [ 422.988992] active_file:22840 inactive_file:11578 isolated_file:0 [ 422.988992] unevictable:0 dirty:212 writeback:0 unstable:0 [ 422.988992] slab_reclaimable:12401 slab_unreclaimable:101735 [ 422.988992] mapped:73960 shmem:86 pagetables:1044 bounce:0 [ 422.988992] free:1251631 free_pcp:500 free_cma:0 [ 423.022887] Node 0 active_anon:527300kB inactive_anon:324kB active_file:91360kB inactive_file:46312kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295840kB dirty:848kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 391168kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 423.051058] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 423.077256] lowmem_reserve[]: 0 2833 6338 6338 [ 423.081898] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:700kB free_cma:0kB [ 423.109633] lowmem_reserve[]: 0 0 3505 3505 [ 423.114031] Node 0 Normal free:2089196kB min:37284kB low:46604kB high:55924kB active_anon:527300kB inactive_anon:324kB active_file:91360kB inactive_file:46312kB unevictable:0kB writepending:848kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5440kB pagetables:4176kB bounce:0kB free_pcp:1168kB local_pcp:472kB free_cma:0kB [ 423.143953] lowmem_reserve[]: 0 0 0 0 [ 423.147822] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 423.161512] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 423.177404] Node 0 Normal: 281*4kB (UME) 1259*8kB (ME) 1056*16kB (ME) 945*32kB (UME) 559*64kB (UME) 126*128kB (UME) 34*256kB (UME) 16*512kB (UM) 2*1024kB (UM) 7*2048kB (UME) 475*4096kB (UM) = 2089116kB [ 423.195631] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 423.204233] 34502 total pagecache pages [ 423.208229] 0 pages in swap cache [ 423.211706] Swap cache stats: add 0, delete 0, find 0/0 [ 423.217096] Free swap = 0kB [ 423.220131] Total swap = 0kB [ 423.223161] 1965969 pages RAM [ 423.226277] 0 pages HighMem/MovableOnly [ 423.230262] 338524 pages reserved [ 423.254402] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 423.266227] syz-executor6 cpuset=syz6 mems_allowed=0 [ 423.271546] CPU: 1 PID: 25712 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 423.278385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.287727] Call Trace: [ 423.290306] dump_stack+0x1b9/0x29f [ 423.293918] ? arch_local_irq_restore+0x52/0x52 [ 423.298582] ? kasan_check_read+0x11/0x20 [ 423.302716] warn_alloc.cold.119+0xb2/0x1b8 [ 423.307044] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 423.311916] ? kasan_check_write+0x14/0x20 [ 423.316169] ? lock_repin_lock+0x410/0x410 [ 423.320424] __vmalloc_node_range+0x45e/0x720 [ 423.324939] ? graph_lock+0x170/0x170 [ 423.328749] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 423.333585] __vmalloc_node_flags_caller+0x50/0x60 [ 423.338501] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 423.343328] kvmalloc_node+0xde/0x100 [ 423.347114] kvm_arch_create_memslot+0xa3/0x4e0 [ 423.351774] __kvm_set_memory_region+0x1d1b/0x2e50 [ 423.356694] ? kvm_vcpu_block+0x1050/0x1050 [ 423.360999] ? visit_groups_merge+0x539/0x6a0 [ 423.365490] ? zap_class+0x720/0x720 [ 423.369183] ? check_same_owner+0x320/0x320 [ 423.373488] ? rcu_note_context_switch+0x710/0x710 [ 423.378407] ? lock_acquire+0x1dc/0x520 [ 423.382379] ? graph_lock+0x170/0x170 [ 423.386165] ? __might_sleep+0x95/0x190 [ 423.390124] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.395645] ? futex_wait_queue_me+0x559/0x820 [ 423.400207] ? refill_pi_state_cache.part.7+0x300/0x300 [ 423.405558] ? find_held_lock+0x36/0x1c0 [ 423.409608] ? lock_downgrade+0x8e0/0x8e0 [ 423.413755] kvm_set_memory_region+0x2e/0x50 [ 423.418145] kvm_vm_ioctl+0x668/0x1d90 [ 423.422022] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 423.427109] ? futex_wake+0x2f6/0x750 [ 423.430892] ? kasan_check_write+0x14/0x20 [ 423.435113] ? kvm_set_memory_region+0x50/0x50 [ 423.439679] ? graph_lock+0x170/0x170 [ 423.443461] ? get_futex_key+0x1e90/0x1e90 [ 423.447677] ? __lock_acquire+0x7f5/0x5130 [ 423.451896] ? perf_trace_lock+0xd6/0x900 [ 423.456040] ? zap_class+0x720/0x720 [ 423.459744] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 423.464917] ? do_futex+0x249/0x27d0 [ 423.468613] ? graph_lock+0x170/0x170 [ 423.472400] ? exit_robust_list+0x290/0x290 [ 423.476711] ? find_held_lock+0x36/0x1c0 [ 423.480761] ? lock_downgrade+0x8e0/0x8e0 [ 423.484888] ? lock_downgrade+0x8e0/0x8e0 [ 423.489038] ? rcu_is_watching+0x85/0x140 [ 423.493178] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 423.498353] ? __fget+0x40c/0x650 [ 423.501794] ? expand_files.part.8+0x9a0/0x9a0 [ 423.506357] ? lock_downgrade+0x8e0/0x8e0 [ 423.510500] ? lock_release+0xa10/0xa10 [ 423.514466] ? kvm_set_memory_region+0x50/0x50 [ 423.519038] do_vfs_ioctl+0x1cf/0x1650 [ 423.522916] ? ioctl_preallocate+0x2e0/0x2e0 [ 423.527306] ? fget_raw+0x20/0x20 [ 423.530744] ? security_file_mprotect+0x9b/0xd0 [ 423.535398] ? SyS_futex+0x3a4/0x56d [ 423.539097] ? do_futex+0x27d0/0x27d0 [ 423.542878] ? security_file_ioctl+0x9b/0xd0 [ 423.547267] ksys_ioctl+0xa9/0xd0 [ 423.550704] SyS_ioctl+0x24/0x30 [ 423.554056] ? ksys_ioctl+0xd0/0xd0 [ 423.557666] do_syscall_64+0x29e/0x9d0 [ 423.561533] ? vmalloc_sync_all+0x30/0x30 [ 423.565663] ? kasan_check_write+0x14/0x20 [ 423.569877] ? syscall_return_slowpath+0x5c0/0x5c0 [ 423.574788] ? syscall_return_slowpath+0x30f/0x5c0 [ 423.579702] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 423.585053] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 423.589882] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 423.595056] RIP: 0033:0x4552d9 [ 423.598227] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2018/04/06 06:12:20 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) ioctl$sock_bt(r0, 0x8907, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) r2 = dup3(r1, r1, 0x80000) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x2, 0x70bd2a, 0x25dfdbff, {0x3}, [@FOU_ATTR_TYPE={0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x48800) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r4, 0x408, 0x70bd2d, 0x25dfdbfc, {0xb}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) 2018/04/06 06:12:20 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x8035000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:20 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000040)={0x9, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000200)={r2, 0x2}) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000080)={{0xffffffffffffffff, 0x2, 0x0, 0xfffffffffffffffd, 0x3}, 0x3f, 0xfffffffe, 'id0\x00', 'timer1\x00', 0x0, 0x6, 0x5, 0x55c2002, 0x20}) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3003000018000103000000331d000008e11500070000000c00160008000100d80000000000000000000000000000000037d6201678d103b1ab89a7bdc2fa351a2b8dea189b2c359c8461e27c3ab42baf9a88ce6432437ad62e648082c5542203ebe7be1d9bc1af0ca4b453a90c2b060cbf411018570d044c27f9232ee903af4dde1712e61afbf2bc4d3156ccd33e0f835ae8427ffe3b67dc1036c46693ff102a625f6b395a8c0e062a5c200e05364bd030e8a1e9b005b25c37e3cd7fa5ed42b45870f7c8301da070473eb2660dd739"], 0x30}, 0x1}, 0x0) 2018/04/06 06:12:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x12, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:20 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x8848000000000000]}) 2018/04/06 06:12:20 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40001, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0xba, 0x0, 'client0\x00', 0x1, "bdd29dadd7d9064b", "ef2dd6de0f69e7f6396e5b7b131b5f93c099529358e2f6ff9aa8d8c87e08ee62", 0x5, 0x800}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) sched_getscheduler(r1) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r3}) 2018/04/06 06:12:20 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x80ffff, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:20 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x100, 0x0) openat$cgroup_procs(r1, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x3, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080)=0x2, 0x4) socket$kcm(0x29, 0x2, 0x0) [ 423.605919] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 423.613167] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 423.620415] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 423.627664] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 423.634916] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:12:20 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x80350000]}) 2018/04/06 06:12:20 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd00000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:20 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast1=0xe0000001, @multicast1=0xe0000001}, 0x8) 2018/04/06 06:12:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x71, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:20 executing program 0: r0 = socket$packet(0x11, 0x10003, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x32, &(0x7f0000017f07)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @loopback=0x7f000001}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x5, 0x0, 0x4, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e23, 0x400, @mcast1={0xff, 0x1, [], 0x1}, 0x2}}, 0x5, 0x8001}, 0x90) [ 423.852924] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 423.864810] syz-executor6 cpuset=syz6 mems_allowed=0 [ 423.870125] CPU: 1 PID: 25774 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 423.876973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.886326] Call Trace: [ 423.888934] dump_stack+0x1b9/0x29f [ 423.892580] ? arch_local_irq_restore+0x52/0x52 [ 423.897261] ? kasan_check_read+0x11/0x20 [ 423.901422] warn_alloc.cold.119+0xb2/0x1b8 [ 423.905758] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 423.910607] ? trace_hardirqs_on+0xd/0x10 [ 423.914765] ? _raw_spin_unlock_irq+0x27/0x70 [ 423.919269] ? finish_task_switch+0x1ca/0x820 [ 423.923788] ? lock_repin_lock+0x410/0x410 [ 423.928047] __vmalloc_node_range+0x45e/0x720 [ 423.932561] ? graph_lock+0x170/0x170 [ 423.936373] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 423.941219] __vmalloc_node_flags_caller+0x50/0x60 [ 423.946250] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 423.951105] kvmalloc_node+0xde/0x100 [ 423.954919] kvm_arch_create_memslot+0xa3/0x4e0 [ 423.959612] __kvm_set_memory_region+0x1d1b/0x2e50 [ 423.964568] ? kvm_vcpu_block+0x1050/0x1050 [ 423.968910] ? zap_class+0x720/0x720 [ 423.972636] ? check_same_owner+0x320/0x320 [ 423.976975] ? rcu_note_context_switch+0x710/0x710 [ 423.981911] ? lock_acquire+0x1dc/0x520 [ 423.985882] ? graph_lock+0x170/0x170 [ 423.989673] ? __might_sleep+0x95/0x190 [ 423.993658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.999178] ? futex_wait_queue_me+0x559/0x820 [ 424.003744] ? refill_pi_state_cache.part.7+0x300/0x300 [ 424.009095] ? find_held_lock+0x36/0x1c0 [ 424.013145] ? lock_downgrade+0x8e0/0x8e0 [ 424.017307] kvm_set_memory_region+0x2e/0x50 [ 424.021702] kvm_vm_ioctl+0x668/0x1d90 [ 424.025571] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 424.030657] ? futex_wake+0x2f6/0x750 [ 424.034440] ? kvm_set_memory_region+0x50/0x50 [ 424.039007] ? get_futex_key+0x1e90/0x1e90 [ 424.043240] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 424.048238] ? perf_trace_lock+0xd6/0x900 [ 424.052371] ? zap_class+0x720/0x720 [ 424.056069] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 424.061240] ? do_futex+0x249/0x27d0 [ 424.064936] ? native_flush_tlb_others+0x690/0x690 [ 424.069845] ? graph_lock+0x170/0x170 [ 424.073632] ? check_same_owner+0x320/0x320 [ 424.077939] ? exit_robust_list+0x290/0x290 [ 424.082245] ? find_held_lock+0x36/0x1c0 [ 424.086293] ? lock_downgrade+0x8e0/0x8e0 [ 424.090426] ? rcu_is_watching+0x85/0x140 [ 424.094555] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 424.099746] ? __fget+0x40c/0x650 [ 424.103193] ? expand_files.part.8+0x9a0/0x9a0 [ 424.107753] ? lock_downgrade+0x8e0/0x8e0 [ 424.111895] ? __split_vma+0x5ac/0x7f0 [ 424.115776] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.121294] ? vma_set_page_prot+0x183/0x260 [ 424.125687] ? kvm_set_memory_region+0x50/0x50 [ 424.130249] do_vfs_ioctl+0x1cf/0x1650 [ 424.134120] ? ioctl_preallocate+0x2e0/0x2e0 [ 424.138511] ? fget_raw+0x20/0x20 [ 424.141960] ? SyS_futex+0x3a4/0x56d [ 424.145655] ? do_futex+0x27d0/0x27d0 [ 424.149451] ? security_file_ioctl+0x9b/0xd0 [ 424.153853] ksys_ioctl+0xa9/0xd0 [ 424.157301] SyS_ioctl+0x24/0x30 [ 424.160648] ? ksys_ioctl+0xd0/0xd0 [ 424.164258] do_syscall_64+0x29e/0x9d0 [ 424.168137] ? vmalloc_sync_all+0x30/0x30 [ 424.172267] ? kasan_check_write+0x14/0x20 [ 424.176488] ? syscall_return_slowpath+0x5c0/0x5c0 [ 424.181410] ? syscall_return_slowpath+0x30f/0x5c0 [ 424.186330] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 424.191685] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 424.196530] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 424.201711] RIP: 0033:0x4552d9 [ 424.204881] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.212574] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 424.219825] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 424.227075] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 424.234329] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 424.241590] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 424.248917] warn_alloc_show_mem: 1 callbacks suppressed [ 424.248921] Mem-Info: [ 424.256737] active_anon:131295 inactive_anon:80 isolated_anon:0 [ 424.256737] active_file:22840 inactive_file:11595 isolated_file:0 [ 424.256737] unevictable:0 dirty:230 writeback:0 unstable:0 [ 424.256737] slab_reclaimable:12404 slab_unreclaimable:100986 [ 424.256737] mapped:73963 shmem:86 pagetables:1039 bounce:0 [ 424.256737] free:1253462 free_pcp:502 free_cma:0 [ 424.290556] Node 0 active_anon:525180kB inactive_anon:320kB active_file:91360kB inactive_file:46380kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295852kB dirty:920kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 380928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 424.319212] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 424.345912] lowmem_reserve[]: 0 2833 6338 6338 [ 424.350549] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:700kB free_cma:0kB [ 424.378291] lowmem_reserve[]: 0 0 3505 3505 [ 424.382663] Node 0 Normal free:2094796kB min:37284kB low:46604kB high:55924kB active_anon:525180kB inactive_anon:320kB active_file:91360kB inactive_file:46380kB unevictable:0kB writepending:920kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5440kB pagetables:4156kB bounce:0kB free_pcp:1076kB local_pcp:476kB free_cma:0kB [ 424.412562] lowmem_reserve[]: 0 0 0 0 [ 424.416426] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 424.430073] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 424.445941] Node 0 Normal: 265*4kB (UME) 1334*8kB (UME) 1057*16kB (UME) 853*32kB (UME) 559*64kB (UME) 163*128kB (UME) 39*256kB (UME) 16*512kB (UM) 2*1024kB (UM) 6*2048kB (UME) 476*4096kB (UM) = 2094788kB [ 424.464360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 424.472965] 34519 total pagecache pages [ 424.476972] 0 pages in swap cache [ 424.480469] Swap cache stats: add 0, delete 0, find 0/0 [ 424.485851] Free swap = 0kB [ 424.488902] Total swap = 0kB [ 424.491970] 1965969 pages RAM [ 424.495112] 0 pages HighMem/MovableOnly [ 424.499101] 338524 pages reserved [ 424.521758] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 424.533644] syz-executor6 cpuset=syz6 mems_allowed=0 [ 424.538949] CPU: 0 PID: 25774 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 424.545794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.555139] Call Trace: [ 424.557726] dump_stack+0x1b9/0x29f [ 424.561344] ? arch_local_irq_restore+0x52/0x52 [ 424.566008] ? kasan_check_read+0x11/0x20 [ 424.570172] warn_alloc.cold.119+0xb2/0x1b8 [ 424.574492] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 424.579332] ? kasan_check_write+0x14/0x20 [ 424.583574] ? lock_repin_lock+0x410/0x410 [ 424.587830] __vmalloc_node_range+0x45e/0x720 [ 424.592330] ? graph_lock+0x170/0x170 [ 424.596124] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 424.600969] __vmalloc_node_flags_caller+0x50/0x60 [ 424.605893] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 424.610754] kvmalloc_node+0xde/0x100 [ 424.614586] kvm_arch_create_memslot+0xa3/0x4e0 [ 424.619292] __kvm_set_memory_region+0x1d1b/0x2e50 [ 424.624266] ? kvm_vcpu_block+0x1050/0x1050 [ 424.628616] ? zap_class+0x720/0x720 [ 424.632351] ? check_same_owner+0x320/0x320 [ 424.636704] ? rcu_note_context_switch+0x710/0x710 [ 424.641659] ? lock_acquire+0x1dc/0x520 [ 424.645651] ? graph_lock+0x170/0x170 [ 424.649444] ? __might_sleep+0x95/0x190 [ 424.653419] ? refill_pi_state_cache.part.7+0x300/0x300 [ 424.658800] ? find_held_lock+0x36/0x1c0 [ 424.662863] ? lock_downgrade+0x8e0/0x8e0 [ 424.667048] kvm_set_memory_region+0x2e/0x50 [ 424.671448] kvm_vm_ioctl+0x668/0x1d90 [ 424.675321] ? perf_tp_event+0xc30/0xc30 [ 424.679366] ? kasan_check_write+0x14/0x20 [ 424.683591] ? kvm_set_memory_region+0x50/0x50 [ 424.688160] ? memset+0x31/0x40 [ 424.691433] ? perf_trace_lock+0x495/0x900 [ 424.695664] ? zap_class+0x720/0x720 [ 424.699364] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 424.704546] ? graph_lock+0x170/0x170 [ 424.708355] ? exit_robust_list+0x290/0x290 [ 424.712668] ? find_held_lock+0x36/0x1c0 [ 424.716726] ? lock_downgrade+0x8e0/0x8e0 [ 424.720861] ? lock_downgrade+0x8e0/0x8e0 [ 424.725004] ? rcu_is_watching+0x85/0x140 [ 424.729150] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 424.734335] ? __fget+0x40c/0x650 [ 424.737784] ? expand_files.part.8+0x9a0/0x9a0 [ 424.742350] ? lock_downgrade+0x8e0/0x8e0 [ 424.746488] ? lock_release+0xa10/0xa10 [ 424.750461] ? kvm_set_memory_region+0x50/0x50 [ 424.755040] do_vfs_ioctl+0x1cf/0x1650 [ 424.758923] ? ioctl_preallocate+0x2e0/0x2e0 [ 424.763320] ? fget_raw+0x20/0x20 [ 424.766780] ? security_file_mprotect+0x9b/0xd0 [ 424.771446] ? SyS_futex+0x3a4/0x56d [ 424.775152] ? do_futex+0x27d0/0x27d0 [ 424.778942] ? security_file_ioctl+0x9b/0xd0 [ 424.783341] ksys_ioctl+0xa9/0xd0 [ 424.786786] SyS_ioctl+0x24/0x30 [ 424.790139] ? ksys_ioctl+0xd0/0xd0 [ 424.793753] do_syscall_64+0x29e/0x9d0 [ 424.797628] ? vmalloc_sync_all+0x30/0x30 [ 424.801766] ? kasan_check_write+0x14/0x20 [ 424.805990] ? syscall_return_slowpath+0x5c0/0x5c0 [ 424.810915] ? syscall_return_slowpath+0x30f/0x5c0 [ 424.815853] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 424.821220] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 424.826057] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 424.831232] RIP: 0033:0x4552d9 [ 424.834416] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.842116] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 424.849371] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 424.856630] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 424.863891] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff 2018/04/06 06:12:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e20, @broadcast=0xffffffff}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x6, 0x2}, [@NDA_LLADDR={0xa, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x28}, 0x1}, 0x0) 2018/04/06 06:12:21 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r2, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x2, 0x460, [0x0, 0x200006c0, 0x200006f0, 0x20000720], 0x0, &(0x7f0000000000), &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x3, 0x50, 0x88b5, 'bcsh0\x00', 'syzkaller1\x00', 'ipddp0\x00', 'irlan0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}, [0xff, 0x0, 0x0, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0xa0, 0xa0, 0xe8, [@connlabel={'connlabel\x00', 0x8, {{0x10001, 0x1}}}]}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x7ff, 0x2, 0x29}}}}, {{{0x1b, 0x8, 0xd, 'bcsf0\x00', 'teql0\x00', 'lo\x00', 'dummy0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1a}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @random="84ac50ac6d9d", [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x120, 0x280, 0x2b8, [@quota={'quota\x00', 0x18, {{0x1, 0x0, 0x5b, 0x6}}}, @stp={'stp\x00', 0x48, {{0x100000001, {0x80000000, 0xffffffff, 0xff, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xf}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x3f, 0x6, 0x28c7da24, 0x5, @random="3ea73819337d", [0xff, 0x0, 0x0, 0xff, 0xff, 0xedefa52ba464742], 0x4e22, 0x4e24, 0x2, 0x4, 0x2, 0x0, 0x9, 0x80000001, 0x5, 0x401}, 0x410, 0x970}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x94fa, 'system_u:object_r:mouse_device_t:s0\x00'}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x4d8) sendto$inet(r2, &(0x7f00000000c0)="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", 0x4e5, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) [ 424.871149] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:12:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x16, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:21 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x7, 0x0) sendto$llc(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x3, 0xfffffffffffffffc, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) connect$llc(r0, &(0x7f00000000c0)={0x1a, 0x300, 0x400, 0x1ff, 0x86, 0x2, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x2000}) 2018/04/06 06:12:21 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x89060000]}) 2018/04/06 06:12:21 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf000}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:21 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x10, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:21 executing program 7: accept$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x14) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000200)) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x3, 0xb6, 0x7fffffff, 0x8, 0x0, 0x7fff, 0x20080, 0x2, 0x80, 0x1, 0x2, 0x3f, 0x6f, 0x9, 0x5, 0x6, 0x0, 0x808, 0x4, 0x7, 0x8b7c, 0x2, 0x9, 0x1f, 0x3, 0x7ff, 0x9db5, 0x7, 0x0, 0x7, 0x8, 0xdea, 0x7, 0x99c9, 0x2, 0x5, 0x0, 0x900000000000, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x4000, 0x6, 0x6, 0x1, 0x1, 0x1, 0xed0}, r1, 0x3, r0, 0x9) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x40}) [ 424.943667] ip6_vti0: FDB only supports static addresses [ 425.049624] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 425.061516] syz-executor6 cpuset=syz6 mems_allowed=0 [ 425.066864] CPU: 0 PID: 25822 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 425.073710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.083051] Call Trace: [ 425.085631] dump_stack+0x1b9/0x29f [ 425.089257] ? arch_local_irq_restore+0x52/0x52 [ 425.093917] ? kasan_check_read+0x11/0x20 [ 425.098062] warn_alloc.cold.119+0xb2/0x1b8 [ 425.102377] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 425.107231] ? finish_task_switch+0x1ca/0x820 [ 425.111733] ? lock_repin_lock+0x410/0x410 [ 425.115971] __vmalloc_node_range+0x45e/0x720 [ 425.120459] ? graph_lock+0x170/0x170 [ 425.124251] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 425.129083] __vmalloc_node_flags_caller+0x50/0x60 [ 425.134005] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 425.138866] kvmalloc_node+0xde/0x100 [ 425.142676] kvm_arch_create_memslot+0xa3/0x4e0 [ 425.147354] __kvm_set_memory_region+0x1d1b/0x2e50 [ 425.152306] ? kvm_vcpu_block+0x1050/0x1050 [ 425.156626] ? zap_class+0x720/0x720 [ 425.160336] ? check_same_owner+0x320/0x320 [ 425.164674] ? rcu_note_context_switch+0x710/0x710 [ 425.169592] ? lock_acquire+0x1dc/0x520 [ 425.173557] ? graph_lock+0x170/0x170 [ 425.177346] ? __might_sleep+0x95/0x190 [ 425.181317] ? refill_pi_state_cache.part.7+0x300/0x300 [ 425.186673] ? find_held_lock+0x36/0x1c0 [ 425.190753] ? lock_downgrade+0x8e0/0x8e0 [ 425.194931] kvm_set_memory_region+0x2e/0x50 [ 425.199331] kvm_vm_ioctl+0x668/0x1d90 [ 425.203221] ? perf_tp_event+0xc30/0xc30 [ 425.207294] ? kvm_set_memory_region+0x50/0x50 [ 425.211869] ? memset+0x31/0x40 [ 425.215143] ? perf_trace_lock+0x495/0x900 [ 425.219386] ? zap_class+0x720/0x720 [ 425.223090] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 425.228275] ? native_flush_tlb_others+0x690/0x690 [ 425.233201] ? graph_lock+0x170/0x170 [ 425.236999] ? check_same_owner+0x320/0x320 [ 425.241351] ? exit_robust_list+0x290/0x290 [ 425.245675] ? find_held_lock+0x36/0x1c0 [ 425.249742] ? lock_downgrade+0x8e0/0x8e0 [ 425.253882] ? rcu_is_watching+0x85/0x140 [ 425.258029] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 425.263226] ? __fget+0x40c/0x650 [ 425.266672] ? expand_files.part.8+0x9a0/0x9a0 [ 425.271250] ? lock_downgrade+0x8e0/0x8e0 [ 425.275396] ? __split_vma+0x5ac/0x7f0 [ 425.279273] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.284795] ? vma_set_page_prot+0x183/0x260 [ 425.289194] ? kvm_set_memory_region+0x50/0x50 [ 425.293763] do_vfs_ioctl+0x1cf/0x1650 [ 425.297644] ? ioctl_preallocate+0x2e0/0x2e0 [ 425.302049] ? fget_raw+0x20/0x20 [ 425.305502] ? SyS_futex+0x3a4/0x56d [ 425.309208] ? do_futex+0x27d0/0x27d0 [ 425.313009] ? security_file_ioctl+0x9b/0xd0 [ 425.317418] ksys_ioctl+0xa9/0xd0 [ 425.320862] SyS_ioctl+0x24/0x30 [ 425.324214] ? ksys_ioctl+0xd0/0xd0 [ 425.327829] do_syscall_64+0x29e/0x9d0 [ 425.331702] ? vmalloc_sync_all+0x30/0x30 [ 425.335847] ? _raw_spin_unlock_irq+0x27/0x70 [ 425.340331] ? finish_task_switch+0x1ca/0x820 [ 425.344815] ? syscall_return_slowpath+0x5c0/0x5c0 [ 425.349745] ? syscall_return_slowpath+0x30f/0x5c0 [ 425.354682] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 425.360052] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 425.364905] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 425.370083] RIP: 0033:0x4552d9 [ 425.373269] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.380967] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 425.388221] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 425.395480] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 425.402735] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 425.409991] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 425.417453] warn_alloc_show_mem: 1 callbacks suppressed [ 425.417461] Mem-Info: [ 425.425372] active_anon:132327 inactive_anon:79 isolated_anon:0 [ 425.425372] active_file:22840 inactive_file:11608 isolated_file:0 [ 425.425372] unevictable:0 dirty:243 writeback:0 unstable:0 [ 425.425372] slab_reclaimable:12415 slab_unreclaimable:101205 [ 425.425372] mapped:73975 shmem:86 pagetables:1040 bounce:0 [ 425.425372] free:1252146 free_pcp:540 free_cma:0 [ 425.459250] Node 0 active_anon:529308kB inactive_anon:316kB active_file:91360kB inactive_file:46432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295900kB dirty:972kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 382976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 425.487400] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 425.513645] lowmem_reserve[]: 0 2833 6338 6338 [ 425.518306] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:224kB free_cma:0kB [ 425.546091] lowmem_reserve[]: 0 0 3505 3505 [ 425.550516] Node 0 Normal free:2089532kB min:37284kB low:46604kB high:55924kB active_anon:529308kB inactive_anon:316kB active_file:91360kB inactive_file:46432kB unevictable:0kB writepending:972kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5440kB pagetables:4160kB bounce:0kB free_pcp:1228kB local_pcp:568kB free_cma:0kB [ 425.580431] lowmem_reserve[]: 0 0 0 0 [ 425.584347] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 425.598092] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 425.614080] Node 0 Normal: 205*4kB (UME) 1265*8kB (ME) 1080*16kB (UME) 831*32kB (UME) 558*64kB (UME) 163*128kB (UME) 39*256kB (UME) 16*512kB (UM) 2*1024kB (UM) 6*2048kB (UME) 475*4096kB (UM) = 2089500kB [ 425.632472] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 425.641086] 34532 total pagecache pages [ 425.645114] 0 pages in swap cache [ 425.648595] Swap cache stats: add 0, delete 0, find 0/0 [ 425.653995] Free swap = 0kB [ 425.657059] Total swap = 0kB [ 425.660137] 1965969 pages RAM [ 425.663264] 0 pages HighMem/MovableOnly [ 425.667276] 338524 pages reserved [ 425.688724] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 425.700498] syz-executor6 cpuset=syz6 mems_allowed=0 [ 425.705653] CPU: 1 PID: 25822 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 425.712486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.721819] Call Trace: [ 425.724396] dump_stack+0x1b9/0x29f [ 425.728014] ? arch_local_irq_restore+0x52/0x52 [ 425.732681] ? kasan_check_read+0x11/0x20 [ 425.736828] warn_alloc.cold.119+0xb2/0x1b8 [ 425.741172] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 425.746014] ? kasan_check_write+0x14/0x20 [ 425.750263] ? lock_repin_lock+0x410/0x410 [ 425.754486] __vmalloc_node_range+0x45e/0x720 [ 425.758972] ? graph_lock+0x170/0x170 [ 425.762766] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 425.767607] __vmalloc_node_flags_caller+0x50/0x60 [ 425.770791] kernel msg: ebtables bug: please report to author: bad policy [ 425.772534] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 425.772556] kvmalloc_node+0xde/0x100 [ 425.772575] kvm_arch_create_memslot+0xa3/0x4e0 [ 425.772604] __kvm_set_memory_region+0x1d1b/0x2e50 [ 425.797668] ? kvm_vcpu_block+0x1050/0x1050 [ 425.801979] ? visit_groups_merge+0x539/0x6a0 [ 425.806462] ? zap_class+0x720/0x720 [ 425.810157] ? check_same_owner+0x320/0x320 [ 425.814463] ? rcu_note_context_switch+0x710/0x710 [ 425.819374] ? lock_acquire+0x1dc/0x520 [ 425.823335] ? graph_lock+0x170/0x170 [ 425.827116] ? __might_sleep+0x95/0x190 [ 425.831082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.836602] ? futex_wait_queue_me+0x559/0x820 [ 425.841168] ? refill_pi_state_cache.part.7+0x300/0x300 [ 425.846529] ? find_held_lock+0x36/0x1c0 [ 425.850595] ? lock_downgrade+0x8e0/0x8e0 [ 425.854751] kvm_set_memory_region+0x2e/0x50 [ 425.859144] kvm_vm_ioctl+0x668/0x1d90 [ 425.863023] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 425.868117] ? futex_wake+0x2f6/0x750 [ 425.871898] ? kasan_check_write+0x14/0x20 [ 425.876115] ? kvm_set_memory_region+0x50/0x50 [ 425.880689] ? graph_lock+0x170/0x170 [ 425.884471] ? get_futex_key+0x1e90/0x1e90 [ 425.888688] ? __lock_acquire+0x7f5/0x5130 [ 425.892910] ? perf_trace_lock+0xd6/0x900 [ 425.897053] ? zap_class+0x720/0x720 [ 425.900755] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 425.905930] ? do_futex+0x249/0x27d0 [ 425.909627] ? graph_lock+0x170/0x170 [ 425.913413] ? exit_robust_list+0x290/0x290 [ 425.917720] ? find_held_lock+0x36/0x1c0 [ 425.921767] ? lock_downgrade+0x8e0/0x8e0 [ 425.925895] ? lock_downgrade+0x8e0/0x8e0 [ 425.929218] kernel msg: ebtables bug: please report to author: bad policy [ 425.930040] ? rcu_is_watching+0x85/0x140 [ 425.930058] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 425.930080] ? __fget+0x40c/0x650 [ 425.949735] ? expand_files.part.8+0x9a0/0x9a0 [ 425.954319] ? lock_downgrade+0x8e0/0x8e0 [ 425.958473] ? lock_release+0xa10/0xa10 [ 425.962462] ? kvm_set_memory_region+0x50/0x50 [ 425.967050] do_vfs_ioctl+0x1cf/0x1650 [ 425.970950] ? ioctl_preallocate+0x2e0/0x2e0 [ 425.975367] ? fget_raw+0x20/0x20 [ 425.978829] ? security_file_mprotect+0x9b/0xd0 [ 425.983507] ? SyS_futex+0x3a4/0x56d [ 425.987216] ? do_futex+0x27d0/0x27d0 [ 425.990999] ? security_file_ioctl+0x9b/0xd0 [ 425.995398] ksys_ioctl+0xa9/0xd0 [ 425.998837] SyS_ioctl+0x24/0x30 [ 426.002184] ? ksys_ioctl+0xd0/0xd0 [ 426.005801] do_syscall_64+0x29e/0x9d0 [ 426.009681] ? vmalloc_sync_all+0x30/0x30 [ 426.013822] ? _raw_spin_unlock_irq+0x27/0x70 [ 426.018298] ? finish_task_switch+0x1ca/0x820 [ 426.022788] ? syscall_return_slowpath+0x5c0/0x5c0 [ 426.027703] ? syscall_return_slowpath+0x30f/0x5c0 [ 426.032625] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 426.037975] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 426.042804] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 426.047978] RIP: 0033:0x4552d9 2018/04/06 06:12:22 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf0}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:22 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x600]}) 2018/04/06 06:12:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:22 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000280)={r1}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) 2018/04/06 06:12:22 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x3, [0x2ef, 0x8001, 0x7]}, 0xa) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x435, 0x10000000051, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='illinois\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000280)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000002c0)=r2) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x80) openat$cgroup_type(r0, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, &(0x7f00000000c0)=""/23, &(0x7f0000000100)=0x17) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) prctl$setname(0xf, &(0x7f0000000140)='dctcp\x00') 2018/04/06 06:12:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x3) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="aa", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, 0xffffffffffffffff, &(0x7f00000ddff8), 0x102000001) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a", [0x7, 0x9]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0) 2018/04/06 06:12:22 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x7a, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:22 executing program 5: r0 = socket(0x9, 0x1, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) r2 = dup2(r0, r0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) [ 426.051156] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.058855] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 426.066103] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 426.073353] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 426.080608] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 426.087864] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:12:22 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x43050000}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:22 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x2100]}) 2018/04/06 06:12:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x4, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00005f5ffd)='io\x00') getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x3f}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e23, 0x3, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x1a3e}}}, 0x84) bind$alg(r0, &(0x7f0000466000)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000980000)={0x0, 0x0, &(0x7f000038f000)=[{&(0x7f0000c90f9a)="94", 0x1}], 0x1, &(0x7f0000000040)=[@iv={0x88, 0x117, 0x2, 0x72, "f71ace0f2b918e8509b162c180e4a4966689eff51a50f6ff0bcecfadc620e0709225ffbb9c35d47b290864ce796deaf9335f8feec287a9ff18f0b635c2c93eeb6acc3cbb9122fce3285d301c7c3e047f964b3bca106f596789e1d920d15503d60cf784f504c19a2ececcc97af20e022b23d7"}, @iv={0x40, 0x117, 0x2, 0x2b, "e84a9803ba6da738675cfcb0db97989fe7619c89d051bb66b4f06389e473b2a838573152023e053fdeb1e3"}], 0x3cd}, 0x8081) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0x9, 0x6, 0x6, 0x20, 0x401, 0xe3}, 0xa19b}, 0xa) sendfile(r3, r1, &(0x7f0000807000), 0x13f) 2018/04/06 06:12:22 executing program 0: r0 = epoll_create1(0x80000) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x231}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r3, 0x4) rt_sigpending(&(0x7f0000000140), 0x8) 2018/04/06 06:12:22 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x4888}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) [ 426.311221] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 426.323080] syz-executor6 cpuset=syz6 mems_allowed=0 [ 426.328266] CPU: 1 PID: 25858 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 426.335125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.344481] Call Trace: [ 426.347082] dump_stack+0x1b9/0x29f [ 426.350725] ? arch_local_irq_restore+0x52/0x52 [ 426.355410] ? graph_lock+0x170/0x170 2018/04/06 06:12:22 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) 2018/04/06 06:12:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)='ip6_vti0\x00') 2018/04/06 06:12:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x19, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) [ 426.359228] warn_alloc.cold.119+0xb2/0x1b8 [ 426.363567] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 426.368431] ? __update_load_avg_blocked_se.isra.33+0x460/0x460 [ 426.374509] ? print_usage_bug+0xc0/0xc0 [ 426.378582] ? print_usage_bug+0xc0/0xc0 [ 426.382655] ? update_load_avg+0x2d9/0x2540 [ 426.386986] ? graph_lock+0x170/0x170 [ 426.390807] __vmalloc_node_range+0x45e/0x720 [ 426.395318] ? graph_lock+0x170/0x170 [ 426.399137] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 426.403988] __vmalloc_node_flags_caller+0x50/0x60 [ 426.408928] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 426.413789] kvmalloc_node+0xde/0x100 [ 426.417606] kvm_arch_create_memslot+0xa3/0x4e0 [ 426.422300] __kvm_set_memory_region+0x1d1b/0x2e50 [ 426.427253] ? kvm_vcpu_block+0x1050/0x1050 [ 426.431584] ? print_usage_bug+0xc0/0xc0 [ 426.435663] ? zap_class+0x720/0x720 [ 426.439389] ? perf_trace_lock+0xd6/0x900 [ 426.443561] ? graph_lock+0x170/0x170 [ 426.447368] ? zap_class+0x720/0x720 [ 426.451086] ? graph_lock+0x170/0x170 [ 426.454894] ? __lock_acquire+0x7f5/0x5130 2018/04/06 06:12:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xbe, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x14, 0x32, 0x100008aff}, 0x14}, 0x1}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000), 0x4) [ 426.459140] ? graph_lock+0x170/0x170 [ 426.462960] ? find_held_lock+0x36/0x1c0 [ 426.467039] ? lock_downgrade+0x8e0/0x8e0 [ 426.471231] kvm_set_memory_region+0x2e/0x50 [ 426.475651] kvm_vm_ioctl+0x668/0x1d90 [ 426.479557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 426.485104] ? __perf_event_task_sched_in+0x247/0xb80 [ 426.490302] ? kvm_set_memory_region+0x50/0x50 [ 426.494900] ? find_held_lock+0x36/0x1c0 [ 426.498973] ? perf_trace_lock+0xd6/0x900 [ 426.503133] ? zap_class+0x720/0x720 [ 426.506854] ? finish_task_switch+0x182/0x820 [ 426.511360] ? kasan_check_read+0x11/0x20 [ 426.515517] ? graph_lock+0x170/0x170 [ 426.519325] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 426.523918] ? compat_start_thread+0x80/0x80 [ 426.528340] ? _raw_spin_unlock_irq+0x27/0x70 [ 426.532845] ? trace_hardirqs_on+0xd/0x10 [ 426.537005] ? _raw_spin_unlock_irq+0x27/0x70 [ 426.541511] ? find_held_lock+0x36/0x1c0 [ 426.545590] ? lock_downgrade+0x8e0/0x8e0 [ 426.549748] ? rcu_is_watching+0x85/0x140 [ 426.553903] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 426.559108] ? __fget+0x40c/0x650 [ 426.562577] ? expand_files.part.8+0x9a0/0x9a0 [ 426.567162] ? lock_downgrade+0x8e0/0x8e0 [ 426.571322] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 426.576870] ? kvm_set_memory_region+0x50/0x50 [ 426.581462] do_vfs_ioctl+0x1cf/0x1650 [ 426.585359] ? ioctl_preallocate+0x2e0/0x2e0 [ 426.589775] ? fget_raw+0x20/0x20 [ 426.593245] ? exit_to_usermode_loop+0x87/0x310 [ 426.597927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 426.603476] ? security_file_ioctl+0x9b/0xd0 [ 426.607893] ksys_ioctl+0xa9/0xd0 [ 426.611352] SyS_ioctl+0x24/0x30 [ 426.614722] ? ksys_ioctl+0xd0/0xd0 [ 426.618359] do_syscall_64+0x29e/0x9d0 [ 426.622250] ? vmalloc_sync_all+0x30/0x30 [ 426.626406] ? _raw_spin_unlock_irq+0x27/0x70 [ 426.630907] ? finish_task_switch+0x1ca/0x820 [ 426.635422] ? syscall_return_slowpath+0x5c0/0x5c0 [ 426.640365] ? syscall_return_slowpath+0x30f/0x5c0 [ 426.645307] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 426.650683] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 426.655543] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 426.660728] RIP: 0033:0x4552d9 [ 426.663913] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.671628] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 426.678896] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 426.686163] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 426.693432] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 426.700706] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 426.708222] warn_alloc_show_mem: 1 callbacks suppressed [ 426.708227] Mem-Info: [ 426.716085] active_anon:131278 inactive_anon:79 isolated_anon:0 [ 426.716085] active_file:22843 inactive_file:11615 isolated_file:0 [ 426.716085] unevictable:0 dirty:258 writeback:0 unstable:0 [ 426.716085] slab_reclaimable:12418 slab_unreclaimable:101693 [ 426.716085] mapped:73935 shmem:86 pagetables:1030 bounce:0 [ 426.716085] free:1252762 free_pcp:479 free_cma:0 [ 426.749936] Node 0 active_anon:525064kB inactive_anon:316kB active_file:91372kB inactive_file:46504kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295720kB dirty:1084kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 391168kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 426.778182] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 426.804346] lowmem_reserve[]: 0 2833 6338 6338 [ 426.808974] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:700kB free_cma:0kB [ 426.836697] lowmem_reserve[]: 0 0 3505 3505 [ 426.841073] Node 0 Normal free:2091804kB min:37284kB low:46604kB high:55924kB active_anon:525064kB inactive_anon:316kB active_file:91372kB inactive_file:46504kB unevictable:0kB writepending:1084kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5376kB pagetables:4024kB bounce:0kB free_pcp:1112kB local_pcp:500kB free_cma:0kB [ 426.871051] lowmem_reserve[]: 0 0 0 0 [ 426.874901] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 426.888546] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 426.904432] Node 0 Normal: 299*4kB (UME) 1359*8kB (UME) 1058*16kB (UME) 823*32kB (UME) 518*64kB (UME) 164*128kB (UME) 39*256kB (UME) 16*512kB (UM) 2*1024kB (UM) 6*2048kB (UME) 476*4096kB (UM) = 2091684kB [ 426.922828] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 426.931438] 34553 total pagecache pages [ 426.935437] 0 pages in swap cache [ 426.938913] Swap cache stats: add 0, delete 0, find 0/0 [ 426.944303] Free swap = 0kB [ 426.947347] Total swap = 0kB [ 426.950374] 1965969 pages RAM [ 426.953490] 0 pages HighMem/MovableOnly [ 426.957473] 338524 pages reserved [ 426.982656] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 426.994450] syz-executor6 cpuset=syz6 mems_allowed=0 [ 426.999609] CPU: 1 PID: 25858 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 427.006449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.015793] Call Trace: [ 427.018368] dump_stack+0x1b9/0x29f [ 427.021979] ? arch_local_irq_restore+0x52/0x52 [ 427.026636] ? kasan_check_read+0x11/0x20 [ 427.030780] warn_alloc.cold.119+0xb2/0x1b8 [ 427.035086] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 427.039911] ? kasan_check_write+0x14/0x20 [ 427.044154] ? lock_repin_lock+0x410/0x410 [ 427.048377] __vmalloc_node_range+0x45e/0x720 [ 427.052867] ? graph_lock+0x170/0x170 [ 427.056652] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 427.061476] __vmalloc_node_flags_caller+0x50/0x60 [ 427.066389] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 427.071213] kvmalloc_node+0xde/0x100 [ 427.074997] kvm_arch_create_memslot+0xa3/0x4e0 [ 427.079661] __kvm_set_memory_region+0x1d1b/0x2e50 [ 427.084578] ? kvm_vcpu_block+0x1050/0x1050 [ 427.088883] ? visit_groups_merge+0x539/0x6a0 [ 427.093362] ? zap_class+0x720/0x720 [ 427.097058] ? check_same_owner+0x320/0x320 [ 427.101365] ? rcu_note_context_switch+0x710/0x710 [ 427.106277] ? lock_acquire+0x1dc/0x520 [ 427.110249] ? graph_lock+0x170/0x170 [ 427.114040] ? __might_sleep+0x95/0x190 [ 427.117998] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.123521] ? futex_wait_queue_me+0x559/0x820 [ 427.128090] ? refill_pi_state_cache.part.7+0x300/0x300 [ 427.133448] ? find_held_lock+0x36/0x1c0 [ 427.137495] ? lock_downgrade+0x8e0/0x8e0 [ 427.141640] kvm_set_memory_region+0x2e/0x50 [ 427.146037] kvm_vm_ioctl+0x668/0x1d90 [ 427.149918] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 427.155013] ? futex_wake+0x2f6/0x750 [ 427.158802] ? kasan_check_write+0x14/0x20 [ 427.163035] ? kvm_set_memory_region+0x50/0x50 [ 427.167605] ? graph_lock+0x170/0x170 [ 427.171384] ? get_futex_key+0x1e90/0x1e90 [ 427.175600] ? __lock_acquire+0x7f5/0x5130 [ 427.179818] ? perf_trace_lock+0xd6/0x900 [ 427.183948] ? zap_class+0x720/0x720 [ 427.187644] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 427.192816] ? do_futex+0x249/0x27d0 [ 427.196513] ? graph_lock+0x170/0x170 [ 427.200298] ? exit_robust_list+0x290/0x290 [ 427.204600] ? find_held_lock+0x36/0x1c0 [ 427.208647] ? lock_downgrade+0x8e0/0x8e0 [ 427.212774] ? lock_downgrade+0x8e0/0x8e0 [ 427.216907] ? rcu_is_watching+0x85/0x140 [ 427.221046] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 427.226226] ? __fget+0x40c/0x650 [ 427.229664] ? expand_files.part.8+0x9a0/0x9a0 [ 427.234225] ? lock_downgrade+0x8e0/0x8e0 [ 427.238354] ? lock_release+0xa10/0xa10 [ 427.242311] ? kvm_set_memory_region+0x50/0x50 [ 427.246874] do_vfs_ioctl+0x1cf/0x1650 [ 427.250745] ? ioctl_preallocate+0x2e0/0x2e0 [ 427.255131] ? fget_raw+0x20/0x20 [ 427.258569] ? security_file_mprotect+0x9b/0xd0 [ 427.263220] ? SyS_futex+0x3a4/0x56d [ 427.266917] ? do_futex+0x27d0/0x27d0 [ 427.270699] ? security_file_ioctl+0x9b/0xd0 [ 427.275087] ksys_ioctl+0xa9/0xd0 [ 427.278521] SyS_ioctl+0x24/0x30 [ 427.281866] ? ksys_ioctl+0xd0/0xd0 [ 427.285478] do_syscall_64+0x29e/0x9d0 [ 427.289346] ? vmalloc_sync_all+0x30/0x30 [ 427.293591] ? _raw_spin_unlock_irq+0x27/0x70 [ 427.298068] ? finish_task_switch+0x1ca/0x820 [ 427.302545] ? syscall_return_slowpath+0x5c0/0x5c0 [ 427.307455] ? syscall_return_slowpath+0x30f/0x5c0 [ 427.312370] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 427.317715] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 427.322543] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 427.327723] RIP: 0033:0x4552d9 2018/04/06 06:12:23 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x689}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:23 executing program 7: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x5, &(0x7f0000000480)=[{&(0x7f00000000c0)="2c0c9b171afdc674a29f361378810245471104ed3d60a4f15492468fb25e4effcebf183296fad22fc666f9c0924822", 0x2f, 0x2}, {&(0x7f0000000100)="0a653f6bbd3afcc941ef6112d81209fc630d77f13ac02c33040dfdfd9e5a865c046e625072d57205d2c79d2f087caebe393377d52b671d560bd5339d6dfcc1b6a61a60a882373594991b505b381d5f605c8257b3d7a950a44d51e9fe2e9d47ed170fa6b4e353cad6b32ceec1f7927389d23dd7e176c528ec3325b3c0aa6f4b846b4306c0f17a056e68b7aa0b1261e6537eb8660bc0d3f348c224aa5825a82f55a7a653ce5b2bc2b045d435e362aa78ce3fbdc4d58a", 0xb5, 0xb0}, {&(0x7f00000001c0)="57827fb46e64d55818fade326e824e28f394bd5847b467b4778086e7ba11c00f", 0x20, 0x34}, {&(0x7f0000000300)="70cfa2dea062e06ace539e8250c3a57232d25883f5f3c554deb47a597b07cae08ab7b4e584448913a0a0c28205d1d7af87fe0fa5ea33980cf8bfb3e30a48c8deb832b1e84976e02995c318a74c570b0f272f6404ec7bd94ed4bec8884bfcb4d6516925fa7f93c54082b566789b496b0eb9651ef62a94c51f6732230600dd48105a7d9c863684b7382150f19da0929f055e6d1b9ba22023dbe72617b611838b1c3ecb1a914bb8383b861c95f2edc7ca7b139121a4ac9baa90ebf015e5b5ee1c983ecb13f53ba5dda8adb10c445d1479f5ca74ec995ccdf3be4ae28bdd1f3104ef6cdc0d30232f52a4cd2e90a667787df5bb2873e251", 0xf5, 0x3}, {&(0x7f0000000400)="5e5d196c4e5d1bbd319128f3c4cedbc9c424fc5bada5f124bb09f90e4beaa88bcb6795fe956945032ff4859de83a45e595b11b211f30a4e149fcf0ce48229f65f66b4698fd9b41f4f5d51740342312bd7a57ade7", 0x54, 0x1000000000}], 0x2000000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000540)={{{@in=@rand_addr, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000640)=0xe8) quotactl(0x1, &(0x7f0000000500)='./file0\x00', r0, &(0x7f0000000680)="b80706a60b83a70d573c6dd7286396317ef117083d8d81aa84332312be7d545ffff0057477633fe238d1299f8aa65f4b2ee6aef23a94d7f0c4e92535fd3dc3b052954902b1a82a3cf507d4c8ef4b4d983d69c5c6e8e21965de3ad47bf09ac91beb12f8cdc0a02719881dc58632d4b4c8b501a7ca17580f32e3e3dac1ef529ad3ad276af7fb29902b8d5cd05f4773500dc468d94041a6dee2dbea4e9bf324826f17f35787705536f9f0ec5bb9c4b9e749903d1f32e6c483a5d976a5f56ab9fa54f987743a190ed74fcc4b18") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000200)=""/246) 2018/04/06 06:12:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x8}}, 0x14}, 0x1}, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x2e, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {r2, r3+30000000}}, &(0x7f00000001c0)) 2018/04/06 06:12:23 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0xffffca88]}) 2018/04/06 06:12:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x13, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:23 executing program 0: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000040)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0xffffff9e}]}]}, 0x28}, 0x1}, 0x0) 2018/04/06 06:12:23 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x400100000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:23 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) socket(0xd, 0x5, 0x3f) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) [ 427.330910] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.338599] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 427.345858] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 427.353125] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 427.360375] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 427.367625] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 427.431274] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 427.465556] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop7. 2018/04/06 06:12:23 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x8847000000000000]}) 2018/04/06 06:12:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:23 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) [ 427.478809] netlink: 'syz-executor0': attribute type 1 has an invalid length. 2018/04/06 06:12:23 executing program 5: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x294}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r1, 0x8001}, &(0x7f0000000140)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r2}) 2018/04/06 06:12:23 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="08010000fe0100000000fdff0000000018020000000000000000000000000000"], 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000240), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000007060804002000fffc0c6565643b799365195f1b76"], 0x1000) chroot(&(0x7f0000000040)='./file0\x00') [ 427.513800] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop7. [ 427.543998] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 427.555930] syz-executor6 cpuset=syz6 mems_allowed=0 [ 427.561126] CPU: 1 PID: 25906 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 427.567975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.577331] Call Trace: [ 427.579933] dump_stack+0x1b9/0x29f [ 427.583578] ? arch_local_irq_restore+0x52/0x52 [ 427.588265] ? graph_lock+0x170/0x170 [ 427.592084] warn_alloc.cold.119+0xb2/0x1b8 [ 427.596424] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 427.601280] ? __update_load_avg_blocked_se.isra.33+0x460/0x460 [ 427.607375] ? print_usage_bug+0xc0/0xc0 [ 427.611451] ? print_usage_bug+0xc0/0xc0 [ 427.615518] ? update_load_avg+0x2d9/0x2540 [ 427.619859] ? graph_lock+0x170/0x170 [ 427.623690] __vmalloc_node_range+0x45e/0x720 [ 427.628201] ? graph_lock+0x170/0x170 [ 427.632020] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 427.636871] __vmalloc_node_flags_caller+0x50/0x60 [ 427.641819] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 427.646673] kvmalloc_node+0xde/0x100 [ 427.650490] kvm_arch_create_memslot+0xa3/0x4e0 [ 427.655193] __kvm_set_memory_region+0x1d1b/0x2e50 [ 427.660153] ? kvm_vcpu_block+0x1050/0x1050 [ 427.664484] ? print_usage_bug+0xc0/0xc0 [ 427.668559] ? zap_class+0x720/0x720 [ 427.672286] ? perf_trace_lock+0xd6/0x900 [ 427.676448] ? graph_lock+0x170/0x170 [ 427.680257] ? zap_class+0x720/0x720 [ 427.683978] ? graph_lock+0x170/0x170 [ 427.687787] ? __lock_acquire+0x7f5/0x5130 [ 427.692033] ? graph_lock+0x170/0x170 [ 427.695848] ? find_held_lock+0x36/0x1c0 [ 427.699937] ? lock_downgrade+0x8e0/0x8e0 [ 427.704127] kvm_set_memory_region+0x2e/0x50 [ 427.708547] kvm_vm_ioctl+0x668/0x1d90 [ 427.712455] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.717997] ? __perf_event_task_sched_in+0x247/0xb80 [ 427.723198] ? kvm_set_memory_region+0x50/0x50 [ 427.727793] ? find_held_lock+0x36/0x1c0 [ 427.731860] ? perf_trace_lock+0xd6/0x900 [ 427.736027] ? zap_class+0x720/0x720 [ 427.739737] ? finish_task_switch+0x182/0x820 [ 427.744242] ? kasan_check_read+0x11/0x20 [ 427.748397] ? graph_lock+0x170/0x170 [ 427.752200] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 427.756792] ? compat_start_thread+0x80/0x80 [ 427.761206] ? _raw_spin_unlock_irq+0x27/0x70 [ 427.765710] ? trace_hardirqs_on+0xd/0x10 [ 427.769867] ? _raw_spin_unlock_irq+0x27/0x70 [ 427.774374] ? find_held_lock+0x36/0x1c0 [ 427.778450] ? lock_downgrade+0x8e0/0x8e0 [ 427.782607] ? rcu_is_watching+0x85/0x140 [ 427.786757] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 427.791960] ? __fget+0x40c/0x650 [ 427.795424] ? expand_files.part.8+0x9a0/0x9a0 [ 427.800002] ? lock_downgrade+0x8e0/0x8e0 [ 427.804166] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.809714] ? kvm_set_memory_region+0x50/0x50 [ 427.814303] do_vfs_ioctl+0x1cf/0x1650 [ 427.818198] ? ioctl_preallocate+0x2e0/0x2e0 [ 427.822614] ? fget_raw+0x20/0x20 [ 427.826089] ? exit_to_usermode_loop+0x87/0x310 [ 427.830771] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.836314] ? security_file_ioctl+0x9b/0xd0 [ 427.840717] ksys_ioctl+0xa9/0xd0 [ 427.844157] SyS_ioctl+0x24/0x30 [ 427.847508] ? ksys_ioctl+0xd0/0xd0 [ 427.851120] do_syscall_64+0x29e/0x9d0 [ 427.854990] ? vmalloc_sync_all+0x30/0x30 [ 427.859125] ? _raw_spin_unlock_irq+0x27/0x70 [ 427.863607] ? finish_task_switch+0x1ca/0x820 [ 427.868089] ? syscall_return_slowpath+0x5c0/0x5c0 [ 427.873004] ? syscall_return_slowpath+0x30f/0x5c0 [ 427.877928] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 427.883279] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 427.888110] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 427.893281] RIP: 0033:0x4552d9 [ 427.896456] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.904149] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 427.911404] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 427.918654] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 427.925908] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 427.933162] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 427.940513] warn_alloc_show_mem: 1 callbacks suppressed [ 427.940516] Mem-Info: [ 427.948393] active_anon:131300 inactive_anon:76 isolated_anon:0 [ 427.948393] active_file:22847 inactive_file:11631 isolated_file:0 [ 427.948393] unevictable:0 dirty:280 writeback:0 unstable:0 [ 427.948393] slab_reclaimable:12437 slab_unreclaimable:101742 [ 427.948393] mapped:73941 shmem:86 pagetables:1090 bounce:0 [ 427.948393] free:1252573 free_pcp:436 free_cma:0 [ 427.982235] Node 0 active_anon:527524kB inactive_anon:304kB active_file:91388kB inactive_file:46524kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295964kB dirty:1120kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 376832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 428.010488] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 428.036653] lowmem_reserve[]: 0 2833 6338 6338 [ 428.041291] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:700kB free_cma:0kB [ 428.069029] lowmem_reserve[]: 0 0 3505 3505 [ 428.073401] Node 0 Normal free:2092104kB min:37284kB low:46604kB high:55924kB active_anon:525392kB inactive_anon:304kB active_file:91388kB inactive_file:46524kB unevictable:0kB writepending:1120kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5504kB pagetables:4212kB bounce:0kB free_pcp:996kB local_pcp:372kB free_cma:0kB [ 428.103294] lowmem_reserve[]: 0 0 0 0 [ 428.107168] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 428.120809] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 428.136700] Node 0 Normal: 262*4kB (UME) 1363*8kB (UME) 1060*16kB (UME) 821*32kB (UME) 507*64kB (UME) 166*128kB (UME) 41*256kB (UME) 17*512kB (UM) 2*1024kB (UM) 8*2048kB (UME) 475*4096kB (UM) = 2092112kB [ 428.155067] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 428.163661] 34562 total pagecache pages [ 428.167667] 0 pages in swap cache [ 428.171133] Swap cache stats: add 0, delete 0, find 0/0 [ 428.176512] Free swap = 0kB [ 428.179540] Total swap = 0kB [ 428.182580] 1965969 pages RAM [ 428.185711] 0 pages HighMem/MovableOnly [ 428.189702] 338524 pages reserved [ 428.229914] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 428.241735] syz-executor6 cpuset=syz6 mems_allowed=0 [ 428.247064] CPU: 1 PID: 25965 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 428.253900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.263243] Call Trace: [ 428.265818] dump_stack+0x1b9/0x29f [ 428.269429] ? arch_local_irq_restore+0x52/0x52 [ 428.274083] ? kasan_check_read+0x11/0x20 [ 428.278216] warn_alloc.cold.119+0xb2/0x1b8 [ 428.282523] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 428.287349] ? trace_hardirqs_on+0xd/0x10 [ 428.291481] ? _raw_spin_unlock_irq+0x27/0x70 [ 428.295962] ? finish_task_switch+0x1ca/0x820 [ 428.300447] ? lock_repin_lock+0x410/0x410 [ 428.305205] __vmalloc_node_range+0x45e/0x720 [ 428.309691] ? graph_lock+0x170/0x170 [ 428.313489] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 428.318326] __vmalloc_node_flags_caller+0x50/0x60 [ 428.323248] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 428.328073] kvmalloc_node+0xde/0x100 [ 428.331858] kvm_arch_create_memslot+0xa3/0x4e0 [ 428.336517] __kvm_set_memory_region+0x1d1b/0x2e50 [ 428.341449] ? kvm_vcpu_block+0x1050/0x1050 [ 428.345757] ? zap_class+0x720/0x720 [ 428.349451] ? check_same_owner+0x320/0x320 [ 428.353756] ? rcu_note_context_switch+0x710/0x710 [ 428.358678] ? lock_acquire+0x1dc/0x520 [ 428.362646] ? graph_lock+0x170/0x170 [ 428.366429] ? __might_sleep+0x95/0x190 [ 428.370388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.375904] ? futex_wait_queue_me+0x559/0x820 [ 428.380481] ? refill_pi_state_cache.part.7+0x300/0x300 [ 428.385843] ? find_held_lock+0x36/0x1c0 [ 428.389896] ? lock_downgrade+0x8e0/0x8e0 [ 428.394054] kvm_set_memory_region+0x2e/0x50 [ 428.398459] kvm_vm_ioctl+0x668/0x1d90 [ 428.402341] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 428.407429] ? futex_wake+0x2f6/0x750 [ 428.411216] ? kvm_set_memory_region+0x50/0x50 [ 428.415790] ? get_futex_key+0x1e90/0x1e90 [ 428.420007] ? sock_destroy_inode+0x56/0x70 [ 428.424323] ? perf_trace_lock+0xd6/0x900 [ 428.428456] ? zap_class+0x720/0x720 [ 428.432160] ? destroy_inode+0x156/0x1f0 [ 428.436204] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 428.441375] ? do_futex+0x249/0x27d0 [ 428.445070] ? graph_lock+0x170/0x170 [ 428.448850] ? evict+0x5cd/0x960 [ 428.452204] ? exit_robust_list+0x290/0x290 [ 428.456510] ? find_held_lock+0x36/0x1c0 [ 428.460558] ? lock_downgrade+0x8e0/0x8e0 [ 428.464690] ? rcu_is_watching+0x85/0x140 [ 428.468822] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 428.474022] ? __fget+0x40c/0x650 [ 428.477466] ? expand_files.part.8+0x9a0/0x9a0 [ 428.482034] ? inet6_net_init+0x870/0x870 [ 428.486168] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 428.491341] ? kvm_set_memory_region+0x50/0x50 [ 428.495904] do_vfs_ioctl+0x1cf/0x1650 [ 428.499774] ? __sock_create+0x11e/0x920 [ 428.503820] ? ioctl_preallocate+0x2e0/0x2e0 [ 428.508209] ? fget_raw+0x20/0x20 [ 428.511650] ? SyS_futex+0x3a4/0x56d [ 428.515347] ? do_futex+0x27d0/0x27d0 [ 428.519130] ? security_file_ioctl+0x9b/0xd0 [ 428.523520] ksys_ioctl+0xa9/0xd0 [ 428.526955] SyS_ioctl+0x24/0x30 [ 428.530300] ? ksys_ioctl+0xd0/0xd0 [ 428.533907] do_syscall_64+0x29e/0x9d0 [ 428.537776] ? vmalloc_sync_all+0x30/0x30 [ 428.541906] ? kasan_check_write+0x14/0x20 [ 428.546133] ? syscall_return_slowpath+0x5c0/0x5c0 [ 428.551049] ? syscall_return_slowpath+0x30f/0x5c0 [ 428.555964] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 428.561311] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.566138] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.571312] RIP: 0033:0x4552d9 2018/04/06 06:12:25 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r0}) 2018/04/06 06:12:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) accept$packet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000300)=0x14) r2 = socket$inet6(0xa, 0xbd23e99291690876, 0x100000000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000040)=""/38, &(0x7f0000000080)=0x26) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={"77797a5f74756eb921f9848000", r1}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000ff0)=[{0x20, 0x0, 0x1000, 0x4f42}, {0x80000006}]}, 0x10) sendto(r4, &(0x7f000002af28), 0xfd09, 0x0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000001c0)=0x28, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @loopback={0x0, 0x1}, 0x5}, 0xfffffffffffffd81) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)={{0x0, 0x7530}}) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r7, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) setsockopt$inet6_udp_int(r6, 0x11, 0x65, &(0x7f0000000000)=0xffff, 0x4) connect$unix(r4, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x400, 0x0) sendmsg$nl_crypto(r6, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10, 0x0, 0x0, 0x2}, 0x32, &(0x7f0000e6c000)={&(0x7f00000003c0)=@delrng={0x10, 0x14, 0x200, 0x0, 0x3}, 0xffffffffffffff4f}, 0x1, 0x0, 0x0, 0x8800}, 0x81) 2018/04/06 06:12:25 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0xa00, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:25 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x88caffff00000000]}) 2018/04/06 06:12:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:25 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000078dff8)='./file0\x00', 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001600), &(0x7f0000001640)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001680)={{{@in=@broadcast, @in6}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000001780)=0xe8) getresgid(&(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)) getpgrp(0x0) fstat(r1, &(0x7f0000001880)) getgroups(0x2, &(0x7f0000001900)=[0xffffffffffffffff, 0x0]) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000002c40)) lstat(&(0x7f0000002c80)='./control/file0\x00', &(0x7f0000002cc0)) fstat(r1, &(0x7f0000002d40)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002dc0), &(0x7f0000002e00)=0xfffffffffffffc5e) getresuid(&(0x7f0000002e40), &(0x7f0000002e80), &(0x7f0000002ec0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002f00), &(0x7f0000002f40)=0xc) accept$netrom(r0, &(0x7f0000002f80), &(0x7f0000002fc0)=0x10) fcntl$getownex(r2, 0x10, &(0x7f0000003000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000003040)={{{@in=@remote, @in=@rand_addr}}, {{@in=@rand_addr}, 0x0, @in=@broadcast}}, &(0x7f0000003140)=0xe8) fstat(r0, &(0x7f0000003180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003200)={{{@in=@broadcast, @in6}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@multicast1}}, &(0x7f0000003300)=0xe8) lstat(&(0x7f0000003340)='./control/file0/file0\x00', &(0x7f0000003380)) getpgid(0x0) lstat(&(0x7f00000037c0)='./control\x00', &(0x7f0000003800)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003880), &(0x7f00000038c0)=0xc) sendmmsg$unix(r2, &(0x7f0000003c00), 0x0, 0x40) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x77359400}}], 0x1c) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') rename(&(0x7f0000003f80)='./control/file0/file0\x00', &(0x7f0000003fc0)='./control/file0\x00') dup2(r0, r1) 2018/04/06 06:12:25 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x6488}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:25 executing program 7: setrlimit(0x8, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) r2 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000910000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) [ 428.574488] RSP: 002b:00007f735423ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.582175] RAX: ffffffffffffffda RBX: 00007f735423f6d4 RCX: 00000000004552d9 [ 428.589426] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 428.596676] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 428.603930] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 428.611182] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000001 2018/04/06 06:12:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:25 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000400)={0x0, 0xffff, 0x0, 0x8001}, &(0x7f0000000440)=0x10) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/146, 0xffffffffffffffe3}], 0x100002b2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) gettid() ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[0x4]}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000714fe0)={{0x0, 0x989680}, {0x0, 0x6}}, &(0x7f0000000fe0)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000300)={0x0, 0x5, 0x8001, &(0x7f00000002c0)}) bind$netrom(0xffffffffffffffff, &(0x7f0000000140)=@full={{0x3, {"13c7dbeb10366d"}}, [{"c1b70b383306ce"}, {"de9c97c69bb275"}, {"c22830228abb35"}, {"b6fb259cc2e6cc"}, {"265be17a29bc0e"}, {"e61c05b5b5bd95"}, {"ca1835826f40f6"}, {"5e4d440877eb8a"}]}, 0x48) openat$audio(0xffffffffffffff9c, &(0x7f0000000540)='/dev/audio\x00', 0x10140, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x2) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000240)) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000280)={0x1000, 0x43, 0x1, 0x4}, 0x10) r5 = dup3(r4, r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) syz_open_dev$evdev(&(0x7f0000000580)='/dev/input/event#\x00', 0x40, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000200)={{0x0, 0x100000000000000, 0x9, 0x0, 0xfff}}) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x25, 0x2, @thr={&(0x7f0000000600)="89a446ca3e974b0fd040c565b518c8ac4ef024ab37ebcf7bad260ed3390105a0b8aad3594899aa5e70fc7146562bd2eadd7a2ee5fb0cf6d5d3c13beec963fcb7b77f37ba967306cd81496462bb9022387849cf9aa44fd3c81e887e8ee525b55eb6867d112aca2577270166258dce122af902a9b751747fd54b56431eae8cecbd0ea9c8031cab33d1f4660a389b70e37355b25d096c1577384234774f95b7325e6669b4ad60a0ed3b824db460890bf812c0c5a9ce1e45147b52472aa5287bf8342e0b276dfede764b85176a7b72c1c215eccded3596bf285f6b5665a9b9c9", &(0x7f0000000340)="b1deacecc8961c67d73ebcd2a353736d9f18d486365c55b5ccaefed2cf0174c2ef7dfbf0ad36f0951b7b89195f005645d4021d5d8f3434cab15c1cd7e49dc6e783acf3f2ed4bd8adccd0907279e86f94514277227d80c18bac277be5a3a0e412b36249606fc4bbb3e1bbafe7b7402c68d829580e4b38f86fe21d52df4a72d81727531912b898dc45f6f920afc814fab949214959782ba0"}}, &(0x7f0000000700)) flistxattr(0xffffffffffffffff, &(0x7f00000004c0)=""/124, 0x7c) 2018/04/06 06:12:25 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x84ffffff]}) 2018/04/06 06:12:25 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r0}) 2018/04/06 06:12:25 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x67}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) [ 428.780374] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 428.792286] syz-executor6 cpuset=syz6 mems_allowed=0 [ 428.797495] CPU: 1 PID: 25986 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 428.804340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.813697] Call Trace: [ 428.816296] dump_stack+0x1b9/0x29f [ 428.819940] ? arch_local_irq_restore+0x52/0x52 [ 428.824619] ? kasan_check_read+0x11/0x20 2018/04/06 06:12:25 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0xfeffffff]}) [ 428.828781] warn_alloc.cold.119+0xb2/0x1b8 [ 428.833119] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 428.837973] ? trace_hardirqs_on+0xd/0x10 [ 428.842135] ? _raw_spin_unlock_irq+0x27/0x70 [ 428.846640] ? finish_task_switch+0x1ca/0x820 [ 428.851153] ? lock_repin_lock+0x410/0x410 [ 428.855406] __vmalloc_node_range+0x45e/0x720 [ 428.859919] ? graph_lock+0x170/0x170 [ 428.863733] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 428.868582] __vmalloc_node_flags_caller+0x50/0x60 [ 428.873525] ? kvm_arch_create_memslot+0xa3/0x4e0 2018/04/06 06:12:25 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x4305000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) [ 428.878380] kvmalloc_node+0xde/0x100 [ 428.882192] kvm_arch_create_memslot+0xa3/0x4e0 [ 428.886892] __kvm_set_memory_region+0x1d1b/0x2e50 [ 428.891863] ? kvm_vcpu_block+0x1050/0x1050 [ 428.896200] ? zap_class+0x720/0x720 [ 428.899924] ? check_same_owner+0x320/0x320 [ 428.904259] ? rcu_note_context_switch+0x710/0x710 [ 428.909190] ? lock_acquire+0x1dc/0x520 [ 428.913178] ? graph_lock+0x170/0x170 [ 428.916987] ? __might_sleep+0x95/0x190 [ 428.920973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.926517] ? futex_wait_queue_me+0x559/0x820 2018/04/06 06:12:25 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0xfdffffff]}) [ 428.931110] ? refill_pi_state_cache.part.7+0x300/0x300 [ 428.936486] ? find_held_lock+0x36/0x1c0 [ 428.940568] ? lock_downgrade+0x8e0/0x8e0 [ 428.944754] kvm_set_memory_region+0x2e/0x50 [ 428.949177] kvm_vm_ioctl+0x668/0x1d90 [ 428.953076] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 428.958186] ? futex_wake+0x2f6/0x750 [ 428.961989] ? kvm_set_memory_region+0x50/0x50 [ 428.966576] ? get_futex_key+0x1e90/0x1e90 [ 428.970820] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 428.975858] ? perf_trace_lock+0xd6/0x900 [ 428.980022] ? zap_class+0x720/0x720 [ 428.983754] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 428.988954] ? do_futex+0x249/0x27d0 [ 428.992678] ? native_flush_tlb_others+0x690/0x690 [ 428.997616] ? graph_lock+0x170/0x170 [ 429.001421] ? check_same_owner+0x320/0x320 [ 429.005758] ? exit_robust_list+0x290/0x290 [ 429.010090] ? find_held_lock+0x36/0x1c0 [ 429.014169] ? lock_downgrade+0x8e0/0x8e0 [ 429.018329] ? rcu_is_watching+0x85/0x140 [ 429.022487] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 429.027691] ? __fget+0x40c/0x650 [ 429.031160] ? expand_files.part.8+0x9a0/0x9a0 [ 429.035748] ? lock_downgrade+0x8e0/0x8e0 [ 429.039904] ? __split_vma+0x5ac/0x7f0 [ 429.043806] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 429.049357] ? vma_set_page_prot+0x183/0x260 [ 429.053775] ? kvm_set_memory_region+0x50/0x50 [ 429.058370] do_vfs_ioctl+0x1cf/0x1650 [ 429.062267] ? ioctl_preallocate+0x2e0/0x2e0 [ 429.066682] ? fget_raw+0x20/0x20 [ 429.070146] ? SyS_futex+0x3a4/0x56d [ 429.073875] ? do_futex+0x27d0/0x27d0 [ 429.077685] ? security_file_ioctl+0x9b/0xd0 [ 429.082102] ksys_ioctl+0xa9/0xd0 [ 429.085568] SyS_ioctl+0x24/0x30 [ 429.088937] ? ksys_ioctl+0xd0/0xd0 [ 429.092576] do_syscall_64+0x29e/0x9d0 [ 429.096465] ? vmalloc_sync_all+0x30/0x30 [ 429.100599] ? _raw_spin_unlock_irq+0x27/0x70 [ 429.105079] ? finish_task_switch+0x1ca/0x820 [ 429.109574] ? syscall_return_slowpath+0x5c0/0x5c0 [ 429.114488] ? syscall_return_slowpath+0x30f/0x5c0 [ 429.119404] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 429.124750] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.129578] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.134749] RIP: 0033:0x4552d9 [ 429.137917] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.145608] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 429.152856] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 429.160106] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 429.167354] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 429.174605] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 429.182049] warn_alloc_show_mem: 1 callbacks suppressed [ 429.182053] Mem-Info: [ 429.189935] active_anon:133356 inactive_anon:77 isolated_anon:0 [ 429.189935] active_file:22847 inactive_file:11644 isolated_file:0 [ 429.189935] unevictable:0 dirty:293 writeback:0 unstable:0 [ 429.189935] slab_reclaimable:12446 slab_unreclaimable:101741 [ 429.189935] mapped:73940 shmem:86 pagetables:1061 bounce:0 [ 429.189935] free:1250452 free_pcp:561 free_cma:0 [ 429.223788] Node 0 active_anon:533424kB inactive_anon:308kB active_file:91388kB inactive_file:46576kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295760kB dirty:1172kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 385024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 429.252062] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 429.278250] lowmem_reserve[]: 0 2833 6338 6338 [ 429.282889] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:700kB free_cma:0kB [ 429.310626] lowmem_reserve[]: 0 0 3505 3505 [ 429.315008] Node 0 Normal free:2082548kB min:37284kB low:46604kB high:55924kB active_anon:533424kB inactive_anon:308kB active_file:91388kB inactive_file:46576kB unevictable:0kB writepending:1172kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5472kB pagetables:4244kB bounce:0kB free_pcp:1416kB local_pcp:704kB free_cma:0kB [ 429.345053] lowmem_reserve[]: 0 0 0 0 [ 429.348903] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 429.362628] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 429.378455] Node 0 Normal: 229*4kB (UME) 1219*8kB (UME) 1058*16kB (UME) 819*32kB (UME) 506*64kB (UME) 166*128kB (UME) 41*256kB (UME) 17*512kB (UM) 2*1024kB (UM) 6*2048kB (UME) 474*4096kB (UM) = 2082476kB [ 429.396865] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 429.405474] 34575 total pagecache pages [ 429.409485] 0 pages in swap cache [ 429.412958] Swap cache stats: add 0, delete 0, find 0/0 [ 429.418343] Free swap = 0kB [ 429.421378] Total swap = 0kB [ 429.424411] 1965969 pages RAM [ 429.427543] 0 pages HighMem/MovableOnly [ 429.431531] 338524 pages reserved [ 429.458994] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 429.470856] syz-executor6 cpuset=syz6 mems_allowed=0 [ 429.476175] CPU: 0 PID: 26022 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 429.483021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.492367] Call Trace: [ 429.494944] dump_stack+0x1b9/0x29f [ 429.498559] ? arch_local_irq_restore+0x52/0x52 [ 429.503215] ? kasan_check_read+0x11/0x20 [ 429.507357] warn_alloc.cold.119+0xb2/0x1b8 [ 429.511677] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 429.516517] ? trace_hardirqs_on+0xd/0x10 [ 429.520663] ? _raw_spin_unlock_irq+0x27/0x70 [ 429.525151] ? finish_task_switch+0x1ca/0x820 [ 429.529644] ? lock_repin_lock+0x410/0x410 [ 429.533886] __vmalloc_node_range+0x45e/0x720 [ 429.538399] ? graph_lock+0x170/0x170 [ 429.542212] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 429.547064] __vmalloc_node_flags_caller+0x50/0x60 [ 429.552006] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 429.556846] kvmalloc_node+0xde/0x100 [ 429.560643] kvm_arch_create_memslot+0xa3/0x4e0 [ 429.565309] __kvm_set_memory_region+0x1d1b/0x2e50 [ 429.570234] ? kvm_vcpu_block+0x1050/0x1050 [ 429.574544] ? zap_class+0x720/0x720 [ 429.578241] ? check_same_owner+0x320/0x320 [ 429.582548] ? rcu_note_context_switch+0x710/0x710 [ 429.587460] ? lock_acquire+0x1dc/0x520 [ 429.591420] ? graph_lock+0x170/0x170 [ 429.595202] ? __might_sleep+0x95/0x190 [ 429.599163] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 429.604683] ? futex_wait_queue_me+0x559/0x820 [ 429.609251] ? refill_pi_state_cache.part.7+0x300/0x300 [ 429.614612] ? find_held_lock+0x36/0x1c0 [ 429.618660] ? lock_downgrade+0x8e0/0x8e0 [ 429.622807] kvm_set_memory_region+0x2e/0x50 [ 429.627199] kvm_vm_ioctl+0x668/0x1d90 [ 429.631069] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 429.636154] ? futex_wake+0x2f6/0x750 [ 429.639940] ? kvm_set_memory_region+0x50/0x50 [ 429.644509] ? get_futex_key+0x1e90/0x1e90 [ 429.648736] ? sock_destroy_inode+0x56/0x70 [ 429.653061] ? perf_trace_lock+0xd6/0x900 [ 429.657205] ? zap_class+0x720/0x720 [ 429.660901] ? destroy_inode+0x156/0x1f0 [ 429.664946] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 429.670118] ? do_futex+0x249/0x27d0 [ 429.673818] ? graph_lock+0x170/0x170 [ 429.677614] ? evict+0x5cd/0x960 [ 429.680968] ? exit_robust_list+0x290/0x290 [ 429.685277] ? find_held_lock+0x36/0x1c0 [ 429.689329] ? lock_downgrade+0x8e0/0x8e0 [ 429.693463] ? rcu_is_watching+0x85/0x140 [ 429.697607] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 429.702785] ? __fget+0x40c/0x650 [ 429.706225] ? expand_files.part.8+0x9a0/0x9a0 [ 429.710789] ? inet6_net_init+0x870/0x870 [ 429.714921] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 429.720095] ? kvm_set_memory_region+0x50/0x50 [ 429.724660] do_vfs_ioctl+0x1cf/0x1650 [ 429.728544] ? __sock_create+0x11e/0x920 [ 429.732593] ? ioctl_preallocate+0x2e0/0x2e0 [ 429.736984] ? fget_raw+0x20/0x20 [ 429.740428] ? SyS_futex+0x3a4/0x56d [ 429.744124] ? do_futex+0x27d0/0x27d0 [ 429.747908] ? security_file_ioctl+0x9b/0xd0 [ 429.752317] ksys_ioctl+0xa9/0xd0 [ 429.755754] SyS_ioctl+0x24/0x30 [ 429.759100] ? ksys_ioctl+0xd0/0xd0 [ 429.762707] do_syscall_64+0x29e/0x9d0 [ 429.766578] ? vmalloc_sync_all+0x30/0x30 [ 429.770709] ? _raw_spin_unlock_irq+0x27/0x70 [ 429.775201] ? finish_task_switch+0x1ca/0x820 [ 429.779680] ? syscall_return_slowpath+0x5c0/0x5c0 [ 429.784594] ? syscall_return_slowpath+0x30f/0x5c0 [ 429.789508] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 429.794861] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.799693] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.804866] RIP: 0033:0x4552d9 2018/04/06 06:12:26 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x86ddffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:26 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x4305]}) 2018/04/06 06:12:26 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x114, r2, 0x300, 0x70bd26, 0x25dfdbfd, {0x5}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6f6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x203}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) r3 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000300)=""/157) 2018/04/06 06:12:26 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c08, 0xfffffffffffffffa) 2018/04/06 06:12:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x70, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:26 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="fb0500000700000000000000000000000200010000000000000000000040130003000500ffff000000000000000069ae8a17563bdb3bc93aabf9adac498bc54b401ee69532ea000000000c559b1987b992fb4dff68e08491e821fb5cef92c7e4aaa69b4f96077a952c8b0ef3f5a6d52b1a7324fa6061cc777c2f628df0280dc9ab3893313e56c51721582c3c53bbd7fb59f5b0267403dabaf54749f250184d2459e5fdc481bc097ed37c632627510844b24a5e8b907550c4a121"], 0x38}, 0x1}, 0x0) r1 = memfd_create(&(0x7f000088f000)='b\n\x00\x00\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) sched_setparam(r2, &(0x7f0000000040)=0x6) 2018/04/06 06:12:26 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x600, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:26 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000007c0)=""/246) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f0000000480)=""/174) read(r0, &(0x7f0000000040)=""/26, 0x1a) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x5, 0x29}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0xfc00000000000000}, 0xc) [ 429.808041] RSP: 002b:00007f735423ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.815732] RAX: ffffffffffffffda RBX: 00007f735423f6d4 RCX: 00000000004552d9 [ 429.822983] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 429.830248] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 429.837500] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 429.844759] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000001 2018/04/06 06:12:26 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x1100000000000000]}) 2018/04/06 06:12:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x11, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:26 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fallocate(r0, 0x0, 0xfffffffffffffffd, 0x5) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:12:26 executing program 5: r0 = socket(0x9, 0x5, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x120, 0x5, 0x6, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x2}, [@nested={0x18, 0x93, [@typed={0x14, 0x33, @ipv6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}}]}, @generic="61823c6709889ad1683972c3bce07111b56aec437ebebb633e91d82261cdd40c4755ff5e0f2d2a14ec6ca060a48228f334ef4a40d8755958a5049939d4e816a10e0a77131031d6a92ce0ad48f050643643cef76c38d934593bfc9290004fb69e957c1d9b395888a837db25ab01f91bcc0d08bc86530bd230fe1ac5ea9f27ffd0f9c48c3ce5f0ed2dabbe4f4df8b69db23b55a8939af3155833aab82681fa8d94bbd4a788f16ef2b728aef03a38b458d3d254fd25a81dfc6f79033e781d", @generic="eaf9a543b0df2ee9230fb836af66b05b676c00", @nested={0x24, 0x6b, [@generic="6fb90c0bd9660682106fe55a43a7f8d6766d30182f831004a75ab0", @typed={0x4, 0x64}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x10}, 0x800) [ 429.950102] PPPIOCDETACH file->f_count=2 2018/04/06 06:12:26 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xfffffff5}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:26 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000219fa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) close(r0) close(r1) [ 430.007601] PPPIOCDETACH file->f_count=2 [ 430.059225] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 430.071084] syz-executor6 cpuset=syz6 mems_allowed=0 [ 430.076283] CPU: 1 PID: 26046 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 430.083128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.092486] Call Trace: [ 430.095080] dump_stack+0x1b9/0x29f [ 430.098715] ? arch_local_irq_restore+0x52/0x52 [ 430.103396] ? kasan_check_read+0x11/0x20 [ 430.107556] warn_alloc.cold.119+0xb2/0x1b8 [ 430.111893] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 430.116745] ? trace_hardirqs_on+0xd/0x10 [ 430.120909] ? _raw_spin_unlock_irq+0x27/0x70 [ 430.125419] ? finish_task_switch+0x1ca/0x820 [ 430.129943] ? lock_repin_lock+0x410/0x410 [ 430.134197] __vmalloc_node_range+0x45e/0x720 [ 430.138704] ? graph_lock+0x170/0x170 [ 430.142524] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 430.147379] __vmalloc_node_flags_caller+0x50/0x60 [ 430.152322] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 430.157171] kvmalloc_node+0xde/0x100 [ 430.160983] kvm_arch_create_memslot+0xa3/0x4e0 [ 430.165675] __kvm_set_memory_region+0x1d1b/0x2e50 [ 430.170629] ? kvm_vcpu_block+0x1050/0x1050 [ 430.174965] ? zap_class+0x720/0x720 [ 430.178703] ? check_same_owner+0x320/0x320 [ 430.183046] ? rcu_note_context_switch+0x710/0x710 [ 430.187984] ? lock_acquire+0x1dc/0x520 [ 430.191977] ? graph_lock+0x170/0x170 [ 430.195790] ? __might_sleep+0x95/0x190 [ 430.199803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.205353] ? futex_wait_queue_me+0x559/0x820 [ 430.209943] ? refill_pi_state_cache.part.7+0x300/0x300 [ 430.215324] ? find_held_lock+0x36/0x1c0 [ 430.219405] ? lock_downgrade+0x8e0/0x8e0 [ 430.223602] kvm_set_memory_region+0x2e/0x50 [ 430.228025] kvm_vm_ioctl+0x668/0x1d90 [ 430.231926] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 430.237038] ? futex_wake+0x2f6/0x750 [ 430.240847] ? kvm_set_memory_region+0x50/0x50 [ 430.245437] ? get_futex_key+0x1e90/0x1e90 [ 430.249678] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 430.254704] ? perf_trace_lock+0xd6/0x900 [ 430.258861] ? zap_class+0x720/0x720 [ 430.262584] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 430.267780] ? do_futex+0x249/0x27d0 [ 430.271500] ? native_flush_tlb_others+0x690/0x690 [ 430.276433] ? graph_lock+0x170/0x170 [ 430.280237] ? check_same_owner+0x320/0x320 [ 430.284568] ? exit_robust_list+0x290/0x290 [ 430.288898] ? find_held_lock+0x36/0x1c0 [ 430.292978] ? lock_downgrade+0x8e0/0x8e0 [ 430.297138] ? rcu_is_watching+0x85/0x140 [ 430.301292] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 430.307262] ? __fget+0x40c/0x650 [ 430.310733] ? expand_files.part.8+0x9a0/0x9a0 [ 430.315320] ? lock_downgrade+0x8e0/0x8e0 [ 430.319474] ? __split_vma+0x5ac/0x7f0 [ 430.323370] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.328914] ? vma_set_page_prot+0x183/0x260 [ 430.333338] ? kvm_set_memory_region+0x50/0x50 [ 430.337929] do_vfs_ioctl+0x1cf/0x1650 [ 430.341837] ? ioctl_preallocate+0x2e0/0x2e0 [ 430.346252] ? fget_raw+0x20/0x20 [ 430.349719] ? SyS_futex+0x3a4/0x56d [ 430.353446] ? do_futex+0x27d0/0x27d0 [ 430.357250] ? security_file_ioctl+0x9b/0xd0 [ 430.361664] ksys_ioctl+0xa9/0xd0 [ 430.365123] SyS_ioctl+0x24/0x30 [ 430.368492] ? ksys_ioctl+0xd0/0xd0 [ 430.372121] do_syscall_64+0x29e/0x9d0 [ 430.376007] ? vmalloc_sync_all+0x30/0x30 [ 430.380160] ? _raw_spin_unlock_irq+0x27/0x70 [ 430.384664] ? finish_task_switch+0x1ca/0x820 [ 430.389170] ? syscall_return_slowpath+0x5c0/0x5c0 [ 430.394113] ? syscall_return_slowpath+0x30f/0x5c0 [ 430.399053] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 430.404433] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/04/06 06:12:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x2, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:26 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) r0 = creat(&(0x7f000016cff8)='./file0/file0\x00', 0x0) mknod(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000bbcff2)='./file0/file0\x00', &(0x7f0000917000)='./file0/file0\x00', &(0x7f0000000340)="78667326300a3106c9d361aeec1b00", 0x1000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000000c0)) mount(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000de8ff3)='an\x00\x00\x00\x00\x00\x00\x00\afs\x00', 0x802016, &(0x7f0000000000)) 2018/04/06 06:12:26 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x28}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:26 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fallocate(r0, 0x0, 0xfffffffffffffffd, 0x5) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:12:26 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x600000000000000]}) 2018/04/06 06:12:26 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x1c00000000000000]}) 2018/04/06 06:12:26 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fallocate(r0, 0x0, 0xfffffffffffffffd, 0x5) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) [ 430.409291] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 430.414482] RIP: 0033:0x4552d9 [ 430.417675] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.425389] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 430.432661] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 430.439942] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 430.447215] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 430.454489] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 430.462065] warn_alloc_show_mem: 1 callbacks suppressed [ 430.462068] Mem-Info: [ 430.469950] active_anon:131285 inactive_anon:80 isolated_anon:0 [ 430.469950] active_file:22847 inactive_file:11653 isolated_file:0 [ 430.469950] unevictable:0 dirty:301 writeback:0 unstable:0 [ 430.469950] slab_reclaimable:12419 slab_unreclaimable:101596 [ 430.469950] mapped:73925 shmem:86 pagetables:1077 bounce:0 [ 430.469950] free:1252768 free_pcp:454 free_cma:0 [ 430.503831] Node 0 active_anon:525140kB inactive_anon:320kB active_file:91388kB inactive_file:46612kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295700kB dirty:1204kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 382976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 430.532076] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 430.558289] lowmem_reserve[]: 0 2833 6338 6338 [ 430.562930] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:700kB free_cma:0kB [ 430.590650] lowmem_reserve[]: 0 0 3505 3505 [ 430.595048] Node 0 Normal free:2091944kB min:37284kB low:46604kB high:55924kB active_anon:525140kB inactive_anon:320kB active_file:91388kB inactive_file:46612kB unevictable:0kB writepending:1204kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5376kB pagetables:4012kB bounce:0kB free_pcp:928kB local_pcp:228kB free_cma:0kB [ 430.624964] lowmem_reserve[]: 0 0 0 0 [ 430.628855] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 430.642509] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 430.658383] Node 0 Normal: 330*4kB (UME) 1239*8kB (ME) 1070*16kB (UME) 827*32kB (UME) 506*64kB (UME) 166*128kB (UME) 42*256kB (UME) 17*512kB (UM) 2*1024kB (UM) 6*2048kB (UME) 476*4096kB (UM) = 2091936kB [ 430.676699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 430.685298] 34584 total pagecache pages [ 430.689294] 0 pages in swap cache [ 430.692756] Swap cache stats: add 0, delete 0, find 0/0 [ 430.698136] Free swap = 0kB [ 430.701164] Total swap = 0kB [ 430.704207] 1965969 pages RAM [ 430.707340] 0 pages HighMem/MovableOnly [ 430.711329] 338524 pages reserved [ 430.737258] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 430.749171] syz-executor6 cpuset=syz6 mems_allowed=0 [ 430.754327] CPU: 1 PID: 26046 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 430.761166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.770501] Call Trace: [ 430.773077] dump_stack+0x1b9/0x29f [ 430.776689] ? arch_local_irq_restore+0x52/0x52 [ 430.781340] ? kasan_check_read+0x11/0x20 [ 430.785485] warn_alloc.cold.119+0xb2/0x1b8 [ 430.789803] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 430.794630] ? kasan_check_write+0x14/0x20 [ 430.798854] ? lock_repin_lock+0x410/0x410 [ 430.803079] __vmalloc_node_range+0x45e/0x720 [ 430.807569] ? graph_lock+0x170/0x170 [ 430.811366] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 430.816194] __vmalloc_node_flags_caller+0x50/0x60 [ 430.821106] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 430.825933] kvmalloc_node+0xde/0x100 [ 430.829718] kvm_arch_create_memslot+0xa3/0x4e0 [ 430.834375] __kvm_set_memory_region+0x1d1b/0x2e50 [ 430.839292] ? kvm_vcpu_block+0x1050/0x1050 [ 430.843600] ? zap_class+0x720/0x720 [ 430.847297] ? check_same_owner+0x320/0x320 [ 430.851605] ? rcu_note_context_switch+0x710/0x710 [ 430.858251] ? lock_acquire+0x1dc/0x520 [ 430.862210] ? graph_lock+0x170/0x170 [ 430.865998] ? __might_sleep+0x95/0x190 [ 430.869977] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.875499] ? futex_wait_queue_me+0x559/0x820 [ 430.880062] ? refill_pi_state_cache.part.7+0x300/0x300 [ 430.885412] ? find_held_lock+0x36/0x1c0 [ 430.889462] ? lock_downgrade+0x8e0/0x8e0 [ 430.893608] kvm_set_memory_region+0x2e/0x50 [ 430.897999] kvm_vm_ioctl+0x668/0x1d90 [ 430.901876] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 430.906971] ? futex_wake+0x2f6/0x750 [ 430.910754] ? kasan_check_write+0x14/0x20 [ 430.914974] ? kvm_set_memory_region+0x50/0x50 [ 430.919538] ? graph_lock+0x170/0x170 [ 430.923317] ? get_futex_key+0x1e90/0x1e90 [ 430.927531] ? __lock_acquire+0x7f5/0x5130 [ 430.931749] ? perf_trace_lock+0xd6/0x900 [ 430.935881] ? zap_class+0x720/0x720 [ 430.939578] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 430.944748] ? do_futex+0x249/0x27d0 [ 430.948451] ? graph_lock+0x170/0x170 [ 430.952249] ? exit_robust_list+0x290/0x290 [ 430.956553] ? find_held_lock+0x36/0x1c0 [ 430.960598] ? lock_downgrade+0x8e0/0x8e0 [ 430.964724] ? lock_downgrade+0x8e0/0x8e0 [ 430.968854] ? rcu_is_watching+0x85/0x140 [ 430.972992] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 430.978171] ? __fget+0x40c/0x650 [ 430.981607] ? expand_files.part.8+0x9a0/0x9a0 [ 430.986166] ? lock_downgrade+0x8e0/0x8e0 [ 430.990295] ? lock_release+0xa10/0xa10 [ 430.994253] ? kvm_set_memory_region+0x50/0x50 [ 430.998820] do_vfs_ioctl+0x1cf/0x1650 [ 431.002692] ? ioctl_preallocate+0x2e0/0x2e0 [ 431.007092] ? fget_raw+0x20/0x20 [ 431.010530] ? security_file_mprotect+0x9b/0xd0 [ 431.015181] ? SyS_futex+0x3a4/0x56d [ 431.018878] ? do_futex+0x27d0/0x27d0 [ 431.022674] ? security_file_ioctl+0x9b/0xd0 [ 431.027072] ksys_ioctl+0xa9/0xd0 [ 431.030507] SyS_ioctl+0x24/0x30 [ 431.033852] ? ksys_ioctl+0xd0/0xd0 [ 431.037462] do_syscall_64+0x29e/0x9d0 [ 431.041327] ? vmalloc_sync_all+0x30/0x30 [ 431.045457] ? _raw_spin_unlock_irq+0x27/0x70 [ 431.049955] ? finish_task_switch+0x1ca/0x820 [ 431.054458] ? syscall_return_slowpath+0x5c0/0x5c0 [ 431.059370] ? syscall_return_slowpath+0x30f/0x5c0 [ 431.064284] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 431.069630] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.074459] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 431.079629] RIP: 0033:0x4552d9 2018/04/06 06:12:27 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/rfkill\x00', 0x1, 0x0) syslog(0x2, &(0x7f0000000000)=""/117, 0x75) write$eventfd(r0, &(0x7f000025bff8)=0x20000000002, 0x25d) connect(r0, &(0x7f0000000080)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000100)={0x3, 0x100, 0x2, 'queue1\x00', 0xffffffff}) 2018/04/06 06:12:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x1b, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:27 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x3a00000000000000]}) 2018/04/06 06:12:27 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "706f727431000000000000000000000000000000000000000000eb000000b2a587e2000000000000000000000000000101008e15e7af00", 0xa9824f69d1376637, 0x10800a}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000180)=0x24) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x0, 0x989680}}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000000c0)={{0x6, 0xcd}, {0x7, 0x8001}, 0x4, 0x2, 0x7f}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x2, 0x0) 2018/04/06 06:12:27 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fallocate(r0, 0x0, 0xfffffffffffffffd, 0x5) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:12:27 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:27 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xffffffff00000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:27 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6000000000000000, 0x20000) accept4$ax25(r0, &(0x7f0000000040), &(0x7f0000000100)=0x10, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x20000803ffdff, r1}) [ 431.082799] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.090489] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 431.097737] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 431.104993] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 431.112248] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 431.119499] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:12:27 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0xd00000000000000]}) 2018/04/06 06:12:27 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fallocate(r0, 0x0, 0xfffffffffffffffd, 0x5) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:12:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x10, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:27 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) r2 = dup3(r0, r0, 0x80000) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)={0x5, 0x0, [{0x5004, 0xe3, &(0x7f0000000100)=""/227}, {0xd000, 0x72, &(0x7f0000000000)=""/114}, {0xf004, 0x0, &(0x7f0000000200)}, {0x3006, 0xb8, &(0x7f0000000240)=""/184}, {0x1000, 0x16, &(0x7f0000000300)=""/22}]}) 2018/04/06 06:12:27 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x400000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:27 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x8000000]}) [ 431.341875] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 431.353742] syz-executor6 cpuset=syz6 mems_allowed=0 [ 431.358988] CPU: 1 PID: 26118 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 431.365840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.375198] Call Trace: [ 431.377801] dump_stack+0x1b9/0x29f [ 431.381803] ? arch_local_irq_restore+0x52/0x52 [ 431.386491] ? kasan_check_read+0x11/0x20 [ 431.390661] warn_alloc.cold.119+0xb2/0x1b8 [ 431.395007] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 431.399867] ? trace_hardirqs_on+0xd/0x10 [ 431.404031] ? _raw_spin_unlock_irq+0x27/0x70 [ 431.408544] ? finish_task_switch+0x1ca/0x820 [ 431.413069] ? lock_repin_lock+0x410/0x410 [ 431.417333] __vmalloc_node_range+0x45e/0x720 [ 431.421849] ? graph_lock+0x170/0x170 [ 431.425668] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 431.430525] __vmalloc_node_flags_caller+0x50/0x60 [ 431.435468] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 431.440326] kvmalloc_node+0xde/0x100 [ 431.444146] kvm_arch_create_memslot+0xa3/0x4e0 [ 431.448839] __kvm_set_memory_region+0x1d1b/0x2e50 [ 431.453797] ? kvm_vcpu_block+0x1050/0x1050 [ 431.458135] ? zap_class+0x720/0x720 [ 431.461861] ? check_same_owner+0x320/0x320 [ 431.466199] ? rcu_note_context_switch+0x710/0x710 [ 431.471135] ? lock_acquire+0x1dc/0x520 [ 431.475125] ? graph_lock+0x170/0x170 [ 431.478934] ? __might_sleep+0x95/0x190 [ 431.482925] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 2018/04/06 06:12:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7d, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:27 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4080, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0x8, 0x1f, 0x200, 0x0, 0x100, 0x200, 0x7, 0xb07f, 0x0, 0x800000000}) [ 431.488470] ? futex_wait_queue_me+0x559/0x820 [ 431.493063] ? refill_pi_state_cache.part.7+0x300/0x300 [ 431.498446] ? find_held_lock+0x36/0x1c0 [ 431.502532] ? lock_downgrade+0x8e0/0x8e0 [ 431.506735] kvm_set_memory_region+0x2e/0x50 [ 431.511170] kvm_vm_ioctl+0x668/0x1d90 [ 431.515077] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 431.520194] ? futex_wake+0x2f6/0x750 [ 431.524009] ? kvm_set_memory_region+0x50/0x50 [ 431.528606] ? get_futex_key+0x1e90/0x1e90 [ 431.532850] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 431.537876] ? perf_trace_lock+0xd6/0x900 [ 431.542038] ? zap_class+0x720/0x720 [ 431.545767] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 431.550966] ? do_futex+0x249/0x27d0 [ 431.554692] ? native_flush_tlb_others+0x690/0x690 [ 431.559629] ? graph_lock+0x170/0x170 [ 431.563436] ? check_same_owner+0x320/0x320 [ 431.567784] ? exit_robust_list+0x290/0x290 [ 431.572119] ? find_held_lock+0x36/0x1c0 [ 431.576195] ? lock_downgrade+0x8e0/0x8e0 [ 431.580354] ? rcu_is_watching+0x85/0x140 [ 431.584512] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 431.589722] ? __fget+0x40c/0x650 [ 431.593199] ? expand_files.part.8+0x9a0/0x9a0 [ 431.597779] ? lock_downgrade+0x8e0/0x8e0 [ 431.601916] ? __split_vma+0x5ac/0x7f0 [ 431.605792] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.611313] ? vma_set_page_prot+0x183/0x260 [ 431.615709] ? kvm_set_memory_region+0x50/0x50 [ 431.620279] do_vfs_ioctl+0x1cf/0x1650 [ 431.624169] ? ioctl_preallocate+0x2e0/0x2e0 [ 431.628584] ? fget_raw+0x20/0x20 [ 431.632046] ? SyS_futex+0x3a4/0x56d [ 431.635753] ? do_futex+0x27d0/0x27d0 [ 431.639550] ? security_file_ioctl+0x9b/0xd0 [ 431.643966] ksys_ioctl+0xa9/0xd0 [ 431.647410] SyS_ioctl+0x24/0x30 [ 431.650765] ? ksys_ioctl+0xd0/0xd0 [ 431.654376] do_syscall_64+0x29e/0x9d0 [ 431.658250] ? vmalloc_sync_all+0x30/0x30 [ 431.662394] ? _raw_spin_unlock_irq+0x27/0x70 [ 431.666874] ? finish_task_switch+0x1ca/0x820 [ 431.671354] ? syscall_return_slowpath+0x5c0/0x5c0 [ 431.676268] ? syscall_return_slowpath+0x30f/0x5c0 [ 431.681185] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 431.686533] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.691365] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 431.696538] RIP: 0033:0x4552d9 [ 431.699708] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.707399] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 431.714657] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 431.721911] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 431.729169] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 431.736424] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 431.743832] warn_alloc_show_mem: 1 callbacks suppressed [ 431.743839] Mem-Info: [ 431.751640] active_anon:131797 inactive_anon:81 isolated_anon:0 [ 431.751640] active_file:22850 inactive_file:11670 isolated_file:0 [ 431.751640] unevictable:0 dirty:324 writeback:0 unstable:0 [ 431.751640] slab_reclaimable:12410 slab_unreclaimable:101464 [ 431.751640] mapped:73946 shmem:86 pagetables:1033 bounce:0 [ 431.751640] free:1252380 free_pcp:529 free_cma:0 [ 431.785450] Node 0 active_anon:527188kB inactive_anon:324kB active_file:91400kB inactive_file:46680kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295784kB dirty:1296kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 385024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 431.813691] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 431.839883] lowmem_reserve[]: 0 2833 6338 6338 [ 431.844519] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:700kB free_cma:0kB [ 431.872234] lowmem_reserve[]: 0 0 3505 3505 [ 431.876611] Node 0 Normal free:2090468kB min:37284kB low:46604kB high:55924kB active_anon:527188kB inactive_anon:324kB active_file:91400kB inactive_file:46680kB unevictable:0kB writepending:1296kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5440kB pagetables:4132kB bounce:0kB free_pcp:1188kB local_pcp:556kB free_cma:0kB [ 431.906600] lowmem_reserve[]: 0 0 0 0 [ 431.910454] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 431.924090] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 431.939956] Node 0 Normal: 251*4kB (UME) 1344*8kB (UME) 1081*16kB (UME) 825*32kB (UME) 505*64kB (UME) 166*128kB (UME) 42*256kB (UME) 17*512kB (UM) 2*1024kB (UM) 7*2048kB (UME) 475*4096kB (UM) = 2090460kB [ 431.958394] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 431.967032] 34604 total pagecache pages [ 431.971053] 0 pages in swap cache [ 431.974530] Swap cache stats: add 0, delete 0, find 0/0 [ 431.979920] Free swap = 0kB [ 431.982953] Total swap = 0kB [ 431.985995] 1965969 pages RAM [ 431.989124] 0 pages HighMem/MovableOnly [ 431.993103] 338524 pages reserved [ 432.015481] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 432.027428] syz-executor6 cpuset=syz6 mems_allowed=0 [ 432.032636] CPU: 0 PID: 26118 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 432.039480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.048836] Call Trace: [ 432.051423] dump_stack+0x1b9/0x29f [ 432.055060] ? arch_local_irq_restore+0x52/0x52 [ 432.059732] ? kasan_check_read+0x11/0x20 [ 432.063876] warn_alloc.cold.119+0xb2/0x1b8 [ 432.068200] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 432.073049] ? kasan_check_write+0x14/0x20 [ 432.077304] ? lock_repin_lock+0x410/0x410 [ 432.081559] __vmalloc_node_range+0x45e/0x720 [ 432.086059] ? graph_lock+0x170/0x170 [ 432.089858] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 432.094700] __vmalloc_node_flags_caller+0x50/0x60 [ 432.099633] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 432.104479] kvmalloc_node+0xde/0x100 [ 432.108283] kvm_arch_create_memslot+0xa3/0x4e0 [ 432.112954] __kvm_set_memory_region+0x1d1b/0x2e50 [ 432.117889] ? kvm_vcpu_block+0x1050/0x1050 [ 432.122211] ? zap_class+0x720/0x720 [ 432.125915] ? check_same_owner+0x320/0x320 [ 432.130238] ? rcu_note_context_switch+0x710/0x710 [ 432.135164] ? lock_acquire+0x1dc/0x520 [ 432.139137] ? graph_lock+0x170/0x170 [ 432.142940] ? __might_sleep+0x95/0x190 [ 432.146927] ? refill_pi_state_cache.part.7+0x300/0x300 [ 432.152287] ? find_held_lock+0x36/0x1c0 [ 432.156349] ? lock_downgrade+0x8e0/0x8e0 [ 432.160517] kvm_set_memory_region+0x2e/0x50 [ 432.164914] kvm_vm_ioctl+0x668/0x1d90 [ 432.168789] ? perf_tp_event+0xc30/0xc30 [ 432.172856] ? kvm_set_memory_region+0x50/0x50 [ 432.177440] ? memset+0x31/0x40 [ 432.180710] ? perf_trace_lock+0x495/0x900 [ 432.184938] ? zap_class+0x720/0x720 [ 432.188640] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 432.193839] ? kasan_check_read+0x11/0x20 [ 432.197985] ? graph_lock+0x170/0x170 [ 432.201791] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 432.206374] ? exit_robust_list+0x290/0x290 [ 432.210687] ? find_held_lock+0x36/0x1c0 [ 432.214746] ? lock_downgrade+0x8e0/0x8e0 [ 432.218887] ? rcu_is_watching+0x85/0x140 [ 432.223034] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 432.228236] ? __fget+0x40c/0x650 [ 432.231682] ? expand_files.part.8+0x9a0/0x9a0 [ 432.236253] ? lock_downgrade+0x8e0/0x8e0 [ 432.240391] ? lock_release+0xa10/0xa10 [ 432.244364] ? kvm_set_memory_region+0x50/0x50 [ 432.248934] do_vfs_ioctl+0x1cf/0x1650 [ 432.252814] ? ioctl_preallocate+0x2e0/0x2e0 [ 432.257211] ? fget_raw+0x20/0x20 [ 432.260671] ? security_file_mprotect+0x9b/0xd0 [ 432.265344] ? SyS_futex+0x3a4/0x56d [ 432.269054] ? do_futex+0x27d0/0x27d0 [ 432.272852] ? security_file_ioctl+0x9b/0xd0 [ 432.277262] ksys_ioctl+0xa9/0xd0 [ 432.280706] SyS_ioctl+0x24/0x30 [ 432.284061] ? ksys_ioctl+0xd0/0xd0 [ 432.287677] do_syscall_64+0x29e/0x9d0 [ 432.291551] ? vmalloc_sync_all+0x30/0x30 [ 432.295692] ? _raw_spin_unlock_irq+0x27/0x70 [ 432.300264] ? finish_task_switch+0x1ca/0x820 [ 432.304758] ? syscall_return_slowpath+0x5c0/0x5c0 [ 432.309679] ? syscall_return_slowpath+0x30f/0x5c0 [ 432.314604] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 432.319963] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.324804] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 432.329986] RIP: 0033:0x4552d9 [ 432.333165] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.340876] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 432.348134] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 432.355392] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 432.362659] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 432.369924] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:12:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:12:28 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x11000000]}) 2018/04/06 06:12:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x66, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:28 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x88470000}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:28 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) bind(r0, &(0x7f0000000280)=@nfc={0x27, 0x1, 0x1800000000, 0x7}, 0x80) sendto$packet(r1, &(0x7f00000000c0)="32158553d49756004eb27caca99675ede6335dade9981e9197d90900b4504fe0392e25dd2e9e", 0x26, 0xce9f7e8e0f104e8f, &(0x7f0000000240)={0x11, 0xff, r2, 0x1, 0xfffffffffffffc01, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x18}}, 0x14) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000040)=0x68) r1 = socket(0x11, 0x1, 0xb) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x68900, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r2}) 2018/04/06 06:12:28 executing program 7: clock_gettime(0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="0903f7e01f4ee9f41adf4a5065ed2954df2e5ad90be9e646f92dc4177e72102e7944a6561cd4a44f315bb2ce3bb90d1541ac290a6661339e84cda05c382bad107f125e20d6f19cc29b99700bc5", 0x4d, 0x0, &(0x7f0000cc7fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000040)) 2018/04/06 06:12:28 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x74000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:28 executing program 1: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:12:29 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x6000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x1e, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:29 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x300]}) [ 432.668365] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 432.680292] syz-executor6 cpuset=syz6 mems_allowed=0 [ 432.685529] CPU: 0 PID: 26166 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 432.692389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.701763] Call Trace: [ 432.704381] dump_stack+0x1b9/0x29f [ 432.708050] ? arch_local_irq_restore+0x52/0x52 [ 432.712753] ? kasan_check_read+0x11/0x20 [ 432.716941] warn_alloc.cold.119+0xb2/0x1b8 [ 432.721295] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 432.726172] ? finish_task_switch+0x1ca/0x820 [ 432.730721] ? lock_repin_lock+0x410/0x410 [ 432.734994] __vmalloc_node_range+0x45e/0x720 [ 432.739520] ? graph_lock+0x170/0x170 [ 432.743351] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 432.748223] __vmalloc_node_flags_caller+0x50/0x60 [ 432.753178] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 432.758049] kvmalloc_node+0xde/0x100 [ 432.761877] kvm_arch_create_memslot+0xa3/0x4e0 [ 432.766583] __kvm_set_memory_region+0x1d1b/0x2e50 [ 432.771559] ? kvm_vcpu_block+0x1050/0x1050 [ 432.775913] ? zap_class+0x720/0x720 [ 432.779649] ? check_same_owner+0x320/0x320 [ 432.783995] ? rcu_note_context_switch+0x710/0x710 [ 432.788939] ? lock_acquire+0x1dc/0x520 [ 432.792939] ? graph_lock+0x170/0x170 [ 432.796757] ? __might_sleep+0x95/0x190 [ 432.800768] ? refill_pi_state_cache.part.7+0x300/0x300 [ 432.806167] ? find_held_lock+0x36/0x1c0 [ 432.810280] ? lock_downgrade+0x8e0/0x8e0 [ 432.814503] kvm_set_memory_region+0x2e/0x50 2018/04/06 06:12:29 executing program 5: syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffffffff, 0x10000) r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) 2018/04/06 06:12:29 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) bind(r0, &(0x7f0000000280)=@nfc={0x27, 0x1, 0x1800000000, 0x7}, 0x80) sendto$packet(r1, &(0x7f00000000c0)="32158553d49756004eb27caca99675ede6335dade9981e9197d90900b4504fe0392e25dd2e9e", 0x26, 0xce9f7e8e0f104e8f, &(0x7f0000000240)={0x11, 0xff, r2, 0x1, 0xfffffffffffffc01, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x18}}, 0x14) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:29 executing program 7: clock_adjtime(0x0, &(0x7f00007b7f30)={0xda60}) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x78a, 0x40) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="38e0aa2f6e660064ae860fdcf6913e924f9e9144cf3e8d8eb7aec62fed830da831732040365ab3ff8fba7abe749a634a83530b94b9acf933587b6c22ae4510511c9ea236971de4795525b359c3449b00db079cf5966fc1a8e9fa25ba7a545b348395161b53f27c5fa9c1227677af8c6adc7b4f184c09225f43e41e26d98aafec0ac5bfcd0d89366f7858f3b97d84dd28f2abe33e03bf9f5763fe0a1e2ea525964c1932968cf63241659d7feb4104a9dd1d9ee50d11f928b1ba41e6cc00c8ae391c0359e089fcc5febb2f699861113e1e9f732aa371f808460b74f9481893d056821d5633b4e6f0b913560e44b9b157fc8329e06e13fc54be809763b53536f5b2aa9b2b4c9068ac99f89fab4436fa24070c099a70ccfe1d8e09c9afa21ee6daa4292be531be160e5dcaa724914f52e0c67f0898c1f8415adfa36b23a61c87ba60a8d682b6dc9d6af98fb90ac3a6386fb83c8054013055c1e7e124c4082b7e6bd6fbee58e96b1ce9e1ec6e6374a410c751ff64cd80c9de0ad39a84fdecb023a83a17260615638c2808f475cf7910f5a910cb900a4768842db4f894273080b57199784f04e939e4c0b663b89a24a5e83821e44c82131b1ede533dc28c12b225af4f786d35ed88a725b4c0ae368da12ce2215e1764bbac0079f461492092a52abc77b1d0b18168891a617247c7b42013edc506a892590e6fdc370206a62791dd0b3dfa48aa9c7792d0d021a7bfb5be79e83f10362ca09d540ace2c4134706a92bcb73902d1c07d028c6f5ea3d9ad4c9f0b471c7e81847f205bcf5eb94ac8eef79c5452799c5603999dfae5d5fb8f8cb58b5bc8c0c56871882fbedb9d618a771cb3a898e7afc26831ba6f6df101ba996a10bb758c332828f9aba18fb29e50f7b2b9f8c41fa504da7cdd998e15437287136d2c8e23bac0c25dc0818361987dbe2147c6ae6dc6a1654cfe82daabeeea751cb54da015459b59fa8caab188721478011cbbb6fa68d605977d87155f3904c23f908ccbc88681f6aa066999ded40f175119ede71de57244e36ff14d54029e178353af23950eb54008e07d607c66f65945aa3adf393e1e4f40b042d582f1e82b3bbb28dce055bc96a0448a120873c07d6db304436916b59c6253c6fe96d99581a9b05c2a64a542b9854998e457ecf1411cf58d6572b2366b6fd96e266dfe037946f4207d33e7af5357581d92488b30c5826736f7f40d55d01e21285e87e197859c24bfb233587cc185c0c3381d931fa0740e3ae75bbef23e36577548b344eda2d87938015ce19d45345c8005b1bb5ff94174160210d9975d2c564f3a8e243fb62eda8446026ff7f72633e0a69eb31969e1f3b03bf8ffb1b742db791914fd17253f521c1f847a31b40f6b180c134ce9276b7aa7b2d1deea0e1eb3fadf6857e405c162e47df1654df77198678675848353881cccff277e489901bf4336faa10cde91678e87614c593c2e94ee056194a40edb8b349612cddd63bb550438489515ec608e111ba824c3b61657b40f1e287fc03e20612cdce50ecbd3e6bcdfab0c0c052ee2fc36f7ccc0a548a7db74cd948fe18483ee6827cf5e42232879c451fd4aaaadc2786d2394aaaadbed4e6992f74c2a41535dc283f3d57f4df51e6712cbe0bfacbc2ab968e03e129906b52f927b32e43e2ccbb19db3e436e32f415600414814859d3dd7c7784a1f8ceb32ed9c199b5c6ad6726cf6c5d729b196a1d1a8584d83799c683d6f2127ab62e36b2bb764f5c9df38173cc48854ae91a9fa2d4f85d3fd959708ca6d92a047cea0375b78e615064c8811524492ca9af5f37213745ffaa009d5bce245c2d74326ab70cca80f190dfb4d1d88ef3752f1bab6a94d3e6557e49e6856fd1c94c3886925eee30c58ad67054d752e011a69a72607a40912bd3f0214ee43f63b912517ac51463946a26652af69c13575161c01568a7c5e66b5c0cb9cad60cebee466ff86ae3a8138127ab75db206e184d9310cfea1ebe4422879f5da9d7ec168c6ac5ac8e5d97653040cfcb53a219d6c9f4badeb082c222d96f478d85fa9fe994d073b8f00c189e23106cb7bbb9431e41d496941b449b9ce349e37802a89a6c472875de975cfbf65c7f8c291b483c4fc615f5d02d72c1e6fa506cd421839741d62cd890a11afabe9af7f1572ab9a18a405efcd9e1edac580b79d44e0d1ce13c13c89f0ced59a10c68dc9db93b911b5e1f77a1a1ea0c584cac0345960176ca10320eb625dd3c3bd99288dc25e461b28db06a2e23c6404573af15d6fc9eaca66934e11db3f8e8e198e9610c81ee1ee6b75832b26d6f08741da5280f8b93df02382cf524b954490def20bc39b56d144729b9c4721548be783174dfeda466eceae0648904763b3b00a0cc1e9b8153bca5aa67792804185c585825f093bdfb170196a2d459355c77dfab7bd7779fbc7c8d1cef78f2b6308c513862cdbb48df329b7c68ec824568f1edcb11a5edf8bddec0d9999f1d45208dce18a4587a57ebc6deca43a74f963b807be9aa18945f90dc9d6270299b0b94b68b0ec31c304b2af836291ef247cb9d10b76de1c13071a533dc4d998653a8670a7426814114277fcf780d609a2ddfe8acb7de9c08914917754312a58cf7d0b570013436d252259661188ba7c4e718273c07c3e50f7aaf7da3c0ef95ee907ceb2a202798836199ddbc3332e4dc652d246bc3050f45f7c45d7c6df5bd4c10d023e92ce4449ef6203adce61065f24b047436ef4dbc5b40428bb9dcfc870efb64f08bcc3c74cc4fda7593205ebcc8e3ed188be0c28e8b1b8a4a0e7e62f862e9c1ed225e3b0778814265b9686b535f715d99e8afe2601e4396794d5ad91f79bc7c5427460052b10387d099f54d346f4baba2c7e30e596423cdfa05ada8cf0e85f0190db34558f1a62a5a30c63232f3d28b17bd54ae1f3fc3fc046e16780da586631028adaaa7d539431a4f9013760f54fb0552f0c0a61d6a3f6fbc0f3e23667a4b52aa83b22f08dcb2ccbeb7193f7e2d98fba03e9c2c28297cef47fb58daa4aed8f5d394034db94d77bc6eefd4a824eb7dc69c269904264c9d3ae90a52ba867e5f298cb87f0854dc093b179c90047361ee0c5fb2cf7d10c4da81ed5a968a94161154c9ba9e638347eeef222311eda4b2f45de214b5ad814e3de95c4a78917f2642e59c9985ea9e06bf694c46ab582d1c3e1afb018ee7413dfe56ace3122fd564ba1c121a24c24dc2aa73542dcf5213ffe7a764c8122eee32574476345cc66c6364080b20190efd221ee50b9c407d1843d277e8b92f1cd08152a6d74db5bb35aa130778f5b77bda78a33e9fea7f649feaff54fdf3cf5095dde711eb1929b283548588c37b9529107555f64e8652d562fcb5dbce942ddac3587d9f6a213732ca89b25f76bf01b86c73447515610a4b22703be9ad4185c48e3af2ab98bc895b0bdd42783ab2b7da185dbc5ca2f66aecd85656fbe15b5477999df37e7e3a322cfc44276e1d93e991cf366b4b9a79026b61ac4d4d5c8d9f9dde32c582a011b8f07e11ae1e7e19bd490f1b2bea2c9f2f55069c5abeb891a8cbe252542bd74203e768fd302737ef462ded6168cb3ccd49147ad9e8f0fb5fc67002904e645050b4ce4d88f07373a13cde7eb8a7fa64d4f125aa598befe8cdaea41a876c2d637e84a356da30f4d623b0979e12f71c0f42a1052c9333fbb75b55d5bf60f1e0996909e9110c4f16ab0e4670541dae8117385d98fe3f075d7bd1c5094cee7f6ba3e745515b6315b38f03ed2f70fdb2be659c542b1555a16fa414ce317c6877b28b9d6eafd18590649757e95b0dc155424bac2298bff6d2a5690b58d54457cd786be119c15723a9018f937a5d445c6aa2359769b04a953fd79cb9b011bb4c15a336f353b70a3a9210e16fdb58eb55ff247284c9edebfbd83a45071dd385ac5614e47f49b5c355b5d777279a0da7eb9d7bb87746775957099fea075c66e2b7f35625d347dd3a8c3ea2ab89b359b7f18f7097724e598141e6d288394ebe2caca20434ed66704bfd3f18897ea83caad9e0b8640ec6b1cf84e52c06551af1c59c79a3ff11727679e6af5605dc1da39869e4460e68cb1de908b3a3eebd3d34a2bb5224c573feca0c5237028d84d0b22b5bc38af7e4545da53ddb0e7cae10bda0d39489fc2b4799c5286d1a556b9098ba1fa717acfaf1fe9ad0ea8e6856a88f28f4e3405b756eb5ed457fa6110e24795a9a4e1bfebec68cce0cff7795bd7e3db5c1ebc4c36cda343a0cf4b6869e622c850fc13b04314e862746244f6277345983ee0187d0fbefc5cb3e6412ed0ce136314209090b5f6c121c2a519722cb9f339b9b6a1ba5ea9442cb70b52723d3a91b9d4df39ddf283ea97977d99b303b27918c8d843f825072bc7b2f6064ec45725dd94886ce9364326d0ca6bbf7ba224a9a9f0ef5b7fa67e63faf0fbc2d0b5c72f8633e57a6614835fd5062d79aa5dc5c2033e6ce34a6c3371896d97c37451b9babfd5aa5c6f9c699a91398422fd02c28fb49977926f98c97bb37d622b1222d45bed097ff93dcad20642d09241475ab314ff9ac003080a6e402fad9e7859cbec6fc9cd775fa78b90e5ce4f492fb77e6076157ca05e1f3341011efd3c08e7b82dcef2b687051512797ef99eb6ca8db44cfee850cb24cc862e1100bb7aabba74bc2322ae9204d33f3849fcc9dd3dd2e45e2258dfeba74ea2520b345c52bd13aad18e380063dafa31f9aeee80b4841d0e3e56467b2e12a8132df48e41b98cb0b0b9412f77ba1f6b44c3e5ea84359b56c0a28f80a2f5d7b4ded2a05c2b28e232f542fe2762c8aae2f40ef3f96b8af963457b365b056947d89a92560799f05732469261421b35765b6e52cb85a8dbc046093d9c8489f6eeaa46036e59652a0cb9e8868d3c52a4fed25c03e67402cf239064d1f1b4b4a4bfeb54f23aa4acc5f39f0935ed9b9ddf21ea94bc4cd0bbe8dc642c9e379a7eefc4b6e77730abf2c07107048a822cd1b450dd65791b55fcad23d3c9c307dc2bff27c7c98b16d17f705c2046bed8a0e2c146f37ba617be0f64603024fdafb370e298bb292a971d54c43f4db42cf3ccfdc0ab923a0a1eec0353cb18ea8daceb57bcb010c8d53d4ebdcb1cee033007a6428ede56bcfb9069f186afb323f6527f0f90382f29412099d1c6646b25d405a4a132868caaa0f36201459a0febe87cb8de0382098c393bab04bdfc369dd7340a3b3e463a5c852aed8532a35be4c0ab291a5e2e9b639a197e7bae29849e2e1b300cf6e024ee6dd338c424a6aede91307e2bae24a451c0fed66fc5a0d8589457259a2f0ad36eb3c740d225705064cb382c07812a8d1d0546b9677e5d2e1ee65d0d45db5f601f81086a2f14bd74ca933e1ca36423e8a7e12d99b827c046a724b1115b253cf19ad0cde664c0b7b7d45bbe7260e6ca5062bbd5c55d88bd2b1d93c67c2bd08a244c0ff9e667837cbdae2b416f6c5ce0dfd43c291b290b3a8346b88063725dd2c28a47cedb048859d13a01185872675b6584cefb4ce39c4024704718001214637767733dea760e9949ca482ce48f488128deb6d44fb5bf5845e07a217c1bb8feb4023a27bb6089da0a75f31eb0394ee65a6850136ba711e2541425ef23e439c9735f48849eb41705ea262dafbe26e4aabef68ec9ff60a6569bf1dcb89246d69118b345b969606828e5538ef05d8ee207a565c4bb60312957b6e3c60d54627edd98dfe98aee9427c4666cba6ae6033385a5638dda6d943ccea5fb58d090c0a13780ec8d553068dbb8251899d965b61a1091e4", 0x1000) [ 432.818937] kvm_vm_ioctl+0x668/0x1d90 [ 432.822845] ? perf_tp_event+0xc30/0xc30 [ 432.826939] ? kvm_set_memory_region+0x50/0x50 [ 432.831547] ? memset+0x31/0x40 [ 432.834858] ? perf_trace_lock+0x495/0x900 [ 432.839130] ? zap_class+0x720/0x720 [ 432.842867] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 432.848088] ? native_flush_tlb_others+0x690/0x690 [ 432.853041] ? graph_lock+0x170/0x170 [ 432.856860] ? check_same_owner+0x320/0x320 [ 432.861225] ? exit_robust_list+0x290/0x290 [ 432.865573] ? find_held_lock+0x36/0x1c0 [ 432.869671] ? lock_downgrade+0x8e0/0x8e0 [ 432.873852] ? rcu_is_watching+0x85/0x140 [ 432.878015] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 432.883247] ? __fget+0x40c/0x650 [ 432.886730] ? expand_files.part.8+0x9a0/0x9a0 [ 432.891327] ? lock_downgrade+0x8e0/0x8e0 [ 432.895495] ? __split_vma+0x5ac/0x7f0 [ 432.899407] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.904961] ? vma_set_page_prot+0x183/0x260 [ 432.909390] ? kvm_set_memory_region+0x50/0x50 [ 432.913991] do_vfs_ioctl+0x1cf/0x1650 [ 432.917909] ? ioctl_preallocate+0x2e0/0x2e0 [ 432.922341] ? fget_raw+0x20/0x20 [ 432.925828] ? SyS_futex+0x3a4/0x56d [ 432.929571] ? do_futex+0x27d0/0x27d0 [ 432.933392] ? security_file_ioctl+0x9b/0xd0 [ 432.937829] ksys_ioctl+0xa9/0xd0 [ 432.941303] SyS_ioctl+0x24/0x30 [ 432.944685] ? ksys_ioctl+0xd0/0xd0 [ 432.948332] do_syscall_64+0x29e/0x9d0 [ 432.952236] ? vmalloc_sync_all+0x30/0x30 [ 432.956405] ? _raw_spin_unlock_irq+0x27/0x70 [ 432.960920] ? finish_task_switch+0x1ca/0x820 [ 432.965438] ? syscall_return_slowpath+0x5c0/0x5c0 [ 432.970393] ? syscall_return_slowpath+0x30f/0x5c0 [ 432.975354] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 432.980747] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.985624] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 432.990827] RIP: 0033:0x4552d9 [ 432.994030] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.001763] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 433.009049] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 433.016319] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 433.023586] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 433.030840] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 433.038342] warn_alloc_show_mem: 1 callbacks suppressed [ 433.038351] Mem-Info: [ 433.046227] active_anon:131269 inactive_anon:78 isolated_anon:0 [ 433.046227] active_file:22850 inactive_file:11683 isolated_file:0 [ 433.046227] unevictable:0 dirty:337 writeback:0 unstable:0 [ 433.046227] slab_reclaimable:12423 slab_unreclaimable:101658 [ 433.046227] mapped:73952 shmem:86 pagetables:1018 bounce:0 [ 433.046227] free:1252706 free_pcp:556 free_cma:0 [ 433.080130] Node 0 active_anon:525076kB inactive_anon:312kB active_file:91400kB inactive_file:46732kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295808kB dirty:1348kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 378880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 433.108379] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 433.134646] lowmem_reserve[]: 0 2833 6338 6338 [ 433.139345] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:224kB free_cma:0kB [ 433.167121] lowmem_reserve[]: 0 0 3505 3505 [ 433.171565] Node 0 Normal free:2091772kB min:37284kB low:46604kB high:55924kB active_anon:525076kB inactive_anon:312kB active_file:91400kB inactive_file:46732kB unevictable:0kB writepending:1348kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5408kB pagetables:4072kB bounce:0kB free_pcp:1296kB local_pcp:640kB free_cma:0kB [ 433.201572] lowmem_reserve[]: 0 0 0 0 [ 433.205449] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 433.219249] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 433.235203] Node 0 Normal: 273*4kB (UME) 1253*8kB (UME) 1112*16kB (UME) 823*32kB (UME) 496*64kB (UME) 166*128kB (UME) 42*256kB (UME) 17*512kB (UM) 2*1024kB (UM) 6*2048kB (UME) 476*4096kB (UM) = 2091724kB [ 433.253745] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 433.262370] 34617 total pagecache pages [ 433.266386] 0 pages in swap cache [ 433.269869] Swap cache stats: add 0, delete 0, find 0/0 [ 433.275272] Free swap = 0kB [ 433.278325] Total swap = 0kB [ 433.281373] 1965969 pages RAM [ 433.284512] 0 pages HighMem/MovableOnly [ 433.288510] 338524 pages reserved [ 433.310741] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 433.322596] syz-executor6 cpuset=syz6 mems_allowed=0 [ 433.327766] CPU: 1 PID: 26166 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 433.334612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.343960] Call Trace: [ 433.346540] dump_stack+0x1b9/0x29f [ 433.350164] ? arch_local_irq_restore+0x52/0x52 [ 433.354829] ? kasan_check_read+0x11/0x20 [ 433.358973] warn_alloc.cold.119+0xb2/0x1b8 [ 433.363288] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 433.368125] ? kasan_check_write+0x14/0x20 [ 433.372353] ? lock_repin_lock+0x410/0x410 [ 433.376579] __vmalloc_node_range+0x45e/0x720 [ 433.381067] ? graph_lock+0x170/0x170 [ 433.384854] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 433.389708] __vmalloc_node_flags_caller+0x50/0x60 [ 433.394629] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 433.399459] kvmalloc_node+0xde/0x100 [ 433.403247] kvm_arch_create_memslot+0xa3/0x4e0 [ 433.407905] __kvm_set_memory_region+0x1d1b/0x2e50 [ 433.412825] ? kvm_vcpu_block+0x1050/0x1050 [ 433.417136] ? zap_class+0x720/0x720 [ 433.420843] ? check_same_owner+0x320/0x320 [ 433.425153] ? rcu_note_context_switch+0x710/0x710 [ 433.430065] ? lock_acquire+0x1dc/0x520 [ 433.434035] ? graph_lock+0x170/0x170 [ 433.437827] ? __might_sleep+0x95/0x190 [ 433.441788] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.447320] ? futex_wait_queue_me+0x559/0x820 [ 433.451899] ? refill_pi_state_cache.part.7+0x300/0x300 [ 433.457259] ? find_held_lock+0x36/0x1c0 [ 433.461308] ? lock_downgrade+0x8e0/0x8e0 [ 433.465456] kvm_set_memory_region+0x2e/0x50 [ 433.469846] kvm_vm_ioctl+0x668/0x1d90 [ 433.473719] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 433.478814] ? futex_wake+0x2f6/0x750 [ 433.482597] ? kasan_check_write+0x14/0x20 [ 433.486828] ? kvm_set_memory_region+0x50/0x50 [ 433.491400] ? graph_lock+0x170/0x170 [ 433.495184] ? get_futex_key+0x1e90/0x1e90 [ 433.499435] ? __lock_acquire+0x7f5/0x5130 [ 433.503654] ? perf_trace_lock+0xd6/0x900 [ 433.507795] ? zap_class+0x720/0x720 [ 433.511496] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 433.516694] ? do_futex+0x249/0x27d0 [ 433.520417] ? graph_lock+0x170/0x170 [ 433.524235] ? exit_robust_list+0x290/0x290 [ 433.528574] ? find_held_lock+0x36/0x1c0 [ 433.532635] ? lock_downgrade+0x8e0/0x8e0 [ 433.536766] ? lock_downgrade+0x8e0/0x8e0 [ 433.540898] ? rcu_is_watching+0x85/0x140 [ 433.545039] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 433.550226] ? __fget+0x40c/0x650 [ 433.553668] ? expand_files.part.8+0x9a0/0x9a0 [ 433.558240] ? lock_downgrade+0x8e0/0x8e0 [ 433.562380] ? lock_release+0xa10/0xa10 [ 433.566355] ? kvm_set_memory_region+0x50/0x50 [ 433.570917] do_vfs_ioctl+0x1cf/0x1650 [ 433.574792] ? ioctl_preallocate+0x2e0/0x2e0 [ 433.579193] ? fget_raw+0x20/0x20 [ 433.582629] ? security_file_mprotect+0x9b/0xd0 [ 433.587281] ? SyS_futex+0x3a4/0x56d [ 433.590979] ? do_futex+0x27d0/0x27d0 [ 433.594762] ? security_file_ioctl+0x9b/0xd0 [ 433.599156] ksys_ioctl+0xa9/0xd0 [ 433.602594] SyS_ioctl+0x24/0x30 [ 433.605942] ? ksys_ioctl+0xd0/0xd0 [ 433.609551] do_syscall_64+0x29e/0x9d0 [ 433.613422] ? vmalloc_sync_all+0x30/0x30 [ 433.617552] ? _raw_spin_unlock_irq+0x27/0x70 [ 433.622042] ? finish_task_switch+0x1ca/0x820 [ 433.626531] ? syscall_return_slowpath+0x5c0/0x5c0 [ 433.631443] ? syscall_return_slowpath+0x30f/0x5c0 [ 433.636371] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 433.641723] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 433.646554] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 433.651730] RIP: 0033:0x4552d9 [ 433.654923] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.662614] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 2018/04/06 06:12:30 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xff00}, [], {@ipv6={0x86dd, {0x0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:30 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7fffffff, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) write$fuse(r0, &(0x7f0000000100)={0x30, 0x1, 0x3, @fuse_notify_retrieve_out={0x4, 0x101, 0x0, 0xeea6}}, 0x30) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000180)=0x1000) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33) sendmsg(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@generic={0x19, "74c7cef89b11da95d34a09939fc41079ca5e4d6f02418ee7d164fe3914d99de4026afebf6832c6cd38e51ae59c955a7022b7708168883113449eaa40b83736dcbf377d8d201c7f1afda8dd93eb95645ef78e7a74c0cd2ed0c95c7a43a8be0024e816ff3046cae9efe59c286c877220c4403a5f4bd4d03716c4120d6a4e5e"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)="418f8688e8f862e5ad92e63599a21ad43c36ee1fb8a1bd2c6ae635cb9ccaff0dfe053e5b8d4820b7fb8eca9eec204d2a162e0ccf1f6b5fb02ed8a64b418cf184aea0e91444424d013c3a2976f3bf5496666f27fbb159df630db93289", 0x5c}], 0x1, &(0x7f00000006c0)=[{0x70, 0x19d, 0x3f, "283348d4270425df3fce6b829bebbad1387dee7ef06e64895467ce3a3917dd3e05f2711185efa3b6d1cc1b594507e71b4d2637825fe1ea82df73fece829cac9a7790123ff03801cba0f30c2b9f805434cd13d487d0aca29bab0cadafde64"}, {0xb8, 0x3a, 0x1, "28b2e533a31bf5e41512caf4c9de80acff0af8dbed172036d49ae9281aea76216c7add9bd8819518075a9e806ace1529ebef2ea3095bcb9deca67a7f5b4ec00cfca2f05f49af033bdb5a802e98a29bb0f037ffd83624832feb5ec5e3ce8cc21b710ddec513121b901e8561d6ff7dcd2bb6616e68732286513268cbed259ed07ac69f3dd1144ae8a3098a01b73bf6aa6dc640eb12bde34114f0893ad398411ce19f1bb1"}, {0x1010, 0x117, 0x5, "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"}, {0x38, 0x114, 0x3, "b91f222d4589c77d7f1d67d2934d4edc8e986af7fe2cfa308c75ed2456150b5cc5c505a001c0edf9"}, {0xc8, 0x101, 0xffff, "1747af09a6821f84bf4a4a72e668573dbb2ce78755fb83d85911a1dc32849ee8487bcfa2057da6c48112ea436b478c9efa0cd426780d8f0ca4931923c1a86c3836454d4e76b5a18f4624ec8137ca9113c7361ea06cfc7f59a65f0f8c46dab411c1eb7ad195cbc6057c9cc1d667afa8d2214d4c4e44f48facb5b02dd6842055490d2d4e93e8cc6112cafb49409ae458138b2c23e86e31c8764a77fdaeb63cdedcae00ad1f914489297d8e7430415d768600a5dd73e6"}, {0xb8, 0x105, 0x0, "970018430f533e608cc6fd17b7f4f1068ea4d3c026b64427151502fe1395456b606ee5250a2421c94999c33636ebf9ff426e6df82e885de5b875146bd2f77cacb7536d6d9012415c582da2db7060307dd397679dbf4c599ee70f90cfeb370494b7b8d01685c8775ab30c939a0d03ed47377e8cf672c0194fd33fa88e4b8e244513bcc04f137572f2b3de98d5f8cc058ea055206b4c08f7b90f746f8fe4867cff2b3289c574"}], 0x12f0, 0x20008080}, 0x20000000) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) 2018/04/06 06:12:30 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) bind(r0, &(0x7f0000000280)=@nfc={0x27, 0x1, 0x1800000000, 0x7}, 0x80) sendto$packet(r1, &(0x7f00000000c0)="32158553d49756004eb27caca99675ede6335dade9981e9197d90900b4504fe0392e25dd2e9e", 0x26, 0xce9f7e8e0f104e8f, &(0x7f0000000240)={0x11, 0xff, r2, 0x1, 0xfffffffffffffc01, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x18}}, 0x14) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:30 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:12:30 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0xd]}) 2018/04/06 06:12:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0xa, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:30 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x2, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:30 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(r1, 0x2, 0x445d05ad, 0x4) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x40000, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000540)) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_id=0x0, &(0x7f00000003c0)=0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e23, 0x7, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x100000000000000}}, 0x2, 0x4, 0xffffffffffffffc0, 0x0, 0x3}, &(0x7f00000004c0)=0x98) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="0000fbff0303ffff231e00e100e03f0200480068000001169078ac141415ac141413018323200000008fac1414aaac1414aae000000200000000e0000002ffffffffac14140a00019406000000000f009078000605bd"], 0x56) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000080)="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", 0x218, 0x8000, &(0x7f0000000000)={0xa}, 0x1c) close(r0) [ 433.669866] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 433.677119] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 433.684369] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 433.691621] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:12:30 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000100)="ba1b446cd064fa0a15fed41d7d784612fadfa58f267e6885430d11a023f06ea1b942ca4ea67750845dfc1ea5e743843458f867f7b63bf17c5d1a09b25710ab9f89848a9ca9e72fcae8d1a2869356c528e51ace5d1463e930fb9ba812163edfd1f51fb40e0f33c5ef5e98ced5a54a47bd1715d12bf3b1d91a07b4059d9529f6829e012cdb5512d4b606aa00eada6e9275c94067cf0df022514364d5f4e227344c217426b7f3820899144e29a4f011bdbb14f023b7e4fe5add024894c186a0e0e9ea9286b22f7db8f0a24c8e3cf795be9aa853ea4ab4be803c0df5dcf4469e64c382edd643b89dd074f3", 0xe9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) 2018/04/06 06:12:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x1c, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:30 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) bind(r0, &(0x7f0000000280)=@nfc={0x27, 0x1, 0x1800000000, 0x7}, 0x80) sendto$packet(r1, &(0x7f00000000c0)="32158553d49756004eb27caca99675ede6335dade9981e9197d90900b4504fe0392e25dd2e9e", 0x26, 0xce9f7e8e0f104e8f, &(0x7f0000000240)={0x11, 0xff, r2, 0x1, 0xfffffffffffffc01, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x18}}, 0x14) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:30 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') readv(r0, &(0x7f000066dff0)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) sendto$inet(r0, &(0x7f0000000040)="8bbe6c1c867d0e03187dfb4e8602e2e409bd92e161ea936e70eaf9e89c265a6ecf1c9c9be5f7152a730b7ab72d8287851aaff85d18cce4dd051efb53f1d7d60c8e530d571b8d6de04eb2e054d60cc79a7d297151459da1337b354d6367b8131794d066f1695865fe624d72eb11619872d64f0a3339a68a9d4096bca6eab04f947de25779aa5047026815badb38d279822f84b43efb595375289a6266b1d361", 0x9f, 0x4, &(0x7f0000000100)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) 2018/04/06 06:12:30 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0xffffa888, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:30 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x8847]}) 2018/04/06 06:12:30 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='Ehreaded\x00', 0x1) [ 433.913609] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 433.925602] syz-executor6 cpuset=syz6 mems_allowed=0 [ 433.930853] CPU: 0 PID: 26231 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 433.937718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.947093] Call Trace: [ 433.949702] dump_stack+0x1b9/0x29f [ 433.953352] ? arch_local_irq_restore+0x52/0x52 [ 433.958042] ? kasan_check_read+0x11/0x20 2018/04/06 06:12:30 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@mcast2={0xff, 0x2, [], 0x1}, 0x59, r1}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x803ffdff, r1}) [ 433.962223] warn_alloc.cold.119+0xb2/0x1b8 [ 433.966570] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 433.971439] ? finish_task_switch+0x1ca/0x820 [ 433.975978] ? lock_repin_lock+0x410/0x410 [ 433.980254] __vmalloc_node_range+0x45e/0x720 [ 433.984789] ? graph_lock+0x170/0x170 [ 433.988623] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 433.993487] __vmalloc_node_flags_caller+0x50/0x60 [ 433.998446] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 434.003319] kvmalloc_node+0xde/0x100 [ 434.007165] kvm_arch_create_memslot+0xa3/0x4e0 [ 434.011886] __kvm_set_memory_region+0x1d1b/0x2e50 [ 434.016866] ? kvm_vcpu_block+0x1050/0x1050 [ 434.021228] ? zap_class+0x720/0x720 [ 434.024964] ? check_same_owner+0x320/0x320 [ 434.029318] ? rcu_note_context_switch+0x710/0x710 [ 434.034272] ? lock_acquire+0x1dc/0x520 [ 434.038274] ? graph_lock+0x170/0x170 [ 434.042096] ? __might_sleep+0x95/0x190 [ 434.046102] ? refill_pi_state_cache.part.7+0x300/0x300 [ 434.051508] ? find_held_lock+0x36/0x1c0 [ 434.055611] ? lock_downgrade+0x8e0/0x8e0 [ 434.059843] kvm_set_memory_region+0x2e/0x50 [ 434.064286] kvm_vm_ioctl+0x668/0x1d90 [ 434.068197] ? perf_tp_event+0xc30/0xc30 [ 434.072290] ? kvm_set_memory_region+0x50/0x50 [ 434.076895] ? memset+0x31/0x40 [ 434.080204] ? perf_trace_lock+0x495/0x900 [ 434.084473] ? zap_class+0x720/0x720 [ 434.088206] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 434.093424] ? native_flush_tlb_others+0x690/0x690 [ 434.098374] ? graph_lock+0x170/0x170 [ 434.102188] ? check_same_owner+0x320/0x320 [ 434.106544] ? exit_robust_list+0x290/0x290 [ 434.110893] ? find_held_lock+0x36/0x1c0 [ 434.114993] ? lock_downgrade+0x8e0/0x8e0 [ 434.119175] ? rcu_is_watching+0x85/0x140 [ 434.123349] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 434.128567] ? __fget+0x40c/0x650 [ 434.132041] ? expand_files.part.8+0x9a0/0x9a0 [ 434.136619] ? lock_downgrade+0x8e0/0x8e0 [ 434.140770] ? __split_vma+0x5ac/0x7f0 [ 434.144665] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.150198] ? vma_set_page_prot+0x183/0x260 [ 434.154609] ? kvm_set_memory_region+0x50/0x50 [ 434.159187] do_vfs_ioctl+0x1cf/0x1650 [ 434.163079] ? ioctl_preallocate+0x2e0/0x2e0 [ 434.167484] ? fget_raw+0x20/0x20 [ 434.170945] ? SyS_futex+0x3a4/0x56d [ 434.174660] ? do_futex+0x27d0/0x27d0 [ 434.178459] ? security_file_ioctl+0x9b/0xd0 [ 434.182868] ksys_ioctl+0xa9/0xd0 [ 434.186323] SyS_ioctl+0x24/0x30 [ 434.189682] ? ksys_ioctl+0xd0/0xd0 [ 434.193305] do_syscall_64+0x29e/0x9d0 [ 434.197186] ? vmalloc_sync_all+0x30/0x30 [ 434.201333] ? _raw_spin_unlock_irq+0x27/0x70 [ 434.205824] ? finish_task_switch+0x1ca/0x820 [ 434.210316] ? syscall_return_slowpath+0x5c0/0x5c0 [ 434.215246] ? syscall_return_slowpath+0x30f/0x5c0 [ 434.220184] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 434.225550] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.230399] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 434.235582] RIP: 0033:0x4552d9 [ 434.238763] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.246470] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 434.253733] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 434.260997] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 434.268264] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 434.275524] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 434.283058] warn_alloc_show_mem: 1 callbacks suppressed [ 434.283063] Mem-Info: [ 434.290958] active_anon:131816 inactive_anon:81 isolated_anon:0 [ 434.290958] active_file:22850 inactive_file:11691 isolated_file:0 [ 434.290958] unevictable:0 dirty:345 writeback:0 unstable:0 [ 434.290958] slab_reclaimable:12429 slab_unreclaimable:101709 [ 434.290958] mapped:73963 shmem:86 pagetables:1025 bounce:0 [ 434.290958] free:1252066 free_pcp:509 free_cma:0 [ 434.324852] Node 0 active_anon:525108kB inactive_anon:324kB active_file:91400kB inactive_file:46764kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295752kB dirty:1380kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 380928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 434.353124] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 434.379349] lowmem_reserve[]: 0 2833 6338 6338 [ 434.384045] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:224kB free_cma:0kB [ 434.411785] lowmem_reserve[]: 0 0 3505 3505 [ 434.416187] Node 0 Normal free:2092212kB min:37284kB low:46604kB high:55924kB active_anon:525108kB inactive_anon:324kB active_file:91400kB inactive_file:46764kB unevictable:0kB writepending:1380kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5408kB pagetables:3952kB bounce:0kB free_pcp:1284kB local_pcp:592kB free_cma:0kB [ 434.446185] lowmem_reserve[]: 0 0 0 0 [ 434.450088] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 434.463819] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 434.480353] Node 0 Normal: 282*4kB (UME) 1256*8kB (UME) 1138*16kB (UME) 826*32kB (UME) 495*64kB (UME) 166*128kB (UME) 42*256kB (UME) 17*512kB (UM) 2*1024kB (UM) 6*2048kB (UME) 476*4096kB (UM) = 2092232kB [ 434.498768] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 434.507378] 34625 total pagecache pages [ 434.511395] 0 pages in swap cache [ 434.514874] Swap cache stats: add 0, delete 0, find 0/0 [ 434.520263] Free swap = 0kB [ 434.523307] Total swap = 0kB [ 434.526373] 1965969 pages RAM [ 434.529512] 0 pages HighMem/MovableOnly [ 434.533513] 338524 pages reserved [ 434.562596] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 434.574551] syz-executor6 cpuset=syz6 mems_allowed=0 [ 434.579719] CPU: 1 PID: 26231 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 434.586559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.595895] Call Trace: [ 434.598469] dump_stack+0x1b9/0x29f [ 434.602083] ? arch_local_irq_restore+0x52/0x52 [ 434.606736] ? kasan_check_read+0x11/0x20 [ 434.610881] warn_alloc.cold.119+0xb2/0x1b8 [ 434.615189] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 434.620028] ? trace_hardirqs_on+0xd/0x10 [ 434.624162] ? _raw_spin_unlock_irq+0x27/0x70 [ 434.628641] ? finish_task_switch+0x1ca/0x820 [ 434.633125] ? lock_repin_lock+0x410/0x410 [ 434.637344] __vmalloc_node_range+0x45e/0x720 [ 434.641825] ? graph_lock+0x170/0x170 [ 434.645611] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 434.650439] __vmalloc_node_flags_caller+0x50/0x60 [ 434.655354] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 434.660179] kvmalloc_node+0xde/0x100 [ 434.663965] kvm_arch_create_memslot+0xa3/0x4e0 [ 434.668627] __kvm_set_memory_region+0x1d1b/0x2e50 [ 434.673549] ? kvm_vcpu_block+0x1050/0x1050 [ 434.677856] ? zap_class+0x720/0x720 [ 434.681552] ? check_same_owner+0x320/0x320 [ 434.685857] ? rcu_note_context_switch+0x710/0x710 [ 434.690765] ? lock_acquire+0x1dc/0x520 [ 434.694723] ? graph_lock+0x170/0x170 [ 434.698504] ? __might_sleep+0x95/0x190 [ 434.702463] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.707990] ? futex_wait_queue_me+0x559/0x820 [ 434.712557] ? refill_pi_state_cache.part.7+0x300/0x300 [ 434.717904] ? find_held_lock+0x36/0x1c0 [ 434.721951] ? lock_downgrade+0x8e0/0x8e0 [ 434.726100] kvm_set_memory_region+0x2e/0x50 [ 434.730493] kvm_vm_ioctl+0x668/0x1d90 [ 434.734363] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 434.739448] ? futex_wake+0x2f6/0x750 [ 434.743232] ? _raw_spin_unlock_irq+0x27/0x70 [ 434.747710] ? kvm_set_memory_region+0x50/0x50 [ 434.752275] ? get_futex_key+0x1e90/0x1e90 [ 434.756492] ? rwsem_spin_on_owner+0x7b0/0x7b0 [ 434.761059] ? perf_trace_lock+0xd6/0x900 [ 434.765192] ? zap_class+0x720/0x720 [ 434.768886] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 434.774056] ? do_futex+0x249/0x27d0 [ 434.777756] ? kasan_check_read+0x11/0x20 [ 434.781895] ? graph_lock+0x170/0x170 [ 434.785674] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 434.790241] ? exit_robust_list+0x290/0x290 [ 434.794546] ? find_held_lock+0x36/0x1c0 [ 434.798592] ? lock_downgrade+0x8e0/0x8e0 [ 434.802722] ? rcu_is_watching+0x85/0x140 [ 434.806849] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 434.812036] ? __fget+0x40c/0x650 [ 434.815473] ? expand_files.part.8+0x9a0/0x9a0 [ 434.820038] ? lock_downgrade+0x8e0/0x8e0 [ 434.824168] ? lock_release+0xa10/0xa10 [ 434.828131] ? kvm_set_memory_region+0x50/0x50 [ 434.832697] do_vfs_ioctl+0x1cf/0x1650 [ 434.836567] ? call_rwsem_down_write_failed_killable+0x17/0x30 [ 434.842524] ? ioctl_preallocate+0x2e0/0x2e0 [ 434.846915] ? fget_raw+0x20/0x20 [ 434.850353] ? security_file_mprotect+0x9b/0xd0 [ 434.855008] ? SyS_futex+0x3a4/0x56d [ 434.858712] ? do_futex+0x27d0/0x27d0 [ 434.862494] ? security_file_ioctl+0x9b/0xd0 [ 434.866885] ksys_ioctl+0xa9/0xd0 [ 434.870321] SyS_ioctl+0x24/0x30 [ 434.873666] ? ksys_ioctl+0xd0/0xd0 [ 434.877275] do_syscall_64+0x29e/0x9d0 [ 434.881145] ? vmalloc_sync_all+0x30/0x30 [ 434.885274] ? _raw_spin_unlock_irq+0x27/0x70 [ 434.889749] ? finish_task_switch+0x1ca/0x820 [ 434.894226] ? syscall_return_slowpath+0x5c0/0x5c0 [ 434.899139] ? syscall_return_slowpath+0x30f/0x5c0 [ 434.904053] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 434.909401] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.914230] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 434.919399] RIP: 0033:0x4552d9 [ 434.922568] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.930257] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 434.937507] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 434.944754] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 434.952003] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff 2018/04/06 06:12:31 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@local, @in6=@mcast2}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) bind(r0, &(0x7f0000000280)=@nfc={0x27, 0x1, 0x1800000000, 0x7}, 0x80) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:31 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x1000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:31 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0xd00]}) 2018/04/06 06:12:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x15, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:31 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'ip6tnl0\x00', {0x2, 0x4e24}}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r1, 0x1, 0x6, @random="4652117a32ac"}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gre0\x00', r1}) r2 = socket$netlink(0x10, 0x3, 0x1004000000004) writev(r2, &(0x7f0000096000)=[{&(0x7f00000002c0)="580000001400192340a14b80fd0d8c560a0600000000e076000543d8d8fe5800000024ca7f4f643e8900050028635a000510f5100002000000000000001c04ed5dfffff500002f000d0001000404080000cd22dd33a52aa2", 0x58}], 0x1) bind(r0, &(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) 2018/04/06 06:12:31 executing program 1 (fault-call:2 fault-nth:0): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:12:31 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x1000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:31 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000e80)={&(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x4, 0x4}) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x100000000080000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000d80)=ANY=[@ANYRES32=0x0, @ANYBLOB="98000000651b13f8f9495d9bf41248204dc8af503b3ba8679dd6092f74ffff3a8e207c2976d065c5d701235d0100010000000000d8a71752f0f641d03c0b07c1a9b2c4ae6d13d67ec55af995fb10c0e89c679764cddb2f21c9718b94703e87bf"], &(0x7f0000000200)=0x2) socketpair(0xa, 0x2000003, 0xffffffffffff793e, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000003c0)=@int=0x80000000, 0x4) ioperm(0xffff, 0x80000001, 0x8) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000d40)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000680)={r5, &(0x7f0000000a80)=""/97}) r6 = accept(0xffffffffffffffff, &(0x7f0000000440)=@alg, &(0x7f0000000b80)=0xfffffea8) sendto$ipx(r6, &(0x7f0000000bc0)="662df4a093cdd7b35ff6ae42bc7d13930c1fea26aee3a47d99eb39c72fb76601dc87206d4eb86e00240f2194fa63c4e57a634a03fbc5a09ef3dcfb35ce84046ec80043aad86ba46f2e3bf4f8838948f37ed11512a1b49e", 0x57, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000340)="f6fa4b79ba6f6c4c5323e2af43013ecee5c86b06eeb23ef53a19c375a5f79c47658a554390c336a7455599d8f112c413f52eec22356dd4871dd874ff3eeb849bf7f48b056e1ccdd135800a9abba99cc4db4e02cfaac519c0bc3587121524814260ae93745387f031b19f", 0x6a) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x6, 0x2ab, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a80], 0x0, &(0x7f0000000300), &(0x7f0000001080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000190000000800000089146970365f7674693000000000000000006272696467653000000000000000000079616d30e9ff0000000000000000000069705f76746930000000000000000000aaaaaaaaaaaaffffff00ff00aaaaaaaaaabbffff00ffff0000007000000070000000a80000006d90c18fb05211259b00000000000000000000000000000000000000000000001000000000000000d0ffffff00000000feffffff00000000110000001c000000020173797a6b616c6c65723100000000000000000000000000000000000000000000626f6e64300000000000000000000000677265300000000000000000000000005f8e8e51489f0000000000005dbd189918d0ffff00ffff0000007000000070000000a8000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff010000000500000010000000886c6966623000000000000000000000000064756dd8c30059121683aa007ac1cc419c6d79300000000000000000000073797a5f74756e00000000000000100069726c616e3000000000000000000000aaaaaaaaaa17ffffffffffff77d27bbe39eaff00ffff00ff00007000000070000000a0000000434c4153534946590000000000000000000000000000000000000000000000000800000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000ffffffff010000001900000014000000ed5e6270713000000000000000000000000073797a"]}, 0x323) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000000b000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f000063de2c)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000000000000000ffff00000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001200726663343130362867636d28616573292905000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000060000000"], 0x13c}, 0x1}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$key(0xf, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000100)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4e20, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}, 0x0, 0x6c}, 0x0, @in=@multicast1=0xe0000001, 0x0, 0x3}}, 0xe8) sendmsg$key(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) getpeername$inet6(r4, &(0x7f0000000040), &(0x7f0000000080)=0x1c) r9 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000400)="fc0395c74790b8e1aa9fa6182ab4639e20aa152920bbf7d6bea96168b0308e8ef8", 0x21, 0xfffffffffffffffd) keyctl$revoke(0x3, r9) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x2b) syz_emit_ethernet(0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000119078ac2314aaac14142b4e204e20000890780000000000000000000000970ea6f5ee54c595247b67f1f29f5036727cbd1b4c93ea961aa7f9d2c1fcbb822746548932727c2708a89399bc5105b714277970036a3ff95f7df69e1c823dca133782c22601bb9939674f56ce4db6dce3c79a4465a60205ec054c34609034427530dc40f2cdfdd083f236ba6ebfd04b777ba72feaa2715e783f561bcf4bff4cd81e2a99d834d0747983f16c43f4fe9a96da84ac17f4f8db14b59b2b871fef55702df30966092bcfa651de8bd7fa6029af17b3b5406beed9d90d91b85db0256b87a7afbbb9cc"], &(0x7f00000000c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x8bc]}) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000ec0)={{{@in=@local, @in6=@local}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f00000004c0)=0x19) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001840)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@ipv4={[], [], @multicast1}}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000c40)=0xfffffffffffffdb3) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f00000006c0)="c5d3082e99819f3816efd1e9205adcf5810fe53baa9be3b9658e190724ad8e0e987431b5206f8bc9548b3c4903f6fda0b86bb6d10bcdca853545b94745197c1a41d4fe428cc06875a9574a8427d7aeef2cf0f95154dfe7fdad", 0x59) [ 434.959261] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 434.994722] FAULT_INJECTION: forcing a failure. [ 434.994722] name failslab, interval 1, probability 0, space 0, times 0 [ 435.006579] CPU: 1 PID: 26271 Comm: syz-executor1 Not tainted 4.16.0+ #2 [ 435.013443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.022810] Call Trace: [ 435.025415] dump_stack+0x1b9/0x29f [ 435.029057] ? arch_local_irq_restore+0x52/0x52 [ 435.033737] ? __fdget_pos+0x1a9/0x1e0 [ 435.037649] should_fail.cold.4+0xa/0x1a [ 435.041720] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 435.046839] ? graph_lock+0x170/0x170 [ 435.050652] ? debug_check_no_locks_freed+0x310/0x310 [ 435.055854] ? find_held_lock+0x36/0x1c0 [ 435.059931] ? __lock_is_held+0xb5/0x140 [ 435.064001] ? check_same_owner+0x320/0x320 [ 435.068317] ? rcu_note_context_switch+0x710/0x710 [ 435.073238] ? __fget+0x40c/0x650 [ 435.076684] should_failslab+0x124/0x180 [ 435.080738] __kmalloc+0x2c8/0x760 [ 435.084269] ? graph_lock+0x170/0x170 [ 435.088057] ? kernfs_fop_write+0x33d/0x480 [ 435.092365] kernfs_fop_write+0x33d/0x480 [ 435.096498] __vfs_write+0x10b/0x880 [ 435.100195] ? kernfs_fop_open+0x1000/0x1000 [ 435.104624] ? kernel_read+0x120/0x120 [ 435.108503] ? __lock_is_held+0xb5/0x140 [ 435.112556] ? rcu_read_lock_sched_held+0x108/0x120 [ 435.117556] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.123079] ? __sb_start_write+0x17f/0x300 [ 435.127385] vfs_write+0x1f8/0x560 [ 435.130909] ksys_write+0xf9/0x250 [ 435.134437] ? SyS_read+0x30/0x30 [ 435.137874] ? mm_fault_error+0x380/0x380 [ 435.142012] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 435.146842] ? ksys_ioctl+0x81/0xd0 [ 435.150453] SyS_write+0x24/0x30 [ 435.153801] ? ksys_write+0x250/0x250 [ 435.157585] do_syscall_64+0x29e/0x9d0 [ 435.161456] ? vmalloc_sync_all+0x30/0x30 [ 435.165587] ? _raw_spin_unlock_irq+0x27/0x70 [ 435.170068] ? finish_task_switch+0x1ca/0x820 [ 435.174546] ? syscall_return_slowpath+0x5c0/0x5c0 [ 435.179459] ? syscall_return_slowpath+0x30f/0x5c0 [ 435.184374] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 435.189722] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.194554] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 435.199728] RIP: 0033:0x4552d9 [ 435.202898] RSP: 002b:00007f3bb8480c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 435.210590] RAX: ffffffffffffffda RBX: 00007f3bb84816d4 RCX: 00000000004552d9 [ 435.217843] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000014 [ 435.225095] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 435.232346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2018/04/06 06:12:31 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x8060000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:31 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x1c00]}) [ 435.239597] R13: 00000000000006b9 R14: 00000000006fd1f8 R15: 0000000000000000 2018/04/06 06:12:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0xd, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:31 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x15}, @empty, @empty, 0x0, 0x0, 0xffffffffffffed1c, 0x400, 0x0, 0x803ffdff, r1}) 2018/04/06 06:12:31 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@local, @in6=@mcast2}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:31 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0xf0ffff, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:31 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400600, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[0x2, 0xad0, 0xffffffffffff8000, 0x1, 0x6, 0x9, 0x7]}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) sched_setattr(r1, &(0x7f0000000140)={0x30, 0x3, 0x1, 0x1, 0x7, 0x146, 0x3, 0x100000001}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x80000000, 0x0) ioctl(r2, 0x1263, &(0x7f0000000040)) 2018/04/06 06:12:31 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x2]}) 2018/04/06 06:12:31 executing program 5: r0 = socket(0xa, 0x1, 0x0) fstatfs(r0, &(0x7f0000000340)=""/157) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0xffff, {{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) 2018/04/06 06:12:31 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x8864, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:31 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) [ 435.487779] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 435.499674] syz-executor6 cpuset=syz6 mems_allowed=0 [ 435.504907] CPU: 0 PID: 26282 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 435.511768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.521137] Call Trace: [ 435.523763] dump_stack+0x1b9/0x29f [ 435.527428] ? arch_local_irq_restore+0x52/0x52 [ 435.532138] ? kasan_check_read+0x11/0x20 [ 435.536322] warn_alloc.cold.119+0xb2/0x1b8 [ 435.540677] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 435.545558] ? finish_task_switch+0x1ca/0x820 [ 435.550107] ? lock_repin_lock+0x410/0x410 [ 435.554390] __vmalloc_node_range+0x45e/0x720 [ 435.558927] ? graph_lock+0x170/0x170 [ 435.562760] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 435.567627] __vmalloc_node_flags_caller+0x50/0x60 [ 435.572585] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 435.577462] kvmalloc_node+0xde/0x100 [ 435.581298] kvm_arch_create_memslot+0xa3/0x4e0 [ 435.586012] __kvm_set_memory_region+0x1d1b/0x2e50 [ 435.590992] ? kvm_vcpu_block+0x1050/0x1050 [ 435.595344] ? zap_class+0x720/0x720 [ 435.599074] ? check_same_owner+0x320/0x320 [ 435.603431] ? rcu_note_context_switch+0x710/0x710 [ 435.608380] ? lock_acquire+0x1dc/0x520 [ 435.612385] ? graph_lock+0x170/0x170 [ 435.616206] ? __might_sleep+0x95/0x190 [ 435.620220] ? refill_pi_state_cache.part.7+0x300/0x300 [ 435.625622] ? find_held_lock+0x36/0x1c0 [ 435.629730] ? lock_downgrade+0x8e0/0x8e0 [ 435.633961] kvm_set_memory_region+0x2e/0x50 [ 435.638399] kvm_vm_ioctl+0x668/0x1d90 [ 435.642310] ? perf_tp_event+0xc30/0xc30 [ 435.646406] ? kvm_set_memory_region+0x50/0x50 [ 435.651011] ? memset+0x31/0x40 [ 435.654325] ? perf_trace_lock+0x495/0x900 [ 435.658595] ? zap_class+0x720/0x720 [ 435.662327] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 435.667551] ? native_flush_tlb_others+0x690/0x690 [ 435.672507] ? graph_lock+0x170/0x170 [ 435.676318] ? check_same_owner+0x320/0x320 [ 435.680639] ? exit_robust_list+0x290/0x290 [ 435.684952] ? find_held_lock+0x36/0x1c0 [ 435.689019] ? lock_downgrade+0x8e0/0x8e0 [ 435.693184] ? rcu_is_watching+0x85/0x140 [ 435.697323] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 435.702509] ? __fget+0x40c/0x650 [ 435.705956] ? expand_files.part.8+0x9a0/0x9a0 [ 435.710521] ? lock_downgrade+0x8e0/0x8e0 [ 435.714659] ? __split_vma+0x5ac/0x7f0 [ 435.718539] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.724062] ? vma_set_page_prot+0x183/0x260 [ 435.728463] ? kvm_set_memory_region+0x50/0x50 [ 435.733048] do_vfs_ioctl+0x1cf/0x1650 [ 435.736933] ? ioctl_preallocate+0x2e0/0x2e0 [ 435.741332] ? fget_raw+0x20/0x20 [ 435.744787] ? SyS_futex+0x3a4/0x56d [ 435.748496] ? do_futex+0x27d0/0x27d0 [ 435.752288] ? security_file_ioctl+0x9b/0xd0 [ 435.756687] ksys_ioctl+0xa9/0xd0 [ 435.760131] SyS_ioctl+0x24/0x30 [ 435.763483] ? ksys_ioctl+0xd0/0xd0 [ 435.767120] do_syscall_64+0x29e/0x9d0 [ 435.771005] ? vmalloc_sync_all+0x30/0x30 [ 435.775156] ? _raw_spin_unlock_irq+0x27/0x70 [ 435.779638] ? finish_task_switch+0x1ca/0x820 [ 435.784122] ? syscall_return_slowpath+0x5c0/0x5c0 [ 435.789056] ? syscall_return_slowpath+0x30f/0x5c0 [ 435.793983] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 435.799339] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.804179] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 435.809356] RIP: 0033:0x4552d9 [ 435.812532] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 435.820231] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 435.827487] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 435.834757] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 435.842025] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 435.849289] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 435.856864] warn_alloc_show_mem: 1 callbacks suppressed [ 435.856873] Mem-Info: [ 435.864732] active_anon:131298 inactive_anon:79 isolated_anon:0 [ 435.864732] active_file:22850 inactive_file:11703 isolated_file:0 [ 435.864732] unevictable:0 dirty:358 writeback:0 unstable:0 [ 435.864732] slab_reclaimable:12420 slab_unreclaimable:101831 [ 435.864732] mapped:73950 shmem:86 pagetables:1003 bounce:0 [ 435.864732] free:1252552 free_pcp:538 free_cma:0 [ 435.898641] Node 0 active_anon:525192kB inactive_anon:316kB active_file:91400kB inactive_file:46812kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295800kB dirty:1432kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 382976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 435.926890] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 435.953099] lowmem_reserve[]: 0 2833 6338 6338 [ 435.957758] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:224kB free_cma:0kB [ 435.985570] lowmem_reserve[]: 0 0 3505 3505 [ 435.990009] Node 0 Normal free:2091156kB min:37284kB low:46604kB high:55924kB active_anon:525192kB inactive_anon:316kB active_file:91400kB inactive_file:46812kB unevictable:0kB writepending:1432kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5440kB pagetables:4012kB bounce:0kB free_pcp:1204kB local_pcp:548kB free_cma:0kB [ 436.015378] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 436.020153] lowmem_reserve[]: [ 436.031866] syz-executor6 cpuset= [ 436.031881] 0 [ 436.035000] syz6 [ 436.038464] 0 [ 436.040265] mems_allowed=0 [ 436.042239] 0 0 [ 436.042265] Node 0 [ 436.044083] CPU: 1 PID: 26330 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 436.044095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.047028] DMA: [ 436.048961] Call Trace: [ 436.048986] dump_stack+0x1b9/0x29f [ 436.049007] ? arch_local_irq_restore+0x52/0x52 [ 436.051243] 1*4kB [ 436.058043] ? kasan_check_read+0x11/0x20 [ 436.058069] warn_alloc.cold.119+0xb2/0x1b8 [ 436.067422] (U) [ 436.069458] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 436.069472] ? trace_hardirqs_on+0xd/0x10 [ 436.069492] ? _raw_spin_unlock_irq+0x27/0x70 [ 436.072072] 0*8kB [ 436.075656] ? finish_task_switch+0x1ca/0x820 [ 436.075679] ? lock_repin_lock+0x410/0x410 [ 436.075702] __vmalloc_node_range+0x45e/0x720 [ 436.080359] 0*16kB [ 436.082475] ? graph_lock+0x170/0x170 [ 436.082493] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 436.082511] __vmalloc_node_flags_caller+0x50/0x60 [ 436.086651] 1*32kB [ 436.090939] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 436.090956] kvmalloc_node+0xde/0x100 [ 436.090976] kvm_arch_create_memslot+0xa3/0x4e0 [ 436.092946] (U) [ 436.097763] __kvm_set_memory_region+0x1d1b/0x2e50 [ 436.097792] ? kvm_vcpu_block+0x1050/0x1050 [ 436.101926] 2*64kB [ 436.106386] ? print_usage_bug+0xc0/0xc0 [ 436.106404] ? zap_class+0x720/0x720 [ 436.106421] ? check_same_owner+0x320/0x320 [ 436.108564] (U) [ 436.113025] ? rcu_note_context_switch+0x710/0x710 [ 436.113037] ? lock_acquire+0x1dc/0x520 [ 436.113056] ? graph_lock+0x170/0x170 [ 436.117285] 1*128kB [ 436.121739] ? __might_sleep+0x95/0x190 [ 436.121759] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.121775] ? futex_wait_queue_me+0x559/0x820 [ 436.124028] (U) [ 436.127768] ? __lock_acquire+0x7f5/0x5130 [ 436.127784] ? refill_pi_state_cache.part.7+0x300/0x300 [ 436.127806] ? find_held_lock+0x36/0x1c0 [ 436.132642] 1*256kB [ 436.137541] ? lock_downgrade+0x8e0/0x8e0 [ 436.137587] kvm_set_memory_region+0x2e/0x50 [ 436.139795] (U) [ 436.144603] kvm_vm_ioctl+0x668/0x1d90 [ 436.144620] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.144638] ? __perf_event_task_sched_in+0x247/0xb80 [ 436.148430] 0*512kB [ 436.153065] ? kvm_set_memory_region+0x50/0x50 [ 436.153086] ? find_held_lock+0x36/0x1c0 [ 436.153105] ? perf_trace_lock+0xd6/0x900 [ 436.155080] 1*1024kB [ 436.159973] ? zap_class+0x720/0x720 [ 436.159985] ? finish_task_switch+0x182/0x820 [ 436.160003] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 436.164320] (U) [ 436.166520] ? do_futex+0x249/0x27d0 [ 436.166534] ? kasan_check_read+0x11/0x20 [ 436.166552] ? graph_lock+0x170/0x170 [ 436.170608] 1*2048kB [ 436.174280] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 436.174297] ? compat_start_thread+0x80/0x80 [ 436.174317] ? _raw_spin_unlock_irq+0x27/0x70 [ 436.178628] (M) [ 436.180576] ? exit_robust_list+0x290/0x290 [ 436.180599] ? find_held_lock+0x36/0x1c0 [ 436.185522] 3*4096kB [ 436.189465] ? lock_downgrade+0x8e0/0x8e0 [ 436.189487] ? rcu_is_watching+0x85/0x140 [ 436.193279] (M) [ 436.195573] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 436.195600] ? __fget+0x40c/0x650 [ 436.199566] = 15908kB [ 436.205070] ? expand_files.part.8+0x9a0/0x9a0 [ 436.205084] ? inet6_net_init+0x870/0x870 [ 436.205103] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 436.209675] Node 0 [ 436.211620] ? kvm_set_memory_region+0x50/0x50 [ 436.211634] do_vfs_ioctl+0x1cf/0x1650 [ 436.211654] ? ioctl_preallocate+0x2e0/0x2e0 [ 436.215878] DMA32: [ 436.221205] ? fget_raw+0x20/0x20 [ 436.221220] ? find_held_lock+0x36/0x1c0 [ 436.221241] ? SyS_futex+0x3a4/0x56d [ 436.225297] 4*4kB [ 436.227582] ? exit_to_usermode_loop+0x87/0x310 [ 436.227599] ? do_futex+0x27d0/0x27d0 [ 436.227617] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.231754] (UM) [ 436.236129] ? security_file_ioctl+0x9b/0xd0 [ 436.236146] ksys_ioctl+0xa9/0xd0 [ 436.236164] SyS_ioctl+0x24/0x30 [ 436.238134] 5*8kB [ 436.241980] ? ksys_ioctl+0xd0/0xd0 [ 436.241995] do_syscall_64+0x29e/0x9d0 [ 436.242017] ? _raw_spin_unlock_irq+0x27/0x70 [ 436.247546] (UM) [ 436.252696] ? finish_task_switch+0x1ca/0x820 [ 436.252713] ? syscall_return_slowpath+0x5c0/0x5c0 [ 436.252731] ? syscall_return_slowpath+0x30f/0x5c0 [ 436.255048] 1*16kB [ 436.259596] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 436.259622] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 436.263672] (M) [ 436.267791] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 436.267802] RIP: 0033:0x4552d9 [ 436.267814] RSP: 002b:00007f735421dc68 EFLAGS: 00000246 [ 436.270225] 5*32kB [ 436.273888] ORIG_RAX: 0000000000000010 [ 436.273898] RAX: ffffffffffffffda RBX: 00007f735421e6d4 RCX: 00000000004552d9 [ 436.273908] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 436.273916] RBP: 000000000072c010 R08: 0000000000000000 R09: 0000000000000000 [ 436.273928] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 436.278416] (UM) [ 436.283569] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000002 [ 436.523345] 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB 2018/04/06 06:12:32 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:32 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x88480000]}) 2018/04/06 06:12:32 executing program 7: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000834000)={0x10000007fffffff}, &(0x7f00000c1000), 0x8) memfd_create(&(0x7f0000000180)='eth0/proc\x00', 0x2) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0xfffffffeffffffff, 0x20, 0x5, 0x1f]}) writev(r3, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) tee(r2, r1, 0x5, 0x0) getsockname(r1, &(0x7f0000000000)=@hci={0x0, 0x0}, &(0x7f0000000080)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', r4}) 2018/04/06 06:12:32 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) sendto$inet6(r0, &(0x7f0000000100)="bcd6cce2e9d4f51f28ac414d880504506367b516550b3db8224e927e694e0997210fc5f3ffc16dab565c1dcd917326ce9eaaf1055fa68c0dfde43ac524fb9bc25b4ead63d18afdaca561155aeba39db8068e40dc9a1564a2b7f0ae9376d66c7997085d6f6143a2fe31b8d4aeb6072310752c636cd8ae0667dc51e2fe48c1ab80e49e1ff2", 0x84, 0x4004801, &(0x7f0000000000)={0xa, 0x4e23, 0xc9d, @loopback={0x0, 0x1}, 0x8000}, 0x1c) 2018/04/06 06:12:32 executing program 1 (fault-call:2 fault-nth:1): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:12:32 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x40000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:32 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x6700, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:32 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) [ 436.534069] Node 0 Normal: 251*4kB (UME) 1298*8kB (UME) 1109*16kB (UME) 830*32kB (UME) 495*64kB (UME) 166*128kB (UME) 42*256kB (UME) 17*512kB (UM) 2*1024kB (UM) 6*2048kB (UME) 476*4096kB (UM) = 2092108kB [ 436.552563] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 436.561174] 34638 total pagecache pages [ 436.565185] 0 pages in swap cache [ 436.568672] Swap cache stats: add 0, delete 0, find 0/0 [ 436.574089] Free swap = 0kB [ 436.577138] Total swap = 0kB [ 436.580186] 1965969 pages RAM [ 436.583319] 0 pages HighMem/MovableOnly [ 436.587318] 338524 pages reserved 2018/04/06 06:12:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000140)={{0x12, 0x4, 0xffffffffffffffc1, 0x5e87, 0x401, 0x3ff}, 0x947}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) getpeername$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e) r2 = msgget$private(0x0, 0x10) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000180)=""/137) 2018/04/06 06:12:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:33 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x806]}) 2018/04/06 06:12:33 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x4888, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:33 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:12:33 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dec000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00007a7ff8)={0x0}) recvfrom$unix(0xffffffffffffffff, &(0x7f0000ad7000)=""/4096, 0x1000, 0x0, &(0x7f0000b07000)=@file={0x1, './file0\x00'}, 0xa) sendto$inet(r0, &(0x7f0000de1fff), 0x0, 0x20008045, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sync() mprotect(&(0x7f000018a000/0x4000)=nil, 0x4000, 0xc) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000451ff8)={@multicast1=0xe0000001}, 0x8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d3a000), 0x4) r1 = dup2(r0, r0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000250ffc)) recvfrom$inet6(r1, &(0x7f0000831000)=""/25, 0x19, 0x100, &(0x7f0000f16fe4)={0xa, 0x4e20, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000700)=ANY=[@ANYRES32=0x0], &(0x7f0000000040)=0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080), 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}}}, {{}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000400)=0xe8) getgroups(0x0, &(0x7f0000000440)) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x9c4, 0x4) ioprio_get$pid(0x1, r2) getpgid(0x0) syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000000)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6, @in=@broadcast}}, {{@in6=@remote}}}, &(0x7f0000000580)=0xe8) getresgid(&(0x7f00000001c0), &(0x7f0000000600), &(0x7f0000000180)) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000240), 0x0, &(0x7f0000000680)}, 0x0) sendto$inet(r1, &(0x7f000058b000)="42f66ab0adc51b06995aaeae70867b67b8e0e8d76aabec4d5c45d6d47c15024980b5b8457b1a470736e0e9f7f4f6cf409d167bce765297a07b921fd1da214cc0013590dbfb9def0c2eb480b312c6127f602238249e477f38909b13255adca75bd45be3d67e5c7ada6a3afb6e31a9ba7e370f8e37b0a929e2eacf77f2ec8d06383213490959d649e8d86941c3af6cb2fd29af0f1528ae2877f7a0653f897055405083b9ddb1988edb0a9b69fc8c82d3aa9d2cd1f118d9a9a239d7868d26531fca74eff13b6b5ef7532ad084630cc2e7a0558e0f1b1f22d3ffdea5aadc5ac315000e64f658feee36e361a7d2e50a3cb01aa3c4dfd3b1b698709863309b6c5d2681ea11ad1d37da68758085a0fe887da62b929401acfc485816acd267d34e40b51282b4aa4254ad26e550e2b0526230d83226e96d143380e29479cff88fa9f1d18a9df183e351c2152c76008402b213bc6b8e3887f337daacaa3abf5f6f465d62dde13f33ba4a31fd205885bf4095d7bad9b47295cb43e8b4a62bc06e14511cea662de5b7cd4f690dc25a4404e735cc0db95a863b93bd0bd894c6b59119066c8c5e573f3586c62fc65718f931fac62a7d7d0af25ac4d3aad18da9309d32866e6e8871befdf89d5dd9f966bfb3d4d10faf4855adb3e1a1b5aced4e1708219b0d9a928281a87204f0ca0df569ec20b7d589fc1b965339768c8154e41d51e568eb999db99fbed17f485fd8289250075557e09339f0c1544565fc1570378e753bec6f25477f5f8b0855031bfea13ba7ed33f93fc3f81d7f3ca6c3170fb43aa33e6f27098f852810829ae2654d9bd7a1cd6fa57c3602b093bc610c0e571911236c866dfe61f8e835b952e14605e86ed0f5c2c41bbeca179d65377e5a662f593b5597203a8e6db810e58af0eb8614b8630a205c877ca9b32d1fe70988557a16df09818d0eefeb613730ac1806484668a4e019ecec809064d3ce456757f32b1f8cd66e8551d8eec9d9214d853bc8a49ecedb40eca59800f6aea1c73fc3c8deb29f61d848e15c9eb70cb8ea9e845690dbb88e4e0bc4429196d1212d68c2ad5aa976900c16d980d47405d205678bef4d19dd673b9536ca8a91d7ab29eb98b0af20765a752154822b2c2cb33cb926e5f49a9a38228dc5b3579a7faedb54e1c0a97d966a023408a3b9501c6d738925bee19944e0ef89cace6e58d9c61b0a7ac87d3744fff3f1908ee31fe76d25d78d94f8179aa112b2009263a5e47d11698e196dbcbc10aad447cf680c6b4b8c1cce3c1781bc6c2eca4623fb81ec90c71f69bb7ea36254dcaaf978008c04f034137f89da7cc9f2c5ed1b4776de9812dd5753c6a7b5af0243f7ce2cb44aae04cc66c0ddb26bb46391473ac46eb90cc2d6f4b0fc36b9f0ebc5a6198a4fcd4617ae8a9a08cdc5e86c6f91a36897327418907e643ae8a9e2251aac620477185d00e88480bbdf5570a00e8a20ccdb9947afa39211bc8c80a04cd5c407f4c7822e34842251586383f18509be7602350ccee25f2a083dee1636a8d3b50f465cca9f6f79e8494badc9346cf4ff509ef7f3c6a8eec76d420fc60130798c426a8d3fd82226f3330d19858d9bdf862a814f38644d6a3a47c5236e53871137fa7ff2eead3a802d682f5515aaf00aea983fece849110fa32b8277bac02b933759cb4b0c0386732d6c05922070d1fa58e1fb29934965fc436a999bfde9505fc44e1430ac98ebf3245c3c3577ab72c65eb5984352b0e58326cdef36eec14c83cbd6a77c7e9e97b2c17ac4b499c410474d23c23d7dec2d2037df141eaccf6af97e818ecacf63213197c7aaa38c8afb11072df2694be6a3684077acda6b2cdf265f630e95b4ba9534df5ab65a5b5be1387b5c08eb7623f67448eb2f0b03e5cacdeb1a15ba42c4b881e4819819a6a485b398f7a1dd2eebcdd83b96a4f5235a4182cd7f2413fdc5cc107ab7bb5ced2e3dc6af56cdfb64ea020dbfa4e32e8fdf02bd340955ae7ceca107901f3c5fbea77614d6eb511a729c898e62ee11aceb80ad24128d518f0856bc9b34610d1cbc9bafb55d06c72425d31e90edf5ea3cd72064c28ae7c51b11016e3d8ad863b1369ffb026057b1b9152aa955813dcaf9f18856470d2d1ea5ae9d3c025163e471f25aef16caefd228680f65b61b7cf96817eea0bb41c6234f426d2140a0c1b991e79e945715c5f86c62e14078845e6e60528ecdf2df33e23d1750b30a281d2a188fcfbd276024d1c7a2769089e5dc916f4b4621885206acd5318dd2800e50b8f5f36f545c7053b2482f5a5537e51f6942fbccbf32159d6fb93b2ed45159f775f965c468cba39a5bbe5aac695e2236433bfd390402cda41e4f2a996f255f1708662015e9c034373f627c5f4ccc10ce0e5296667a2b241d481bb9e11571d8ae9bdbe15874ac74b1854556b14484087771d41eec143cf7c79307fd48f912c4fb0f6fc973ffeaed0c37fe805e6ba8844ffbd104bdb033fce04a9f674faad7bdb092dfa4e29240df4c1a07eec0ade02ed4da9f321eed276f963bde2cef829223210f1ad9e8e8f89c3defb798a86a64ab395cb77a37fd59a529f5a4054ed564d5c193e60bc5552ca8787634edfdd3d9d7185318d9db5389fd07a0506539295204aa912b335b8e6eab154429c25eae095f236f64c45d68d2ddff1e81ab508bedfe90c2f6cdf6ddc65f0806bba0de9714c905d2e12545eac82fb1300f78efe148b9d8919f96de72805fd58f9472200db7108f230b4beae3d5db49f1812735e0304da8e7b5f71c191323c5fb760787ba51087ca3bf3623db422c99c4820b22c2bf3bc4d35f035cb2c493c5c3f8f2ff55b8b7a7299f4fcc3034f442bab3ea2266fbc8c0aeb9787bd2871f4efabc3cf0dd0dc5ce5d7e5f5106a5cd31dc235dab5be1423cf0963be2d34b2e37bb61b24b8070880e5de73a3daa72e0625800b807e5f43c0eeb9256753a5eb056e20aceaea357a29fba856f610c635ac71d25d22a00253cbc8a4672c9f21d78cf30095fcbf045cefe12a819d417d035cf658796e39f4ecb19b4570359b47d97d66c8063ebc9104c6df015859ae9bdf941451e0b53e8bf31f31d61b1e36c4aec0079d2860979c7254b48dce6b867c5870babc02245a11c08c984167aa04654298d9121db7c6cc64fb7ebe381b64e2fb0937e36a5dbd813487e7509839eef7edc87571e2f7481e4f67fffd099085e8068b114ed916224b4d0bf0e49b5398d646b33a5371236ee76cad7134520f3a7f6a4686ab49e5261b5bb61aa3fd6d4fe7b57537633d4a2306458b4100e834f1ecb13c13fb8a9ab5e446c987e275a3a28977e1760d85f24af6a4338dfef5006a9373efaf64a5979866108357f5f6701a1ebb074ce0ce57f0a2ef9175cbc6460f161b4b4ae5cf9e15e1366de19ec9001cdb30d2486fd2f01484a8827d02f8f01b25aa78d7a71cf39509fd1e053fcdadac691357076331cdf2dc0d8850cf73d046c69528d50df0baf5b7d71b6777c38742613dbcb356e1fd04f013f782e4974e3722453470f3d71676a6a5612adb8d95f7cae37b74e1f153cf0a2181b5f9b4e6d671e2f0c97d00e11bd3bbc881e96af0b88be56f846870d9e1a3544f3ca5a34980f68ae5db4cc6cf3673b1fb18c0a613907cabba0de723b58a46a325f21e063b2162a141bd5815696616b282c13146a3513b190d6b931b8fe6415ec9537cef48a6f1dda39ca4afbc61f772af2f2586a238dc88638b7333a37874c2f65b3deb06ea76f1c8d982bb741614d6aeaae979e37ab1f996f1560a87952e621c4c5532a3b74ad1565253f0414f5855973ba27a5c95f63b08a9749207390f33e8c66c25ee63d20585295485d1c046a7c62cb7fc02f22e5398297afaafbf52a7c845e91504f445ce24052cc52bf1f1a1af4cf31a329610afabfc872283b77b6d847283253c31c76f07dd55a72fefc2196367d117ebab8541ea9df1dd987d8e2870465044f17d10fca01b868ccafbb22ffc90a45fa7aec38f5407e9049d8b9b7f20b940ec0b069b75e3ad7844e146bede8a768a47f5230f3b26c3a04f6d87a58eb28fdac1cc9b67c63a4c34a94ddb335d4fbdfec0781efdb507f70dd81e93ce94e3e38124b121a3230f0ed55869ced42addaa58ab3aee9fec293c06ccde7a5ba017bf831e6bd03bfe1d827be0c06bebe7f9feb1f8e53d3f3c4763e8563b47e38bd39630b2d4e019d5ea7d4f1c2a6d49828beebcdc4ffd2ee95265e7bc7684bfd81d81f30dfb291d699e7de9091090f5b089570ef931d035180693e81cd9a09a842eb245f3256830897743098ab79da48972c44020d1a5451e666b0f239a0bed5a6a22dba15ea240ae16f88eacd34044999fe819e79752aacdbff6fd8391bb0fa9b2d127f286d9f407f057df0f7b34310caa0c46e6d3d5ea16fac59ecc13eb684084843b612e6706000493c4815b41337e10abfacb8a5870c74a92cd1e9ae12f8299e55138416ea9d38054cdcd0e9255c9bdb48994c52ddd6d30f6228ad2a061fa1ceba083cc9d9fe1a981416032f53cee615906367fa6e93959a0adfbd701baa54b66de0aafe70ae2c8fc0394b822ca92baf91ce2fbb1787d515da0e2949f204fedc9d9c3c6b6fee7b2d5116bc29b6b5e8306fbd688bd12b45af47870ae4f0301fcee99a2b07ca19b7a6a84396c220621bfc12c92891ba34922fbe510b3b6c19d4fdeea2e94b3bada37cae0e0e3d0a3b377222eeea37d05d8c791f33e6c25f80cef88fd1edbed20dec2dcc", 0xd21, 0x4004, 0x0, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000240)) writev(r0, &(0x7f00009d7000)=[{&(0x7f0000e0ff13)='=', 0x1}], 0x1) [ 436.747266] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 436.759165] syz-executor6 cpuset=syz6 mems_allowed=0 [ 436.764417] CPU: 0 PID: 26334 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 436.771277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.780656] Call Trace: [ 436.783278] dump_stack+0x1b9/0x29f [ 436.786941] ? arch_local_irq_restore+0x52/0x52 [ 436.791654] warn_alloc.cold.119+0xb2/0x1b8 [ 436.796003] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 436.800881] ? perf_swevent_event+0x158/0x2e0 [ 436.805410] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 436.810985] ? print_usage_bug+0xc0/0xc0 [ 436.815095] __vmalloc_node_range+0x45e/0x720 [ 436.819625] ? graph_lock+0x170/0x170 [ 436.823456] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 436.828320] __vmalloc_node_flags_caller+0x50/0x60 [ 436.833274] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 436.838140] kvmalloc_node+0xde/0x100 [ 436.841966] kvm_arch_create_memslot+0xa3/0x4e0 [ 436.846677] __kvm_set_memory_region+0x1d1b/0x2e50 [ 436.851655] ? kvm_vcpu_block+0x1050/0x1050 [ 436.856004] ? zap_class+0x720/0x720 [ 436.859745] ? perf_trace_lock+0x495/0x900 [ 436.864015] ? graph_lock+0x170/0x170 [ 436.867838] ? zap_class+0x720/0x720 [ 436.871603] ? find_held_lock+0x36/0x1c0 [ 436.875710] ? lock_downgrade+0x8e0/0x8e0 [ 436.879938] kvm_set_memory_region+0x2e/0x50 [ 436.884371] kvm_vm_ioctl+0x668/0x1d90 [ 436.888281] ? perf_tp_event+0xc30/0xc30 [ 436.892369] ? __perf_event_task_sched_in+0x247/0xb80 [ 436.897585] ? kvm_set_memory_region+0x50/0x50 [ 436.902197] ? memset+0x31/0x40 [ 436.905515] ? perf_trace_lock+0x495/0x900 [ 436.909783] ? zap_class+0x720/0x720 [ 436.913513] ? finish_task_switch+0x182/0x820 [ 436.918035] ? kasan_check_read+0x11/0x20 [ 436.922208] ? graph_lock+0x170/0x170 [ 436.926024] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 436.930631] ? compat_start_thread+0x80/0x80 [ 436.935063] ? _raw_spin_unlock_irq+0x27/0x70 [ 436.939579] ? trace_hardirqs_on+0xd/0x10 [ 436.943752] ? _raw_spin_unlock_irq+0x27/0x70 [ 436.948269] ? find_held_lock+0x36/0x1c0 [ 436.952363] ? lock_downgrade+0x8e0/0x8e0 [ 436.956534] ? rcu_is_watching+0x85/0x140 [ 436.960701] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 436.965923] ? __fget+0x40c/0x650 [ 436.969411] ? expand_files.part.8+0x9a0/0x9a0 [ 436.974007] ? lock_downgrade+0x8e0/0x8e0 [ 436.978195] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.983762] ? kvm_set_memory_region+0x50/0x50 [ 436.988367] do_vfs_ioctl+0x1cf/0x1650 [ 436.992291] ? ioctl_preallocate+0x2e0/0x2e0 [ 436.996720] ? fget_raw+0x20/0x20 [ 437.000192] ? exit_to_usermode_loop+0x87/0x310 [ 437.004857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 437.010384] ? security_file_ioctl+0x9b/0xd0 [ 437.014783] ksys_ioctl+0xa9/0xd0 [ 437.018230] SyS_ioctl+0x24/0x30 [ 437.021582] ? ksys_ioctl+0xd0/0xd0 [ 437.025199] do_syscall_64+0x29e/0x9d0 [ 437.029074] ? vmalloc_sync_all+0x30/0x30 [ 437.033210] ? _raw_spin_unlock_irq+0x27/0x70 [ 437.037693] ? finish_task_switch+0x1ca/0x820 [ 437.042181] ? syscall_return_slowpath+0x5c0/0x5c0 [ 437.047100] ? syscall_return_slowpath+0x30f/0x5c0 [ 437.052043] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 437.057416] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 437.062256] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 437.067434] RIP: 0033:0x4552d9 [ 437.070609] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 437.078307] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 437.085577] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 437.092843] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 437.100104] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 437.107362] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 437.116974] warn_alloc_show_mem: 1 callbacks suppressed [ 437.116980] Mem-Info: [ 437.124925] active_anon:132840 inactive_anon:82 isolated_anon:0 [ 437.124925] active_file:22850 inactive_file:11718 isolated_file:0 [ 437.124925] unevictable:0 dirty:123 writeback:0 unstable:0 [ 437.124925] slab_reclaimable:12415 slab_unreclaimable:101688 [ 437.124925] mapped:73936 shmem:86 pagetables:1056 bounce:0 [ 437.124925] free:1251055 free_pcp:557 free_cma:0 [ 437.158777] Node 0 active_anon:531360kB inactive_anon:328kB active_file:91400kB inactive_file:46872kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295744kB dirty:492kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 376832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 437.187900] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 437.214766] lowmem_reserve[]: 0 2833 6338 6338 [ 437.219876] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:224kB free_cma:0kB [ 437.247733] lowmem_reserve[]: 0 0 3505 3505 [ 437.252132] Node 0 Normal free:2084548kB min:37284kB low:46604kB high:55924kB active_anon:531360kB inactive_anon:328kB active_file:91400kB inactive_file:46872kB unevictable:0kB writepending:12kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5440kB pagetables:4224kB bounce:0kB free_pcp:1404kB local_pcp:636kB free_cma:0kB [ 437.281955] lowmem_reserve[]: 0 0 0 0 [ 437.285882] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 437.299699] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 437.315590] Node 0 Normal: 129*4kB (UM) 1211*8kB (ME) 1100*16kB (UME) 828*32kB (UME) 496*64kB (UME) 166*128kB (UME) 42*256kB (UME) 17*512kB (UM) 2*1024kB (UM) 5*2048kB (UE) 475*4096kB (UM) = 2084636kB [ 437.333832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 437.342449] 34653 total pagecache pages [ 437.346460] 0 pages in swap cache [ 437.349973] Swap cache stats: add 0, delete 0, find 0/0 [ 437.355368] Free swap = 0kB [ 437.358427] Total swap = 0kB [ 437.361495] 1965969 pages RAM [ 437.364634] 0 pages HighMem/MovableOnly [ 437.368644] 338524 pages reserved [ 437.399177] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 437.411000] syz-executor6 cpuset=syz6 mems_allowed=0 [ 437.416285] CPU: 0 PID: 26376 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 437.423146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.432521] Call Trace: [ 437.435119] dump_stack+0x1b9/0x29f [ 437.438743] ? arch_local_irq_restore+0x52/0x52 [ 437.443412] ? kasan_check_read+0x11/0x20 [ 437.447558] warn_alloc.cold.119+0xb2/0x1b8 [ 437.451871] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 437.456712] ? finish_task_switch+0x1ca/0x820 [ 437.461216] ? lock_repin_lock+0x410/0x410 [ 437.465451] __vmalloc_node_range+0x45e/0x720 [ 437.469940] ? graph_lock+0x170/0x170 [ 437.473736] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 437.478568] __vmalloc_node_flags_caller+0x50/0x60 [ 437.483490] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 437.488326] kvmalloc_node+0xde/0x100 [ 437.492127] kvm_arch_create_memslot+0xa3/0x4e0 [ 437.496797] __kvm_set_memory_region+0x1d1b/0x2e50 [ 437.501740] ? kvm_vcpu_block+0x1050/0x1050 [ 437.506063] ? zap_class+0x720/0x720 [ 437.509764] ? check_same_owner+0x320/0x320 [ 437.514074] ? rcu_note_context_switch+0x710/0x710 [ 437.519007] ? lock_acquire+0x1dc/0x520 [ 437.522991] ? graph_lock+0x170/0x170 [ 437.526794] ? __might_sleep+0x95/0x190 [ 437.530769] ? refill_pi_state_cache.part.7+0x300/0x300 [ 437.536129] ? find_held_lock+0x36/0x1c0 [ 437.540191] ? lock_downgrade+0x8e0/0x8e0 [ 437.544357] kvm_set_memory_region+0x2e/0x50 [ 437.548755] kvm_vm_ioctl+0x668/0x1d90 [ 437.552630] ? perf_tp_event+0xc30/0xc30 [ 437.556677] ? kasan_check_write+0x14/0x20 [ 437.560903] ? kvm_set_memory_region+0x50/0x50 [ 437.565475] ? memset+0x31/0x40 [ 437.568746] ? perf_trace_lock+0x495/0x900 [ 437.572975] ? zap_class+0x720/0x720 [ 437.576678] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 437.581871] ? graph_lock+0x170/0x170 [ 437.585669] ? exit_robust_list+0x290/0x290 [ 437.589987] ? find_held_lock+0x36/0x1c0 [ 437.594068] ? lock_downgrade+0x8e0/0x8e0 [ 437.598200] ? lock_downgrade+0x8e0/0x8e0 [ 437.602339] ? rcu_is_watching+0x85/0x140 [ 437.606474] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 437.611663] ? __fget+0x40c/0x650 [ 437.615110] ? expand_files.part.8+0x9a0/0x9a0 [ 437.619678] ? find_held_lock+0x36/0x1c0 [ 437.623754] ? kvm_set_memory_region+0x50/0x50 [ 437.628323] do_vfs_ioctl+0x1cf/0x1650 [ 437.632207] ? ioctl_preallocate+0x2e0/0x2e0 [ 437.636618] ? fget_raw+0x20/0x20 [ 437.640071] ? SyS_futex+0x3a4/0x56d [ 437.643775] ? do_futex+0x27d0/0x27d0 [ 437.647566] ? security_file_ioctl+0x9b/0xd0 [ 437.651979] ksys_ioctl+0xa9/0xd0 [ 437.655440] SyS_ioctl+0x24/0x30 [ 437.658792] ? ksys_ioctl+0xd0/0xd0 [ 437.662404] do_syscall_64+0x29e/0x9d0 [ 437.666277] ? vmalloc_sync_all+0x30/0x30 [ 437.670413] ? kasan_check_write+0x14/0x20 [ 437.674637] ? syscall_return_slowpath+0x5c0/0x5c0 [ 437.679552] ? syscall_return_slowpath+0x30f/0x5c0 [ 437.684475] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 437.689830] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 437.694666] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/04/06 06:12:34 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7a, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:34 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ghreaded\x00', 0x1) 2018/04/06 06:12:34 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="02000400010001000014006cd4"], &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x1a}, 0x852}}, 0x1ff, 0x3565}, &(0x7f00000001c0)=0x90) socketpair$inet(0x2, 0x80802, 0x6, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000001900)={0x1, 'rose0\x00', 0x4}, 0x18) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x803ffdff, r0}) 2018/04/06 06:12:34 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x8906000000000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:34 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x3a]}) 2018/04/06 06:12:34 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x7a00000000000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:34 executing program 7: r0 = socket$inet6(0xa, 0x2000000802, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000, 0xc) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x10080009, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000140)={0x100000000, 0x1, 0x7e2, 0x96, 0x9, 0x200}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x5, 0x80}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x2}, 0x20) [ 437.699845] RIP: 0033:0x4552d9 [ 437.703032] RSP: 002b:00007f735423ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 437.710736] RAX: ffffffffffffffda RBX: 00007f735423f6d4 RCX: 00000000004552d9 [ 437.717990] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 437.725253] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 437.732515] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 437.739775] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000001 2018/04/06 06:12:34 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x4888]}) 2018/04/06 06:12:34 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0xf0ffffffffffff, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x73, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:34 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f00000001c0)='btrfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001800), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6d61785f696e6c696e653d3130677f6b2cb5423ffcf74c11427569645f000065652c667261670c70f15818d4f3242c6465020063653d2ebc8d98b9b3fa8429999f9b985a41bf39ef3e0998598a495e082bc1b2ea4694b29c79ed6d68696cf1d8e75f9004a55ae293fb37424859252682f10c9632b8ee53bac9a211c3b4245e20bb6bce2d7ad334456ff9c667c761a1d99f68944050c295fa78b70b20594aee456cb72527c5ddbd5f2f74f3c33df66c10d8742311ccfeae91b6929f16303eef1a9c07f00c7992b44aca9b2ae2db81da4eeb8910079f46aebae93821b6868b651440c7c5b94fbc3ab1966ef0e751503d90cd2e97b9c80b90636e223aadd062033eb168"]) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7e1, 0x220200) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 2018/04/06 06:12:34 executing program 0: r0 = socket$inet(0x10, 0x0, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:34 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='ehreaded\x00', 0x1) [ 437.958172] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 437.970080] syz-executor6 cpuset=syz6 mems_allowed=0 [ 437.975325] CPU: 0 PID: 26401 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 437.982185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.991556] Call Trace: [ 437.994172] dump_stack+0x1b9/0x29f [ 437.997831] ? arch_local_irq_restore+0x52/0x52 [ 438.002530] ? kasan_check_read+0x11/0x20 [ 438.006715] warn_alloc.cold.119+0xb2/0x1b8 [ 438.011071] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 438.015950] ? finish_task_switch+0x1ca/0x820 [ 438.020492] ? lock_repin_lock+0x410/0x410 [ 438.024767] __vmalloc_node_range+0x45e/0x720 [ 438.029291] ? graph_lock+0x170/0x170 [ 438.033120] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 438.037987] __vmalloc_node_flags_caller+0x50/0x60 [ 438.042951] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 438.047820] kvmalloc_node+0xde/0x100 [ 438.051654] kvm_arch_create_memslot+0xa3/0x4e0 2018/04/06 06:12:34 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'lo\x00', 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x75, "8cbb7d55f7cc23934a13ee3f26293add3bd7bdfafc6f7eed726af2bf7d77259ee0c936cea4aad0c4cba96dfb44773d54f7b65c8a64692f8cba363979f65cdcc595eba765743d7b1c4cb7dbfad0d275652dfba87e6abc545c83a909e105059cce679de61505d66b0f1a1707b7b058555149873a12ee"}, &(0x7f0000000280)=0x7d) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000340)={0x5, {{0xa, 0x4e23, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0x1}}, 0x0, 0x6, [{{0xa, 0x4e22, 0x1, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x80}}, {{0xa, 0x4e20, 0x200, @mcast1={0xff, 0x1, [], 0x1}, 0xffff}}, {{0xa, 0x4e24, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x1000}}, {{0xa, 0x4e23, 0x9, @loopback={0x0, 0x1}, 0x3}}, {{0xa, 0x4e21, 0x4, @mcast2={0xff, 0x2, [], 0x1}, 0x10001}}, {{0xa, 0x4e24, 0x3f, @loopback={0x0, 0x1}, 0x2a03}}]}, 0x390) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000002c0)={r2, 0xd6cd, 0x7fffffff, 0xffffffff, 0xfff, 0xdab}, &(0x7f0000000300)=0x14) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@empty, @mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, 0x400, 0xffff, 0x100000001, 0x400, 0x999, 0x800004, r1}) connect(r0, &(0x7f0000000100)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) [ 438.056364] __kvm_set_memory_region+0x1d1b/0x2e50 [ 438.061343] ? kvm_vcpu_block+0x1050/0x1050 [ 438.065691] ? zap_class+0x720/0x720 [ 438.069424] ? check_same_owner+0x320/0x320 [ 438.073772] ? rcu_note_context_switch+0x710/0x710 [ 438.078719] ? lock_acquire+0x1dc/0x520 [ 438.082725] ? graph_lock+0x170/0x170 [ 438.086546] ? __might_sleep+0x95/0x190 [ 438.090557] ? refill_pi_state_cache.part.7+0x300/0x300 [ 438.095957] ? find_held_lock+0x36/0x1c0 [ 438.100065] ? lock_downgrade+0x8e0/0x8e0 [ 438.104296] kvm_set_memory_region+0x2e/0x50 [ 438.108730] kvm_vm_ioctl+0x668/0x1d90 [ 438.112636] ? perf_tp_event+0xc30/0xc30 [ 438.116728] ? kvm_set_memory_region+0x50/0x50 [ 438.121329] ? memset+0x31/0x40 [ 438.124635] ? perf_trace_lock+0x495/0x900 [ 438.128899] ? zap_class+0x720/0x720 [ 438.132630] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 438.137847] ? native_flush_tlb_others+0x690/0x690 [ 438.142811] ? graph_lock+0x170/0x170 [ 438.146628] ? check_same_owner+0x320/0x320 [ 438.150993] ? exit_robust_list+0x290/0x290 [ 438.155339] ? find_held_lock+0x36/0x1c0 [ 438.159438] ? lock_downgrade+0x8e0/0x8e0 [ 438.163619] ? rcu_is_watching+0x85/0x140 [ 438.167787] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 438.173014] ? __fget+0x40c/0x650 [ 438.176498] ? expand_files.part.8+0x9a0/0x9a0 [ 438.181095] ? lock_downgrade+0x8e0/0x8e0 [ 438.185262] ? __split_vma+0x5ac/0x7f0 [ 438.189171] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 438.194726] ? vma_set_page_prot+0x183/0x260 [ 438.199140] ? kvm_set_memory_region+0x50/0x50 [ 438.203712] do_vfs_ioctl+0x1cf/0x1650 [ 438.207609] ? ioctl_preallocate+0x2e0/0x2e0 [ 438.212026] ? fget_raw+0x20/0x20 [ 438.215486] ? SyS_futex+0x3a4/0x56d [ 438.219279] ? do_futex+0x27d0/0x27d0 [ 438.223072] ? security_file_ioctl+0x9b/0xd0 [ 438.227472] ksys_ioctl+0xa9/0xd0 [ 438.230916] SyS_ioctl+0x24/0x30 [ 438.234269] ? ksys_ioctl+0xd0/0xd0 [ 438.237885] do_syscall_64+0x29e/0x9d0 [ 438.241759] ? vmalloc_sync_all+0x30/0x30 [ 438.245893] ? _raw_spin_unlock_irq+0x27/0x70 [ 438.250377] ? finish_task_switch+0x1ca/0x820 [ 438.254863] ? syscall_return_slowpath+0x5c0/0x5c0 [ 438.259782] ? syscall_return_slowpath+0x30f/0x5c0 [ 438.264713] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 438.270068] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 438.274925] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 438.280106] RIP: 0033:0x4552d9 [ 438.283279] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 438.290975] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 438.298233] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 438.305493] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 438.312764] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 438.320031] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 438.327576] warn_alloc_show_mem: 1 callbacks suppressed [ 438.327585] Mem-Info: [ 438.335448] active_anon:132341 inactive_anon:79 isolated_anon:0 [ 438.335448] active_file:22856 inactive_file:11734 isolated_file:0 [ 438.335448] unevictable:0 dirty:10 writeback:5 unstable:0 [ 438.335448] slab_reclaimable:12424 slab_unreclaimable:101557 [ 438.335448] mapped:73950 shmem:86 pagetables:1043 bounce:0 [ 438.335448] free:1251676 free_pcp:510 free_cma:0 [ 438.369213] Node 0 active_anon:529364kB inactive_anon:316kB active_file:91424kB inactive_file:46936kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295800kB dirty:40kB writeback:20kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 391168kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 438.397474] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 438.423682] lowmem_reserve[]: 0 2833 6338 6338 [ 438.428347] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:224kB free_cma:0kB [ 438.456094] lowmem_reserve[]: 0 0 3505 3505 [ 438.460511] Node 0 Normal free:2087652kB min:37284kB low:46604kB high:55924kB active_anon:529364kB inactive_anon:316kB active_file:91424kB inactive_file:46936kB unevictable:0kB writepending:12kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5504kB pagetables:4172kB bounce:0kB free_pcp:1108kB local_pcp:556kB free_cma:0kB [ 438.490338] lowmem_reserve[]: 0 0 0 0 [ 438.494239] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 438.507972] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 438.524043] Node 0 Normal: 205*4kB (UME) 1206*8kB (UME) 1097*16kB (UME) 851*32kB (UME) 496*64kB (UME) 166*128kB (UME) 42*256kB (UME) 17*512kB (UM) 2*1024kB (UM) 6*2048kB (UME) 475*4096kB (UM) = 2087636kB [ 438.542497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 438.551113] 34674 total pagecache pages [ 438.555141] 0 pages in swap cache [ 438.558619] Swap cache stats: add 0, delete 0, find 0/0 [ 438.564040] Free swap = 0kB [ 438.567094] Total swap = 0kB [ 438.570150] 1965969 pages RAM [ 438.573297] 0 pages HighMem/MovableOnly [ 438.577309] 338524 pages reserved [ 438.615605] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 438.627456] syz-executor6 cpuset=syz6 mems_allowed=0 [ 438.632765] CPU: 0 PID: 26436 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 438.639612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.648964] Call Trace: [ 438.651550] dump_stack+0x1b9/0x29f [ 438.655172] ? arch_local_irq_restore+0x52/0x52 [ 438.659833] ? kasan_check_read+0x11/0x20 [ 438.663979] warn_alloc.cold.119+0xb2/0x1b8 [ 438.668318] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 438.673157] ? finish_task_switch+0x1ca/0x820 [ 438.677652] ? lock_repin_lock+0x410/0x410 [ 438.681886] __vmalloc_node_range+0x45e/0x720 [ 438.686377] ? graph_lock+0x170/0x170 [ 438.690174] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 438.695010] __vmalloc_node_flags_caller+0x50/0x60 [ 438.699944] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 438.704782] kvmalloc_node+0xde/0x100 [ 438.708588] kvm_arch_create_memslot+0xa3/0x4e0 [ 438.713271] __kvm_set_memory_region+0x1d1b/0x2e50 [ 438.718201] ? kvm_vcpu_block+0x1050/0x1050 [ 438.722514] ? zap_class+0x720/0x720 [ 438.726215] ? check_same_owner+0x320/0x320 [ 438.730529] ? rcu_note_context_switch+0x710/0x710 [ 438.735445] ? lock_acquire+0x1dc/0x520 [ 438.739412] ? graph_lock+0x170/0x170 [ 438.743201] ? __might_sleep+0x95/0x190 [ 438.747180] ? refill_pi_state_cache.part.7+0x300/0x300 [ 438.752540] ? find_held_lock+0x36/0x1c0 [ 438.756600] ? lock_downgrade+0x8e0/0x8e0 [ 438.760766] kvm_set_memory_region+0x2e/0x50 [ 438.765165] kvm_vm_ioctl+0x668/0x1d90 [ 438.769049] ? perf_tp_event+0xc30/0xc30 [ 438.773096] ? kasan_check_write+0x14/0x20 [ 438.777321] ? kvm_set_memory_region+0x50/0x50 [ 438.781892] ? memset+0x31/0x40 [ 438.785164] ? perf_trace_lock+0x495/0x900 [ 438.789393] ? zap_class+0x720/0x720 [ 438.793093] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 438.798274] ? graph_lock+0x170/0x170 [ 438.802073] ? exit_robust_list+0x290/0x290 [ 438.806385] ? find_held_lock+0x36/0x1c0 [ 438.810441] ? lock_downgrade+0x8e0/0x8e0 [ 438.814572] ? lock_downgrade+0x8e0/0x8e0 [ 438.818710] ? rcu_is_watching+0x85/0x140 [ 438.822856] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 438.828063] ? __fget+0x40c/0x650 [ 438.831512] ? expand_files.part.8+0x9a0/0x9a0 [ 438.836078] ? find_held_lock+0x36/0x1c0 [ 438.840140] ? kvm_set_memory_region+0x50/0x50 [ 438.844715] do_vfs_ioctl+0x1cf/0x1650 [ 438.848596] ? ioctl_preallocate+0x2e0/0x2e0 [ 438.852997] ? fget_raw+0x20/0x20 [ 438.856451] ? SyS_futex+0x3a4/0x56d [ 438.860154] ? do_futex+0x27d0/0x27d0 [ 438.863943] ? security_file_ioctl+0x9b/0xd0 [ 438.868343] ksys_ioctl+0xa9/0xd0 [ 438.871787] SyS_ioctl+0x24/0x30 [ 438.875139] ? ksys_ioctl+0xd0/0xd0 [ 438.878755] do_syscall_64+0x29e/0x9d0 [ 438.882628] ? vmalloc_sync_all+0x30/0x30 [ 438.886760] ? _raw_spin_unlock_irq+0x27/0x70 [ 438.891246] ? finish_task_switch+0x1ca/0x820 [ 438.895730] ? syscall_return_slowpath+0x5c0/0x5c0 [ 438.900649] ? syscall_return_slowpath+0x30f/0x5c0 [ 438.905581] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 438.910937] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 438.915778] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 438.920953] RIP: 0033:0x4552d9 [ 438.924136] RSP: 002b:00007f735423ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 438.931832] RAX: ffffffffffffffda RBX: 00007f735423f6d4 RCX: 00000000004552d9 [ 438.939091] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000018 [ 438.946360] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 438.953625] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff 2018/04/06 06:12:35 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0xfffff000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:35 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x6488]}) 2018/04/06 06:12:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x14, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:35 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:35 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x7400000000000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:35 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Threaded\x00', 0x1) 2018/04/06 06:12:35 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0xb8, "84149989f720c5fdf5567e36045e5f789a89bf4d1e365e5299fde4f03a5501cfeab26baf1ddae132dd2fb07f93669c242d01fc25e987bcb142fca7bfb9ee3b5c69abeee0da33b71061760f2882c67a2ef306865b337f231c41ac4c4f947f0b6d585f618e20bdc6bd56010cfe32d0040419c40206cd0e2f0bee17d6e0cd05168a565aaecbf691f3d8fa2e1f27dd53c74f5eb3a7af3730f6ed2bfc5a8dfb6090acc38af14669b47f7329a2881cacef108516f63520fdaa3ab9"}, &(0x7f0000000100)=0xdc) membarrier(0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)=ANY=[@ANYBLOB="ffe0fffffdff00001400000008004500001c0000000000119078ac14ffbbe000000100004e2100089078"], 0x0) 2018/04/06 06:12:35 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'bcsh0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f00000003c0)=0xe8) r1 = accept4$packet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000440)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={"6c6f200ad953378b71c50d9ed43a00", r2}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000000)={{0x80000000, 0x10fc, 0x3ff, 0x80000000, 0x4774, 0x3}, 0x8}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r3}) [ 438.960882] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000001 2018/04/06 06:12:35 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)}, 0x0) 2018/04/06 06:12:35 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='khreaded\x00', 0x1) 2018/04/06 06:12:35 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x6488, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:35 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x6]}) 2018/04/06 06:12:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x23, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) [ 439.140874] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 439.152770] syz-executor6 cpuset=syz6 mems_allowed=0 [ 439.158084] CPU: 0 PID: 26458 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 439.164943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.174317] Call Trace: [ 439.176933] dump_stack+0x1b9/0x29f [ 439.180594] ? arch_local_irq_restore+0x52/0x52 [ 439.185300] ? kasan_check_read+0x11/0x20 2018/04/06 06:12:35 executing program 7: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = userfaultfd(0x80800) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x3, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r3) r5 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000440)="01", 0x1, r4) r6 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x182, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r6}, &(0x7f0000a53ffb)=""/5, 0x68, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'rmd256-generic\x00'}}) 2018/04/06 06:12:35 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x88ffffff]}) 2018/04/06 06:12:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) [ 439.189483] warn_alloc.cold.119+0xb2/0x1b8 [ 439.193837] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 439.198708] ? finish_task_switch+0x1ca/0x820 [ 439.203242] ? lock_repin_lock+0x410/0x410 [ 439.207512] __vmalloc_node_range+0x45e/0x720 [ 439.212034] ? graph_lock+0x170/0x170 [ 439.215862] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 439.220722] __vmalloc_node_flags_caller+0x50/0x60 [ 439.225674] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 439.230540] kvmalloc_node+0xde/0x100 [ 439.234373] kvm_arch_create_memslot+0xa3/0x4e0 [ 439.239086] __kvm_set_memory_region+0x1d1b/0x2e50 [ 439.244062] ? kvm_vcpu_block+0x1050/0x1050 [ 439.248414] ? zap_class+0x720/0x720 [ 439.252147] ? check_same_owner+0x320/0x320 [ 439.256495] ? rcu_note_context_switch+0x710/0x710 [ 439.261447] ? lock_acquire+0x1dc/0x520 [ 439.265453] ? graph_lock+0x170/0x170 [ 439.269276] ? __might_sleep+0x95/0x190 [ 439.273287] ? refill_pi_state_cache.part.7+0x300/0x300 [ 439.278683] ? find_held_lock+0x36/0x1c0 [ 439.282789] ? lock_downgrade+0x8e0/0x8e0 [ 439.287019] kvm_set_memory_region+0x2e/0x50 2018/04/06 06:12:35 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x86ddffff]}) 2018/04/06 06:12:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x17, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) [ 439.291453] kvm_vm_ioctl+0x668/0x1d90 [ 439.295362] ? perf_tp_event+0xc30/0xc30 [ 439.299450] ? kvm_set_memory_region+0x50/0x50 [ 439.304061] ? memset+0x31/0x40 [ 439.307369] ? perf_trace_lock+0x495/0x900 [ 439.311638] ? zap_class+0x720/0x720 [ 439.315367] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 439.320585] ? native_flush_tlb_others+0x690/0x690 [ 439.325526] ? graph_lock+0x170/0x170 [ 439.329342] ? check_same_owner+0x320/0x320 [ 439.333697] ? exit_robust_list+0x290/0x290 [ 439.338044] ? find_held_lock+0x36/0x1c0 [ 439.342134] ? lock_downgrade+0x8e0/0x8e0 [ 439.346309] ? rcu_is_watching+0x85/0x140 [ 439.350477] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 439.355702] ? __fget+0x40c/0x650 [ 439.359185] ? expand_files.part.8+0x9a0/0x9a0 [ 439.363787] ? lock_downgrade+0x8e0/0x8e0 [ 439.367958] ? __split_vma+0x5ac/0x7f0 [ 439.371878] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.377435] ? vma_set_page_prot+0x183/0x260 [ 439.381864] ? kvm_set_memory_region+0x50/0x50 [ 439.386463] do_vfs_ioctl+0x1cf/0x1650 2018/04/06 06:12:35 executing program 7: r0 = accept$inet6(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, @ipv4={[], [], @local}}, &(0x7f0000000100)=0x1c) fstat(r0, &(0x7f0000000140)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x24300, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_emit_ethernet(0x3e, &(0x7f0000d3fbdd)={@link_local={0x1, 0x80, 0xc2}, @random="f3aa20259cdb", [], {@ipv6={0x86dd, {0x0, 0x6, "050008", 0x8, 0x4, 0x0, @dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000168ff4)) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000001c0)={0x0, 0x0, 0x6ba07a37}) 2018/04/06 06:12:35 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x3580]}) [ 439.390374] ? ioctl_preallocate+0x2e0/0x2e0 [ 439.394797] ? fget_raw+0x20/0x20 [ 439.398276] ? SyS_futex+0x3a4/0x56d [ 439.402015] ? do_futex+0x27d0/0x27d0 [ 439.405838] ? security_file_ioctl+0x9b/0xd0 [ 439.410272] ksys_ioctl+0xa9/0xd0 [ 439.413750] SyS_ioctl+0x24/0x30 [ 439.417130] ? ksys_ioctl+0xd0/0xd0 [ 439.420776] do_syscall_64+0x29e/0x9d0 [ 439.424675] ? vmalloc_sync_all+0x30/0x30 [ 439.428841] ? _raw_spin_unlock_irq+0x27/0x70 [ 439.433355] ? finish_task_switch+0x1ca/0x820 [ 439.437871] ? syscall_return_slowpath+0x5c0/0x5c0 [ 439.442823] ? syscall_return_slowpath+0x30f/0x5c0 [ 439.447784] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 439.453177] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 439.458050] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 439.463252] RIP: 0033:0x4552d9 [ 439.466451] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 439.474183] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 439.481469] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 439.488752] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 439.496038] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 439.503320] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 439.510740] warn_alloc_show_mem: 1 callbacks suppressed [ 439.510749] Mem-Info: [ 439.518667] active_anon:131871 inactive_anon:79 isolated_anon:0 [ 439.518667] active_file:22856 inactive_file:11751 isolated_file:0 [ 439.518667] unevictable:0 dirty:52 writeback:0 unstable:0 [ 439.518667] slab_reclaimable:12438 slab_unreclaimable:101578 2018/04/06 06:12:35 executing program 5: r0 = socket(0xa, 0x1, 0x40000000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"07000000e9c015cafff8dc00", 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x20, 0x4) [ 439.518667] mapped:74013 shmem:86 pagetables:1088 bounce:0 [ 439.518667] free:1252040 free_pcp:406 free_cma:0 [ 439.552509] Node 0 active_anon:527284kB inactive_anon:316kB active_file:91424kB inactive_file:47004kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295952kB dirty:208kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 380928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 439.580695] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 439.606965] lowmem_reserve[]: 0 2833 6338 6338 [ 439.611701] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:224kB free_cma:0kB [ 439.639523] lowmem_reserve[]: 0 0 3505 3505 [ 439.643978] Node 0 Normal free:2086944kB min:37284kB low:46604kB high:55924kB active_anon:529312kB inactive_anon:316kB active_file:91424kB inactive_file:47004kB unevictable:0kB writepending:208kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5536kB pagetables:4352kB bounce:0kB free_pcp:540kB local_pcp:100kB free_cma:0kB [ 439.673905] lowmem_reserve[]: 0 0 0 0 [ 439.677860] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 439.691736] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 439.707812] Node 0 Normal: 270*4kB (UM) 1249*8kB (UME) 1061*16kB (UME) 833*32kB (UME) 496*64kB (UME) 166*128kB (UME) 42*256kB (UME) 17*512kB (UM) 2*1024kB (UM) 8*2048kB (UME) 475*4096kB (UM) = 2091184kB [ 439.726302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 439.734965] 34698 total pagecache pages [ 439.738986] 0 pages in swap cache [ 439.742499] Swap cache stats: add 0, delete 0, find 0/0 [ 439.747908] Free swap = 0kB [ 439.750965] Total swap = 0kB [ 439.754049] 1965969 pages RAM [ 439.757197] 0 pages HighMem/MovableOnly [ 439.761198] 338524 pages reserved [ 439.786330] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 439.798142] syz-executor6 cpuset=syz6 mems_allowed=0 [ 439.803341] CPU: 1 PID: 26458 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 439.810183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.819521] Call Trace: [ 439.822100] dump_stack+0x1b9/0x29f [ 439.825717] ? arch_local_irq_restore+0x52/0x52 [ 439.830372] ? kasan_check_read+0x11/0x20 [ 439.834506] warn_alloc.cold.119+0xb2/0x1b8 [ 439.838813] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 439.843640] ? kasan_check_write+0x14/0x20 [ 439.847867] ? lock_repin_lock+0x410/0x410 [ 439.852103] __vmalloc_node_range+0x45e/0x720 [ 439.856593] ? graph_lock+0x170/0x170 [ 439.860381] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 439.865216] __vmalloc_node_flags_caller+0x50/0x60 [ 439.870138] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 439.874969] kvmalloc_node+0xde/0x100 [ 439.878765] kvm_arch_create_memslot+0xa3/0x4e0 [ 439.883428] __kvm_set_memory_region+0x1d1b/0x2e50 [ 439.888351] ? kvm_vcpu_block+0x1050/0x1050 [ 439.892669] ? visit_groups_merge+0x539/0x6a0 [ 439.897150] ? zap_class+0x720/0x720 [ 439.900846] ? check_same_owner+0x320/0x320 [ 439.905150] ? rcu_note_context_switch+0x710/0x710 [ 439.910061] ? lock_acquire+0x1dc/0x520 [ 439.914030] ? graph_lock+0x170/0x170 [ 439.917833] ? __might_sleep+0x95/0x190 [ 439.921795] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.927313] ? futex_wait_queue_me+0x559/0x820 [ 439.931878] ? refill_pi_state_cache.part.7+0x300/0x300 [ 439.937244] ? find_held_lock+0x36/0x1c0 [ 439.941300] ? lock_downgrade+0x8e0/0x8e0 [ 439.945471] kvm_set_memory_region+0x2e/0x50 [ 439.949864] kvm_vm_ioctl+0x668/0x1d90 [ 439.953733] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 439.958818] ? futex_wake+0x2f6/0x750 [ 439.962601] ? kasan_check_write+0x14/0x20 [ 439.966819] ? kvm_set_memory_region+0x50/0x50 [ 439.971381] ? graph_lock+0x170/0x170 [ 439.975163] ? get_futex_key+0x1e90/0x1e90 [ 439.979380] ? __lock_acquire+0x7f5/0x5130 [ 439.983596] ? perf_trace_lock+0xd6/0x900 [ 439.987730] ? zap_class+0x720/0x720 [ 439.991431] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 439.996601] ? do_futex+0x249/0x27d0 [ 440.000295] ? graph_lock+0x170/0x170 [ 440.004080] ? exit_robust_list+0x290/0x290 [ 440.008388] ? find_held_lock+0x36/0x1c0 [ 440.012438] ? lock_downgrade+0x8e0/0x8e0 [ 440.016567] ? lock_downgrade+0x8e0/0x8e0 [ 440.020701] ? rcu_is_watching+0x85/0x140 [ 440.024828] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 440.030004] ? __fget+0x40c/0x650 [ 440.033476] ? expand_files.part.8+0x9a0/0x9a0 [ 440.038040] ? lock_downgrade+0x8e0/0x8e0 [ 440.042171] ? lock_release+0xa10/0xa10 [ 440.046133] ? kvm_set_memory_region+0x50/0x50 [ 440.050703] do_vfs_ioctl+0x1cf/0x1650 [ 440.054576] ? ioctl_preallocate+0x2e0/0x2e0 [ 440.058965] ? fget_raw+0x20/0x20 [ 440.062401] ? security_file_mprotect+0x9b/0xd0 [ 440.067067] ? SyS_futex+0x3a4/0x56d [ 440.070780] ? do_futex+0x27d0/0x27d0 [ 440.074564] ? security_file_ioctl+0x9b/0xd0 [ 440.078956] ksys_ioctl+0xa9/0xd0 [ 440.082393] SyS_ioctl+0x24/0x30 [ 440.085745] ? ksys_ioctl+0xd0/0xd0 [ 440.089355] do_syscall_64+0x29e/0x9d0 [ 440.093231] ? vmalloc_sync_all+0x30/0x30 [ 440.097371] ? _raw_spin_unlock_irq+0x27/0x70 [ 440.101848] ? finish_task_switch+0x1ca/0x820 [ 440.106340] ? syscall_return_slowpath+0x5c0/0x5c0 [ 440.111253] ? syscall_return_slowpath+0x30f/0x5c0 [ 440.116175] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 440.121521] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 440.126350] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 440.131519] RIP: 0033:0x4552d9 2018/04/06 06:12:36 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x600000000000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:36 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x800000000000000]}) 2018/04/06 06:12:36 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) connect(r1, &(0x7f00007a3ff0)=@ethernet, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x28, r2, 0xa01, 0x0, 0x0, {0x10}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0x28}, 0x1}, 0x0) 2018/04/06 06:12:36 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000400)=0xffffffffffffff49) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000280)={@local={0xac, 0x14, 0x14, 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}, r1}, 0xc) r2 = socket(0xa, 0x3, 0x4000000000000000) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000100)={@dev, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', r3}) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e22, @rand_addr=0x10000}}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x400, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e22, 0x80, @ipv4={[], [0xff, 0xff]}, 0x7}, {0xa, 0x4e20, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0xfd7}, 0x6, [0x26, 0xed, 0x4b, 0x1, 0x81, 0xabe, 0x10001, 0x5e60]}, 0x5c) ioctl$TIOCLINUX7(r5, 0x541c, &(0x7f0000000340)={0x7, 0x3}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={@mcast1={0xff, 0x1, [], 0x1}, @empty, @mcast1={0xff, 0x1, [], 0x1}, 0x3, 0x6, 0x0, 0x500, 0x4, 0x620000, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r4}) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x100, 0x100) ioctl$TCFLSH(r6, 0x540b, 0x6) 2018/04/06 06:12:36 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)}, 0x0) 2018/04/06 06:12:36 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='0hreaded\x00', 0x1) 2018/04/06 06:12:36 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x20000, 0x2000, &(0x7f0000008000/0x2000)=nil}) [ 440.134693] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.142384] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 440.149634] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 440.156888] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 440.164143] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 440.171396] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:12:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x74, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) [ 440.246980] netlink: 'syz-executor7': attribute type 1 has an invalid length. [ 440.308523] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 440.320367] syz-executor6 cpuset=syz6 mems_allowed=0 [ 440.325596] CPU: 0 PID: 26526 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 440.332457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.341831] Call Trace: [ 440.344445] dump_stack+0x1b9/0x29f [ 440.348100] ? arch_local_irq_restore+0x52/0x52 [ 440.352813] warn_alloc.cold.119+0xb2/0x1b8 2018/04/06 06:12:36 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x88a8ffff00000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:36 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0xffffdd86]}) [ 440.357168] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 440.362043] ? perf_swevent_event+0x158/0x2e0 [ 440.366569] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 440.372144] ? print_usage_bug+0xc0/0xc0 [ 440.376246] __vmalloc_node_range+0x45e/0x720 [ 440.380774] ? graph_lock+0x170/0x170 [ 440.384610] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 440.389463] __vmalloc_node_flags_caller+0x50/0x60 [ 440.394408] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 440.399272] kvmalloc_node+0xde/0x100 [ 440.403100] kvm_arch_create_memslot+0xa3/0x4e0 [ 440.407815] __kvm_set_memory_region+0x1d1b/0x2e50 [ 440.412794] ? kvm_vcpu_block+0x1050/0x1050 [ 440.417155] ? zap_class+0x720/0x720 [ 440.420892] ? perf_trace_lock+0x495/0x900 [ 440.425163] ? graph_lock+0x170/0x170 [ 440.429070] ? zap_class+0x720/0x720 [ 440.432833] ? find_held_lock+0x36/0x1c0 [ 440.436940] ? lock_downgrade+0x8e0/0x8e0 [ 440.441167] kvm_set_memory_region+0x2e/0x50 [ 440.445601] kvm_vm_ioctl+0x668/0x1d90 [ 440.449510] ? perf_tp_event+0xc30/0xc30 [ 440.453594] ? __perf_event_task_sched_in+0x247/0xb80 [ 440.458815] ? kvm_set_memory_region+0x50/0x50 [ 440.463426] ? memset+0x31/0x40 [ 440.466739] ? perf_trace_lock+0x495/0x900 [ 440.471742] ? zap_class+0x720/0x720 [ 440.475472] ? finish_task_switch+0x182/0x820 [ 440.479996] ? kasan_check_read+0x11/0x20 [ 440.484164] ? graph_lock+0x170/0x170 [ 440.487982] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 440.492586] ? compat_start_thread+0x80/0x80 [ 440.497018] ? _raw_spin_unlock_irq+0x27/0x70 [ 440.501544] ? trace_hardirqs_on+0xd/0x10 [ 440.505724] ? _raw_spin_unlock_irq+0x27/0x70 [ 440.510246] ? find_held_lock+0x36/0x1c0 [ 440.514346] ? lock_downgrade+0x8e0/0x8e0 [ 440.518529] ? rcu_is_watching+0x85/0x140 [ 440.522692] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 440.527918] ? __fget+0x40c/0x650 [ 440.531401] ? expand_files.part.8+0x9a0/0x9a0 [ 440.535991] ? lock_downgrade+0x8e0/0x8e0 [ 440.540171] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.545733] ? kvm_set_memory_region+0x50/0x50 [ 440.550337] do_vfs_ioctl+0x1cf/0x1650 [ 440.554253] ? ioctl_preallocate+0x2e0/0x2e0 [ 440.558677] ? fget_raw+0x20/0x20 [ 440.562164] ? exit_to_usermode_loop+0x87/0x310 [ 440.566860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.572416] ? security_file_ioctl+0x9b/0xd0 [ 440.576945] ksys_ioctl+0xa9/0xd0 [ 440.580422] SyS_ioctl+0x24/0x30 [ 440.583800] ? ksys_ioctl+0xd0/0xd0 [ 440.587449] do_syscall_64+0x29e/0x9d0 [ 440.591354] ? vmalloc_sync_all+0x30/0x30 [ 440.595509] ? _raw_spin_unlock_irq+0x27/0x70 [ 440.599995] ? finish_task_switch+0x1ca/0x820 [ 440.604504] ? syscall_return_slowpath+0x5c0/0x5c0 [ 440.609429] ? syscall_return_slowpath+0x30f/0x5c0 [ 440.614356] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 440.619713] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 440.624551] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 440.629730] RIP: 0033:0x4552d9 [ 440.632910] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.640607] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 440.647863] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 440.655118] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 440.662375] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 440.669630] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 440.677094] warn_alloc_show_mem: 1 callbacks suppressed [ 440.677102] Mem-Info: [ 440.684932] active_anon:131290 inactive_anon:79 isolated_anon:0 [ 440.684932] active_file:22856 inactive_file:11764 isolated_file:0 [ 440.684932] unevictable:0 dirty:66 writeback:0 unstable:0 [ 440.684932] slab_reclaimable:12450 slab_unreclaimable:101767 [ 440.684932] mapped:73938 shmem:86 pagetables:1014 bounce:0 [ 440.684932] free:1252528 free_pcp:558 free_cma:0 [ 440.718676] Node 0 active_anon:525160kB inactive_anon:316kB active_file:91424kB inactive_file:47056kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295752kB dirty:264kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 380928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 440.746843] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 440.773048] lowmem_reserve[]: 0 2833 6338 6338 [ 440.777706] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:224kB free_cma:0kB [ 440.805465] lowmem_reserve[]: 0 0 3505 3505 [ 440.809855] Node 0 Normal free:2090996kB min:37284kB low:46604kB high:55924kB active_anon:525088kB inactive_anon:316kB active_file:91424kB inactive_file:47060kB unevictable:0kB writepending:292kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5376kB pagetables:4024kB bounce:0kB free_pcp:1304kB local_pcp:632kB free_cma:0kB [ 440.839772] lowmem_reserve[]: 0 0 0 0 [ 440.843648] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 440.857393] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 440.873367] Node 0 Normal: 245*4kB (UM) 1220*8kB (UME) 1061*16kB (UME) 836*32kB (UME) 496*64kB (UME) 166*128kB (UME) 42*256kB (UME) 17*512kB (UM) 2*1024kB (UM) 6*2048kB (UME) 476*4096kB (UM) = 2090948kB [ 440.891743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 440.900354] 34710 total pagecache pages [ 440.904365] 0 pages in swap cache [ 440.907847] Swap cache stats: add 0, delete 0, find 0/0 [ 440.913237] Free swap = 0kB [ 440.916282] Total swap = 0kB [ 440.919332] 1965969 pages RAM [ 440.922459] 0 pages HighMem/MovableOnly [ 440.926462] 338524 pages reserved [ 440.949451] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 440.961399] syz-executor6 cpuset=syz6 mems_allowed=0 [ 440.966596] CPU: 0 PID: 26526 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 440.973442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.982792] Call Trace: [ 440.985375] dump_stack+0x1b9/0x29f [ 440.989006] ? arch_local_irq_restore+0x52/0x52 [ 440.993684] ? kasan_check_read+0x11/0x20 [ 440.997829] warn_alloc.cold.119+0xb2/0x1b8 [ 441.002149] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 441.006991] ? kasan_check_write+0x14/0x20 [ 441.011260] ? lock_repin_lock+0x410/0x410 [ 441.015504] __vmalloc_node_range+0x45e/0x720 [ 441.020011] ? graph_lock+0x170/0x170 [ 441.023817] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 441.028648] __vmalloc_node_flags_caller+0x50/0x60 [ 441.033569] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 441.038405] kvmalloc_node+0xde/0x100 [ 441.042200] kvm_arch_create_memslot+0xa3/0x4e0 [ 441.046872] __kvm_set_memory_region+0x1d1b/0x2e50 [ 441.051836] ? kvm_vcpu_block+0x1050/0x1050 [ 441.056167] ? zap_class+0x720/0x720 [ 441.059875] ? check_same_owner+0x320/0x320 [ 441.064193] ? rcu_note_context_switch+0x710/0x710 [ 441.069136] ? lock_acquire+0x1dc/0x520 [ 441.073116] ? graph_lock+0x170/0x170 [ 441.076935] ? __might_sleep+0x95/0x190 [ 441.080924] ? refill_pi_state_cache.part.7+0x300/0x300 [ 441.086286] ? find_held_lock+0x36/0x1c0 [ 441.090346] ? lock_downgrade+0x8e0/0x8e0 [ 441.094510] kvm_set_memory_region+0x2e/0x50 [ 441.098908] kvm_vm_ioctl+0x668/0x1d90 [ 441.102779] ? perf_tp_event+0xc30/0xc30 [ 441.106830] ? trace_hardirqs_off+0xd/0x10 [ 441.111056] ? kvm_set_memory_region+0x50/0x50 [ 441.115629] ? memset+0x31/0x40 [ 441.118903] ? perf_trace_lock+0x495/0x900 [ 441.123134] ? zap_class+0x720/0x720 [ 441.126838] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 441.132032] ? kvm_debugfs_release+0x90/0x90 [ 441.136430] ? graph_lock+0x170/0x170 [ 441.140251] ? exit_robust_list+0x290/0x290 [ 441.144572] ? find_held_lock+0x36/0x1c0 [ 441.148639] ? lock_downgrade+0x8e0/0x8e0 [ 441.152781] ? rcu_is_watching+0x85/0x140 [ 441.156915] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 441.162105] ? __fget+0x40c/0x650 [ 441.165550] ? expand_files.part.8+0x9a0/0x9a0 [ 441.170117] ? lock_downgrade+0x8e0/0x8e0 [ 441.174255] ? lock_release+0xa10/0xa10 [ 441.178221] ? kvm_set_memory_region+0x50/0x50 [ 441.182794] do_vfs_ioctl+0x1cf/0x1650 [ 441.186675] ? ioctl_preallocate+0x2e0/0x2e0 [ 441.191072] ? fget_raw+0x20/0x20 [ 441.194516] ? security_file_mprotect+0x9b/0xd0 [ 441.199181] ? SyS_futex+0x3a4/0x56d [ 441.202890] ? do_futex+0x27d0/0x27d0 [ 441.206678] ? security_file_ioctl+0x9b/0xd0 [ 441.211078] ksys_ioctl+0xa9/0xd0 [ 441.214544] SyS_ioctl+0x24/0x30 [ 441.217906] ? ksys_ioctl+0xd0/0xd0 [ 441.221520] do_syscall_64+0x29e/0x9d0 [ 441.225394] ? vmalloc_sync_all+0x30/0x30 [ 441.229527] ? _raw_spin_unlock_irq+0x27/0x70 [ 441.234017] ? finish_task_switch+0x1ca/0x820 [ 441.238514] ? syscall_return_slowpath+0x5c0/0x5c0 [ 441.243431] ? syscall_return_slowpath+0x30f/0x5c0 [ 441.248352] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 441.253710] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/04/06 06:12:37 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)}, 0x0) 2018/04/06 06:12:37 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x6c000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:37 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Khreaded\x00', 0x1) 2018/04/06 06:12:37 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x8035000000000000]}) 2018/04/06 06:12:37 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host=0x2}, 0x10) r1 = socket(0x2, 0x80001, 0xfffffffffffffffc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000600)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'lo\x00', r2}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x6f, "d89c07b9acf0ba873f89b9148e5d314ada71f44a5c6f9ae3adba77a08b6accab936ccd7692af20575cb1b0ccb6ce6877773a9c825fd68557bbb0337071dc6e5afcf06529d8e2fd385f1a413924d3210efedbfa1f7e446b2adbaed38fdeab62acb14868465f659e5c4811c45c8a4cdf"}, &(0x7f0000000040)=0x77) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x3, 0x9, 0x8200, 0x6, 0x0, 0x7, 0x5, 0xfff, r4}, 0x20) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x803ffdff, r3}) 2018/04/06 06:12:37 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x800000000000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6c, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:37 executing program 7: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) socketpair$inet6(0xa, 0x80003, 0x2, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x41) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x10140, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000002000)={0x4, 0x3, 0x2000005, 0x0, 0x862b}, 0x108) r1 = socket$key(0xf, 0x3, 0x2) getpeername(r1, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000001fde), 0x4) [ 441.258547] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 441.263720] RIP: 0033:0x4552d9 [ 441.266893] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.274591] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 441.281846] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 441.289102] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 441.296356] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 441.303611] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:12:37 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x28000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:37 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Phreaded\x00', 0x1) 2018/04/06 06:12:37 executing program 5: r0 = socket(0xa, 0x1, 0x0) sendto(r0, &(0x7f0000000100)="958a154b36132bfd5becf72fd005bab4856822e27bfb43743d83411a2f6e9fd6dc993b94086177b11697e29eaebab6e5d22353de287bf058c844be26a252010374e69ec5960372d2b2f8f9c9421df9b7916f12f3a07fe556d85d8817b3df21c1b9a36a2145fe560299bf22ebee3a18438a7f6d1485b7a52097131825baa38420810c8ffdd1f96d", 0x87, 0x8000, &(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) 2018/04/06 06:12:37 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x4305000000000000]}) 2018/04/06 06:12:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:37 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)}], 0x1}, 0x0) [ 441.440729] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 441.452591] syz-executor6 cpuset=syz6 mems_allowed=0 [ 441.457832] CPU: 0 PID: 26572 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 441.464694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.474059] Call Trace: [ 441.476673] dump_stack+0x1b9/0x29f [ 441.480333] ? arch_local_irq_restore+0x52/0x52 [ 441.485052] warn_alloc.cold.119+0xb2/0x1b8 [ 441.489410] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 441.494283] ? perf_swevent_event+0x158/0x2e0 [ 441.498804] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 441.504375] ? print_usage_bug+0xc0/0xc0 [ 441.508473] __vmalloc_node_range+0x45e/0x720 [ 441.513003] ? graph_lock+0x170/0x170 [ 441.516836] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 441.521709] __vmalloc_node_flags_caller+0x50/0x60 [ 441.526667] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 441.531539] kvmalloc_node+0xde/0x100 [ 441.535366] kvm_arch_create_memslot+0xa3/0x4e0 2018/04/06 06:12:37 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)}], 0x1}, 0x0) 2018/04/06 06:12:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0xb, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) [ 441.540073] __kvm_set_memory_region+0x1d1b/0x2e50 [ 441.545054] ? kvm_vcpu_block+0x1050/0x1050 [ 441.549403] ? zap_class+0x720/0x720 [ 441.553140] ? perf_trace_lock+0x495/0x900 [ 441.557407] ? graph_lock+0x170/0x170 [ 441.561229] ? zap_class+0x720/0x720 [ 441.564991] ? find_held_lock+0x36/0x1c0 [ 441.569091] ? lock_downgrade+0x8e0/0x8e0 [ 441.573312] kvm_set_memory_region+0x2e/0x50 [ 441.577745] kvm_vm_ioctl+0x668/0x1d90 [ 441.581652] ? perf_tp_event+0xc30/0xc30 [ 441.585734] ? __perf_event_task_sched_in+0x247/0xb80 [ 441.590952] ? kvm_set_memory_region+0x50/0x50 [ 441.595559] ? memset+0x31/0x40 [ 441.598878] ? perf_trace_lock+0x495/0x900 [ 441.603145] ? zap_class+0x720/0x720 [ 441.606878] ? finish_task_switch+0x182/0x820 [ 441.611399] ? kasan_check_read+0x11/0x20 [ 441.615562] ? graph_lock+0x170/0x170 [ 441.619374] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 441.623976] ? compat_start_thread+0x80/0x80 [ 441.628402] ? _raw_spin_unlock_irq+0x27/0x70 [ 441.632922] ? trace_hardirqs_on+0xd/0x10 [ 441.637083] ? _raw_spin_unlock_irq+0x27/0x70 [ 441.641596] ? find_held_lock+0x36/0x1c0 [ 441.645688] ? lock_downgrade+0x8e0/0x8e0 [ 441.649861] ? rcu_is_watching+0x85/0x140 [ 441.654024] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 441.659251] ? __fget+0x40c/0x650 [ 441.662734] ? expand_files.part.8+0x9a0/0x9a0 [ 441.667323] ? lock_downgrade+0x8e0/0x8e0 [ 441.671498] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.677061] ? kvm_set_memory_region+0x50/0x50 [ 441.681663] do_vfs_ioctl+0x1cf/0x1650 [ 441.685576] ? ioctl_preallocate+0x2e0/0x2e0 [ 441.690003] ? fget_raw+0x20/0x20 [ 441.693491] ? exit_to_usermode_loop+0x87/0x310 [ 441.698187] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.703748] ? security_file_ioctl+0x9b/0xd0 [ 441.708186] ksys_ioctl+0xa9/0xd0 [ 441.711662] SyS_ioctl+0x24/0x30 [ 441.715043] ? ksys_ioctl+0xd0/0xd0 [ 441.718690] do_syscall_64+0x29e/0x9d0 [ 441.722590] ? vmalloc_sync_all+0x30/0x30 [ 441.726752] ? _raw_spin_unlock_irq+0x27/0x70 [ 441.731263] ? finish_task_switch+0x1ca/0x820 [ 441.735776] ? syscall_return_slowpath+0x5c0/0x5c0 [ 441.740725] ? syscall_return_slowpath+0x30f/0x5c0 [ 441.745684] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 441.751075] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 441.755952] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 441.761157] RIP: 0033:0x4552d9 [ 441.764356] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.772090] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 441.779363] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 441.786622] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 441.793884] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 441.801138] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 441.808772] warn_alloc_show_mem: 1 callbacks suppressed [ 441.808780] Mem-Info: [ 441.816633] active_anon:131283 inactive_anon:76 isolated_anon:0 [ 441.816633] active_file:22856 inactive_file:11777 isolated_file:0 [ 441.816633] unevictable:0 dirty:80 writeback:0 unstable:0 [ 441.816633] slab_reclaimable:12466 slab_unreclaimable:101943 [ 441.816633] mapped:73932 shmem:86 pagetables:1007 bounce:0 [ 441.816633] free:1252310 free_pcp:563 free_cma:0 [ 441.850561] Node 0 active_anon:525132kB inactive_anon:304kB active_file:91424kB inactive_file:47108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295728kB dirty:320kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 380928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 441.878738] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 441.904958] lowmem_reserve[]: 0 2833 6338 6338 [ 441.909661] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:224kB free_cma:0kB [ 441.937431] lowmem_reserve[]: 0 0 3505 3505 [ 441.941910] Node 0 Normal free:2090188kB min:37284kB low:46604kB high:55924kB active_anon:525132kB inactive_anon:304kB active_file:91424kB inactive_file:47108kB unevictable:0kB writepending:320kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5408kB pagetables:4028kB bounce:0kB free_pcp:1324kB local_pcp:716kB free_cma:0kB [ 441.971835] lowmem_reserve[]: 0 0 0 0 [ 441.975736] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 441.989499] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 442.005499] Node 0 Normal: 217*4kB (UME) 1811*8kB (UME) 1108*16kB (UME) 840*32kB (UME) 496*64kB (UME) 166*128kB (UME) 42*256kB (UME) 17*512kB (UM) 2*1024kB (UM) 3*2048kB (UME) 476*4096kB (UM) = 2090300kB [ 442.023938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 442.032567] 34717 total pagecache pages [ 442.036593] 0 pages in swap cache [ 442.040086] Swap cache stats: add 0, delete 0, find 0/0 [ 442.045494] Free swap = 0kB [ 442.048542] Total swap = 0kB [ 442.051605] 1965969 pages RAM [ 442.054760] 0 pages HighMem/MovableOnly [ 442.058777] 338524 pages reserved [ 442.088832] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 442.100687] syz-executor6 cpuset=syz6 mems_allowed=0 [ 442.105857] CPU: 0 PID: 26618 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 442.112692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.122035] Call Trace: [ 442.124609] dump_stack+0x1b9/0x29f [ 442.128218] ? arch_local_irq_restore+0x52/0x52 [ 442.132872] ? kasan_check_read+0x11/0x20 [ 442.137004] warn_alloc.cold.119+0xb2/0x1b8 [ 442.141318] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 442.146142] ? trace_hardirqs_on+0xd/0x10 [ 442.150273] ? _raw_spin_unlock_irq+0x27/0x70 [ 442.154748] ? finish_task_switch+0x1ca/0x820 [ 442.159233] ? lock_repin_lock+0x410/0x410 [ 442.163455] __vmalloc_node_range+0x45e/0x720 [ 442.167937] ? graph_lock+0x170/0x170 [ 442.171725] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 442.176559] __vmalloc_node_flags_caller+0x50/0x60 [ 442.181471] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 442.186295] kvmalloc_node+0xde/0x100 [ 442.190081] kvm_arch_create_memslot+0xa3/0x4e0 [ 442.194740] __kvm_set_memory_region+0x1d1b/0x2e50 [ 442.199659] ? kvm_vcpu_block+0x1050/0x1050 [ 442.203966] ? zap_class+0x720/0x720 [ 442.207661] ? check_same_owner+0x320/0x320 [ 442.211965] ? rcu_note_context_switch+0x710/0x710 [ 442.216874] ? lock_acquire+0x1dc/0x520 [ 442.220846] ? graph_lock+0x170/0x170 [ 442.224635] ? __might_sleep+0x95/0x190 [ 442.228594] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.234119] ? futex_wait_queue_me+0x559/0x820 [ 442.238682] ? refill_pi_state_cache.part.7+0x300/0x300 [ 442.244039] ? find_held_lock+0x36/0x1c0 [ 442.248087] ? lock_downgrade+0x8e0/0x8e0 [ 442.252242] kvm_set_memory_region+0x2e/0x50 [ 442.256633] kvm_vm_ioctl+0x668/0x1d90 [ 442.260502] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 442.265596] ? futex_wake+0x2f6/0x750 [ 442.269383] ? kvm_set_memory_region+0x50/0x50 [ 442.273950] ? get_futex_key+0x1e90/0x1e90 [ 442.278168] ? sock_destroy_inode+0x56/0x70 [ 442.282485] ? perf_trace_lock+0xd6/0x900 [ 442.286620] ? zap_class+0x720/0x720 [ 442.290312] ? destroy_inode+0x156/0x1f0 [ 442.294354] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 442.299525] ? do_futex+0x249/0x27d0 [ 442.303235] ? graph_lock+0x170/0x170 [ 442.307028] ? evict+0x5cd/0x960 [ 442.310383] ? exit_robust_list+0x290/0x290 [ 442.314697] ? find_held_lock+0x36/0x1c0 [ 442.318743] ? lock_downgrade+0x8e0/0x8e0 [ 442.322879] ? rcu_is_watching+0x85/0x140 [ 442.327015] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 442.332199] ? __fget+0x40c/0x650 [ 442.335649] ? expand_files.part.8+0x9a0/0x9a0 [ 442.340224] ? inet6_net_init+0x870/0x870 [ 442.344361] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 442.349537] ? kvm_set_memory_region+0x50/0x50 [ 442.354103] do_vfs_ioctl+0x1cf/0x1650 [ 442.357972] ? __sock_create+0x11e/0x920 [ 442.362030] ? ioctl_preallocate+0x2e0/0x2e0 [ 442.366430] ? fget_raw+0x20/0x20 [ 442.369870] ? SyS_futex+0x3a4/0x56d [ 442.373564] ? do_futex+0x27d0/0x27d0 [ 442.377347] ? security_file_ioctl+0x9b/0xd0 [ 442.381740] ksys_ioctl+0xa9/0xd0 [ 442.385175] SyS_ioctl+0x24/0x30 [ 442.388520] ? ksys_ioctl+0xd0/0xd0 [ 442.392130] do_syscall_64+0x29e/0x9d0 [ 442.395996] ? vmalloc_sync_all+0x30/0x30 [ 442.400131] ? kasan_check_write+0x14/0x20 [ 442.404347] ? syscall_return_slowpath+0x5c0/0x5c0 [ 442.409258] ? syscall_return_slowpath+0x30f/0x5c0 [ 442.414173] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 442.419534] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 442.424374] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 442.429543] RIP: 0033:0x4552d9 [ 442.432711] RSP: 002b:00007f735423ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2018/04/06 06:12:38 executing program 5: r0 = socket(0xa, 0x1, 0x0) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000100)=""/159, &(0x7f0000000000)=0x9f) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) 2018/04/06 06:12:38 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='mhreaded\x00', 0x1) 2018/04/06 06:12:38 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)}], 0x1}, 0x0) 2018/04/06 06:12:38 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x7000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:38 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x88470000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:38 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x81000000]}) 2018/04/06 06:12:38 executing program 7: 2018/04/06 06:12:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1e, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) [ 442.440401] RAX: ffffffffffffffda RBX: 00007f735423f6d4 RCX: 00000000004552d9 [ 442.447650] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 442.454899] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 442.462148] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 442.469398] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000001 2018/04/06 06:12:38 executing program 7: 2018/04/06 06:12:38 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x8848]}) 2018/04/06 06:12:38 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd070002000000", 0x18}], 0x1}, 0x0) 2018/04/06 06:12:39 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x23a000, 0x1d4) r0 = socket(0xa, 0xa, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000200)={'\x00', 0xffffffffffffff81}) sendto(r0, &(0x7f0000000000)="ff9277ba2eff1f6867c1ca8a16344a4d9620ee3edd3f5328e59b5f4c36175f224afb703ae3d3bbeb80d16c188596b573d6a869acde638137625f1f4de924fd2172326b100a5e880a677ceb4fd0964d1a5e53f61850f36feb5bb3a579a48c81a4fa283e8008770a90302a66", 0x6b, 0x4000000, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x2, 0x4, {0xa, 0x4e24, 0x5, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x15}}, 0x7}}}, 0xfffffe8a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) recvfrom$inet6(r0, &(0x7f0000000240)=""/130, 0x82, 0x100, &(0x7f00000001c0)={0xa, 0x4e22, 0x20, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, 0x1c) 2018/04/06 06:12:39 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Mhreaded\x00', 0x1) 2018/04/06 06:12:39 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x8035, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2000032c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) [ 442.616323] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 442.628244] syz-executor6 cpuset=syz6 mems_allowed=0 [ 442.633483] CPU: 0 PID: 26640 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 442.640341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.649711] Call Trace: [ 442.652328] dump_stack+0x1b9/0x29f [ 442.655989] ? arch_local_irq_restore+0x52/0x52 [ 442.660701] warn_alloc.cold.119+0xb2/0x1b8 [ 442.665056] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 442.669930] ? perf_swevent_event+0x158/0x2e0 [ 442.674456] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 442.680035] ? print_usage_bug+0xc0/0xc0 [ 442.684133] __vmalloc_node_range+0x45e/0x720 [ 442.688660] ? graph_lock+0x170/0x170 [ 442.692492] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 442.697362] __vmalloc_node_flags_caller+0x50/0x60 [ 442.702317] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 442.707188] kvmalloc_node+0xde/0x100 [ 442.711025] kvm_arch_create_memslot+0xa3/0x4e0 2018/04/06 06:12:39 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x100000000000000]}) [ 442.715736] __kvm_set_memory_region+0x1d1b/0x2e50 [ 442.720715] ? kvm_vcpu_block+0x1050/0x1050 [ 442.725064] ? zap_class+0x720/0x720 [ 442.728799] ? perf_trace_lock+0x495/0x900 [ 442.733069] ? graph_lock+0x170/0x170 [ 442.736892] ? zap_class+0x720/0x720 [ 442.740661] ? find_held_lock+0x36/0x1c0 [ 442.744760] ? lock_downgrade+0x8e0/0x8e0 [ 442.748983] kvm_set_memory_region+0x2e/0x50 [ 442.753415] kvm_vm_ioctl+0x668/0x1d90 [ 442.757319] ? perf_tp_event+0xc30/0xc30 [ 442.761401] ? __perf_event_task_sched_in+0x247/0xb80 2018/04/06 06:12:39 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x800e, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:39 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='phreaded\x00', 0x1) [ 442.766615] ? kvm_set_memory_region+0x50/0x50 [ 442.771222] ? memset+0x31/0x40 [ 442.774530] ? perf_trace_lock+0x495/0x900 [ 442.778795] ? zap_class+0x720/0x720 [ 442.782519] ? finish_task_switch+0x182/0x820 [ 442.787040] ? kasan_check_read+0x11/0x20 [ 442.791209] ? graph_lock+0x170/0x170 [ 442.795030] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 442.799630] ? compat_start_thread+0x80/0x80 [ 442.804058] ? _raw_spin_unlock_irq+0x27/0x70 [ 442.808575] ? trace_hardirqs_on+0xd/0x10 [ 442.812741] ? _raw_spin_unlock_irq+0x27/0x70 [ 442.817258] ? find_held_lock+0x36/0x1c0 [ 442.821351] ? lock_downgrade+0x8e0/0x8e0 [ 442.825528] ? rcu_is_watching+0x85/0x140 [ 442.829695] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 442.834918] ? __fget+0x40c/0x650 [ 442.838399] ? expand_files.part.8+0x9a0/0x9a0 [ 442.843000] ? lock_downgrade+0x8e0/0x8e0 [ 442.847174] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.852731] ? kvm_set_memory_region+0x50/0x50 [ 442.857326] do_vfs_ioctl+0x1cf/0x1650 [ 442.861240] ? ioctl_preallocate+0x2e0/0x2e0 2018/04/06 06:12:39 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x1000000]}) [ 442.865663] ? fget_raw+0x20/0x20 [ 442.869145] ? exit_to_usermode_loop+0x87/0x310 [ 442.873846] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.879403] ? security_file_ioctl+0x9b/0xd0 [ 442.883835] ksys_ioctl+0xa9/0xd0 [ 442.887324] SyS_ioctl+0x24/0x30 [ 442.890702] ? ksys_ioctl+0xd0/0xd0 [ 442.894348] do_syscall_64+0x29e/0x9d0 [ 442.898248] ? vmalloc_sync_all+0x30/0x30 [ 442.902411] ? _raw_spin_unlock_irq+0x27/0x70 [ 442.906925] ? finish_task_switch+0x1ca/0x820 [ 442.911658] ? syscall_return_slowpath+0x5c0/0x5c0 [ 442.916621] ? syscall_return_slowpath+0x30f/0x5c0 [ 442.921585] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 442.926974] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 442.931855] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 442.937057] RIP: 0033:0x4552d9 [ 442.940252] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.947983] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 442.955264] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 442.962545] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 442.969826] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 442.977106] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 442.984827] warn_alloc_show_mem: 1 callbacks suppressed [ 442.984836] Mem-Info: [ 442.992794] active_anon:131830 inactive_anon:80 isolated_anon:0 [ 442.992794] active_file:22858 inactive_file:11785 isolated_file:0 [ 442.992794] unevictable:0 dirty:114 writeback:0 unstable:0 [ 442.992794] slab_reclaimable:12448 slab_unreclaimable:102075 [ 442.992794] mapped:73932 shmem:86 pagetables:1119 bounce:0 [ 442.992794] free:1225965 free_pcp:576 free_cma:0 [ 443.026691] Node 0 active_anon:527320kB inactive_anon:320kB active_file:91432kB inactive_file:47140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295828kB dirty:456kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 374784kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 443.054906] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 443.081151] lowmem_reserve[]: 0 2833 6338 6338 [ 443.085861] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:224kB free_cma:0kB [ 443.113675] lowmem_reserve[]: 0 0 3505 3505 [ 443.118105] Node 0 Normal free:1894324kB min:37284kB low:46604kB high:55924kB active_anon:527320kB inactive_anon:320kB active_file:91432kB inactive_file:47140kB unevictable:0kB writepending:504kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5536kB pagetables:4476kB bounce:0kB free_pcp:1180kB local_pcp:692kB free_cma:0kB [ 443.148075] lowmem_reserve[]: 0 0 0 0 [ 443.152008] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 443.165906] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 443.181988] Node 0 Normal: 0*4kB 1150*8kB (UME) 1060*16kB (ME) 818*32kB (ME) 435*64kB (UME) 78*128kB (ME) 15*256kB (UME) 9*512kB (UM) 2*1024kB (UM) 3*2048kB (UME) 423*4096kB (M) = 1839408kB [ 443.199361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 443.208053] 34727 total pagecache pages [ 443.212110] 0 pages in swap cache [ 443.215637] Swap cache stats: add 0, delete 0, find 0/0 [ 443.221047] Free swap = 0kB [ 443.224127] Total swap = 0kB [ 443.227193] 1965969 pages RAM [ 443.230354] 0 pages HighMem/MovableOnly [ 443.234373] 338524 pages reserved [ 443.294221] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 443.306050] syz-executor6 cpuset=syz6 mems_allowed=0 [ 443.311264] CPU: 1 PID: 26676 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 443.318116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.327470] Call Trace: [ 443.330070] dump_stack+0x1b9/0x29f [ 443.333710] ? arch_local_irq_restore+0x52/0x52 [ 443.338391] ? kasan_check_read+0x11/0x20 [ 443.342547] warn_alloc.cold.119+0xb2/0x1b8 [ 443.346881] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 443.351730] ? trace_hardirqs_on+0xd/0x10 [ 443.355882] ? print_usage_bug+0xc0/0xc0 [ 443.359951] ? finish_task_switch+0x1ca/0x820 [ 443.364466] ? lock_repin_lock+0x410/0x410 [ 443.368718] __vmalloc_node_range+0x45e/0x720 [ 443.373229] ? graph_lock+0x170/0x170 [ 443.377046] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 443.381895] __vmalloc_node_flags_caller+0x50/0x60 [ 443.386839] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 443.391690] kvmalloc_node+0xde/0x100 [ 443.395507] kvm_arch_create_memslot+0xa3/0x4e0 [ 443.400197] __kvm_set_memory_region+0x1d1b/0x2e50 [ 443.405147] ? kvm_vcpu_block+0x1050/0x1050 [ 443.409473] ? visit_groups_merge+0x539/0x6a0 [ 443.413977] ? zap_class+0x720/0x720 [ 443.417695] ? check_same_owner+0x320/0x320 [ 443.422031] ? rcu_note_context_switch+0x710/0x710 [ 443.426967] ? lock_acquire+0x1dc/0x520 [ 443.430953] ? graph_lock+0x170/0x170 [ 443.434760] ? __might_sleep+0x95/0x190 [ 443.438770] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.444329] ? futex_wait_queue_me+0x559/0x820 [ 443.448915] ? refill_pi_state_cache.part.7+0x300/0x300 [ 443.454298] ? find_held_lock+0x36/0x1c0 [ 443.458393] ? lock_downgrade+0x8e0/0x8e0 [ 443.462602] kvm_set_memory_region+0x2e/0x50 [ 443.467027] kvm_vm_ioctl+0x668/0x1d90 [ 443.470942] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 443.476067] ? futex_wake+0x2f6/0x750 [ 443.479878] ? kasan_check_write+0x14/0x20 [ 443.484137] ? kvm_set_memory_region+0x50/0x50 [ 443.488745] ? graph_lock+0x170/0x170 [ 443.492554] ? get_futex_key+0x1e90/0x1e90 [ 443.496798] ? perf_trace_lock+0xd6/0x900 [ 443.500955] ? zap_class+0x720/0x720 [ 443.504676] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 443.509874] ? do_futex+0x249/0x27d0 [ 443.513601] ? graph_lock+0x170/0x170 [ 443.517416] ? exit_robust_list+0x290/0x290 [ 443.521750] ? find_held_lock+0x36/0x1c0 [ 443.525826] ? lock_downgrade+0x8e0/0x8e0 [ 443.529975] ? lock_downgrade+0x8e0/0x8e0 [ 443.534139] ? rcu_is_watching+0x85/0x140 [ 443.538312] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 443.543519] ? __fget+0x40c/0x650 [ 443.546985] ? expand_files.part.8+0x9a0/0x9a0 [ 443.551571] ? find_held_lock+0x36/0x1c0 [ 443.555650] ? kvm_set_memory_region+0x50/0x50 [ 443.560246] do_vfs_ioctl+0x1cf/0x1650 [ 443.564144] ? ioctl_preallocate+0x2e0/0x2e0 [ 443.568560] ? fget_raw+0x20/0x20 [ 443.572026] ? SyS_futex+0x3a4/0x56d [ 443.575753] ? do_futex+0x27d0/0x27d0 [ 443.579568] ? security_file_ioctl+0x9b/0xd0 [ 443.583990] ksys_ioctl+0xa9/0xd0 [ 443.587452] SyS_ioctl+0x24/0x30 [ 443.590829] ? ksys_ioctl+0xd0/0xd0 [ 443.594465] do_syscall_64+0x29e/0x9d0 [ 443.598356] ? vmalloc_sync_all+0x30/0x30 [ 443.602513] ? _raw_spin_unlock_irq+0x27/0x70 [ 443.607020] ? finish_task_switch+0x1ca/0x820 [ 443.611534] ? syscall_return_slowpath+0x5c0/0x5c0 [ 443.616471] ? syscall_return_slowpath+0x30f/0x5c0 [ 443.621419] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 443.626800] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 443.631664] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 443.636849] RIP: 0033:0x4552d9 [ 443.640029] RSP: 002b:00007f735423ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.647722] RAX: ffffffffffffffda RBX: 00007f735423f6d4 RCX: 00000000004552d9 [ 443.654973] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000018 [ 443.662225] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 443.669476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 443.676731] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000001 2018/04/06 06:12:40 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd070002000000", 0x18}], 0x1}, 0x0) 2018/04/06 06:12:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:40 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x1fc, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:40 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x3580, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:40 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x1) 2018/04/06 06:12:40 executing program 7: 2018/04/06 06:12:40 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x4788]}) 2018/04/06 06:12:40 executing program 5: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@empty, @rand_addr, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={"788d7beb49823723114000017a0a0020", r1}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r2}) r3 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x6, 0x105202) rename(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000380)={0x7fffffff, 0x10000, 0x0, 'queue1\x00', 0x81}) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000100)="67905b6099af8342adf9bd22704649812fc96ecdb021fdcffa16cccac5ab296aff69b095d3b7f413ea97496e0f270c8ab5584c379917545840418d1ce983ffe7127e5457615e0cebf5ae2c2af6c8986429a377f8cf854a01f3a18e5c6a5ed10f5fee3f6a2f5d349f0c32533c2cfe11b248932a455270c2b9", 0x78}, {&(0x7f0000000180)="56e10975e084db779d2f788cb452f81a50405f8314aee6b86b8af37b2bae45a27b5867ddce1b4a35cd65e325b6a6d087aa9e9524c24f2cf86156e0fce1a02b431156d9a27be871d11de0e7597f653c5134a60ab4fa14f0e8129ea0e4a2b930ee8485c4f50e6b41fb4b77a59fab2c59a6c6b7f8451be93f10bae5cbd1a33fa9faf866783b6b90be8c632981b46974f8d2ada1c27ac903e3789abae9a316002efcca536f8b", 0xa4}, {&(0x7f0000000240)="78481b613c9b7db17574ba584c6aa652a9807128a064e71f79660079b807be7f8d584a076d0c9bd8e9f0e3c43683436314286d22d1cd7b832528fd6252ac18da3e6c3e4dc08b546371d16f0bb6cfa2863a8d9f14e3460456abf8ff5f1948149222e6f0ad904839523023ab3c3236d179070e851d13e8910ab6de52f13671abb3b1f8e92b3ff0fcfa8aaa130fe7594305c9445137f9034c9120b02b91fc", 0x9d}], 0x3, 0x0) 2018/04/06 06:12:40 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0xe80]}) 2018/04/06 06:12:40 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd070002000000", 0x18}], 0x1}, 0x0) 2018/04/06 06:12:40 executing program 7: 2018/04/06 06:12:40 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x86ddffff00000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:40 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='ghreaded\x00', 0x1) [ 444.630098] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 444.642084] syz-executor6 cpuset=syz6 mems_allowed=0 [ 444.647305] CPU: 0 PID: 26697 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 444.654159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.663523] Call Trace: [ 444.666138] dump_stack+0x1b9/0x29f [ 444.669802] ? arch_local_irq_restore+0x52/0x52 [ 444.674491] ? kasan_check_read+0x11/0x20 2018/04/06 06:12:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0x3, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) [ 444.678667] warn_alloc.cold.119+0xb2/0x1b8 [ 444.683010] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 444.687879] ? finish_task_switch+0x1ca/0x820 [ 444.692415] ? lock_repin_lock+0x410/0x410 [ 444.696677] __vmalloc_node_range+0x45e/0x720 [ 444.701199] ? graph_lock+0x170/0x170 [ 444.705033] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 444.709897] __vmalloc_node_flags_caller+0x50/0x60 [ 444.714854] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 444.719721] kvmalloc_node+0xde/0x100 [ 444.723551] kvm_arch_create_memslot+0xa3/0x4e0 [ 444.728261] __kvm_set_memory_region+0x1d1b/0x2e50 [ 444.733235] ? kvm_vcpu_block+0x1050/0x1050 [ 444.737578] ? zap_class+0x720/0x720 [ 444.741309] ? check_same_owner+0x320/0x320 [ 444.745659] ? rcu_note_context_switch+0x710/0x710 [ 444.750604] ? lock_acquire+0x1dc/0x520 [ 444.754610] ? graph_lock+0x170/0x170 [ 444.758431] ? __might_sleep+0x95/0x190 [ 444.762440] ? refill_pi_state_cache.part.7+0x300/0x300 [ 444.767839] ? find_held_lock+0x36/0x1c0 [ 444.771943] ? lock_downgrade+0x8e0/0x8e0 [ 444.776174] kvm_set_memory_region+0x2e/0x50 [ 444.780608] kvm_vm_ioctl+0x668/0x1d90 [ 444.784512] ? perf_tp_event+0xc30/0xc30 [ 444.788602] ? kvm_set_memory_region+0x50/0x50 [ 444.793208] ? memset+0x31/0x40 [ 444.796513] ? perf_trace_lock+0x495/0x900 [ 444.800781] ? zap_class+0x720/0x720 [ 444.804505] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 444.809715] ? native_flush_tlb_others+0x690/0x690 [ 444.814665] ? graph_lock+0x170/0x170 [ 444.818482] ? check_same_owner+0x320/0x320 [ 444.822831] ? exit_robust_list+0x290/0x290 [ 444.827177] ? find_held_lock+0x36/0x1c0 [ 444.831276] ? lock_downgrade+0x8e0/0x8e0 [ 444.835454] ? rcu_is_watching+0x85/0x140 [ 444.839607] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 444.844794] ? __fget+0x40c/0x650 [ 444.848241] ? expand_files.part.8+0x9a0/0x9a0 [ 444.852807] ? lock_downgrade+0x8e0/0x8e0 [ 444.856944] ? __split_vma+0x5ac/0x7f0 [ 444.860824] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.866347] ? vma_set_page_prot+0x183/0x260 [ 444.870765] ? kvm_set_memory_region+0x50/0x50 [ 444.875346] do_vfs_ioctl+0x1cf/0x1650 [ 444.879226] ? ioctl_preallocate+0x2e0/0x2e0 [ 444.883625] ? fget_raw+0x20/0x20 [ 444.887079] ? SyS_futex+0x3a4/0x56d [ 444.890782] ? do_futex+0x27d0/0x27d0 [ 444.894585] ? security_file_ioctl+0x9b/0xd0 [ 444.898998] ksys_ioctl+0xa9/0xd0 [ 444.902450] SyS_ioctl+0x24/0x30 [ 444.905803] ? ksys_ioctl+0xd0/0xd0 [ 444.909416] do_syscall_64+0x29e/0x9d0 [ 444.913288] ? vmalloc_sync_all+0x30/0x30 [ 444.917421] ? kasan_check_write+0x14/0x20 [ 444.921644] ? syscall_return_slowpath+0x5c0/0x5c0 [ 444.926561] ? syscall_return_slowpath+0x30f/0x5c0 [ 444.931482] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 444.936837] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 444.941675] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 444.946851] RIP: 0033:0x4552d9 [ 444.950034] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 444.957736] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 444.964991] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 444.972251] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 444.979508] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 444.986774] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 444.994160] warn_alloc_show_mem: 1 callbacks suppressed [ 444.994169] Mem-Info: [ 445.002072] active_anon:131268 inactive_anon:79 isolated_anon:0 [ 445.002072] active_file:22859 inactive_file:11800 isolated_file:0 [ 445.002072] unevictable:0 dirty:138 writeback:0 unstable:0 [ 445.002072] slab_reclaimable:12457 slab_unreclaimable:101743 [ 445.002072] mapped:73939 shmem:86 pagetables:1000 bounce:0 [ 445.002072] free:1252285 free_pcp:554 free_cma:0 [ 445.035896] Node 0 active_anon:525072kB inactive_anon:316kB active_file:91436kB inactive_file:47200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295756kB dirty:552kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 387072kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 445.064075] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 445.090273] lowmem_reserve[]: 0 2833 6338 6338 [ 445.094938] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:224kB free_cma:0kB [ 445.122690] lowmem_reserve[]: 0 0 3505 3505 [ 445.127095] Node 0 Normal free:2090088kB min:37284kB low:46604kB high:55924kB active_anon:525072kB inactive_anon:316kB active_file:91436kB inactive_file:47200kB unevictable:0kB writepending:552kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5376kB pagetables:4000kB bounce:0kB free_pcp:1288kB local_pcp:596kB free_cma:0kB [ 445.157045] lowmem_reserve[]: 0 0 0 0 [ 445.160942] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 445.174715] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 445.190609] Node 0 Normal: 264*4kB (UM) 1917*8kB (UME) 1410*16kB (UME) 941*32kB (UME) 574*64kB (UME) 228*128kB (UME) 105*256kB (UME) 70*512kB (UM) 32*1024kB (UM) 36*2048kB (UME) 436*4096kB (UM) = 2090056kB [ 445.209299] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 445.217921] 34750 total pagecache pages [ 445.221940] 0 pages in swap cache [ 445.225444] Swap cache stats: add 0, delete 0, find 0/0 [ 445.230838] Free swap = 0kB [ 445.233890] Total swap = 0kB [ 445.236940] 1965969 pages RAM [ 445.240084] 0 pages HighMem/MovableOnly [ 445.244084] 338524 pages reserved [ 445.265460] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 445.277320] syz-executor6 cpuset=syz6 mems_allowed=0 [ 445.282505] CPU: 0 PID: 26697 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 445.289350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.298699] Call Trace: [ 445.301284] dump_stack+0x1b9/0x29f [ 445.304908] ? arch_local_irq_restore+0x52/0x52 [ 445.309589] ? kasan_check_read+0x11/0x20 [ 445.313740] warn_alloc.cold.119+0xb2/0x1b8 [ 445.318073] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 445.322913] ? kasan_check_write+0x14/0x20 [ 445.327152] ? lock_repin_lock+0x410/0x410 [ 445.331386] __vmalloc_node_range+0x45e/0x720 [ 445.335878] ? graph_lock+0x170/0x170 [ 445.339674] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 445.344505] __vmalloc_node_flags_caller+0x50/0x60 [ 445.349427] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 445.354264] kvmalloc_node+0xde/0x100 [ 445.358060] kvm_arch_create_memslot+0xa3/0x4e0 [ 445.362741] __kvm_set_memory_region+0x1d1b/0x2e50 [ 445.367683] ? kvm_vcpu_block+0x1050/0x1050 [ 445.371997] ? zap_class+0x720/0x720 [ 445.375708] ? check_same_owner+0x320/0x320 [ 445.380043] ? rcu_note_context_switch+0x710/0x710 [ 445.384966] ? lock_acquire+0x1dc/0x520 [ 445.388947] ? graph_lock+0x170/0x170 [ 445.392765] ? __might_sleep+0x95/0x190 [ 445.396758] ? refill_pi_state_cache.part.7+0x300/0x300 [ 445.402125] ? find_held_lock+0x36/0x1c0 [ 445.406189] ? lock_downgrade+0x8e0/0x8e0 [ 445.410371] kvm_set_memory_region+0x2e/0x50 [ 445.414790] kvm_vm_ioctl+0x668/0x1d90 [ 445.418675] ? perf_tp_event+0xc30/0xc30 [ 445.422731] ? kasan_check_write+0x14/0x20 [ 445.426956] ? kvm_set_memory_region+0x50/0x50 [ 445.431614] ? memset+0x31/0x40 [ 445.434887] ? perf_trace_lock+0x495/0x900 [ 445.439118] ? zap_class+0x720/0x720 [ 445.442839] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 445.448051] ? graph_lock+0x170/0x170 [ 445.451860] ? exit_robust_list+0x290/0x290 [ 445.456199] ? find_held_lock+0x36/0x1c0 [ 445.460268] ? lock_downgrade+0x8e0/0x8e0 [ 445.464401] ? lock_downgrade+0x8e0/0x8e0 [ 445.468546] ? rcu_is_watching+0x85/0x140 [ 445.472685] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 445.477885] ? __fget+0x40c/0x650 [ 445.481364] ? expand_files.part.8+0x9a0/0x9a0 [ 445.485944] ? lock_downgrade+0x8e0/0x8e0 [ 445.490092] ? lock_release+0xa10/0xa10 [ 445.494068] ? kvm_set_memory_region+0x50/0x50 [ 445.498641] do_vfs_ioctl+0x1cf/0x1650 [ 445.502522] ? ioctl_preallocate+0x2e0/0x2e0 [ 445.506918] ? fget_raw+0x20/0x20 [ 445.510363] ? security_file_mprotect+0x9b/0xd0 [ 445.515039] ? SyS_futex+0x3a4/0x56d [ 445.518762] ? do_futex+0x27d0/0x27d0 [ 445.522552] ? security_file_ioctl+0x9b/0xd0 [ 445.526954] ksys_ioctl+0xa9/0xd0 [ 445.530398] SyS_ioctl+0x24/0x30 [ 445.533750] ? ksys_ioctl+0xd0/0xd0 [ 445.537369] do_syscall_64+0x29e/0x9d0 [ 445.541242] ? vmalloc_sync_all+0x30/0x30 [ 445.545377] ? kasan_check_write+0x14/0x20 [ 445.549616] ? syscall_return_slowpath+0x5c0/0x5c0 [ 445.554549] ? syscall_return_slowpath+0x30f/0x5c0 [ 445.559474] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 445.564827] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.569677] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 445.574855] RIP: 0033:0x4552d9 2018/04/06 06:12:42 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @remote={0xfe, 0x80, [], 0xbb}, @empty, 0x2, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r2}, 0x14) 2018/04/06 06:12:42 executing program 7: 2018/04/06 06:12:42 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c90800010002027373", 0x24}], 0x1}, 0x0) 2018/04/06 06:12:42 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x4000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:42 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x3a000000]}) 2018/04/06 06:12:42 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)="456872656164656402", 0x1) 2018/04/06 06:12:42 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x68, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:42 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0x5, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) [ 445.578040] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 445.585749] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 445.593010] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 445.600278] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 445.607535] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 445.614789] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:12:42 executing program 7: perf_event_open(&(0x7f0000c72000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000740), 0xffffffffffffffff, &(0x7f0000000780), 0x8000, 0x0) mkdir(&(0x7f00007d3000)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000ad4000)='./control\x00', 0xa4000960) readv(r0, &(0x7f00009a4000)=[{&(0x7f000022c000)=""/32, 0x20}], 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000e21ff6)='./control\x00', 0x0, 0x0) 2018/04/06 06:12:42 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c90800010002027373", 0x24}], 0x1}, 0x0) 2018/04/06 06:12:42 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xb, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:42 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0xf0, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:42 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x88caffff]}) 2018/04/06 06:12:42 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) [ 445.767865] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 445.779718] syz-executor6 cpuset=syz6 mems_allowed=0 [ 445.784946] CPU: 0 PID: 26732 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 445.791803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.801168] Call Trace: [ 445.803783] dump_stack+0x1b9/0x29f [ 445.807441] ? arch_local_irq_restore+0x52/0x52 [ 445.812153] warn_alloc.cold.119+0xb2/0x1b8 2018/04/06 06:12:42 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0x9, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:42 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x3a00]}) [ 445.816507] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 445.821381] ? perf_swevent_event+0x158/0x2e0 [ 445.825901] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 445.831468] ? print_usage_bug+0xc0/0xc0 [ 445.835566] __vmalloc_node_range+0x45e/0x720 [ 445.840086] ? graph_lock+0x170/0x170 [ 445.843914] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 445.848775] __vmalloc_node_flags_caller+0x50/0x60 [ 445.853729] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 445.858589] kvmalloc_node+0xde/0x100 [ 445.862417] kvm_arch_create_memslot+0xa3/0x4e0 [ 445.867131] __kvm_set_memory_region+0x1d1b/0x2e50 [ 445.872111] ? kvm_vcpu_block+0x1050/0x1050 [ 445.876459] ? zap_class+0x720/0x720 [ 445.880191] ? perf_trace_lock+0x495/0x900 [ 445.884452] ? graph_lock+0x170/0x170 [ 445.888359] ? zap_class+0x720/0x720 [ 445.892125] ? find_held_lock+0x36/0x1c0 [ 445.896230] ? lock_downgrade+0x8e0/0x8e0 [ 445.900447] kvm_set_memory_region+0x2e/0x50 [ 445.904881] kvm_vm_ioctl+0x668/0x1d90 [ 445.908875] ? perf_tp_event+0xc30/0xc30 [ 445.912957] ? __perf_event_task_sched_in+0x247/0xb80 2018/04/06 06:12:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001400)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000000000)='f', 0x1, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvmsg(r0, &(0x7f0000000900)={&(0x7f00000002c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000000880)=""/101, 0x65}, 0x1) 2018/04/06 06:12:42 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0xfffffffffffff000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:42 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) [ 445.918170] ? kvm_set_memory_region+0x50/0x50 [ 445.922780] ? memset+0x31/0x40 [ 445.926091] ? perf_trace_lock+0x495/0x900 [ 445.930360] ? zap_class+0x720/0x720 [ 445.934089] ? finish_task_switch+0x182/0x820 [ 445.938961] ? kasan_check_read+0x11/0x20 [ 445.943129] ? graph_lock+0x170/0x170 [ 445.946946] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 445.951545] ? compat_start_thread+0x80/0x80 [ 445.955970] ? _raw_spin_unlock_irq+0x27/0x70 [ 445.960484] ? trace_hardirqs_on+0xd/0x10 [ 445.964649] ? _raw_spin_unlock_irq+0x27/0x70 [ 445.969169] ? find_held_lock+0x36/0x1c0 [ 445.973262] ? lock_downgrade+0x8e0/0x8e0 [ 445.977435] ? rcu_is_watching+0x85/0x140 [ 445.981600] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 445.986822] ? __fget+0x40c/0x650 [ 445.990304] ? expand_files.part.8+0x9a0/0x9a0 [ 445.994897] ? lock_downgrade+0x8e0/0x8e0 [ 445.999073] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.004629] ? kvm_set_memory_region+0x50/0x50 [ 446.009229] do_vfs_ioctl+0x1cf/0x1650 [ 446.013142] ? ioctl_preallocate+0x2e0/0x2e0 2018/04/06 06:12:42 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0x14, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:42 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0xfffffffe]}) [ 446.017567] ? fget_raw+0x20/0x20 [ 446.021051] ? exit_to_usermode_loop+0x87/0x310 [ 446.025748] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.031301] ? security_file_ioctl+0x9b/0xd0 [ 446.035736] ksys_ioctl+0xa9/0xd0 [ 446.039213] SyS_ioctl+0x24/0x30 [ 446.042595] ? ksys_ioctl+0xd0/0xd0 [ 446.046236] do_syscall_64+0x29e/0x9d0 [ 446.050133] ? vmalloc_sync_all+0x30/0x30 [ 446.054297] ? _raw_spin_unlock_irq+0x27/0x70 [ 446.058807] ? finish_task_switch+0x1ca/0x820 [ 446.063325] ? syscall_return_slowpath+0x5c0/0x5c0 [ 446.068271] ? syscall_return_slowpath+0x30f/0x5c0 [ 446.073225] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 446.078612] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 446.083487] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 446.088693] RIP: 0033:0x4552d9 [ 446.091892] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 446.099620] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 446.106898] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 446.114174] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 446.121455] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 446.128742] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 446.136182] warn_alloc_show_mem: 1 callbacks suppressed [ 446.136187] Mem-Info: [ 446.144096] active_anon:134931 inactive_anon:79 isolated_anon:0 [ 446.144096] active_file:22859 inactive_file:11814 isolated_file:0 [ 446.144096] unevictable:0 dirty:145 writeback:0 unstable:0 [ 446.144096] slab_reclaimable:12458 slab_unreclaimable:101921 [ 446.144096] mapped:73975 shmem:86 pagetables:1188 bounce:0 [ 446.144096] free:1248183 free_pcp:376 free_cma:0 [ 446.177973] Node 0 active_anon:539724kB inactive_anon:316kB active_file:91436kB inactive_file:47256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295900kB dirty:580kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 382976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 446.206140] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 446.232376] lowmem_reserve[]: 0 2833 6338 6338 [ 446.237054] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:224kB free_cma:0kB [ 446.264833] lowmem_reserve[]: 0 0 3505 3505 [ 446.269224] Node 0 Normal free:2074524kB min:37284kB low:46604kB high:55924kB active_anon:539624kB inactive_anon:316kB active_file:91436kB inactive_file:47256kB unevictable:0kB writepending:580kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5504kB pagetables:4308kB bounce:0kB free_pcp:976kB local_pcp:276kB free_cma:0kB [ 446.299078] lowmem_reserve[]: 0 0 0 0 [ 446.302983] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 446.316801] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 446.332683] Node 0 Normal: 181*4kB (UM) 1569*8kB (UME) 1474*16kB (UME) 969*32kB (UME) 574*64kB (UME) 228*128kB (UME) 105*256kB (UME) 70*512kB (UM) 32*1024kB (UM) 33*2048kB (UE) 434*4096kB (UM) = 2074524kB [ 446.351276] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 446.359879] 34757 total pagecache pages [ 446.363895] 0 pages in swap cache [ 446.367402] Swap cache stats: add 0, delete 0, find 0/0 [ 446.372787] Free swap = 0kB [ 446.375836] Total swap = 0kB [ 446.378870] 1965969 pages RAM [ 446.382009] 0 pages HighMem/MovableOnly [ 446.386041] 338524 pages reserved [ 446.415293] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 446.427277] syz-executor6 cpuset=syz6 mems_allowed=0 [ 446.432485] CPU: 0 PID: 26732 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 446.439322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.448676] Call Trace: [ 446.451270] dump_stack+0x1b9/0x29f [ 446.454893] ? arch_local_irq_restore+0x52/0x52 [ 446.459573] ? kasan_check_read+0x11/0x20 [ 446.463726] warn_alloc.cold.119+0xb2/0x1b8 [ 446.468064] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 446.473224] ? kasan_check_write+0x14/0x20 [ 446.477463] ? lock_repin_lock+0x410/0x410 [ 446.481718] __vmalloc_node_range+0x45e/0x720 [ 446.486212] ? graph_lock+0x170/0x170 [ 446.490019] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 446.494864] __vmalloc_node_flags_caller+0x50/0x60 [ 446.499799] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 446.504639] kvmalloc_node+0xde/0x100 [ 446.508438] kvm_arch_create_memslot+0xa3/0x4e0 [ 446.513118] __kvm_set_memory_region+0x1d1b/0x2e50 [ 446.518089] ? kvm_vcpu_block+0x1050/0x1050 [ 446.522424] ? zap_class+0x720/0x720 [ 446.526149] ? check_same_owner+0x320/0x320 [ 446.530490] ? rcu_note_context_switch+0x710/0x710 [ 446.535432] ? lock_acquire+0x1dc/0x520 [ 446.539430] ? graph_lock+0x170/0x170 [ 446.543233] ? __might_sleep+0x95/0x190 [ 446.547210] ? refill_pi_state_cache.part.7+0x300/0x300 [ 446.552588] ? find_held_lock+0x36/0x1c0 [ 446.556684] ? lock_downgrade+0x8e0/0x8e0 [ 446.560865] kvm_set_memory_region+0x2e/0x50 [ 446.565267] kvm_vm_ioctl+0x668/0x1d90 [ 446.569143] ? perf_tp_event+0xc30/0xc30 [ 446.573194] ? kasan_check_write+0x14/0x20 [ 446.577421] ? kvm_set_memory_region+0x50/0x50 [ 446.581992] ? memset+0x31/0x40 [ 446.585271] ? perf_trace_lock+0x495/0x900 [ 446.589519] ? zap_class+0x720/0x720 [ 446.593231] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 446.598416] ? graph_lock+0x170/0x170 [ 446.602219] ? exit_robust_list+0x290/0x290 [ 446.606540] ? find_held_lock+0x36/0x1c0 [ 446.610602] ? lock_downgrade+0x8e0/0x8e0 [ 446.614747] ? lock_downgrade+0x8e0/0x8e0 [ 446.618904] ? rcu_is_watching+0x85/0x140 [ 446.623055] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 446.628248] ? __fget+0x40c/0x650 [ 446.631717] ? expand_files.part.8+0x9a0/0x9a0 [ 446.636296] ? lock_downgrade+0x8e0/0x8e0 [ 446.640450] ? lock_release+0xa10/0xa10 [ 446.644428] ? kvm_set_memory_region+0x50/0x50 [ 446.649003] do_vfs_ioctl+0x1cf/0x1650 [ 446.652896] ? ioctl_preallocate+0x2e0/0x2e0 [ 446.657295] ? fget_raw+0x20/0x20 [ 446.660740] ? security_file_mprotect+0x9b/0xd0 [ 446.665423] ? SyS_futex+0x3a4/0x56d [ 446.669161] ? do_futex+0x27d0/0x27d0 [ 446.672978] ? security_file_ioctl+0x9b/0xd0 [ 446.677412] ksys_ioctl+0xa9/0xd0 [ 446.680889] SyS_ioctl+0x24/0x30 [ 446.684268] ? ksys_ioctl+0xd0/0xd0 [ 446.687914] do_syscall_64+0x29e/0x9d0 [ 446.691813] ? vmalloc_sync_all+0x30/0x30 [ 446.695976] ? _raw_spin_unlock_irq+0x27/0x70 [ 446.700491] ? finish_task_switch+0x1ca/0x820 [ 446.705007] ? syscall_return_slowpath+0x5c0/0x5c0 [ 446.709938] ? syscall_return_slowpath+0x30f/0x5c0 [ 446.714862] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 446.720218] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 446.725071] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 446.730258] RIP: 0033:0x4552d9 [ 446.733437] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 446.741147] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 446.748414] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 446.755687] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 446.762945] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 446.770202] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:12:43 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'bcsh0\x00', 0x800413}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000180)={'bcsh0\x00', 0x1002}) 2018/04/06 06:12:43 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c90800010002027373", 0x24}], 0x1}, 0x0) 2018/04/06 06:12:43 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x8100000000000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xfffffffd, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:43 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:12:43 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x88a8ffff00000000]}) 2018/04/06 06:12:43 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x6800000000000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:43 executing program 7: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x60000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000006c0)={'raw\x00'}, &(0x7f0000000780)=0x54) 2018/04/06 06:12:43 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x8000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) [ 446.985740] IPVS: ftp: loaded support on port[0] = 21 [ 446.992904] : renamed from bcsh0 [ 447.056764] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 447.068590] syz-executor6 cpuset=syz6 mems_allowed=0 [ 447.073937] CPU: 1 PID: 26816 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 447.080783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.090137] Call Trace: [ 447.092741] dump_stack+0x1b9/0x29f [ 447.096385] ? arch_local_irq_restore+0x52/0x52 [ 447.101071] ? kasan_check_read+0x11/0x20 [ 447.105237] warn_alloc.cold.119+0xb2/0x1b8 [ 447.109576] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 447.114418] ? trace_hardirqs_on+0xd/0x10 [ 447.118552] ? _raw_spin_unlock_irq+0x27/0x70 [ 447.123042] ? finish_task_switch+0x1ca/0x820 [ 447.127526] ? lock_repin_lock+0x410/0x410 [ 447.131748] __vmalloc_node_range+0x45e/0x720 [ 447.136229] ? graph_lock+0x170/0x170 [ 447.140025] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 447.144866] __vmalloc_node_flags_caller+0x50/0x60 [ 447.149788] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 447.154615] kvmalloc_node+0xde/0x100 [ 447.158402] kvm_arch_create_memslot+0xa3/0x4e0 [ 447.163066] __kvm_set_memory_region+0x1d1b/0x2e50 [ 447.167987] ? kvm_vcpu_block+0x1050/0x1050 [ 447.172298] ? zap_class+0x720/0x720 [ 447.176003] ? check_same_owner+0x320/0x320 [ 447.180325] ? rcu_note_context_switch+0x710/0x710 [ 447.185247] ? lock_acquire+0x1dc/0x520 [ 447.189209] ? graph_lock+0x170/0x170 [ 447.192996] ? __might_sleep+0x95/0x190 [ 447.196961] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.202480] ? futex_wait_queue_me+0x559/0x820 [ 447.207060] ? refill_pi_state_cache.part.7+0x300/0x300 [ 447.212431] ? find_held_lock+0x36/0x1c0 [ 447.216492] ? lock_downgrade+0x8e0/0x8e0 [ 447.220638] kvm_set_memory_region+0x2e/0x50 [ 447.225042] kvm_vm_ioctl+0x668/0x1d90 [ 447.228913] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 447.233997] ? futex_wake+0x2f6/0x750 [ 447.237788] ? kvm_set_memory_region+0x50/0x50 [ 447.242357] ? get_futex_key+0x1e90/0x1e90 [ 447.246575] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 447.251575] ? perf_trace_lock+0xd6/0x900 [ 447.255710] ? zap_class+0x720/0x720 [ 447.259405] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 447.264579] ? do_futex+0x249/0x27d0 [ 447.268273] ? native_flush_tlb_others+0x690/0x690 [ 447.273183] ? graph_lock+0x170/0x170 [ 447.276968] ? check_same_owner+0x320/0x320 [ 447.281276] ? exit_robust_list+0x290/0x290 [ 447.285581] ? find_held_lock+0x36/0x1c0 [ 447.289628] ? lock_downgrade+0x8e0/0x8e0 [ 447.293762] ? rcu_is_watching+0x85/0x140 [ 447.297891] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 447.303073] ? __fget+0x40c/0x650 [ 447.306513] ? expand_files.part.8+0x9a0/0x9a0 [ 447.311079] ? lock_downgrade+0x8e0/0x8e0 [ 447.315218] ? __split_vma+0x5ac/0x7f0 [ 447.319101] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.324618] ? vma_set_page_prot+0x183/0x260 [ 447.329011] ? kvm_set_memory_region+0x50/0x50 [ 447.333583] do_vfs_ioctl+0x1cf/0x1650 [ 447.337466] ? ioctl_preallocate+0x2e0/0x2e0 [ 447.341868] ? fget_raw+0x20/0x20 [ 447.345313] ? SyS_futex+0x3a4/0x56d [ 447.349014] ? do_futex+0x27d0/0x27d0 [ 447.352809] ? security_file_ioctl+0x9b/0xd0 [ 447.357199] ksys_ioctl+0xa9/0xd0 [ 447.360651] SyS_ioctl+0x24/0x30 [ 447.364013] ? ksys_ioctl+0xd0/0xd0 [ 447.367634] do_syscall_64+0x29e/0x9d0 [ 447.371507] ? vmalloc_sync_all+0x30/0x30 [ 447.375638] ? _raw_spin_unlock_irq+0x27/0x70 [ 447.380117] ? finish_task_switch+0x1ca/0x820 [ 447.384608] ? syscall_return_slowpath+0x5c0/0x5c0 [ 447.389519] ? syscall_return_slowpath+0x30f/0x5c0 [ 447.394443] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 447.399803] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 447.404644] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 447.409826] RIP: 0033:0x4552d9 [ 447.412996] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.420704] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 447.427957] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 447.435208] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 447.442458] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 447.449710] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 447.457368] warn_alloc_show_mem: 1 callbacks suppressed [ 447.457375] Mem-Info: [ 447.465189] active_anon:131782 inactive_anon:79 isolated_anon:0 [ 447.465189] active_file:22859 inactive_file:11827 isolated_file:0 [ 447.465189] unevictable:0 dirty:158 writeback:0 unstable:0 [ 447.465189] slab_reclaimable:12448 slab_unreclaimable:101723 [ 447.465189] mapped:73948 shmem:86 pagetables:1040 bounce:0 [ 447.465189] free:1251658 free_pcp:559 free_cma:0 [ 447.499000] Node 0 active_anon:527128kB inactive_anon:316kB active_file:91436kB inactive_file:47308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295792kB dirty:632kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 385024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 447.527181] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 447.553340] lowmem_reserve[]: 0 2833 6338 6338 [ 447.557969] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:700kB free_cma:0kB [ 447.585708] lowmem_reserve[]: 0 0 3505 3505 [ 447.590072] Node 0 Normal free:2087580kB min:37284kB low:46604kB high:55924kB active_anon:527128kB inactive_anon:316kB active_file:91436kB inactive_file:47308kB unevictable:0kB writepending:632kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5472kB pagetables:4160kB bounce:0kB free_pcp:1296kB local_pcp:644kB free_cma:0kB [ 447.619960] lowmem_reserve[]: 0 0 0 0 [ 447.623814] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 447.637533] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 447.653401] Node 0 Normal: 161*4kB (UME) 1557*8kB (UME) 1517*16kB (UME) 977*32kB (UME) 574*64kB (UME) 228*128kB (UME) 105*256kB (UME) 70*512kB (UM) 32*1024kB (UM) 35*2048kB (UME) 436*4096kB (UM) = 2087580kB [ 447.672053] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 447.680654] 34770 total pagecache pages [ 447.684666] 0 pages in swap cache [ 447.688133] Swap cache stats: add 0, delete 0, find 0/0 [ 447.693511] Free swap = 0kB [ 447.696540] Total swap = 0kB [ 447.699573] 1965969 pages RAM [ 447.702688] 0 pages HighMem/MovableOnly [ 447.706682] 338524 pages reserved [ 447.741179] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 447.752976] syz-executor6 cpuset=syz6 mems_allowed=0 [ 447.758199] CPU: 1 PID: 26828 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 447.765039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.774386] Call Trace: [ 447.776976] dump_stack+0x1b9/0x29f [ 447.780619] ? arch_local_irq_restore+0x52/0x52 [ 447.785296] ? kasan_check_read+0x11/0x20 [ 447.789454] warn_alloc.cold.119+0xb2/0x1b8 [ 447.793786] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 447.798622] ? trace_hardirqs_on+0xd/0x10 [ 447.802760] ? _raw_spin_unlock_irq+0x27/0x70 [ 447.807238] ? finish_task_switch+0x1ca/0x820 [ 447.811728] ? lock_repin_lock+0x410/0x410 [ 447.815951] __vmalloc_node_range+0x45e/0x720 [ 447.820433] ? graph_lock+0x170/0x170 [ 447.824225] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 447.829053] __vmalloc_node_flags_caller+0x50/0x60 [ 447.833968] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 447.838798] kvmalloc_node+0xde/0x100 [ 447.842587] kvm_arch_create_memslot+0xa3/0x4e0 [ 447.847252] __kvm_set_memory_region+0x1d1b/0x2e50 [ 447.852177] ? kvm_vcpu_block+0x1050/0x1050 [ 447.856483] ? print_usage_bug+0xc0/0xc0 [ 447.860529] ? zap_class+0x720/0x720 [ 447.864230] ? check_same_owner+0x320/0x320 [ 447.868542] ? rcu_note_context_switch+0x710/0x710 [ 447.873452] ? lock_acquire+0x1dc/0x520 [ 447.877417] ? graph_lock+0x170/0x170 [ 447.881200] ? __might_sleep+0x95/0x190 [ 447.885162] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.890685] ? futex_wait_queue_me+0x559/0x820 [ 447.895247] ? __lock_acquire+0x7f5/0x5130 [ 447.899468] ? refill_pi_state_cache.part.7+0x300/0x300 [ 447.904824] ? find_held_lock+0x36/0x1c0 [ 447.908876] ? lock_downgrade+0x8e0/0x8e0 [ 447.913039] kvm_set_memory_region+0x2e/0x50 [ 447.917433] kvm_vm_ioctl+0x668/0x1d90 [ 447.921307] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.926830] ? __perf_event_task_sched_in+0x247/0xb80 [ 447.932006] ? kvm_set_memory_region+0x50/0x50 [ 447.936584] ? find_held_lock+0x36/0x1c0 [ 447.940632] ? perf_trace_lock+0xd6/0x900 [ 447.944770] ? zap_class+0x720/0x720 [ 447.948468] ? finish_task_switch+0x182/0x820 [ 447.952949] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 447.958126] ? do_futex+0x249/0x27d0 [ 447.961823] ? kasan_check_read+0x11/0x20 [ 447.965955] ? graph_lock+0x170/0x170 [ 447.969737] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 447.974304] ? compat_start_thread+0x80/0x80 [ 447.978698] ? _raw_spin_unlock_irq+0x27/0x70 [ 447.983180] ? exit_robust_list+0x290/0x290 [ 447.987486] ? find_held_lock+0x36/0x1c0 [ 447.991538] ? lock_downgrade+0x8e0/0x8e0 [ 447.995673] ? rcu_is_watching+0x85/0x140 [ 447.999806] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 448.004985] ? __fget+0x40c/0x650 [ 448.008430] ? expand_files.part.8+0x9a0/0x9a0 [ 448.012997] ? inet6_net_init+0x870/0x870 [ 448.017137] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 448.022314] ? kvm_set_memory_region+0x50/0x50 [ 448.026883] do_vfs_ioctl+0x1cf/0x1650 [ 448.030757] ? ioctl_preallocate+0x2e0/0x2e0 [ 448.035150] ? fget_raw+0x20/0x20 [ 448.038596] ? SyS_futex+0x3a4/0x56d [ 448.042295] ? exit_to_usermode_loop+0x87/0x310 [ 448.046947] ? do_futex+0x27d0/0x27d0 [ 448.050731] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.056253] ? security_file_ioctl+0x9b/0xd0 [ 448.060647] ksys_ioctl+0xa9/0xd0 [ 448.064087] SyS_ioctl+0x24/0x30 [ 448.067437] ? ksys_ioctl+0xd0/0xd0 [ 448.071049] do_syscall_64+0x29e/0x9d0 [ 448.074923] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 448.079752] ? syscall_return_slowpath+0x5c0/0x5c0 [ 448.084667] ? syscall_return_slowpath+0x30f/0x5c0 [ 448.089586] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 448.094936] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 448.099768] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 448.104940] RIP: 0033:0x4552d9 [ 448.108115] RSP: 002b:00007f735423ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 448.115811] RAX: ffffffffffffffda RBX: 00007f735423f6d4 RCX: 00000000004552d9 [ 448.123062] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 448.130313] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 2018/04/06 06:12:44 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:12:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xe0, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:44 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff0058", 0x2a}], 0x1}, 0x0) 2018/04/06 06:12:44 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x88caffff, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:44 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x43050000]}) 2018/04/06 06:12:44 executing program 5: r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f00009d3000)={&(0x7f0000c15000)={0x10}, 0xc, &(0x7f00001e5ff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001200db4d0000000000000000fffffffc0000000000000000000000000000000000400000240008001d0008000000150069cc8910cf7a5164ef891111a0edabf37c1fd93a0d00000003e5a69b314facb648db1566ddd9fbe847e444cc02b288f5f1fd5703f10eb8ed369c2c820408b291522ddb4a005c904fdd1cc74574d6487555315da5827e9fd6225b8180e32c7efea51aa4953aad6caac2598ebf9b3b0486db9ff6caee38c4e8821ae544e8868a559426525e566421c2bea962bc8dd60ef260960d05e3dd2cb20860816496ebbb078bf9a80767060fca2fcf323d8dba1053e3441fdda190ae2c9eaf48b6049f2cb19e8c6fa33477eca42e949d146d5720df3f26e1f7e8b0f1db98d49bf23a08962da95f718e5a"], 0x1}, 0x1}, 0x0) 2018/04/06 06:12:44 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x8000000000000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:44 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="db961f977bb1c78cb8c2fe4fca7af44c5890204f16aae7cee09384c1df7e7b5e4177b9505dbe91dd03de0a2b189bd1bc09651dfddf25f8b3650af5020f361852854d12b037fc54fe041a60f1063585a230bda368ea062570ff97bd2592bebf7f5c035eede872a718d4ca945b", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r1}, &(0x7f0000000040)=0x8) [ 448.137566] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 448.144817] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000001 2018/04/06 06:12:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0x10, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:44 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff0058", 0x2a}], 0x1}, 0x0) 2018/04/06 06:12:44 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0xf000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:44 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x800e]}) 2018/04/06 06:12:44 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1, 0x64) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) r3 = dup2(r1, r1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x10}}, 0x80, 0x9, 0x3, 0x4, 0x1f}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000100)={0x54b630d3, 0x211, 0x8, 0x8, 0x9, 0x1, 0x1d, 0x66, r4}, 0x20) r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000240)='big_key\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)='\x00', 0xfffffffffffffffc) keyctl$link(0x8, r5, r6) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000becfff)='^', 0x1, 0x100000004007fff, &(0x7f0000109ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000340), &(0x7f0000000380)=0x4) 2018/04/06 06:12:44 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x80000002) [ 448.340470] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 448.352275] syz-executor6 cpuset=syz6 mems_allowed=0 [ 448.357477] CPU: 1 PID: 26853 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 448.364325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.373684] Call Trace: [ 448.376282] dump_stack+0x1b9/0x29f [ 448.379922] ? arch_local_irq_restore+0x52/0x52 [ 448.384609] ? kasan_check_read+0x11/0x20 [ 448.388775] warn_alloc.cold.119+0xb2/0x1b8 [ 448.393115] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 448.397962] ? trace_hardirqs_on+0xd/0x10 [ 448.402126] ? _raw_spin_unlock_irq+0x27/0x70 [ 448.406629] ? finish_task_switch+0x1ca/0x820 [ 448.411148] ? lock_repin_lock+0x410/0x410 [ 448.415400] __vmalloc_node_range+0x45e/0x720 [ 448.419911] ? graph_lock+0x170/0x170 [ 448.423730] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 448.428583] __vmalloc_node_flags_caller+0x50/0x60 [ 448.433530] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 448.438388] kvmalloc_node+0xde/0x100 [ 448.442205] kvm_arch_create_memslot+0xa3/0x4e0 [ 448.446886] __kvm_set_memory_region+0x1d1b/0x2e50 [ 448.451817] ? kvm_vcpu_block+0x1050/0x1050 [ 448.456126] ? zap_class+0x720/0x720 [ 448.459823] ? check_same_owner+0x320/0x320 [ 448.464133] ? rcu_note_context_switch+0x710/0x710 [ 448.469044] ? lock_acquire+0x1dc/0x520 [ 448.473018] ? graph_lock+0x170/0x170 [ 448.476813] ? __might_sleep+0x95/0x190 [ 448.480775] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.486297] ? futex_wait_queue_me+0x559/0x820 [ 448.490869] ? refill_pi_state_cache.part.7+0x300/0x300 [ 448.496223] ? find_held_lock+0x36/0x1c0 [ 448.500274] ? lock_downgrade+0x8e0/0x8e0 [ 448.504428] kvm_set_memory_region+0x2e/0x50 [ 448.508824] kvm_vm_ioctl+0x668/0x1d90 [ 448.512701] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 448.517791] ? futex_wake+0x2f6/0x750 [ 448.521580] ? kvm_set_memory_region+0x50/0x50 [ 448.526150] ? get_futex_key+0x1e90/0x1e90 [ 448.530374] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 448.535376] ? perf_trace_lock+0xd6/0x900 [ 448.539514] ? zap_class+0x720/0x720 [ 448.543212] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 448.548386] ? do_futex+0x249/0x27d0 [ 448.552118] ? native_flush_tlb_others+0x690/0x690 [ 448.557040] ? graph_lock+0x170/0x170 [ 448.560823] ? check_same_owner+0x320/0x320 [ 448.565134] ? exit_robust_list+0x290/0x290 [ 448.569441] ? find_held_lock+0x36/0x1c0 [ 448.573491] ? lock_downgrade+0x8e0/0x8e0 [ 448.577628] ? rcu_is_watching+0x85/0x140 [ 448.581760] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 448.586940] ? __fget+0x40c/0x650 [ 448.590384] ? expand_files.part.8+0x9a0/0x9a0 [ 448.594950] ? lock_downgrade+0x8e0/0x8e0 [ 448.599085] ? __split_vma+0x5ac/0x7f0 [ 448.602967] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.608489] ? vma_set_page_prot+0x183/0x260 [ 448.612883] ? kvm_set_memory_region+0x50/0x50 [ 448.617449] do_vfs_ioctl+0x1cf/0x1650 [ 448.621322] ? ioctl_preallocate+0x2e0/0x2e0 [ 448.625718] ? fget_raw+0x20/0x20 [ 448.629164] ? SyS_futex+0x3a4/0x56d [ 448.632863] ? do_futex+0x27d0/0x27d0 [ 448.636650] ? security_file_ioctl+0x9b/0xd0 [ 448.641044] ksys_ioctl+0xa9/0xd0 [ 448.644483] SyS_ioctl+0x24/0x30 [ 448.647831] ? ksys_ioctl+0xd0/0xd0 [ 448.651443] do_syscall_64+0x29e/0x9d0 [ 448.655315] ? vmalloc_sync_all+0x30/0x30 [ 448.659446] ? _raw_spin_unlock_irq+0x27/0x70 [ 448.663924] ? finish_task_switch+0x1ca/0x820 [ 448.668404] ? syscall_return_slowpath+0x5c0/0x5c0 [ 448.673317] ? syscall_return_slowpath+0x30f/0x5c0 [ 448.678236] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 448.683590] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 448.688422] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 448.693592] RIP: 0033:0x4552d9 [ 448.696763] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 448.704453] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 448.711707] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 448.718958] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 448.726210] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 448.733461] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 448.740946] warn_alloc_show_mem: 1 callbacks suppressed [ 448.740949] Mem-Info: [ 448.748808] active_anon:131276 inactive_anon:77 isolated_anon:0 [ 448.748808] active_file:22862 inactive_file:11841 isolated_file:0 [ 448.748808] unevictable:0 dirty:189 writeback:0 unstable:0 [ 448.748808] slab_reclaimable:12468 slab_unreclaimable:101749 [ 448.748808] mapped:73925 shmem:86 pagetables:1100 bounce:0 [ 448.748808] free:1252114 free_pcp:450 free_cma:0 [ 448.782661] Node 0 active_anon:525176kB inactive_anon:308kB active_file:91448kB inactive_file:47364kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295700kB dirty:756kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 378880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 448.810849] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 448.837064] lowmem_reserve[]: 0 2833 6338 6338 [ 448.841733] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:700kB free_cma:0kB [ 448.869518] lowmem_reserve[]: 0 0 3505 3505 [ 448.873902] Node 0 Normal free:2080648kB min:37284kB low:46604kB high:55924kB active_anon:533340kB inactive_anon:308kB active_file:91448kB inactive_file:47364kB unevictable:0kB writepending:756kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5472kB pagetables:4104kB bounce:0kB free_pcp:1252kB local_pcp:536kB free_cma:0kB [ 448.904036] lowmem_reserve[]: 0 0 0 0 [ 448.907895] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 448.921533] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 448.937407] Node 0 Normal: 172*4kB (UME) 1470*8kB (UME) 1545*16kB (UME) 1004*32kB (UME) 573*64kB (UME) 228*128kB (UME) 105*256kB (UME) 70*512kB (UM) 32*1024kB (UM) 36*2048kB (UME) 436*4096kB (UM) = 2090224kB [ 448.956174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 448.964793] 34787 total pagecache pages [ 448.968799] 0 pages in swap cache [ 448.972266] Swap cache stats: add 0, delete 0, find 0/0 [ 448.977643] Free swap = 0kB [ 448.980664] Total swap = 0kB [ 448.983695] 1965969 pages RAM [ 448.986810] 0 pages HighMem/MovableOnly [ 448.990818] 338524 pages reserved [ 449.022621] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 449.034428] syz-executor6 cpuset=syz6 mems_allowed=0 [ 449.039611] CPU: 0 PID: 26880 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 449.046445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.055790] Call Trace: [ 449.058378] dump_stack+0x1b9/0x29f [ 449.062011] ? arch_local_irq_restore+0x52/0x52 [ 449.066685] ? kasan_check_read+0x11/0x20 [ 449.070835] warn_alloc.cold.119+0xb2/0x1b8 [ 449.075156] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 449.079995] ? trace_hardirqs_on+0xd/0x10 [ 449.084144] ? _raw_spin_unlock_irq+0x27/0x70 [ 449.088639] ? finish_task_switch+0x1ca/0x820 [ 449.093145] ? lock_repin_lock+0x410/0x410 [ 449.097388] __vmalloc_node_range+0x45e/0x720 [ 449.101887] ? graph_lock+0x170/0x170 [ 449.105690] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 449.110529] __vmalloc_node_flags_caller+0x50/0x60 [ 449.115458] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 449.120300] kvmalloc_node+0xde/0x100 [ 449.124105] kvm_arch_create_memslot+0xa3/0x4e0 [ 449.128784] __kvm_set_memory_region+0x1d1b/0x2e50 [ 449.133726] ? kvm_vcpu_block+0x1050/0x1050 [ 449.138048] ? print_usage_bug+0xc0/0xc0 [ 449.142108] ? zap_class+0x720/0x720 [ 449.145819] ? check_same_owner+0x320/0x320 [ 449.150144] ? rcu_note_context_switch+0x710/0x710 [ 449.155068] ? lock_acquire+0x1dc/0x520 [ 449.159041] ? graph_lock+0x170/0x170 [ 449.162839] ? __might_sleep+0x95/0x190 [ 449.166815] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.172349] ? futex_wait_queue_me+0x559/0x820 [ 449.176924] ? __lock_acquire+0x7f5/0x5130 [ 449.181157] ? refill_pi_state_cache.part.7+0x300/0x300 [ 449.186524] ? find_held_lock+0x36/0x1c0 [ 449.190596] ? lock_downgrade+0x8e0/0x8e0 [ 449.194772] kvm_set_memory_region+0x2e/0x50 [ 449.199181] kvm_vm_ioctl+0x668/0x1d90 [ 449.203073] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.208608] ? __perf_event_task_sched_in+0x247/0xb80 [ 449.213796] ? kvm_set_memory_region+0x50/0x50 [ 449.218385] ? find_held_lock+0x36/0x1c0 [ 449.222448] ? perf_trace_lock+0xd6/0x900 [ 449.226603] ? zap_class+0x720/0x720 [ 449.230312] ? finish_task_switch+0x182/0x820 [ 449.234806] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 449.239992] ? do_futex+0x249/0x27d0 [ 449.243703] ? kasan_check_read+0x11/0x20 [ 449.247850] ? graph_lock+0x170/0x170 [ 449.251651] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 449.256231] ? compat_start_thread+0x80/0x80 [ 449.260640] ? _raw_spin_unlock_irq+0x27/0x70 [ 449.265138] ? exit_robust_list+0x290/0x290 [ 449.269464] ? find_held_lock+0x36/0x1c0 [ 449.273530] ? lock_downgrade+0x8e0/0x8e0 [ 449.277684] ? rcu_is_watching+0x85/0x140 [ 449.281827] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 449.287022] ? __fget+0x40c/0x650 [ 449.290480] ? expand_files.part.8+0x9a0/0x9a0 [ 449.295058] ? inet6_net_init+0x870/0x870 [ 449.299205] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 449.304400] ? kvm_set_memory_region+0x50/0x50 [ 449.308977] do_vfs_ioctl+0x1cf/0x1650 [ 449.312867] ? ioctl_preallocate+0x2e0/0x2e0 [ 449.317274] ? fget_raw+0x20/0x20 [ 449.320731] ? SyS_futex+0x3a4/0x56d [ 449.324441] ? exit_to_usermode_loop+0x87/0x310 [ 449.329106] ? do_futex+0x27d0/0x27d0 [ 449.332903] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.338440] ? security_file_ioctl+0x9b/0xd0 [ 449.342847] ksys_ioctl+0xa9/0xd0 [ 449.346302] SyS_ioctl+0x24/0x30 [ 449.349666] ? ksys_ioctl+0xd0/0xd0 [ 449.353302] do_syscall_64+0x29e/0x9d0 [ 449.357186] ? vmalloc_sync_all+0x30/0x30 [ 449.361330] ? _raw_spin_unlock_irq+0x27/0x70 [ 449.365825] ? finish_task_switch+0x1ca/0x820 [ 449.370318] ? syscall_return_slowpath+0x5c0/0x5c0 [ 449.375249] ? syscall_return_slowpath+0x30f/0x5c0 [ 449.380184] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 449.385552] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 449.390401] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 449.395591] RIP: 0033:0x4552d9 [ 449.398776] RSP: 002b:00007f735423ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.406482] RAX: ffffffffffffffda RBX: 00007f735423f6d4 RCX: 00000000004552d9 [ 449.413743] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 449.421021] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 449.428287] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 449.435548] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000001 2018/04/06 06:12:45 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0xfffffffd]}) 2018/04/06 06:12:45 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff0058", 0x2a}], 0x1}, 0x0) 2018/04/06 06:12:45 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2, 0x4e20}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) recvfrom$inet(r0, &(0x7f0000eeff8d)=""/115, 0xfffffffffffffcfb, 0x1, &(0x7f0000898ff0)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x8, 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)) ioctl$sock_netrom_SIOCGSTAMPNS(r1, 0x8906, &(0x7f0000ef6ffc)) 2018/04/06 06:12:45 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x20000001) 2018/04/06 06:12:45 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0xa00000000000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xffffffffffffffe0, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:45 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x67, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:45 executing program 7: mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1, &(0x7f000000cff8), 0x9, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0xc1) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) mlock2(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0) 2018/04/06 06:12:46 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv4_newaddr={0x20, 0x14, 0x101, 0x0, 0x0, {0x2}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14}}]}, 0x20}, 0x1}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001300)={@dev, @loopback, 0x0}, &(0x7f0000001340)=0xc) sendmsg$nl_route(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8800000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="0a0000000800010000000000000000680000000000000000", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2018/04/06 06:12:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e", 0x2d}], 0x1}, 0x0) 2018/04/06 06:12:46 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x4305000000000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0x2, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:46 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x11]}) 2018/04/06 06:12:46 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1400) 2018/04/06 06:12:46 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x3, 0x4) socketpair(0x11, 0x805, 0xfff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100)={0x1}, 0x4) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)={0x1000080000a, 0x7fff}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x6, 0x5, 0x2, 0xfff}, {0x114, 0x1000, 0x6, 0x80}, {0x100000001, 0xfffffffffffffffc, 0x6, 0x401}, {0x6, 0x9, 0x0, 0x8}, {0x2, 0x2, 0x3, 0x1}]}, 0x10) [ 449.789703] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 449.801588] syz-executor6 cpuset=syz6 mems_allowed=0 [ 449.806814] CPU: 0 PID: 26904 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 449.813665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.823028] Call Trace: [ 449.825637] dump_stack+0x1b9/0x29f [ 449.829287] ? arch_local_irq_restore+0x52/0x52 [ 449.833990] warn_alloc.cold.119+0xb2/0x1b8 [ 449.838329] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 449.843193] ? perf_swevent_event+0x158/0x2e0 [ 449.847707] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 449.853273] ? print_usage_bug+0xc0/0xc0 [ 449.857369] __vmalloc_node_range+0x45e/0x720 [ 449.861889] ? graph_lock+0x170/0x170 [ 449.865717] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 449.870577] __vmalloc_node_flags_caller+0x50/0x60 [ 449.875520] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 449.880378] kvmalloc_node+0xde/0x100 [ 449.884195] kvm_arch_create_memslot+0xa3/0x4e0 [ 449.888893] __kvm_set_memory_region+0x1d1b/0x2e50 [ 449.893858] ? kvm_vcpu_block+0x1050/0x1050 [ 449.898199] ? zap_class+0x720/0x720 [ 449.901922] ? perf_trace_lock+0x495/0x900 [ 449.906176] ? graph_lock+0x170/0x170 [ 449.909983] ? zap_class+0x720/0x720 [ 449.913733] ? find_held_lock+0x36/0x1c0 [ 449.917823] ? lock_downgrade+0x8e0/0x8e0 [ 449.922036] kvm_set_memory_region+0x2e/0x50 [ 449.926454] kvm_vm_ioctl+0x668/0x1d90 [ 449.930361] ? perf_tp_event+0xc30/0xc30 [ 449.934435] ? __perf_event_task_sched_in+0x247/0xb80 [ 449.939638] ? kvm_set_memory_region+0x50/0x50 [ 449.944235] ? memset+0x31/0x40 [ 449.947535] ? perf_trace_lock+0x495/0x900 [ 449.951799] ? zap_class+0x720/0x720 [ 449.955518] ? finish_task_switch+0x182/0x820 [ 449.960035] ? kasan_check_read+0x11/0x20 [ 449.964191] ? graph_lock+0x170/0x170 [ 449.967996] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 449.972587] ? compat_start_thread+0x80/0x80 [ 449.977004] ? _raw_spin_unlock_irq+0x27/0x70 [ 449.981519] ? trace_hardirqs_on+0xd/0x10 [ 449.985677] ? _raw_spin_unlock_irq+0x27/0x70 [ 449.990187] ? find_held_lock+0x36/0x1c0 [ 449.994273] ? lock_downgrade+0x8e0/0x8e0 [ 449.998441] ? rcu_is_watching+0x85/0x140 [ 450.002600] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 450.007818] ? __fget+0x40c/0x650 [ 450.011292] ? expand_files.part.8+0x9a0/0x9a0 [ 450.015876] ? lock_downgrade+0x8e0/0x8e0 [ 450.020044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.025596] ? kvm_set_memory_region+0x50/0x50 [ 450.030185] do_vfs_ioctl+0x1cf/0x1650 [ 450.034701] ? ioctl_preallocate+0x2e0/0x2e0 [ 450.039119] ? fget_raw+0x20/0x20 [ 450.042600] ? exit_to_usermode_loop+0x87/0x310 [ 450.047286] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.052832] ? security_file_ioctl+0x9b/0xd0 [ 450.057254] ksys_ioctl+0xa9/0xd0 [ 450.060722] SyS_ioctl+0x24/0x30 [ 450.064093] ? ksys_ioctl+0xd0/0xd0 [ 450.067726] do_syscall_64+0x29e/0x9d0 [ 450.071622] ? vmalloc_sync_all+0x30/0x30 [ 450.075776] ? _raw_spin_unlock_irq+0x27/0x70 [ 450.080279] ? finish_task_switch+0x1ca/0x820 [ 450.084788] ? syscall_return_slowpath+0x5c0/0x5c0 [ 450.089730] ? syscall_return_slowpath+0x30f/0x5c0 [ 450.094676] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 450.100055] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 450.104920] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 450.110113] RIP: 0033:0x4552d9 [ 450.113307] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.121027] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 450.128298] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 450.135571] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 450.142842] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 450.150112] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 450.157543] warn_alloc_show_mem: 1 callbacks suppressed [ 450.157549] Mem-Info: [ 450.165556] active_anon:133365 inactive_anon:78 isolated_anon:0 [ 450.165556] active_file:22862 inactive_file:11854 isolated_file:0 [ 450.165556] unevictable:0 dirty:202 writeback:0 unstable:0 [ 450.165556] slab_reclaimable:12491 slab_unreclaimable:101706 2018/04/06 06:12:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e", 0x2d}], 0x1}, 0x0) [ 450.165556] mapped:73992 shmem:86 pagetables:1098 bounce:0 [ 450.165556] free:1249982 free_pcp:446 free_cma:0 [ 450.199436] Node 0 active_anon:531396kB inactive_anon:312kB active_file:91448kB inactive_file:47416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295768kB dirty:808kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 387072kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 450.227620] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 450.253842] lowmem_reserve[]: 0 2833 6338 6338 [ 450.258551] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:224kB free_cma:0kB [ 450.286329] lowmem_reserve[]: 0 0 3505 3505 [ 450.290782] Node 0 Normal free:2085636kB min:37284kB low:46604kB high:55924kB active_anon:529232kB inactive_anon:312kB active_file:91448kB inactive_file:47416kB unevictable:0kB writepending:808kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5568kB pagetables:4244kB bounce:0kB free_pcp:920kB local_pcp:328kB free_cma:0kB [ 450.320645] lowmem_reserve[]: 0 0 0 0 [ 450.324593] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 450.338411] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 450.354466] Node 0 Normal: 195*4kB (UME) 1314*8kB (UME) 1559*16kB (UME) 1001*32kB (UME) 573*64kB (UME) 228*128kB (UME) 105*256kB (UME) 70*512kB (UM) 32*1024kB (UM) 34*2048kB (UME) 436*4096kB (UM) = 2085100kB [ 450.373361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 450.382046] 34800 total pagecache pages [ 450.386075] 0 pages in swap cache [ 450.390000] Swap cache stats: add 0, delete 0, find 0/0 [ 450.395425] Free swap = 0kB [ 450.398492] Total swap = 0kB [ 450.401538] 1965969 pages RAM [ 450.404674] 0 pages HighMem/MovableOnly [ 450.408677] 338524 pages reserved [ 450.445380] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 450.457198] syz-executor6 cpuset=syz6 mems_allowed=0 [ 450.462437] CPU: 1 PID: 26904 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 450.469277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.478632] Call Trace: [ 450.481225] dump_stack+0x1b9/0x29f [ 450.484855] ? arch_local_irq_restore+0x52/0x52 [ 450.489528] ? kasan_check_read+0x11/0x20 [ 450.493684] warn_alloc.cold.119+0xb2/0x1b8 [ 450.498012] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 450.502864] ? kasan_check_write+0x14/0x20 [ 450.507118] ? lock_repin_lock+0x410/0x410 [ 450.511362] __vmalloc_node_range+0x45e/0x720 [ 450.515861] ? graph_lock+0x170/0x170 [ 450.519678] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 450.524530] __vmalloc_node_flags_caller+0x50/0x60 [ 450.529468] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 450.534317] kvmalloc_node+0xde/0x100 [ 450.538122] kvm_arch_create_memslot+0xa3/0x4e0 [ 450.542814] __kvm_set_memory_region+0x1d1b/0x2e50 [ 450.547769] ? kvm_vcpu_block+0x1050/0x1050 [ 450.552098] ? zap_class+0x720/0x720 [ 450.555798] ? check_same_owner+0x320/0x320 [ 450.560106] ? rcu_note_context_switch+0x710/0x710 [ 450.565028] ? lock_acquire+0x1dc/0x520 [ 450.569000] ? graph_lock+0x170/0x170 [ 450.572807] ? __might_sleep+0x95/0x190 [ 450.576780] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.582302] ? futex_wait_queue_me+0x559/0x820 [ 450.586868] ? refill_pi_state_cache.part.7+0x300/0x300 [ 450.592222] ? find_held_lock+0x36/0x1c0 [ 450.596271] ? lock_downgrade+0x8e0/0x8e0 [ 450.600418] kvm_set_memory_region+0x2e/0x50 [ 450.604809] kvm_vm_ioctl+0x668/0x1d90 [ 450.608679] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 450.613766] ? futex_wake+0x2f6/0x750 [ 450.617549] ? trace_hardirqs_off+0xd/0x10 [ 450.621773] ? kvm_set_memory_region+0x50/0x50 [ 450.626345] ? kfree+0x111/0x260 [ 450.629705] ? get_futex_key+0x1e90/0x1e90 [ 450.633926] ? __lock_acquire+0x7f5/0x5130 [ 450.638152] ? trace_hardirqs_on+0xd/0x10 [ 450.642282] ? perf_trace_lock+0xd6/0x900 [ 450.646423] ? zap_class+0x720/0x720 [ 450.650131] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 450.655332] ? do_futex+0x249/0x27d0 [ 450.659046] ? kvm_debugfs_release+0x90/0x90 [ 450.663463] ? graph_lock+0x170/0x170 [ 450.667274] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 450.672480] ? exit_robust_list+0x290/0x290 [ 450.676813] ? find_held_lock+0x36/0x1c0 [ 450.680891] ? lock_downgrade+0x8e0/0x8e0 [ 450.685053] ? rcu_is_watching+0x85/0x140 [ 450.689201] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 450.694382] ? __fget+0x40c/0x650 [ 450.697820] ? expand_files.part.8+0x9a0/0x9a0 [ 450.702382] ? lock_downgrade+0x8e0/0x8e0 [ 450.706512] ? lock_release+0xa10/0xa10 [ 450.710474] ? kvm_set_memory_region+0x50/0x50 [ 450.715044] do_vfs_ioctl+0x1cf/0x1650 [ 450.718917] ? ioctl_preallocate+0x2e0/0x2e0 [ 450.723307] ? fget_raw+0x20/0x20 [ 450.726745] ? security_file_mprotect+0x9b/0xd0 [ 450.731396] ? SyS_futex+0x3a4/0x56d [ 450.735093] ? do_futex+0x27d0/0x27d0 [ 450.738880] ? security_file_ioctl+0x9b/0xd0 [ 450.743282] ksys_ioctl+0xa9/0xd0 [ 450.746719] SyS_ioctl+0x24/0x30 [ 450.750069] ? ksys_ioctl+0xd0/0xd0 [ 450.753679] do_syscall_64+0x29e/0x9d0 [ 450.757551] ? vmalloc_sync_all+0x30/0x30 [ 450.761681] ? _raw_spin_unlock_irq+0x27/0x70 [ 450.766170] ? finish_task_switch+0x1ca/0x820 [ 450.770659] ? syscall_return_slowpath+0x5c0/0x5c0 [ 450.775569] ? syscall_return_slowpath+0x30f/0x5c0 [ 450.780497] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 450.785847] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 450.790678] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/04/06 06:12:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x223) 2018/04/06 06:12:47 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x100000000000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0x7, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:47 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x1c]}) 2018/04/06 06:12:47 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e", 0x2d}], 0x1}, 0x0) 2018/04/06 06:12:47 executing program 7: socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x2, [0x0, 0x646]}) r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x1, 0x200400) accept4$nfc_llcp(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x60, 0x80800) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x40, @loopback={0x0, 0x1}, 0x2}, {0xa, 0x4e21, 0xffffffffffffff00, @dev={0xfe, 0x80, [], 0x18}, 0x66}, 0x6, [0x4, 0xdce9, 0x10000, 0xfffffffffffffffe, 0x7, 0xffffffff, 0x4433, 0x5]}, 0x5c) 2018/04/06 06:12:47 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x6000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) [ 450.795848] RIP: 0033:0x4552d9 [ 450.799025] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.806721] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 450.813972] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 450.821220] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 450.828472] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 450.835734] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:12:47 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2, 0x1}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000051e000)={r0, &(0x7f0000fc5000), &(0x7f0000950000)}, 0x20) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x18000, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000fccff0)={r0, &(0x7f0000fce000)}, 0x10) 2018/04/06 06:12:47 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x418, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200009c0], 0x0, &(0x7f0000000440), &(0x7f0000000f40)=ANY=[@ANYBLOB="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"]}, 0x5d4) 2018/04/06 06:12:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xc, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:47 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7f", 0x2e}], 0x1}, 0x0) 2018/04/06 06:12:47 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0xfdffffff00000000]}) 2018/04/06 06:12:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) accept4$ax25(r0, &(0x7f0000000000), &(0x7f00000013c0)=0x10, 0x80000) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r4 = accept4$ax25(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) sendmsg(r3, &(0x7f0000001340)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x1, 0x1, 0x1, 0x2, {0xa, 0x4e21, 0xffffffffffffffff, @mcast1={0xff, 0x1, [], 0x1}, 0x6}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="a12c95f84e7732911b0bbc46687eba6cb86ba7217193478333394ca0ea48aaa7d7ad81f2133a1e5819780ae0d845d34a516b859bdb732213a9bb641cafa6a3754c4d048eff00941a0a1c6aa8310fb74c9239e2e2c10dd18282a76de476a4be0ae674a0fffb44962b0de5c64a6d5442e4b3d198e8", 0x74}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="60000000000000001f010000fffffeff3c98dc61c4b8b0e15d02a75102dcbe8b065dd9a1540d6528d74de650089ff457f7db9c2f6fc470550f4ad68e1255e7565d0804f572f67d525e043702eeadcfd572aa76d7276dfedf54d476000000000010100000000000000a010000000000001aaaf220f2721b3cafe2c1f48d0669fee18d05d54ad5feb38fb5ea1c70376dd1f70e883530f08ee97c91e1d0c95a70ede186db280066b7dde1daf38436fef0199874ce577c6efd67a7eef83635865ab4c6ace5dcb4c1843616c04bb564f8a59b77ec34384fdbadb25699cfdae322823542c4b8e049bdf27da8a0656a148847fdf9d18b666390ae9200e610ee52d241a17a692d73947284ef6597bb3611c021b8658d12dd3b485bf9bb370d0f01fc896e7e0d2614b7a4e9b2c91e36d7bf21dcfe45a1b1742470bdf265092795428c9a9845adf31be31d26d76209ebe042d9e1fbd54e152d73aab4c57876ad28cb66b58b8f0a9902810daa4a692c191e625572514c60080af29be490f20d3f31c62d97948f3439d0512cd679e53c2dce106d311bf7c562090dae14eb9d1e44c96d06b4910c1b6b226f14bc343fa331d0fbfdea36d629f7ff1522edce6b5efc29eae19bed04b7b61ead371dc1e668bd1eb253f87105dbfd51ec463a2cf937f9b29ca2252159f199c45a3a6090612c0935fe9b385a0cdfb541f4da318075d0ceaf7bb43d43d10ab21f25486944289f84787fa479184efb5b40adb3cb9d687077937be50b7323eb28ed515e5b04b41f53bcb6a472d5bb829c25144bbff3ce33c768e7766e6e3727837282f6f3409ad2ee9d3a0096800ce6adef607a4933bd2853583484be94cd6e3616a82cf2de250bf80be3d40b1dfd3b31de4ebea686ab2ee5c900c05819a24f3cc695f9f9bd31461aa5599e7b7ee497d42e27480772a854019d231fb708a90a1b4a606bb618e11015c11bcb0aeb93fbc83af7e1bf320b66102fb050d1613d8e9297330473e95d385317d4dc028d6020f466016e2caac74f679eabb8284247048e8c07d662ab636708f0c025d85512e7da16553b0a2aebd11aebbbdac339c0c4bc961ce85f687f65e966244a0cb9b2cf725a0d1e7e9fca82534a2565812ddad3327200f9682f960d0bef80b01e5b4ed19e7e8721383f27375496806f85bb92adff44c579b6d37b1531c03a72ddd1ffe5b9845993e446242809e7707ba111e93a594161e469afca795e6519563c2322df4c725f0325ad15321bfa086c42892a234fe882377070a4e205a4eadcbf9dbb53c3603753eb5ec659dc5c31f437c02bd8b3b74c4d20697b93344377051b8d56be378ef415302f8f8e38e027d1579af62cfe4948a22b295f2485738422a11ec146988533189566f69c6a1a446b7091c29af04692d7e811e7f41e770cddd31f08a90d9c3a1cc200c9a73076f774b6e5717d0a492b12704acd1ca216e8a6109a63b7c4d1b909b6cbc77b8fd448bf38107169ed20912bdf640887a1059d1dd78609d7251eb83b2562678fbfa891a5d1784ce795f8b9e7b29a6c306c5331b9c9919a47eef41ff7fa2ca34ac5ad7477b6afdcb105decdc3d70de5a9a1898be994ef0d457b07f42d82d11f420dda4b25c9600f4acd9ed0ba07dacd69efd19e7a42fd0bc6486334422b3fa36b4aed1b594bf6c43fc646562b938631b5f6165cc87443a7d9c713319681de92cfec69c8359ae8fc8dd5dfbae7f3553b889a1bb433ee55d6270a4c08ee28d65745ee8534dc3c436dfd0d2e7e2dd5c7ad1041c3b8bfe9542996c8188e994a9166e8924297c4e67c2924f46e07f135a310de684c42fe5f49e039b8022bea457cb1de4b5266b9074e28f64ff7d62df213041b9263b04b4d983166cfef8fbed6a7b46f264cbdc6601e8a97642cf51ae789ca70807fcd699823dfa6feeb34c3119d6c871b282ef5f2895657de0adc7f5f79918db1e9f78031687e4f0b13fc4b62a19039f3c6ee0c176fc340b77c005d5d19de2a318d8a6a801731aec954bf09fa2f1122ff6f402336d4ab0b0b0eddea15a754d52c845ff82b4adc7ec31fd93b71b8ae3b9c6792fdda5e7e001a29f89a454b57f13506bf0459bcc749ff34e2e09508885682a288f7bc197825108d84785ecdb85de9d962f37af797315e44816a8c9c20896d73b7ef80152ddc4e1565ae03c6249a2c0947b2523c3b60b2e8833820c43149be901d9a9c5676df8300a45614a4a13652d07407d8c994c17b83106c93e8b06e35d7cf20dc103221ac61c777d0bd9cd3e7332a91e569c897349f48b71bb031fae677f3844e6b616a7129fda50edfb90e9d04cf3f9056411a299713934a26f52161faa93091a3d26c6f9d3edcb06b29313e91e4c5932146e85f6fb826c0c4a89dd2c3325ce2cdffc6a7823c71a466607e76302909b5d11c99002a05d716b9f11982a1fc16a707fce15d91e2b04957614fc4285126ede8a4fa070f567a6c648e64cc812b8864680794e7d0efeaba63727727211dcaf4c8dfc18944cfafb70239034a0432aeea3f365d77b57015f0bd5117a0c93c2c3327eef4ef7fabe68d95961103f43fe29b4eca10406dd0768e5b4dcc6473c30bef727e812c8befcd2d6be98fbc87adb04b46c7a1f0fab0e63340f9f231ee96b87505a6fb393bfb120836a62e157ef7100d0f8dbc063c907d5a2c8f9a47287953cd2fa51a6c9c144221bfbe056103bdd78eb84c9112ffc406a74e4188841245f6c8c209a25bfe5c148365da507efc5745e31db9ab15548a9faf8a34291da02c254042f5feb1db464e0e10ee7ba6a5261c930b28fba4dda96551a847a3037a222d7f255608f45adc4552d9905516b2356895b0295b76086db3934a8fbff156ecaca09616d0e9a6d9e919cc8671e76845549f9fd4ebcf662fe5570cd76688aafd5df8c6bdfa7d50f1e2cd9ff8ee7e32c7178bb228091ee81af132e487cc17c3f9989e6297ca45224d667f16b2d06fec6a802468988e0eb0034e9be6c9d3681f7a27a8e27725e671653c8253c96666e9de17cea2e2f4109feafed82dd1d2385d30494d497040a58974b1428c754d2a64c216aa440f281a10f228e6c3f511d5d60b96a0227ac814226b58ef58bc775f54332206fbe4b60322752cd22038c183a88d3daeacb5ed4a5e0ba650e0851aa111247b98a2ac6627ae81542dc81f8b7f75e4b672d5265293b870f48b46caa99dacaab3d05192c5a633368db07c0bcfe7fa78c88adc9988cb2f2e2d783ce8628224b3ce7aa05cbd5325187d50794afca21072fb26bb39d416d53e469f48265a0784c0a464f5a81a8b5f013a392fefbd17cf58b4ff2fac301974628655c049534e434c5e00a5f77e9a340d08c9f18dd9f28db75f48042921d3de60bb51d4e913d89bcd6466df40efdb568655fad46a6a2fa216123ebd97d274bc8677946f3ed5c6773fcb971759b0ae7600020d9058d9c1ee70b18828c53cb30ade1f94d052b298828656dc67c46ac2c4089f98e84aee65f50ca927adf61df1ff357e63784f4e407ab89b4d3c68bb29dbdc66d2df7acc421a65f2ab3ebc19023cf0a313eccd808e3d4d726fbf66385158be1842cdce4fbbe3a37376daf3eec40247baf38bcc89cc3e3f5be64387aedd55cfdeb8ac660502af51f4116f9f0e999973278e3ef5f0a1c82c05064fb7ddb1bf3a8fefe6ec29d429b23fcabbfd9d7568a55414ca84056f4c38ed65288a23388628f6d1e5803aaa3aefecf41776e125741e26d44f62744137e156ff1ceff98802c4b7c7293a72bed5f8c62b23d9bd40cc3854f4f3c2e89cf7b9a1c466c6b5ba8eadb85b1b3c5698c010de2e2fe19ed3fcdc8019bf60c7c62c6e951921b6d4ecb75879065da3bbd113aa2f38548dabdc28008bf2624eb0d7440cdb4b0aa207bddbfd0eac354a88ac70c406e4bd7d0d449e8d1ef2472da53104310f36bb66d72af464d76609fda35699d4ed95e9877a5abdb0ad70ff442da3ee05a96e5a90f711392f19da2c4d4f285a7cee089b30d20ce8fc1fbf3dc70716262bea97bed5c6bc1beea1efaeca7566867e9edb2ca14a9622b4c6d6b9908ad67fdd83915d81a4d0abf656d0209a6b00e715c2cafeb0565367b4a032ba47025f5e09698d51d5c9073df26fa01e4c0485b332071139f005cfc7496400ee8342f67e7a5dbbd33e651d41077284e3b0d9b8f4abb9d07196e02a1c150379a46f8a99e41e118426ae7cd3e004a571a79952557d8cb69943438ab34d73a94eef717b569e78100e79436801637dfb5f5dcc7e53ee564b98e3dc16c34353917dea0a11ffec3c5c1d3e6e2b8345a09baf4b21ee93a1b6ba37fcf71ae10814f8a8b9bb9625ddefb0555a544a3e635d4996bbeda923af972d57657782f646b89392297b8dcaebf5c92b705659aee84fcefe3a0a0a227b18d62854d7d703adbe018ebc2e58b3b4f9ed5e4165f2a3543af793a4084b6d79f2535d854b45a61866e9e19caa66aa4043fb0551ad8dac22466c4d98bf49b2b0521ad82c5f6f637b6480ae950fedcdb1b93956c917a2c50a57394aec17586ba9be4519b970b4cdc3961c3d08e92026f0e211e15b95cf675212e6e8f9df19c589d11228fa08d4f0f207d9f5d41cdb8a36d38cd3893ccc8c78053bd289612f514f64a334e83683353ab872ee224668760d8f1bb25f9996a570fcaeadba41a2d110ca6b8bffdd412860c5ba5b1013e71b0236d0dbeed1e4d239811a564b748ca9d00d2804e20530723fef4fabe56cc5ee308be337f96c345ef45464c8dcb127fe8ef1da86a87e9bf83b0742152ce03b0f538b4f928f2b01cc6785240a8c6085f287a28fd7e6bbc0b05302abf6d7d2ab3a722361adee7c5c7fd63240162eebdcc1262e4b973524b976a84205aa14a0d66fdd9ae9d9aef31c8a511c542e780b76744b509466f713adc479d02df2da76eed7482c4fa29a5d415fc419663cd774e9083cb2ac1092b1e8361bf345a12ffc3f77cef35f63fec40f12e261a7f841d9a18fbc3ee5c5c38f0b93d6dc052955cb58aeccac2077734d54c53cac3c569efcfe5d22c65f8d493fc3b3ba7375531c45db87ef214e923a7bb0222d063661f4626865a8b8d0131e78843145e3d00ac7c7cb2b22e01ba1474b0794f03a4fad7864bfb3447c23c714103078b185d24fd2edb1133bea0f18f5d402e099d6b68d361b73ddc50dc34b89a90d09e0602dddc6228663e238f7e92c30fa230d9c9867e481f65bd2a07ac6257073a23769c46a91bbb5c7b6f05abcee8fd2a2c6764140b41ec25288b4c33db085f6ca4853ab115dd1be2b6d39aed6cbeab602ff7164d2fb26e467ca9c89d5ede00459c6adfa02e63e1f294c37b7febd205d0b7c8841de6078aeefcae9cb8cc36d288a77630f3d082fa65248f695aedd655416ea0f27f241ad37016c11c6dae8271b175b59e94540bf23ee4033a7bb2218a616c6a15c6f33350a64580249499a0e6ca22906fb0b7dcfed9f39348b594fea05fd3680b5596cf6191a90c61403d8cb80414c632971f3e1dacc43602e8260aab5a1745f338c9075bfc1dea6760ff536fd62a55331c7a11e36751395e9b11c6d7b478bfbb6795253cc56700b3cdaef5ca33a135d487dd3a96f27e7b6d774335ace67f69c32a01cb8ba44b89176033a89870ea9088b6d20ef2d15ddd7465269b1515e4f6d5e3771e2c346cdfd1094918b9b0a04ab673ca4a760568a2b497852495fdb8b07c429eec2ff465898cfed237697054d8232557e37e88b8ab4c27a7fdff779a7cb9188487fa3f2a2dd5c8dc28a2acee6180202692f857f2ebcb360382987df30c195c1ba29c75fa1ec433a6c0b4fc20a0c428b6b72add957b866480ea9204e04d0ff3de51e5eaadd1efa4fe95b7edcd93caa0b24c5a4e5c7b13d88512d90bdee88bac86ef23efc93a2ed77c2245e7015eab34fd16bfdaee22d38b08ba6582a68dcb4262a0984de2e00000000"], 0x1070, 0x40000}, 0x804) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) write$cgroup_type(r1, &(0x7f0000001380)='Ehreaded\x00', 0x314) 2018/04/06 06:12:47 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x43050000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x803, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000200)=""/168) [ 451.011779] kernel msg: ebtables bug: please report to author: Wrong len argument [ 451.073796] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 451.085607] syz-executor6 cpuset=syz6 mems_allowed=0 [ 451.090781] CPU: 1 PID: 26963 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 451.097622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.106974] Call Trace: [ 451.109575] dump_stack+0x1b9/0x29f [ 451.113214] ? arch_local_irq_restore+0x52/0x52 [ 451.117900] ? kasan_check_read+0x11/0x20 [ 451.122066] warn_alloc.cold.119+0xb2/0x1b8 [ 451.126400] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 451.131255] ? trace_hardirqs_on+0xd/0x10 [ 451.135412] ? _raw_spin_unlock_irq+0x27/0x70 [ 451.139921] ? finish_task_switch+0x1ca/0x820 [ 451.144436] ? lock_repin_lock+0x410/0x410 [ 451.148700] __vmalloc_node_range+0x45e/0x720 [ 451.153212] ? graph_lock+0x170/0x170 [ 451.157033] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 451.161888] __vmalloc_node_flags_caller+0x50/0x60 [ 451.166833] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 451.171686] kvmalloc_node+0xde/0x100 [ 451.175503] kvm_arch_create_memslot+0xa3/0x4e0 [ 451.180195] __kvm_set_memory_region+0x1d1b/0x2e50 [ 451.185147] ? kvm_vcpu_block+0x1050/0x1050 [ 451.189482] ? zap_class+0x720/0x720 [ 451.193203] ? check_same_owner+0x320/0x320 [ 451.197534] ? rcu_note_context_switch+0x710/0x710 [ 451.202470] ? lock_acquire+0x1dc/0x520 [ 451.206453] ? graph_lock+0x170/0x170 [ 451.210255] ? __might_sleep+0x95/0x190 [ 451.214239] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.219784] ? futex_wait_queue_me+0x559/0x820 2018/04/06 06:12:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000180)=[{0x8, 0x4}, {0x2, 0x1}, {0xc, 0x7f}, {0xc, 0x8}, {0xb, 0x6}, {0x2, 0xc9}, {0x8, 0x4e1}], 0x2000000000000027) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0xfffffffffffffffc, &(0x7f00000000c0)=0x2) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x8) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r4 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x4, 0x500) accept4$inet6(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c, 0x80000) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000200)=0x5, &(0x7f0000000240)=0x2) write$cgroup_type(r2, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:12:47 executing program 7: syz_read_part_table(0x9, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080)="b0c1", 0x2, 0x9b}]) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="02004200000001000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055", 0x3f, 0x1c0}]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) io_setup(0x200, &(0x7f0000000100)=0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000000240)="7955a3c9c88cdf3ccbb7107c588a4528658737433871a87bf33bc34739d2a019dd6c4f9f6ab6ba8a664fd61d4d7edf3ca8b6a2c2b8957a805f5dc58c583ab68cb9d87a80b2ad162e3a69a66a721f82609b56894569f5dd3454634aea235f610240386577425e81f25fed656942fae51b16b5e0b6e89436a8a561aad4dedb2c72ae0e2e5e3780b04bb3aed2f230eca07c2d2c5c4a5346832fe4e40f9d7cae9ef7764139e7124b58ff1b44ba2050a743028ba709e66d36f087482e73f0ea4c48fa7160b596", 0xc4, 0x2, 0x0, 0x0, r0}, &(0x7f0000000180)) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'ah\x00'}, &(0x7f0000000340)=0x1e) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x10001, 0x6, 0x2, 0x9c, "afec4c3aafaeeecadb147b09c6c533dd580524e1f168ecd2c8d1fd105eb98e14fc3a4de46faeda442b1d58b4", 0x8d}) 2018/04/06 06:12:47 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x300000000000000]}) 2018/04/06 06:12:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x9, 0x4) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:12:47 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7f", 0x2e}], 0x1}, 0x0) [ 451.224376] ? refill_pi_state_cache.part.7+0x300/0x300 [ 451.229756] ? find_held_lock+0x36/0x1c0 [ 451.233841] ? lock_downgrade+0x8e0/0x8e0 [ 451.238033] kvm_set_memory_region+0x2e/0x50 [ 451.242453] kvm_vm_ioctl+0x668/0x1d90 [ 451.246356] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 451.251476] ? futex_wake+0x2f6/0x750 [ 451.255283] ? kvm_set_memory_region+0x50/0x50 [ 451.259871] ? get_futex_key+0x1e90/0x1e90 [ 451.264115] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 451.269140] ? perf_trace_lock+0xd6/0x900 2018/04/06 06:12:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0x4, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) [ 451.273299] ? zap_class+0x720/0x720 [ 451.277022] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 451.282216] ? do_futex+0x249/0x27d0 [ 451.285938] ? native_flush_tlb_others+0x690/0x690 [ 451.290877] ? graph_lock+0x170/0x170 [ 451.294683] ? check_same_owner+0x320/0x320 [ 451.299022] ? exit_robust_list+0x290/0x290 [ 451.303355] ? find_held_lock+0x36/0x1c0 [ 451.307432] ? lock_downgrade+0x8e0/0x8e0 [ 451.311592] ? rcu_is_watching+0x85/0x140 [ 451.315747] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 451.320952] ? __fget+0x40c/0x650 2018/04/06 06:12:47 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7f", 0x2e}], 0x1}, 0x0) [ 451.324420] ? expand_files.part.8+0x9a0/0x9a0 [ 451.329009] ? lock_downgrade+0x8e0/0x8e0 [ 451.333163] ? __split_vma+0x5ac/0x7f0 [ 451.337054] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.342598] ? vma_set_page_prot+0x183/0x260 [ 451.347017] ? kvm_set_memory_region+0x50/0x50 [ 451.351608] do_vfs_ioctl+0x1cf/0x1650 [ 451.355509] ? ioctl_preallocate+0x2e0/0x2e0 [ 451.359924] ? fget_raw+0x20/0x20 [ 451.363392] ? SyS_futex+0x3a4/0x56d [ 451.367117] ? do_futex+0x27d0/0x27d0 [ 451.370927] ? security_file_ioctl+0x9b/0xd0 [ 451.375348] ksys_ioctl+0xa9/0xd0 [ 451.378808] SyS_ioctl+0x24/0x30 [ 451.382176] ? ksys_ioctl+0xd0/0xd0 [ 451.385811] do_syscall_64+0x29e/0x9d0 [ 451.389702] ? vmalloc_sync_all+0x30/0x30 [ 451.393852] ? _raw_spin_unlock_irq+0x27/0x70 [ 451.398350] ? finish_task_switch+0x1ca/0x820 [ 451.402853] ? syscall_return_slowpath+0x5c0/0x5c0 [ 451.407788] ? syscall_return_slowpath+0x30f/0x5c0 [ 451.412732] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 451.418107] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 451.422964] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 451.428159] RIP: 0033:0x4552d9 [ 451.431348] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 451.439062] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 451.446334] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 451.453615] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 451.460885] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 451.468159] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 451.475601] warn_alloc_show_mem: 1 callbacks suppressed [ 451.475609] Mem-Info: [ 451.483487] active_anon:131846 inactive_anon:79 isolated_anon:0 [ 451.483487] active_file:22862 inactive_file:11863 isolated_file:0 [ 451.483487] unevictable:0 dirty:211 writeback:0 unstable:0 [ 451.483487] slab_reclaimable:12496 slab_unreclaimable:102048 [ 451.483487] mapped:74000 shmem:86 pagetables:1077 bounce:0 [ 451.483487] free:1251241 free_pcp:479 free_cma:0 [ 451.517365] Node 0 active_anon:527384kB inactive_anon:316kB active_file:91448kB inactive_file:47452kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:296000kB dirty:844kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 382976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 451.545513] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 451.571718] lowmem_reserve[]: 0 2833 6338 6338 [ 451.576359] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:700kB free_cma:0kB [ 451.604088] lowmem_reserve[]: 0 0 3505 3505 [ 451.608477] Node 0 Normal free:2085596kB min:37284kB low:46604kB high:55924kB active_anon:527384kB inactive_anon:316kB active_file:91448kB inactive_file:47452kB unevictable:0kB writepending:844kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5536kB pagetables:4308kB bounce:0kB free_pcp:992kB local_pcp:296kB free_cma:0kB [ 451.638283] lowmem_reserve[]: 0 0 0 0 [ 451.642128] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 451.655771] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 451.671636] Node 0 Normal: 175*4kB (UM) 1196*8kB (UME) 1507*16kB (UME) 1008*32kB (UME) 573*64kB (UME) 228*128kB (UME) 105*256kB (UME) 70*512kB (UM) 32*1024kB (UM) 35*2048kB (UME) 436*4096kB (UM) = 2085516kB [ 451.690234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 451.698827] 34809 total pagecache pages [ 451.702823] 0 pages in swap cache [ 451.706283] Swap cache stats: add 0, delete 0, find 0/0 [ 451.711658] Free swap = 0kB [ 451.714695] Total swap = 0kB [ 451.717732] 1965969 pages RAM [ 451.720863] 0 pages HighMem/MovableOnly [ 451.724882] 338524 pages reserved [ 451.748233] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 451.760144] syz-executor6 cpuset=syz6 mems_allowed=0 [ 451.765313] CPU: 1 PID: 27016 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 451.772145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.781479] Call Trace: [ 451.784067] dump_stack+0x1b9/0x29f [ 451.787683] ? arch_local_irq_restore+0x52/0x52 [ 451.792340] ? kasan_check_read+0x11/0x20 [ 451.796475] warn_alloc.cold.119+0xb2/0x1b8 [ 451.800780] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 451.805605] ? trace_hardirqs_on+0xd/0x10 [ 451.809739] ? _raw_spin_unlock_irq+0x27/0x70 [ 451.814220] ? finish_task_switch+0x1ca/0x820 [ 451.818718] ? lock_repin_lock+0x410/0x410 [ 451.822951] __vmalloc_node_range+0x45e/0x720 [ 451.827437] ? graph_lock+0x170/0x170 [ 451.831239] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 451.836078] __vmalloc_node_flags_caller+0x50/0x60 [ 451.841005] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 451.845844] kvmalloc_node+0xde/0x100 [ 451.849631] kvm_arch_create_memslot+0xa3/0x4e0 [ 451.854305] __kvm_set_memory_region+0x1d1b/0x2e50 [ 451.859327] ? kvm_vcpu_block+0x1050/0x1050 [ 451.863635] ? print_usage_bug+0xc0/0xc0 [ 451.867696] ? zap_class+0x720/0x720 [ 451.871398] ? check_same_owner+0x320/0x320 [ 451.875705] ? rcu_note_context_switch+0x710/0x710 [ 451.880616] ? lock_acquire+0x1dc/0x520 [ 451.884576] ? graph_lock+0x170/0x170 [ 451.888359] ? __might_sleep+0x95/0x190 [ 451.892320] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.897842] ? futex_wait_queue_me+0x559/0x820 [ 451.902404] ? __lock_acquire+0x7f5/0x5130 [ 451.906631] ? refill_pi_state_cache.part.7+0x300/0x300 [ 451.911993] ? find_held_lock+0x36/0x1c0 [ 451.916063] ? lock_downgrade+0x8e0/0x8e0 [ 451.920220] kvm_set_memory_region+0x2e/0x50 [ 451.925056] kvm_vm_ioctl+0x668/0x1d90 [ 451.928930] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.934448] ? __perf_event_task_sched_in+0x247/0xb80 [ 451.939622] ? kvm_set_memory_region+0x50/0x50 [ 451.944192] ? find_held_lock+0x36/0x1c0 [ 451.948248] ? perf_trace_lock+0xd6/0x900 [ 451.952388] ? zap_class+0x720/0x720 [ 451.956096] ? finish_task_switch+0x182/0x820 [ 451.960581] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 451.965757] ? do_futex+0x249/0x27d0 [ 451.969453] ? kasan_check_read+0x11/0x20 [ 451.973585] ? graph_lock+0x170/0x170 [ 451.977381] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 451.981949] ? compat_start_thread+0x80/0x80 [ 451.986343] ? _raw_spin_unlock_irq+0x27/0x70 [ 451.990833] ? exit_robust_list+0x290/0x290 [ 451.995148] ? find_held_lock+0x36/0x1c0 [ 451.999195] ? lock_downgrade+0x8e0/0x8e0 [ 452.003328] ? rcu_is_watching+0x85/0x140 [ 452.007461] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 452.012636] ? __fget+0x40c/0x650 [ 452.016087] ? expand_files.part.8+0x9a0/0x9a0 [ 452.020659] ? inet6_net_init+0x870/0x870 [ 452.024800] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 452.029997] ? kvm_set_memory_region+0x50/0x50 [ 452.034573] do_vfs_ioctl+0x1cf/0x1650 [ 452.038450] ? ioctl_preallocate+0x2e0/0x2e0 [ 452.042838] ? fget_raw+0x20/0x20 [ 452.046281] ? SyS_futex+0x3a4/0x56d [ 452.049985] ? exit_to_usermode_loop+0x87/0x310 [ 452.054638] ? do_futex+0x27d0/0x27d0 [ 452.058418] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.063935] ? security_file_ioctl+0x9b/0xd0 [ 452.068328] ksys_ioctl+0xa9/0xd0 [ 452.071772] SyS_ioctl+0x24/0x30 [ 452.075119] ? ksys_ioctl+0xd0/0xd0 [ 452.078726] do_syscall_64+0x29e/0x9d0 [ 452.082607] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 452.087441] ? syscall_return_slowpath+0x5c0/0x5c0 [ 452.092351] ? syscall_return_slowpath+0x30f/0x5c0 [ 452.097268] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 452.102625] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.107472] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 452.112655] RIP: 0033:0x4552d9 [ 452.115825] RSP: 002b:00007f735423ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.123524] RAX: ffffffffffffffda RBX: 00007f735423f6d4 RCX: 00000000004552d9 [ 452.130775] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 452.138033] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 452.145286] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 452.152552] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000001 [ 452.165140] Dev loop7: unable to read RDB block 1 [ 452.170072] loop7: unable to read partition table [ 452.187950] loop7: partition table beyond EOD, truncated [ 452.193499] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) 2018/04/06 06:12:48 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x2, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYBLOB="01050644c5190041bebcffa092ddf1"], &(0x7f0000000080)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80cc0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e23}, @in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0xb}, 0x86e}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0xe}, 0xfffffffffffffffa}, @in={0x2, 0x4e23, @loopback=0x7f000001}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e23, 0x1e, @remote={0xfe, 0x80, [], 0xbb}, 0x1ff}], 0x94) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x5, {0x2, 0x4e20, @rand_addr=0x401}, {0x2, 0x4e22, @loopback=0x7f000001}, {0x2, 0x4e24, @broadcast=0xffffffff}, 0x100, 0x33ef, 0x0, 0x101, 0x1000, &(0x7f0000000040)='bcsf0\x00', 0x3, 0x5, 0x2c660}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x400, 0x400000) 2018/04/06 06:12:48 executing program 7: r0 = getpgrp(0x0) r1 = getpgrp(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) rt_tgsigqueueinfo(r1, r2, 0x6, &(0x7f0000000080)={0x14, 0x0, 0x9, 0x9}) r4 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x80) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000280)={'nat\x00', 0x0, 0x3, 0x81, [], 0x2, &(0x7f0000000180)=[{}, {}], &(0x7f00000001c0)=""/129}, &(0x7f0000000300)=0x78) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x208000000114, 0x5, &(0x7f0000000140)=""/1, &(0x7f0000000100)=0x1) setgroups(0x4, &(0x7f0000000340)=[r3, r3, r3, r3]) 2018/04/06 06:12:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xffe0, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:48 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x48000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:48 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:48 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x806000000000000]}) 2018/04/06 06:12:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) [ 452.278856] FAULT_INJECTION: forcing a failure. [ 452.278856] name failslab, interval 1, probability 0, space 0, times 0 [ 452.290154] CPU: 0 PID: 27045 Comm: syz-executor0 Not tainted 4.16.0+ #2 [ 452.296998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.306351] Call Trace: [ 452.308941] dump_stack+0x1b9/0x29f [ 452.312586] ? arch_local_irq_restore+0x52/0x52 [ 452.317274] should_fail.cold.4+0xa/0x1a [ 452.321350] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 452.326470] ? __local_bh_enable_ip+0x161/0x230 [ 452.331156] ? _raw_spin_unlock_bh+0x30/0x40 [ 452.335580] ? release_sock+0x1e2/0x2b0 [ 452.339566] ? __release_sock+0x3a0/0x3a0 [ 452.343733] ? find_held_lock+0x36/0x1c0 [ 452.347828] ? check_same_owner+0x320/0x320 [ 452.352164] ? rcu_note_context_switch+0x710/0x710 [ 452.357103] ? __netlink_lookup+0x5cf/0xaa0 [ 452.361440] should_failslab+0x124/0x180 [ 452.362058] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 452.365515] kmem_cache_alloc_node+0x272/0x780 [ 452.365539] ? find_held_lock+0x36/0x1c0 [ 452.365565] __alloc_skb+0x111/0x780 [ 452.365585] ? skb_scrub_packet+0x580/0x580 [ 452.377291] syz-executor6 cpuset= [ 452.382022] ? rcu_is_watching+0x85/0x140 [ 452.382039] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 452.382062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.386115] syz6 [ 452.389804] ? netlink_autobind.isra.34+0x240/0x330 [ 452.394125] mems_allowed=0 [ 452.397537] netlink_sendmsg+0xaf0/0xf80 [ 452.397560] ? netlink_unicast+0x740/0x740 [ 452.430498] ? security_socket_sendmsg+0x9b/0xd0 [ 452.435246] ? netlink_unicast+0x740/0x740 [ 452.439479] sock_sendmsg+0xd5/0x120 [ 452.443192] ___sys_sendmsg+0x805/0x940 [ 452.447166] ? copy_msghdr_from_user+0x560/0x560 [ 452.451925] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 452.457460] ? proc_fail_nth_write+0x96/0x1f0 [ 452.461951] ? __fget_light+0x2ef/0x430 [ 452.465921] ? fget_raw+0x20/0x20 [ 452.469368] ? find_held_lock+0x36/0x1c0 [ 452.473968] ? kasan_check_write+0x14/0x20 [ 452.478198] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 452.483122] ? wait_for_completion+0x870/0x870 [ 452.487706] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 452.493235] ? sockfd_lookup_light+0xc5/0x160 [ 452.497723] __sys_sendmsg+0x115/0x270 [ 452.501603] ? SyS_shutdown+0x30/0x30 [ 452.505399] ? __sb_end_write+0xac/0xe0 [ 452.509371] ? fput+0x130/0x1a0 [ 452.512649] ? ksys_write+0x1a6/0x250 [ 452.516454] ? ksys_ioctl+0x81/0xd0 [ 452.520076] SyS_sendmsg+0x29/0x30 [ 452.523608] ? __sys_sendmsg+0x270/0x270 [ 452.527663] do_syscall_64+0x29e/0x9d0 [ 452.531543] ? vmalloc_sync_all+0x30/0x30 [ 452.535683] ? finish_task_switch+0x1ca/0x820 [ 452.540177] ? syscall_return_slowpath+0x5c0/0x5c0 [ 452.545103] ? syscall_return_slowpath+0x30f/0x5c0 [ 452.550035] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 452.555395] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.560239] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 452.565420] RIP: 0033:0x4552d9 [ 452.568603] RSP: 002b:00007f3a75578c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 2018/04/06 06:12:48 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x1c000000]}) 2018/04/06 06:12:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0x6, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) [ 452.576305] RAX: ffffffffffffffda RBX: 00007f3a755796d4 RCX: 00000000004552d9 [ 452.583566] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000013 [ 452.590824] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 452.598084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 452.605342] R13: 00000000000004cb R14: 00000000006fa3a8 R15: 0000000000000000 [ 452.612621] CPU: 1 PID: 27031 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 452.619470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.628816] Call Trace: [ 452.631392] dump_stack+0x1b9/0x29f [ 452.635009] ? arch_local_irq_restore+0x52/0x52 [ 452.639671] ? graph_lock+0x170/0x170 [ 452.643465] warn_alloc.cold.119+0xb2/0x1b8 [ 452.647773] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 452.652605] ? __update_load_avg_blocked_se.isra.33+0x460/0x460 [ 452.658652] ? print_usage_bug+0xc0/0xc0 [ 452.662697] ? print_usage_bug+0xc0/0xc0 [ 452.666740] ? update_load_avg+0x2d9/0x2540 [ 452.671044] ? graph_lock+0x170/0x170 [ 452.674836] __vmalloc_node_range+0x45e/0x720 [ 452.679317] ? graph_lock+0x170/0x170 [ 452.683109] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 452.687949] __vmalloc_node_flags_caller+0x50/0x60 [ 452.692866] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 452.697694] kvmalloc_node+0xde/0x100 [ 452.701484] kvm_arch_create_memslot+0xa3/0x4e0 [ 452.706146] __kvm_set_memory_region+0x1d1b/0x2e50 [ 452.711071] ? kvm_vcpu_block+0x1050/0x1050 [ 452.715378] ? print_usage_bug+0xc0/0xc0 [ 452.719424] ? zap_class+0x720/0x720 [ 452.723124] ? perf_trace_lock+0xd6/0x900 [ 452.727259] ? graph_lock+0x170/0x170 [ 452.731044] ? zap_class+0x720/0x720 [ 452.734739] ? graph_lock+0x170/0x170 [ 452.738525] ? __lock_acquire+0x7f5/0x5130 [ 452.742746] ? graph_lock+0x170/0x170 [ 452.746534] ? find_held_lock+0x36/0x1c0 [ 452.750585] ? lock_downgrade+0x8e0/0x8e0 [ 452.754737] kvm_set_memory_region+0x2e/0x50 [ 452.759131] kvm_vm_ioctl+0x668/0x1d90 [ 452.763005] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.768532] ? __perf_event_task_sched_in+0x247/0xb80 [ 452.773707] ? kvm_set_memory_region+0x50/0x50 [ 452.778280] ? find_held_lock+0x36/0x1c0 [ 452.782326] ? perf_trace_lock+0xd6/0x900 [ 452.786458] ? retint_kernel+0x10/0x10 [ 452.790331] ? zap_class+0x720/0x720 [ 452.794039] ? retint_kernel+0x10/0x10 [ 452.797911] ? graph_lock+0x170/0x170 [ 452.801704] ? _raw_spin_unlock_irq+0x56/0x70 [ 452.806188] ? find_held_lock+0x36/0x1c0 [ 452.810241] ? lock_downgrade+0x8e0/0x8e0 [ 452.814378] ? rcu_is_watching+0x85/0x140 [ 452.818509] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 452.823689] ? __fget+0x40c/0x650 [ 452.827131] ? expand_files.part.8+0x9a0/0x9a0 [ 452.831696] ? lock_downgrade+0x8e0/0x8e0 [ 452.835831] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.841355] ? kvm_set_memory_region+0x50/0x50 [ 452.845921] do_vfs_ioctl+0x1cf/0x1650 [ 452.849799] ? ioctl_preallocate+0x2e0/0x2e0 [ 452.854192] ? fget_raw+0x20/0x20 [ 452.857637] ? exit_to_usermode_loop+0x87/0x310 [ 452.862295] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.867815] ? security_file_ioctl+0x9b/0xd0 [ 452.872211] ksys_ioctl+0xa9/0xd0 [ 452.875654] SyS_ioctl+0x24/0x30 [ 452.879006] ? ksys_ioctl+0xd0/0xd0 [ 452.882625] do_syscall_64+0x29e/0x9d0 [ 452.886499] ? vmalloc_sync_all+0x30/0x30 [ 452.890629] ? _raw_spin_unlock_irq+0x27/0x70 [ 452.895107] ? finish_task_switch+0x1ca/0x820 [ 452.899586] ? syscall_return_slowpath+0x5c0/0x5c0 [ 452.904502] ? syscall_return_slowpath+0x30f/0x5c0 [ 452.909422] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 452.914772] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.919606] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 452.924780] RIP: 0033:0x4552d9 [ 452.927951] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.935643] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 452.942896] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 452.950148] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 452.957399] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 452.964652] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 452.972194] warn_alloc_show_mem: 1 callbacks suppressed [ 452.972197] Mem-Info: [ 452.980075] active_anon:132362 inactive_anon:79 isolated_anon:0 [ 452.980075] active_file:22870 inactive_file:11881 isolated_file:0 [ 452.980075] unevictable:0 dirty:232 writeback:0 unstable:0 [ 452.980075] slab_reclaimable:12492 slab_unreclaimable:101806 [ 452.980075] mapped:73943 shmem:86 pagetables:1115 bounce:0 [ 452.980075] free:1250840 free_pcp:500 free_cma:0 2018/04/06 06:12:49 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x800e0000]}) 2018/04/06 06:12:49 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0xf5ffffff, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) [ 453.013940] Node 0 active_anon:529460kB inactive_anon:316kB active_file:91480kB inactive_file:47524kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295772kB dirty:928kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 382976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 453.042085] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.068296] lowmem_reserve[]: 0 2833 6338 6338 [ 453.072952] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:920kB local_pcp:700kB free_cma:0kB [ 453.100722] lowmem_reserve[]: 0 0 3505 3505 [ 453.105117] Node 0 Normal free:2083512kB min:37284kB low:46604kB high:55924kB active_anon:529560kB inactive_anon:316kB active_file:91480kB inactive_file:47524kB unevictable:0kB writepending:928kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5760kB pagetables:4756kB bounce:0kB free_pcp:1072kB local_pcp:696kB free_cma:0kB [ 453.135060] lowmem_reserve[]: 0 0 0 0 [ 453.138940] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 453.146755] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 453.152689] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) [ 453.164486] syz-executor6 cpuset= [ 453.164491] 2*64kB (M) [ 453.171275] syz6 [ 453.174713] 4*128kB [ 453.177327] mems_allowed=0 [ 453.179259] (M) 3*256kB (UM) 3*512kB (UM) [ 453.181639] CPU: 0 PID: 27063 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 453.184546] 4*1024kB [ 453.188747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.188756] Call Trace: [ 453.188783] dump_stack+0x1b9/0x29f [ 453.195603] (UM) [ 453.197996] ? arch_local_irq_restore+0x52/0x52 [ 453.198018] ? kasan_check_read+0x11/0x20 [ 453.207358] 2*2048kB [ 453.209928] warn_alloc.cold.119+0xb2/0x1b8 [ 453.209952] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 453.213561] (UM) [ 453.215606] ? finish_task_switch+0x1ca/0x820 [ 453.215643] ? lock_repin_lock+0x410/0x410 [ 453.220282] 706*4096kB [ 453.224418] __vmalloc_node_range+0x45e/0x720 [ 453.224443] ? graph_lock+0x170/0x170 [ 453.226831] (M) [ 453.231134] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 453.231152] __vmalloc_node_flags_caller+0x50/0x60 [ 453.235979] = 2903144kB [ 453.238016] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 453.238038] kvmalloc_node+0xde/0x100 [ 453.242517] Node 0 [ 453.246730] kvm_arch_create_memslot+0xa3/0x4e0 [ 453.246765] __kvm_set_memory_region+0x1d1b/0x2e50 [ 453.249319] Normal: [ 453.253815] ? kvm_vcpu_block+0x1050/0x1050 [ 453.257598] 8*4kB [ 453.259556] ? zap_class+0x720/0x720 [ 453.259574] ? check_same_owner+0x320/0x320 [ 453.264401] (UME) [ 453.269308] ? rcu_note_context_switch+0x710/0x710 [ 453.269324] ? lock_acquire+0x1dc/0x520 [ 453.271893] 1085*8kB [ 453.276714] ? graph_lock+0x170/0x170 [ 453.276731] ? __might_sleep+0x95/0x190 [ 453.280516] (UME) [ 453.282738] ? refill_pi_state_cache.part.7+0x300/0x300 [ 453.282766] ? find_held_lock+0x36/0x1c0 [ 453.287413] 1567*16kB [ 453.292337] ? lock_downgrade+0x8e0/0x8e0 [ 453.294645] (UME) [ 453.298991] kvm_set_memory_region+0x2e/0x50 [ 453.301100] 998*32kB [ 453.304791] kvm_vm_ioctl+0x668/0x1d90 [ 453.304810] ? perf_tp_event+0xc30/0xc30 [ 453.309113] (UME) [ 453.311241] ? kasan_check_write+0x14/0x20 [ 453.311264] ? kvm_set_memory_region+0x50/0x50 [ 453.316174] 573*64kB [ 453.320127] ? memset+0x31/0x40 [ 453.320154] ? perf_trace_lock+0x495/0x900 [ 453.322540] (UME) [ 453.326329] ? zap_class+0x720/0x720 [ 453.326349] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 453.330305] 228*128kB [ 453.332442] ? graph_lock+0x170/0x170 [ 453.332478] ? exit_robust_list+0x290/0x290 [ 453.337806] (UME) [ 453.341857] ? find_held_lock+0x36/0x1c0 [ 453.341892] ? lock_downgrade+0x8e0/0x8e0 [ 453.344360] 105*256kB [ 453.348484] ? lock_downgrade+0x8e0/0x8e0 [ 453.348512] ? rcu_is_watching+0x85/0x140 [ 453.350641] (UME) [ 453.355029] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 453.355064] ? __fget+0x40c/0x650 [ 453.357443] 70*512kB [ 453.361317] ? expand_files.part.8+0x9a0/0x9a0 [ 453.361337] ? kasan_check_write+0x14/0x20 [ 453.365383] (UM) [ 453.367524] ? kvm_set_memory_region+0x50/0x50 [ 453.367544] do_vfs_ioctl+0x1cf/0x1650 [ 453.371761] 32*1024kB [ 453.376323] ? ioctl_preallocate+0x2e0/0x2e0 [ 453.376343] ? fget_raw+0x20/0x20 [ 453.378734] (UM) [ 453.381986] ? find_held_lock+0x36/0x1c0 [ 453.382018] ? SyS_futex+0x3a4/0x56d [ 453.386235] 36*2048kB [ 453.388366] ? do_futex+0x27d0/0x27d0 [ 453.388386] ? security_file_ioctl+0x9b/0xd0 [ 453.392079] (UME) [ 453.397248] ksys_ioctl+0xa9/0xd0 [ 453.397272] SyS_ioctl+0x24/0x30 [ 453.399748] 435*4096kB [ 453.403518] ? ksys_ioctl+0xd0/0xd0 [ 453.403541] do_syscall_64+0x29e/0x9d0 [ 453.407846] (UM) [ 453.409971] ? _raw_spin_unlock_irq+0x27/0x70 [ 453.409990] ? finish_task_switch+0x1ca/0x820 [ 453.414035] = 2082552kB [ 453.418161] ? syscall_return_slowpath+0x5c0/0x5c0 [ 453.418182] ? syscall_return_slowpath+0x30f/0x5c0 [ 453.420680] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 453.424802] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 453.424829] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 453.428954] 34829 total pagecache pages [ 453.431089] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 453.431104] RIP: 0033:0x4552d9 [ 453.436285] 0 pages in swap cache [ 453.439696] RSP: 002b:00007f735421dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 453.439716] RAX: ffffffffffffffda RBX: 00007f735421e6d4 RCX: 00000000004552d9 [ 453.439728] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 453.442130] Swap cache stats: add 0, delete 0, find 0/0 [ 453.446677] RBP: 000000000072c010 R08: 0000000000000000 R09: 0000000000000000 [ 453.446688] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 453.446701] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000002 [ 453.450926] Free swap = 0kB [ 453.622161] Total swap = 0kB [ 453.625205] 1965969 pages RAM [ 453.628340] 0 pages HighMem/MovableOnly [ 453.632348] 338524 pages reserved 2018/04/06 06:12:50 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x800, 0x40200) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}]}) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x7, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@local={0xfe, 0x80, [], 0xaa}}}]}, 0x80}, 0x1}, 0x0) 2018/04/06 06:12:50 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0xffffff88]}) 2018/04/06 06:12:50 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x81000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:50 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, &(0x7f00000011c0)=0x80) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8831, r1, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001200)='/dev/rfkill\x00', 0x440, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0xbcd4) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000000)='Ehreaded\x00', 0x1) r5 = gettid() migrate_pages(r5, 0x7cb6, &(0x7f0000001240)=0x8, &(0x7f0000001280)=0x1f) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x3, 0x6, 0x3}, 0x10) 2018/04/06 06:12:50 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:50 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x40000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0x8, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:50 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f00000000c0)=""/104) mq_timedsend(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}) r1 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x20, 0x101200) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000580)=0x5, 0x4) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000640)='/dev/dsp#\x00', 0x4, 0x602) fcntl$getownex(r2, 0x10, &(0x7f0000000600)={0x0, 0x0}) getpriority(0x0, r3) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000680)=""/125) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r4 = getpid() getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4, 0x20, 0x3, 0x0, 0xfffffffeffffffff, {0x0, @in6={{0xa, 0x4e21, 0xffffffff, @loopback={0x0, 0x1}, 0x5}}, 0xac9, 0x6eb, 0x0, 0xcd1, 0x100}}, &(0x7f0000000380)=0xb0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)={0x0, 0x9b, "c580a95d80cdcbaed2ee2b308bb59c5356fde8238abbc674d7157b16a94676e235782b2651f29433f9159545ca6d45198d18bc2b2f4281f8df56f3a4eec570a9d11b8f03fe23c3be6e995e1bc8d4b63061ab5d0ea49efcf340c47fb33ee589b22c4ae63fd3b5531e9afdd2ba5bb43696a5454c0e6eb8ed1d2b50a484fdb5e251c21c61e3d76514eb2d4548a3d4b606be58d0a004e903ea106596c0"}, &(0x7f00000003c0)=0xa3) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x49}}, 0x3c, 0x100000001}, &(0x7f0000000540)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000400)={r5, 0x20, 0x40020}, &(0x7f00000005c0)=0xfffffffffffffcb7) fcntl$setown(0xffffffffffffffff, 0x8, r4) setpgid(0x0, 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f00000007c0)="6e667300f34eb545596e1bcaaeb4bd4e68a5af1d412f05744b91f9315e59fca1599e1a1a94158909cd2c523e17a2e22018e53da8d8114166c399afa9abc6633294318f6de2d844563e3b78c65f412cd9bddb79c2f782cfaf057bc3d5abf3ba01e32c997a58e4ad0c5397a9d6f61a19414c95a5435e560329d592fae9c74fed0b95336872bb8d6b2187c2dc4a67838402f7e4e25cbdd32e4a8d0d9fd83caac4be9084e5595dc250b5cd1e03a26cdbd4f9640fa127e407a8d6ce4e50d1fd0dbef33e8cec89b956", 0x0, &(0x7f000000a000)) 2018/04/06 06:12:50 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x6700000000000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:50 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x1000000, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xffffffe0, 0x0, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:50 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xadcb, 0x101000) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='Ehreaded\x00', 0x9) mkdir(&(0x7f0000000080)='./file0\x00', 0x48) 2018/04/06 06:12:50 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x88640000]}) 2018/04/06 06:12:50 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f000006e000)="7f", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ppoll(&(0x7f0000d35ff0)=[{r0}], 0x1, &(0x7f0000542ff0)={0x77359400}, &(0x7f0000ea3000), 0x8) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3ff, 0x100) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) [ 453.906539] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 453.918405] syz-executor6 cpuset=syz6 mems_allowed=0 [ 453.923635] CPU: 0 PID: 27092 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 453.930487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.939855] Call Trace: [ 453.942461] dump_stack+0x1b9/0x29f [ 453.946119] ? arch_local_irq_restore+0x52/0x52 [ 453.950824] ? perf_trace_lock_acquire+0xe3/0x980 [ 453.955692] warn_alloc.cold.119+0xb2/0x1b8 [ 453.960040] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 453.964907] ? finish_task_switch+0x1ca/0x820 [ 453.969460] __vmalloc_node_range+0x45e/0x720 [ 453.973983] ? graph_lock+0x170/0x170 [ 453.977812] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 453.982676] __vmalloc_node_flags_caller+0x50/0x60 [ 453.987638] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 453.992512] kvmalloc_node+0xde/0x100 [ 453.996340] kvm_arch_create_memslot+0xa3/0x4e0 [ 454.001052] __kvm_set_memory_region+0x1d1b/0x2e50 2018/04/06 06:12:50 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xf000000, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) [ 454.006029] ? kvm_vcpu_block+0x1050/0x1050 [ 454.010374] ? zap_class+0x720/0x720 [ 454.014113] ? perf_trace_lock+0x900/0x900 [ 454.018367] ? lock_acquire+0x1dc/0x520 [ 454.022381] ? graph_lock+0x170/0x170 [ 454.026206] ? __might_sleep+0x95/0x190 [ 454.030219] ? refill_pi_state_cache.part.7+0x300/0x300 [ 454.035618] ? find_held_lock+0x36/0x1c0 [ 454.039718] ? lock_downgrade+0x8e0/0x8e0 [ 454.043940] kvm_set_memory_region+0x2e/0x50 [ 454.048387] kvm_vm_ioctl+0x668/0x1d90 [ 454.052301] ? perf_tp_event+0xc30/0xc30 [ 454.056409] ? kvm_set_memory_region+0x50/0x50 [ 454.061017] ? memset+0x31/0x40 [ 454.064327] ? perf_trace_lock+0x495/0x900 [ 454.068582] ? perf_trace_lock_acquire+0xe3/0x980 [ 454.073449] ? zap_class+0x720/0x720 [ 454.077187] ? perf_trace_lock+0x900/0x900 [ 454.081453] ? native_flush_tlb_others+0x690/0x690 [ 454.086407] ? graph_lock+0x170/0x170 [ 454.090219] ? check_same_owner+0x320/0x320 [ 454.094554] ? exit_robust_list+0x290/0x290 [ 454.098890] ? find_held_lock+0x36/0x1c0 [ 454.102965] ? lock_downgrade+0x8e0/0x8e0 [ 454.107110] ? rcu_is_watching+0x85/0x140 [ 454.111245] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 454.116433] ? __fget+0x40c/0x650 [ 454.119880] ? expand_files.part.8+0x9a0/0x9a0 [ 454.124447] ? lock_downgrade+0x8e0/0x8e0 [ 454.128589] ? __split_vma+0x5ac/0x7f0 [ 454.132468] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.137991] ? vma_set_page_prot+0x183/0x260 [ 454.142401] ? kvm_set_memory_region+0x50/0x50 [ 454.146974] do_vfs_ioctl+0x1cf/0x1650 [ 454.150873] ? ioctl_preallocate+0x2e0/0x2e0 [ 454.155277] ? fget_raw+0x20/0x20 [ 454.158727] ? SyS_futex+0x3a4/0x56d [ 454.162435] ? do_futex+0x27d0/0x27d0 [ 454.166221] ? security_file_ioctl+0x9b/0xd0 [ 454.170622] ksys_ioctl+0xa9/0xd0 [ 454.174069] SyS_ioctl+0x24/0x30 [ 454.177423] ? ksys_ioctl+0xd0/0xd0 [ 454.181047] do_syscall_64+0x29e/0x9d0 [ 454.184920] ? vmalloc_sync_all+0x30/0x30 [ 454.189061] ? _raw_spin_unlock_irq+0x27/0x70 [ 454.193554] ? finish_task_switch+0x1ca/0x820 [ 454.198061] ? syscall_return_slowpath+0x5c0/0x5c0 [ 454.202991] ? syscall_return_slowpath+0x30f/0x5c0 [ 454.207918] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 454.213274] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 454.218113] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 454.223288] RIP: 0033:0x4552d9 [ 454.226466] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 454.234181] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 454.241439] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 454.248697] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 454.255969] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 454.263224] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 454.270792] warn_alloc_show_mem: 1 callbacks suppressed [ 454.270801] Mem-Info: [ 454.278746] active_anon:131818 inactive_anon:78 isolated_anon:0 [ 454.278746] active_file:22862 inactive_file:11881 isolated_file:0 [ 454.278746] unevictable:0 dirty:257 writeback:0 unstable:0 [ 454.278746] slab_reclaimable:12517 slab_unreclaimable:101930 [ 454.278746] mapped:73960 shmem:86 pagetables:1064 bounce:0 [ 454.278746] free:1251386 free_pcp:467 free_cma:0 [ 454.312663] Node 0 active_anon:527272kB inactive_anon:312kB active_file:91448kB inactive_file:47524kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295840kB dirty:1028kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 387072kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 454.341365] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 454.367569] lowmem_reserve[]: 0 2833 6338 6338 [ 454.372249] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:220kB free_cma:0kB [ 454.400086] lowmem_reserve[]: 0 0 3505 3505 [ 454.404488] Node 0 Normal free:2086392kB min:37284kB low:46604kB high:55924kB active_anon:527272kB inactive_anon:312kB active_file:91448kB inactive_file:47524kB unevictable:0kB writepending:1076kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5472kB pagetables:4256kB bounce:0kB free_pcp:1100kB local_pcp:408kB free_cma:0kB [ 454.434492] lowmem_reserve[]: 0 0 0 0 [ 454.438407] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 454.452146] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 454.468152] Node 0 Normal: 240*4kB (UME) 1067*8kB (UME) 1569*16kB (UME) 1026*32kB (UME) 573*64kB (UME) 228*128kB (UME) 105*256kB (UME) 70*512kB (UM) 32*1024kB (UM) 35*2048kB (UME) 436*4096kB (UM) = 2086312kB [ 454.487328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 454.495955] 34830 total pagecache pages [ 454.499994] 0 pages in swap cache [ 454.503481] Swap cache stats: add 0, delete 0, find 0/0 [ 454.508897] Free swap = 0kB [ 454.511945] Total swap = 0kB [ 454.515011] 1965969 pages RAM [ 454.518186] 0 pages HighMem/MovableOnly [ 454.522208] 338524 pages reserved [ 454.551284] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 454.563254] syz-executor6 cpuset=syz6 mems_allowed=0 [ 454.568428] CPU: 0 PID: 27118 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 454.575270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.584620] Call Trace: [ 454.587197] dump_stack+0x1b9/0x29f [ 454.590823] ? arch_local_irq_restore+0x52/0x52 [ 454.595482] ? kasan_check_read+0x11/0x20 [ 454.599616] warn_alloc.cold.119+0xb2/0x1b8 [ 454.603924] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 454.608748] ? trace_hardirqs_on+0xd/0x10 [ 454.612879] ? _raw_spin_unlock_irq+0x27/0x70 [ 454.617358] ? finish_task_switch+0x1ca/0x820 [ 454.621867] ? lock_repin_lock+0x410/0x410 [ 454.626096] __vmalloc_node_range+0x45e/0x720 [ 454.630579] ? graph_lock+0x170/0x170 [ 454.634383] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 454.639212] __vmalloc_node_flags_caller+0x50/0x60 [ 454.644127] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 454.648954] kvmalloc_node+0xde/0x100 [ 454.652747] kvm_arch_create_memslot+0xa3/0x4e0 [ 454.657408] __kvm_set_memory_region+0x1d1b/0x2e50 [ 454.662329] ? kvm_vcpu_block+0x1050/0x1050 [ 454.666637] ? zap_class+0x720/0x720 [ 454.670349] ? check_same_owner+0x320/0x320 [ 454.674676] ? rcu_note_context_switch+0x710/0x710 [ 454.679597] ? lock_acquire+0x1dc/0x520 [ 454.683564] ? graph_lock+0x170/0x170 [ 454.687347] ? __might_sleep+0x95/0x190 [ 454.691327] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.696849] ? futex_wait_queue_me+0x559/0x820 [ 454.701416] ? refill_pi_state_cache.part.7+0x300/0x300 [ 454.706770] ? find_held_lock+0x36/0x1c0 [ 454.710820] ? lock_downgrade+0x8e0/0x8e0 [ 454.714968] kvm_set_memory_region+0x2e/0x50 [ 454.719372] kvm_vm_ioctl+0x668/0x1d90 [ 454.723247] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 454.728333] ? futex_wake+0x2f6/0x750 [ 454.732119] ? kvm_set_memory_region+0x50/0x50 [ 454.736685] ? get_futex_key+0x1e90/0x1e90 [ 454.740902] ? sock_destroy_inode+0x56/0x70 [ 454.745224] ? perf_trace_lock+0xd6/0x900 [ 454.749378] ? zap_class+0x720/0x720 [ 454.753078] ? destroy_inode+0x156/0x1f0 [ 454.757123] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 454.762296] ? do_futex+0x249/0x27d0 [ 454.765994] ? graph_lock+0x170/0x170 [ 454.769783] ? evict+0x5cd/0x960 [ 454.773133] ? exit_robust_list+0x290/0x290 [ 454.777445] ? find_held_lock+0x36/0x1c0 [ 454.781499] ? lock_downgrade+0x8e0/0x8e0 [ 454.785635] ? rcu_is_watching+0x85/0x140 [ 454.789777] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 454.794956] ? __fget+0x40c/0x650 [ 454.798399] ? expand_files.part.8+0x9a0/0x9a0 [ 454.802962] ? inet6_net_init+0x870/0x870 [ 454.807095] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 454.812280] ? kvm_set_memory_region+0x50/0x50 [ 454.816860] do_vfs_ioctl+0x1cf/0x1650 [ 454.820732] ? __sock_create+0x11e/0x920 [ 454.824781] ? ioctl_preallocate+0x2e0/0x2e0 [ 454.829173] ? fget_raw+0x20/0x20 [ 454.832615] ? SyS_futex+0x3a4/0x56d [ 454.836329] ? do_futex+0x27d0/0x27d0 [ 454.840127] ? security_file_ioctl+0x9b/0xd0 [ 454.844522] ksys_ioctl+0xa9/0xd0 [ 454.847961] SyS_ioctl+0x24/0x30 [ 454.851309] ? ksys_ioctl+0xd0/0xd0 [ 454.854919] do_syscall_64+0x29e/0x9d0 [ 454.858799] ? vmalloc_sync_all+0x30/0x30 [ 454.862941] ? _raw_spin_unlock_irq+0x27/0x70 [ 454.867443] ? finish_task_switch+0x1ca/0x820 [ 454.871925] ? syscall_return_slowpath+0x5c0/0x5c0 [ 454.876838] ? syscall_return_slowpath+0x30f/0x5c0 [ 454.881754] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 454.887110] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 454.891949] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 454.897122] RIP: 0033:0x4552d9 [ 454.900290] RSP: 002b:00007f735423ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 454.907999] RAX: ffffffffffffffda RBX: 00007f735423f6d4 RCX: 00000000004552d9 [ 454.915265] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 454.922519] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 454.929784] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 454.937046] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000001 2018/04/06 06:12:51 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x4, 0x10200) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x8d, "ccb125e822fbca8577a3967a066b569cd2df849377f850e34518c3cd3bf579aad263bc2b2de7f2462aa7bc9b276dd519a9d7385d5dc6a63a57c9b4565f0024c404904f4cf4116415a9635de63a1ef99d3ab3ed7d2d3f32f65f3022a96437247809ef094ca46beb2be6b28ef7ad604b2f00d183d9a172289861776289dc5775cf9533ab758f1bf800e0bbab784b"}, &(0x7f00000002c0)=0x95) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x0, 0x9}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000380)={r2, 0xd70f, 0xc75, 0x1000, 0x2, 0x76ce, 0x3, 0x80, {r3, @in6={{0xa, 0x4e23, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x6}}, 0x8, 0x5, 0x79, 0x10000, 0x80000001}}, &(0x7f0000000440)=0xb0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r6 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000000)='Ehreaded\x00', 0x1) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x100000000, 0x102) 2018/04/06 06:12:51 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x4, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:51 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xf00, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) epoll_create1(0x80000) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000000000000000f8ffffff0000d7a85d230000000000000000000000000000000800000000000000000000000000000000c39e780bc5ad91a5ca2d4e995bf00b171cf13161d946ddbc05929441a4bca9ddf1611ca51f54b364c4be9abb0175d7b044562b52364421c3afe6d011c022d7da5b9eb2b95ed2787d8a1c80b97dc171e4abb47afc850d7b7f5af01fb49e7f12af8aa2946b508dc52022dbf924eff7221b4dc07a85e66fa155"]) 2018/04/06 06:12:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x204e, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:51 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x6000000]}) 2018/04/06 06:12:51 executing program 7: r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x0) getsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f00000000c0)=""/77, &(0x7f0000000140)=0x4d) 2018/04/06 06:12:51 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x4c000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:51 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0xffffdd86, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:51 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x8100]}) 2018/04/06 06:12:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0xb80b000000000000, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:51 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x8100, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:51 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) [ 455.190779] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 455.202624] syz-executor6 cpuset=syz6 mems_allowed=0 [ 455.207944] CPU: 1 PID: 27140 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 455.214796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.224158] Call Trace: [ 455.226756] dump_stack+0x1b9/0x29f [ 455.230401] ? arch_local_irq_restore+0x52/0x52 [ 455.235084] ? kasan_check_read+0x11/0x20 [ 455.239250] warn_alloc.cold.119+0xb2/0x1b8 [ 455.243588] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 455.248430] ? trace_hardirqs_on+0xd/0x10 [ 455.252577] ? _raw_spin_unlock_irq+0x27/0x70 [ 455.257069] ? finish_task_switch+0x1ca/0x820 [ 455.261566] ? lock_repin_lock+0x410/0x410 [ 455.265800] __vmalloc_node_range+0x45e/0x720 [ 455.270291] ? graph_lock+0x170/0x170 [ 455.274089] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 455.278920] __vmalloc_node_flags_caller+0x50/0x60 [ 455.283842] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 455.288678] kvmalloc_node+0xde/0x100 [ 455.292473] kvm_arch_create_memslot+0xa3/0x4e0 [ 455.297143] __kvm_set_memory_region+0x1d1b/0x2e50 [ 455.302076] ? kvm_vcpu_block+0x1050/0x1050 [ 455.306395] ? zap_class+0x720/0x720 [ 455.310095] ? check_same_owner+0x320/0x320 [ 455.314414] ? rcu_note_context_switch+0x710/0x710 [ 455.319327] ? lock_acquire+0x1dc/0x520 [ 455.323297] ? graph_lock+0x170/0x170 [ 455.327086] ? __might_sleep+0x95/0x190 [ 455.331055] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.336580] ? futex_wait_queue_me+0x559/0x820 [ 455.341156] ? refill_pi_state_cache.part.7+0x300/0x300 [ 455.346516] ? find_held_lock+0x36/0x1c0 [ 455.350578] ? lock_downgrade+0x8e0/0x8e0 [ 455.354748] kvm_set_memory_region+0x2e/0x50 [ 455.359152] kvm_vm_ioctl+0x668/0x1d90 [ 455.363037] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 455.368132] ? futex_wake+0x2f6/0x750 [ 455.371927] ? kvm_set_memory_region+0x50/0x50 [ 455.376498] ? get_futex_key+0x1e90/0x1e90 [ 455.380723] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 455.385732] ? perf_trace_lock+0xd6/0x900 [ 455.389877] ? zap_class+0x720/0x720 [ 455.393581] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 455.398762] ? do_futex+0x249/0x27d0 [ 455.402463] ? native_flush_tlb_others+0x690/0x690 [ 455.407384] ? graph_lock+0x170/0x170 [ 455.411290] ? check_same_owner+0x320/0x320 [ 455.415612] ? exit_robust_list+0x290/0x290 [ 455.419925] ? find_held_lock+0x36/0x1c0 [ 455.424002] ? lock_downgrade+0x8e0/0x8e0 [ 455.428153] ? rcu_is_watching+0x85/0x140 [ 455.432294] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 455.437484] ? __fget+0x40c/0x650 [ 455.440933] ? expand_files.part.8+0x9a0/0x9a0 [ 455.445504] ? lock_downgrade+0x8e0/0x8e0 [ 455.449641] ? __split_vma+0x5ac/0x7f0 [ 455.453520] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.459047] ? vma_set_page_prot+0x183/0x260 [ 455.463448] ? kvm_set_memory_region+0x50/0x50 [ 455.468024] do_vfs_ioctl+0x1cf/0x1650 [ 455.471911] ? ioctl_preallocate+0x2e0/0x2e0 [ 455.476311] ? fget_raw+0x20/0x20 [ 455.479760] ? SyS_futex+0x3a4/0x56d [ 455.483464] ? do_futex+0x27d0/0x27d0 [ 455.487253] ? security_file_ioctl+0x9b/0xd0 [ 455.491652] ksys_ioctl+0xa9/0xd0 [ 455.495099] SyS_ioctl+0x24/0x30 [ 455.498454] ? ksys_ioctl+0xd0/0xd0 [ 455.502071] do_syscall_64+0x29e/0x9d0 [ 455.505945] ? vmalloc_sync_all+0x30/0x30 [ 455.510082] ? _raw_spin_unlock_irq+0x27/0x70 [ 455.514567] ? finish_task_switch+0x1ca/0x820 [ 455.519052] ? syscall_return_slowpath+0x5c0/0x5c0 [ 455.523974] ? syscall_return_slowpath+0x30f/0x5c0 [ 455.528897] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 455.534257] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 455.539099] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 455.544272] RIP: 0033:0x4552d9 [ 455.547445] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 455.555141] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 455.562395] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 455.569652] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 455.576909] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 455.584164] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:12:51 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendto(r0, &(0x7f0000000040)="9386c69a0bb5933485123b886e8b2f1baf3f961f9de7ed45c221f6baa8b21710fc5c0c71b808edae76d88321647f760555545abcef591fd2e6bd4baf060e563cac3058fbcceba2c08b42a3e85fb126ed7185bd74c04c6b923ff2b9ff4596366028e948d91e58dfeb083a263316e98cdd0d3ae564c41c4330caa0249e5a67b24c8327848624aa1eb4b4177d5148ee41eb3b158dbeea82b5a0b7eeeccdb7c4d423dc9bf60e9b7d6b830a3e1141b6b3d53405", 0xb1, 0x80, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0x7ffffffffffffffb, 0x8) 2018/04/06 06:12:52 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x6000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) [ 455.591585] warn_alloc_show_mem: 1 callbacks suppressed [ 455.591588] Mem-Info: [ 455.599525] active_anon:132367 inactive_anon:79 isolated_anon:0 [ 455.599525] active_file:22865 inactive_file:11911 isolated_file:0 [ 455.599525] unevictable:0 dirty:270 writeback:0 unstable:0 [ 455.599525] slab_reclaimable:12546 slab_unreclaimable:101778 [ 455.599525] mapped:73963 shmem:86 pagetables:1116 bounce:0 [ 455.599525] free:1250776 free_pcp:425 free_cma:0 2018/04/06 06:12:52 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TCSBRK(r3, 0x5409, 0x3) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000000c0)={0x2b0c, 0xffffffff, 0x400}) [ 455.633436] Node 0 active_anon:529468kB inactive_anon:316kB active_file:91460kB inactive_file:47644kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295852kB dirty:1080kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 389120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 455.661701] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 455.687927] lowmem_reserve[]: 0 2833 6338 6338 2018/04/06 06:12:52 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x38000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000004c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8400, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x6, @multicast1=0xe0000001, 0x4e24, 0x1, 'sh\x00', 0x2a, 0xffff, 0x55}, 0x2c) connect$inet(r1, &(0x7f0000390000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) r3 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0xbf, @empty, 0x4e20, 0x1, 'lblc\x00', 0x0, 0x7, 0x7f}, {@multicast2=0xe0000002, 0x4e21, 0x10006, 0x3f, 0x6, 0x6}}, 0x44) ftruncate(r3, 0x10000) sendfile(r1, r3, 0x0, 0x8000) [ 455.692599] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:704kB free_cma:0kB [ 455.720405] lowmem_reserve[]: 0 0 3505 3505 [ 455.724820] Node 0 Normal free:2083248kB min:37284kB low:46604kB high:55924kB active_anon:529484kB inactive_anon:304kB active_file:91460kB inactive_file:47672kB unevictable:0kB writepending:1108kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5696kB pagetables:4624kB bounce:0kB free_pcp:1144kB local_pcp:632kB free_cma:0kB [ 455.754870] lowmem_reserve[]: 0 0 0 0 [ 455.758759] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 455.772538] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB 2018/04/06 06:12:52 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x3000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:52 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x8906]}) [ 455.788489] Node 0 Normal: 3*4kB (UME) 1083*8kB (UME) 1462*16kB (UME) 1066*32kB (UME) 574*64kB (UME) 225*128kB (UME) 105*256kB (UME) 70*512kB (UM) 32*1024kB (UM) 33*2048kB (UE) 437*4096kB (UM) = 2084740kB [ 455.807087] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 455.815739] 34867 total pagecache pages [ 455.819798] 0 pages in swap cache [ 455.823314] Swap cache stats: add 0, delete 0, find 0/0 [ 455.828202] IPVS: set_ctl: invalid protocol: 191 0.0.0.0:20000 lblc [ 455.828724] Free swap = 0kB [ 455.838151] Total swap = 0kB 2018/04/06 06:12:52 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x18880, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x20) fsetxattr(r1, &(0x7f00000000c0)=@random={'btrfs.', 'ppp0trusted:\x00'}, &(0x7f0000000100)='./cgroup\x00', 0x9, 0x3) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) [ 455.841227] 1965969 pages RAM [ 455.844367] 0 pages HighMem/MovableOnly [ 455.848390] 338524 pages reserved [ 455.927419] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 455.939330] syz-executor6 cpuset=syz6 mems_allowed=0 [ 455.944672] CPU: 0 PID: 27188 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 455.951547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.960897] Call Trace: [ 455.963485] dump_stack+0x1b9/0x29f [ 455.967113] ? arch_local_irq_restore+0x52/0x52 [ 455.971783] ? perf_trace_lock_acquire+0xe3/0x980 [ 455.976627] warn_alloc.cold.119+0xb2/0x1b8 [ 455.980946] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 455.985792] ? finish_task_switch+0x1ca/0x820 [ 455.990321] __vmalloc_node_range+0x45e/0x720 [ 455.994817] ? graph_lock+0x170/0x170 [ 455.998642] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 456.003483] __vmalloc_node_flags_caller+0x50/0x60 [ 456.008408] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 456.013247] kvmalloc_node+0xde/0x100 [ 456.017053] kvm_arch_create_memslot+0xa3/0x4e0 [ 456.021736] __kvm_set_memory_region+0x1d1b/0x2e50 [ 456.026685] ? kvm_vcpu_block+0x1050/0x1050 [ 456.031009] ? zap_class+0x720/0x720 [ 456.034729] ? perf_trace_lock+0x900/0x900 [ 456.038959] ? lock_acquire+0x1dc/0x520 [ 456.042933] ? graph_lock+0x170/0x170 [ 456.046724] ? __might_sleep+0x95/0x190 [ 456.050704] ? refill_pi_state_cache.part.7+0x300/0x300 [ 456.056072] ? find_held_lock+0x36/0x1c0 [ 456.060145] ? lock_downgrade+0x8e0/0x8e0 [ 456.064339] kvm_set_memory_region+0x2e/0x50 [ 456.068746] kvm_vm_ioctl+0x668/0x1d90 [ 456.072629] ? perf_tp_event+0xc30/0xc30 [ 456.076686] ? kasan_check_write+0x14/0x20 [ 456.080922] ? kvm_set_memory_region+0x50/0x50 [ 456.085502] ? memset+0x31/0x40 [ 456.088784] ? perf_trace_lock+0x495/0x900 [ 456.093021] ? perf_trace_lock_acquire+0xe3/0x980 [ 456.097869] ? zap_class+0x720/0x720 [ 456.101580] ? perf_trace_lock+0x900/0x900 [ 456.105816] ? graph_lock+0x170/0x170 [ 456.109628] ? exit_robust_list+0x290/0x290 [ 456.113951] ? find_held_lock+0x36/0x1c0 [ 456.118034] ? lock_downgrade+0x8e0/0x8e0 [ 456.122192] ? rcu_is_watching+0x85/0x140 [ 456.126335] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 456.131534] ? __fget+0x40c/0x650 [ 456.134991] ? expand_files.part.8+0x9a0/0x9a0 [ 456.139569] ? find_held_lock+0x36/0x1c0 [ 456.143642] ? kvm_set_memory_region+0x50/0x50 [ 456.148220] do_vfs_ioctl+0x1cf/0x1650 [ 456.152113] ? ioctl_preallocate+0x2e0/0x2e0 [ 456.156517] ? fget_raw+0x20/0x20 [ 456.159975] ? SyS_futex+0x3a4/0x56d [ 456.163688] ? do_futex+0x27d0/0x27d0 [ 456.167487] ? security_file_ioctl+0x9b/0xd0 [ 456.171897] ksys_ioctl+0xa9/0xd0 [ 456.175350] SyS_ioctl+0x24/0x30 [ 456.178712] ? ksys_ioctl+0xd0/0xd0 [ 456.182335] do_syscall_64+0x29e/0x9d0 [ 456.186216] ? vmalloc_sync_all+0x30/0x30 [ 456.190360] ? kasan_check_write+0x14/0x20 [ 456.194594] ? syscall_return_slowpath+0x5c0/0x5c0 [ 456.199518] ? syscall_return_slowpath+0x30f/0x5c0 [ 456.204455] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 456.209822] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 456.214672] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 456.219855] RIP: 0033:0x4552d9 2018/04/06 06:12:52 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x34000, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:52 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x21000000]}) 2018/04/06 06:12:52 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x80402, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @random="ad298370c960"}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000280)) write$cgroup_type(r3, &(0x7f0000000000)='Ehreaded\x00', 0x1) fallocate(r3, 0x0, 0x209, 0x0) [ 456.223040] RSP: 002b:00007f735423ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.230747] RAX: ffffffffffffffda RBX: 00007f735423f6d4 RCX: 00000000004552d9 [ 456.238013] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 456.245283] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 456.252562] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 456.259824] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000001 [ 456.267844] IPVS: set_ctl: invalid protocol: 191 0.0.0.0:20000 lblc 2018/04/06 06:12:52 executing program 7: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f000001bff4)='./file0/bus\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x200000000005, 0xa012, r1, 0x0) vmsplice(r0, &(0x7f0000004540)=[{&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000080)="fe807564151ade4f1fcbff8a5364c5fb9cc5732b659fb79f0ac3e73c9548aad49894b8b31fa959f4d0ffbae75355d0d1ed95a1135a07f19df8d301482b5eb17b28e31cdff303b1aafb9118e339c567347f6d12c5b8f9640544b251f3bff093331ea61b8ddbe86558cbc859", 0x6b}, {&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000000100)="3931b2b067bf6ccb43687b241a1758ea5a7e5b1d0a279b843ac32328f47fa151397ae0794ad6d23ceed6262e30d00ee67d06072a5a99a5fd8e731c1e1afe94c3472f1df2fb042de693c59daf0ad46353cbad7444de63a41607c4271e143320eab9bb7bc35a67ed7a2ca320dd77f926a1827f84aabb0fb3dbe8468e86bf45dc5d8d36c0d9936193395fc53fe7bda2f0bce8a2256b6d4798933b8cccd46aca7de37d9d318ad5315a14759adb3a130d", 0xae}, {&(0x7f0000003440)="734e40ebdfe1946b4af7734baded88c1842c463ad711aee0778e11fa2e60c772d10a4c59866b57ff847a9aa4593e1bf41926d7c2598ed9fe1a118e2b349f4910c157d0fa21e0b82e1b117583dbc7ef9a71b84b6f57fe59201cff32b5f921d73434e3166e13cd87826850529c26f0b8dc2c1f3ed5c024107d1975b6c4ab8fcffe6fab1ce1d0fad2c1d631c4378c3c02660598bb83758eeff01335c6ad0e2959169369ace73d4d7d15b89c442434a581ba29e7fee209b920a94c3ed97efc1a3eefac115fc4c6fe59002e48c8a15c3906f7f714f88615763e886a77efc6e0c04c95d393b53cd51af9dee5ada094beee852bc33447d24f71c1e2baab8e2f0f70e2f58689394082c8e521382fe9f99d4cc66a126e7788105d70e136e80d32a0c8d3e1a40ed9a7787baff4e57befa0f8ea9337442e79613b606e9b0ccd7ad0faf4194de792b2a07c14f6d75e7caafb7f65629b1de207f9dfea4ea20e952fb5e14ad2806c58cd05b8d8f6edd476b1080afda844c8a0eff9969657268952abee8ed656c94f3eca4ac75ab5235c6e35832b1a7933882c22d0db565137cf5e534a041a35f72b5e77d9890b00322f246be646b9d79247451a14a6aa18c07d34c05e3b8d8fdc3984050809a43d5b6d7067cdfe9e6c77698d8ba99a993a48d65477f9716a2084fdfe3e5320ba73ccfc87950ac4748493c4f086b04103008ca3835caa69224150d837792636f487c9a7e1caa262305a9cb1014d94a76f4311c4580c61f2c4ed49ea97183397c4395828c46ecd787c26611865e86c080bb50fb92562ac43e9a67cd96999e6a8d4f3aa27d9a1e49b77d797ea181d87d1d7296c7139b7bd08a6f5d5ea5dcde7db7456999a82e0dda3690b57adb392a41767b86d7ce671df69d26f794f15fa7665ed96dba024f7052ca9ca70f0270123d8a058cf34eb996923742b3a8a592643b194856c4845e22e12f3b5a6b077cecfd8e32c1d3161d964081eed0b765eb42de22d2c8111d0d0e74ff369bcfc7759c52d1a2256d12434125ccd9ddb23866e5ba46d5a11799b8c043573d1261cb981b4e10fab8601c235a4341e8b18fd71d8c4febe18b929e7a79150eadd6b38d71a83df579ed3078060c7bda02007ad10c51392016f715a8df9689bf9bbe45de21d2ea9d54ca3cf178b4e8dc411f9f5cda1bd8702ea9bbd5aba219ac9146ab1213be9586ab7ad56b508b1547e6c5d2023599f50b6f8619b5b335509cf10084462e5dd444b558c81a7b581a6774baf65865a0b20c75b9ee96b8669c9fc09b3a8c87736d7d389a3a81bf4f1f946f6b102a2c77d37cf78b64cdfe618ce8510481c9252062d0037940178fbc379e47422fe7d7c87a7ced10093e26ae362b062b6ac66574bc43954b5d3bdbf5ebda5bdb9fac6c22120e33d7ec506a75f2dd600250745574ab2f5a42a6fcce6911e6a6bfc8593920bc0e242daaa6ca97b5d0bb1d35e17867e6e167f96ede946e31fdfc716f03de024281db20b436e4e5e652a18899538b960adcd4946c6d1866bd2bc7db9e39c353de91da1492b64224fc21258d6ea7b7ee2c0888f8e1e1a052344dc1aeda12b4872dddf335e8f20586ae2af1a1d5f6db7010f93c8bdb9a7bc2619f718fb9f5d957da17da47d50ef742dfdccd964154df36317d5d615c34b18ca536f78e21c41af1f0aca7eb17c4aff8f68d1dde1ca1f2a9954603ce9f0039deebfc45bfba6e9792d7b8499d116e2569f2d843c21d5912193ee603c4de604c1d3b6d12ab1cca6ddbc395a15f5d9cac3eb088716aee0fce99ac278b272695e70cad458108b7e2e8908df3762ed6f51fbf885d4111b7353626aefecff733c84d1b1994b172731124568ac9a989167bdd096d7889bc38e4a030d3e4a74832f7781ab2c02053c0f04945ecd07dec3e152d5bbdea3e299726450164d94a4a30c6009566e4e2a5548c2407ca1d941b876c6ac550e214852c4bcae27c97bb23bdfefe7150b02b7c82d25814a027f05224bb310581fd5dc76ddbd8b3f52ee217395db3d02f10fc5cf32b60a7a660270946f7d6db39368da2a04582a0789c178d46684fb540dd42efd0424bf7a504dc1d7452359a7bdd0cd9f5d8bc7bd79d0101b78cb63fd177934a1a8309d415a49fe25b96d6e8bcfbf85d27943dcb490c2febe10cebbbc31ff391850a879206a3a2ffe5150773f50e5a12c1dd135b60816cb64666a1574ddf9f70f98f0da0a39c0ec9356a7683362fc01c38e885d0aa1014f6b4e261c8d3c9542968a506b23f07bc93989d7d7ae812d280d81664f475372314e8fc8e3f4264aa0682d057010f88f6f4e10b6dc66621f21896dce41ae93216f2ea2bda9cb35d5373990a4e0d7457b87f6aa2d4e4c3f248c4d01e7852e174cc5cbf4d11ee2149c8ebf1213fb755df4384cd8b82b00154ae6b04bb099cb03f5908eaf75a0b190ad557b554cca08e6bd2007f4bfefde0428f28d6abc25ce0e180b7b7f024a739ed6cb6cfdf309693b1d4e610bedf861c9f0dd4aee9c94b417315ec170d138c2fb48a1a2132862e67f0e737a08105d238e0fe004387a41ce81a6242002ef3e3603abe0471696ffb03aa2e7e246bd0a42f9191acca1ba84c96a750dd398187a1e058cadcd6a6b459765b7f72936111125155243229273eb2d9ca3ed3398f9a2ab0791b8a73c0a6f2e7fb660a19f8bc068c9376514bc906f5ffdf803acd3e16775b17947529bb336ee482bb2d6ec72538154d099c68393b21e21b9feb76e2bd97a4f45609b5295455236f60fa71dc98dfd86f7360123622a4809019845ade10f9a4e409f2e728b2c3ba444ae06545bcbaed2d8001a370374938499f8fff6dcd5fbe0bcf01fb3eb06284e133b562e8f5a69487a4ca92989335c585d91e43d48f0ea718fbf1000f916fab687c6ce3ede85cc2ad573a6fa3e30eca8f7e3daff04656bf8bc0ce528f7f5911c437d69435b96fc06d14b3ed3dd5479814bbe60adaaba21bc2ebbc3fc3efcdf12689ac74106a34add8a5e27104620d55a637508f7f1ce43244f6b94ca0b945568cba13f831039f290a8bed57871c177444b1ac70cb4009d62c047fe04979aa81fe98b59533b15ca72b23dd5dbf9bdd8f0989700fc0800901696662316efb6a39aebf2888f45d95aa77853e202a1dd99c568449f6f01beb447275f6306947323d77950a8fb894871b96fc90dfcb339bf5c147250c4fe2700840a1190be18dbb90f0c8fa22d4529151f6c09f207381a1e7514de2f284d726f06d7395ebc25fe905190aa699d69490534573f0ac09ac519ef47167644df8f15797f51c8f2c54616a9c9fed799eee26994ea4a77a14ec603aa27befd6b8ece35d2d23d4832dc478f96d0acc94da60c84119a78aa5f90f31310712a0a9979c89e937f2c7250732d9fe4cdde7e1955155c520553a30f0cda16fb8ceba42ec2463d9e71efd46b7822fc1a2c2d618416f7f9b77d8ce9b88960041e2dbd2372cd591a561f80a7402090238fe7c1cd120e2e16e35ab8f997011d5246881e8a8231f1e0ec601f8fec72d05c4f2509e32a306a87ebad3b1cf376f3701bdb26238963fff9eb01c265c032a282ea0eea5ec318807bd11ed195237136fc720ec3fecd06bf785a7f085c874c8b501484bcfcf9b54bf8673cd95dc1e76d0891e9d5574bac039845d485b296ecd56a5e9e4e6bd20f8e62ee7a9988cc6659cbb0a2c8f5b46eeac326850afd62a8771417e57eed8cc6f717af1e7b67d265389fed27b4e9123e917d13d1aa79a3758baa9bd74069e91e45f274062527b08060d696c7a8dd827ec10e195fea7c9b049ef65979f52fffc4be4d0eeaafc2b2bff1a347d88cdb0b3f37b32872408928b568736db8f4fe2a151837a5b54690ed60f5eb8704f0b9bfe15252654eef83052c57851de8c8a19abb248289aa359801aeea15a769ed15982acdcc4733ac40b38e1f135aa734795e9f2d71ac29d69d5e7e0a921b820fe767c4a897113742e785da14d1e765975344a76167f1ae610bfd65e650b859232bfdb86a9320c7a0e0f1340a4582e291d0e0931dbc070fe18166cfac317ed0ee126af90f126dff0a58a0a71f69d73f44f63add83092f2f7712357dc6ec29f615a63bff35feefe97d388cd0f68930979151525b43c6d453dc6b13698f7bf1b24d84487834bf72c5ce17edf7960a9f959f42cc65e755f963d68bca6207481e187661bdcefa911f4c33e19ff94f8873f4a1da8117c3494ea01c9f1a1cc878e497c38e78f3b4abb6d22796041b00dab86583090ed43da557b9f1fe90df425211098cf664e1f8c3f3787ea11024ab0441d5cb712b90248449d41d65c913933d4017cba647b8ba84902dd017bdefa19979dd4f22f695da8bf1ca31d9e9a22c5b5906ef1a8435884dc8103e4e7dcdc23576c13d4e5c683f56405be39456e5a52620a8051b34df8d09bdca74a1b408529740692fb22aea75e0313e952ec9d7a492779b3e12fdfa56de88388cff5ec1cddb70e5f20f5c86f89c3bc8473e1ffad8887206eeddfd55f3899a59057257e9d3ee193f1d1f94d7db22390c4e9a7e46c246ac688a53b1b6280eda0361393341771f2e9c060327b5e6a9b09bb30547d8983cb028deb3181395d61bf819bf15a6c664502501acacbde628b1dbfad71764f196a161430587d0e2570542368d022ed69ccc07388cbb232f07ada33b316102c7f2ddceb0d7b063444cf7895e451a318600f53516f5bc5fef5f39d7bebe78b3da289e6a960e0348e840d9e04e360640284a4421a78ad5a9b811f8fda93ffc67e2699f63d7d5782a348789ed9c962276f8ffcd552163ba61503a329467d320bf9a6d1950509776d281871873261b08dea88cf70eee82ba5e62478cea438964451185349411f0c7c61a1863dba8397329405b6a04d7ce711b12fb997bdb6c42041a52be08528718a4ea48214464ef429eaf9a86f05ec53135c0583d511697b6fa2da015444341025cb4d5932dd340d53d61c8d3417a300f5cd9692af7632d29a521b8169daa4a24e07d58ed7ff3e7cfad6e902c40a30f6b6f25dbbbdbce00ef0a77f5b54368f65bb5b44f53e084da2ab08a3be77ea832ef73ac92ed13287961e2aa6b98b8c38ee8710aa531616ec2d9788e938e2173a5e341ee40facbdede1549933a54d1180b6cce6cac8a779eba63a86b243f6ad402669daf7e5ca65265a9b6b4391798fc691c74e5e16703ab25c3c158144a6972462d505e7351494d0fbd353a0292e72873b842ac2a58cb38c157267a874771e26d58071c5b734670ff1e184f61036f1f0badff25d0c50d1d9074949b5bbbeeba7c728d841b86b7732ec6e6302735c4035cc087134991ca50755883d59e850753a0c8fbf9ef9dda6cf23baec5d4cec21f788603e673c3306abb16fd933af833bc3e210002b7643b1a722e92f41af8b69454c6947d00df1c1501426629a692bb468fac415f65ea06e5cbb2c3ed3a64c532c145844ac88b06d33d1f2747fb909965704cce99bb812c398527cb0f2ff5d127fb75c698f3823059e10cece55f418c5dd32e9bd5194fc5a8ffbc2b9a48f2ef428566aaeaa608bbec6c972fb6a96e2d8eb8c80bd31fb925c124d99deaf77ee077758f15913853a07f5350e6807e243a72fe1d7054a428020b35283a901aea1e465a978d8fa6480fdc937517171db625d3d96cfe3957652de03d4f0f01b4ab0c86304ff3149d8eacd27c0d6f7228362447bdbb23cfa033d554b5ba6a09093296f81b67e2135ccb4613df1c7b0930d8a590909499fe7fef9f9cadbf314f52424abbd5e20b4824fcc92a5c", 0x1000}, {&(0x7f00000001c0)="2c7b0b577cc58987edbb52f6b4cbfc70063eead5fd49ec6016f293bd47bb09148cc17cdef6411d1fed75c0ef34fce240e05d983ae38a51c927873b75130833955b3b7098e1936b9ba253cf503149eb83e19ba2aa83b989e3eb28fad4a0d2b0476782c79b2231f9133cd7b931344d4f429a4f6231bb772ad3b0058028e89b9c67317919f2865bb67e568b04327e959ce420d44f3c46decd891cde1cc7bc6fdd945ecf85bf21acf8460cec4d9a75864929502fb6b38ef04e52dfa15b1053a4ffa8234b1d1d52b381ad6666e7dbbc90b14871050f5f98ffff684e286b6c96", 0xdd}, {&(0x7f00000002c0)="34f1507a14035023843e86a33b4532f76cdd0da0f8b13e8fb96ac48c0d2f11415b8c0a40fcc62e636726cfdc6ff8f143410561400fb43d4d9dd07e85a26b0d4fd10e8c463e76c644e54fb4cdffb08369cfe95b839b567d450393b1a52aab4af9767bd8915579058a54818cc356e7419a28b054f205eda827e89c8270e45273af15297356e9392ffae848d52fdf9f53959d81cb47fa5c67b544dbc8de8c6f5475963d2be9c7a20746c38f3231b9ad0f66ac97264a40edfc214f71d8bc5d148b8182436261ad10747aa3a36ba4c4c6799a78dd51bfc7458757e2ec14", 0xdb}, {&(0x7f0000000000)="060db600d3be5c456c57fb227199c71d342c42eaa0a22c9592e2c912e6ba06672f0d7632c6963f825eb56f540c762a76a1bee66c4fdc6fc16f", 0x39}, {&(0x7f0000004440)="b22a869680cfba4a0f8a943274d21d3dc911cff26d4b7f2043103716c62d16217805b57cafeb0661b6693b8687cc6f601c3e0353d958257759db41223e59dda958411afae1deccff73ffc101142cea164482825041d76b7b48c8be224c2b5c10d3787d56eeb2f81fc6a3bcac6fca772f15a4ee7825b04ee4b65414495433258f10dbdb92779aa968225ffda93d3c7987a3b99bb81289529555f3d665cd52f3d16d4bcba745c1e1a5c2e707bf2cd35997c4a24129eda6ff0f621ee60ce466995865cc9e3f449777c002faa5ece1f83f9a94b9a646dc86564f515036f018bc", 0xde}], 0x9, 0x4) 2018/04/06 06:12:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x1000000000000000, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:52 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x7a000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:52 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0xf6) 2018/04/06 06:12:52 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x6, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:52 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x21]}) 2018/04/06 06:12:52 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:52 executing program 5: mkdir(&(0x7f0000000040)='./file0/', 0x0) mount(&(0x7f0000000180)='./file0/', &(0x7f00000001c0)='./file0/', &(0x7f0000000200)='proc\x00', 0x0, 0x0) mount(&(0x7f0000000000)='.', &(0x7f0000000040)='.', &(0x7f0000000080)='cgroup\x00', 0x5010, &(0x7f00000000c0)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='ncpfs\x00', 0x20000, &(0x7f0000000240)) rmdir(&(0x7f0000000240)='./file0/\x00') mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000000440)) 2018/04/06 06:12:52 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x20, 0x181000) modify_ldt$write(0x1, &(0x7f0000000000)={0x2, 0x0, 0x2000, 0x1, 0x3f, 0x4, 0x800, 0x3ff, 0x3, 0x5}, 0x10) socketpair(0x9, 0x5, 0xff, &(0x7f0000000100)={0xffffffffffffffff}) write$cgroup_type(r1, &(0x7f0000000180)='Ehreaded\x00', 0x9) 2018/04/06 06:12:52 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffffffffff000, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) [ 456.587204] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 456.599220] syz-executor6 cpuset=syz6 mems_allowed=0 [ 456.604482] CPU: 0 PID: 27230 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 456.611347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.620723] Call Trace: [ 456.623339] dump_stack+0x1b9/0x29f [ 456.626993] ? arch_local_irq_restore+0x52/0x52 [ 456.631704] warn_alloc.cold.119+0xb2/0x1b8 [ 456.636058] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 456.640939] ? perf_swevent_event+0x158/0x2e0 [ 456.645470] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 456.651052] ? print_usage_bug+0xc0/0xc0 [ 456.655159] __vmalloc_node_range+0x45e/0x720 [ 456.659688] ? graph_lock+0x170/0x170 [ 456.663517] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 456.668387] __vmalloc_node_flags_caller+0x50/0x60 [ 456.673349] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 456.678219] kvmalloc_node+0xde/0x100 [ 456.682053] kvm_arch_create_memslot+0xa3/0x4e0 [ 456.686763] __kvm_set_memory_region+0x1d1b/0x2e50 [ 456.691744] ? kvm_vcpu_block+0x1050/0x1050 [ 456.696100] ? zap_class+0x720/0x720 [ 456.699846] ? perf_trace_lock+0x495/0x900 [ 456.704121] ? graph_lock+0x170/0x170 [ 456.707948] ? zap_class+0x720/0x720 [ 456.711718] ? find_held_lock+0x36/0x1c0 [ 456.715823] ? lock_downgrade+0x8e0/0x8e0 [ 456.720054] kvm_set_memory_region+0x2e/0x50 [ 456.724501] kvm_vm_ioctl+0x668/0x1d90 [ 456.728415] ? perf_tp_event+0xc30/0xc30 [ 456.732508] ? __perf_event_task_sched_in+0x247/0xb80 [ 456.737727] ? kvm_set_memory_region+0x50/0x50 [ 456.742339] ? memset+0x31/0x40 [ 456.745655] ? perf_trace_lock+0x495/0x900 [ 456.749933] ? zap_class+0x720/0x720 [ 456.753665] ? finish_task_switch+0x182/0x820 [ 456.758189] ? kasan_check_read+0x11/0x20 [ 456.762363] ? graph_lock+0x170/0x170 [ 456.766170] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 456.770760] ? compat_start_thread+0x80/0x80 [ 456.775181] ? _raw_spin_unlock_irq+0x27/0x70 [ 456.779697] ? trace_hardirqs_on+0xd/0x10 [ 456.783859] ? _raw_spin_unlock_irq+0x27/0x70 [ 456.788372] ? find_held_lock+0x36/0x1c0 [ 456.792434] ? lock_downgrade+0x8e0/0x8e0 [ 456.796577] ? rcu_is_watching+0x85/0x140 [ 456.800727] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 456.805919] ? __fget+0x40c/0x650 [ 456.809367] ? expand_files.part.8+0x9a0/0x9a0 [ 456.813934] ? lock_downgrade+0x8e0/0x8e0 [ 456.818076] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.823618] ? kvm_set_memory_region+0x50/0x50 [ 456.828200] do_vfs_ioctl+0x1cf/0x1650 [ 456.832080] ? ioctl_preallocate+0x2e0/0x2e0 [ 456.836479] ? fget_raw+0x20/0x20 [ 456.839932] ? exit_to_usermode_loop+0x87/0x310 [ 456.844596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.850121] ? security_file_ioctl+0x9b/0xd0 [ 456.854522] ksys_ioctl+0xa9/0xd0 [ 456.857966] SyS_ioctl+0x24/0x30 [ 456.861320] ? ksys_ioctl+0xd0/0xd0 [ 456.864934] do_syscall_64+0x29e/0x9d0 [ 456.868811] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 456.873641] ? syscall_return_slowpath+0x5c0/0x5c0 [ 456.878559] ? syscall_return_slowpath+0x30f/0x5c0 [ 456.883481] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 456.888837] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 456.893676] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 456.898853] RIP: 0033:0x4552d9 [ 456.902043] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.909745] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 456.917007] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 456.924279] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 456.931538] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 456.938795] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 456.946317] warn_alloc_show_mem: 1 callbacks suppressed [ 456.946325] Mem-Info: [ 456.954183] active_anon:131272 inactive_anon:72 isolated_anon:0 [ 456.954183] active_file:22865 inactive_file:11902 isolated_file:0 [ 456.954183] unevictable:0 dirty:278 writeback:0 unstable:0 [ 456.954183] slab_reclaimable:12507 slab_unreclaimable:101924 [ 456.954183] mapped:73952 shmem:86 pagetables:1015 bounce:0 [ 456.954183] free:1251950 free_pcp:542 free_cma:0 [ 456.988026] Node 0 active_anon:525088kB inactive_anon:288kB active_file:91460kB inactive_file:47608kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295808kB dirty:1112kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 382976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 457.016304] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 457.042493] lowmem_reserve[]: 0 2833 6338 6338 [ 457.047178] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:220kB free_cma:0kB [ 457.074969] lowmem_reserve[]: 0 0 3505 3505 [ 457.079408] Node 0 Normal free:2088748kB min:37284kB low:46604kB high:55924kB active_anon:525088kB inactive_anon:288kB active_file:91460kB inactive_file:47608kB unevictable:0kB writepending:1112kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5344kB pagetables:4060kB bounce:0kB free_pcp:1236kB local_pcp:632kB free_cma:0kB [ 457.109417] lowmem_reserve[]: 0 0 0 0 [ 457.113302] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 457.127048] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 457.143053] Node 0 Normal: 229*4kB (UME) 1101*8kB (UME) 1400*16kB (UME) 1107*32kB (UME) 586*64kB (UME) 224*128kB (UME) 105*256kB (UME) 70*512kB (UM) 32*1024kB (UM) 36*2048kB (UME) 436*4096kB (UM) = 2088796kB [ 457.161835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 457.170448] 34851 total pagecache pages [ 457.174473] 0 pages in swap cache [ 457.177959] Swap cache stats: add 0, delete 0, find 0/0 [ 457.183790] Free swap = 0kB [ 457.186838] Total swap = 0kB [ 457.189896] 1965969 pages RAM [ 457.193061] 0 pages HighMem/MovableOnly [ 457.197086] 338524 pages reserved [ 457.219614] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 457.231442] syz-executor6 cpuset=syz6 mems_allowed=0 [ 457.236605] CPU: 0 PID: 27252 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 457.243449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.252789] Call Trace: [ 457.255367] dump_stack+0x1b9/0x29f [ 457.258984] ? arch_local_irq_restore+0x52/0x52 [ 457.263641] ? kasan_check_read+0x11/0x20 [ 457.267774] warn_alloc.cold.119+0xb2/0x1b8 [ 457.272082] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 457.276906] ? trace_hardirqs_on+0xd/0x10 [ 457.281044] ? _raw_spin_unlock_irq+0x27/0x70 [ 457.285526] ? finish_task_switch+0x1ca/0x820 [ 457.290013] ? lock_repin_lock+0x410/0x410 [ 457.294260] __vmalloc_node_range+0x45e/0x720 [ 457.298745] ? graph_lock+0x170/0x170 [ 457.302539] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 457.307370] __vmalloc_node_flags_caller+0x50/0x60 [ 457.312292] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 457.317120] kvmalloc_node+0xde/0x100 [ 457.320907] kvm_arch_create_memslot+0xa3/0x4e0 [ 457.325565] __kvm_set_memory_region+0x1d1b/0x2e50 [ 457.330487] ? kvm_vcpu_block+0x1050/0x1050 [ 457.334798] ? zap_class+0x720/0x720 [ 457.338494] ? check_same_owner+0x320/0x320 [ 457.342803] ? rcu_note_context_switch+0x710/0x710 [ 457.347717] ? lock_acquire+0x1dc/0x520 [ 457.351676] ? graph_lock+0x170/0x170 [ 457.355456] ? __might_sleep+0x95/0x190 [ 457.359416] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.364936] ? futex_wait_queue_me+0x559/0x820 [ 457.369506] ? refill_pi_state_cache.part.7+0x300/0x300 [ 457.374867] ? find_held_lock+0x36/0x1c0 [ 457.378926] ? lock_downgrade+0x8e0/0x8e0 [ 457.383089] kvm_set_memory_region+0x2e/0x50 [ 457.387484] kvm_vm_ioctl+0x668/0x1d90 [ 457.391363] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 457.396452] ? futex_wake+0x2f6/0x750 [ 457.400241] ? kvm_set_memory_region+0x50/0x50 [ 457.404810] ? get_futex_key+0x1e90/0x1e90 [ 457.409036] ? sock_destroy_inode+0x56/0x70 [ 457.413354] ? perf_trace_lock+0xd6/0x900 [ 457.417500] ? zap_class+0x720/0x720 [ 457.421205] ? destroy_inode+0x156/0x1f0 [ 457.425248] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 457.430424] ? do_futex+0x249/0x27d0 [ 457.434129] ? graph_lock+0x170/0x170 [ 457.437922] ? evict+0x5cd/0x960 [ 457.441278] ? exit_robust_list+0x290/0x290 [ 457.445582] ? find_held_lock+0x36/0x1c0 [ 457.449633] ? lock_downgrade+0x8e0/0x8e0 [ 457.453781] ? rcu_is_watching+0x85/0x140 [ 457.457916] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 457.463097] ? __fget+0x40c/0x650 [ 457.466538] ? expand_files.part.8+0x9a0/0x9a0 [ 457.471100] ? inet6_net_init+0x870/0x870 [ 457.475233] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 457.480411] ? kvm_set_memory_region+0x50/0x50 [ 457.484976] do_vfs_ioctl+0x1cf/0x1650 [ 457.488850] ? __sock_create+0x11e/0x920 [ 457.492897] ? ioctl_preallocate+0x2e0/0x2e0 [ 457.497291] ? fget_raw+0x20/0x20 [ 457.500738] ? SyS_futex+0x3a4/0x56d [ 457.504437] ? do_futex+0x27d0/0x27d0 [ 457.508222] ? security_file_ioctl+0x9b/0xd0 [ 457.512614] ksys_ioctl+0xa9/0xd0 [ 457.516059] SyS_ioctl+0x24/0x30 [ 457.519410] ? ksys_ioctl+0xd0/0xd0 [ 457.523029] do_syscall_64+0x29e/0x9d0 [ 457.526923] ? vmalloc_sync_all+0x30/0x30 [ 457.531062] ? _raw_spin_unlock_irq+0x27/0x70 [ 457.535546] ? finish_task_switch+0x1ca/0x820 [ 457.540041] ? syscall_return_slowpath+0x5c0/0x5c0 [ 457.544959] ? syscall_return_slowpath+0x30f/0x5c0 [ 457.549874] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 457.555239] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 457.560081] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 457.565257] RIP: 0033:0x4552d9 [ 457.568426] RSP: 002b:00007f735423ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 457.576115] RAX: ffffffffffffffda RBX: 00007f735423f6d4 RCX: 00000000004552d9 [ 457.583369] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 2018/04/06 06:12:54 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x200000000000000]}) 2018/04/06 06:12:54 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0xd000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:54 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000d81ff8)=0x101) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f0000000280)) r1 = eventfd(0x80000002) write$eventfd(r1, &(0x7f0000000080)=0xffffffffffffff90, 0x8) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000857ff8)={0x0, r1}) readv(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/176, 0xb0}], 0x1) 2018/04/06 06:12:54 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(xts-serpent-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390d006dc80000009d4d54", 0x10) r1 = accept(r0, 0x0, &(0x7f00000000c0)) sendmsg$kcm(r1, &(0x7f0000001380)={&(0x7f0000000000)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x80, &(0x7f0000000080), 0x269, &(0x7f0000000180)}, 0x0) 2018/04/06 06:12:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0xfe80, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:54 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x6c, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:54 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x0) 2018/04/06 06:12:54 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x3f020000, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) [ 457.590620] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 457.597870] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 457.605122] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000001 2018/04/06 06:12:54 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x6c000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:54 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)="2e2f6367726e7570004337a8bec3c6d1a7c1a57109a35a2baa10393d740eed4e2e7e4802000000d1730263655811650b893190d4312c2e053f8dd56e974131961af96c848b69a7a4", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:12:54 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x8100000000000000]}) 2018/04/06 06:12:54 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) [ 457.777263] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 457.789145] syz-executor6 cpuset=syz6 mems_allowed=0 [ 457.794385] CPU: 0 PID: 27257 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 457.801253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.810627] Call Trace: [ 457.813254] dump_stack+0x1b9/0x29f [ 457.816917] ? arch_local_irq_restore+0x52/0x52 [ 457.821630] warn_alloc.cold.119+0xb2/0x1b8 [ 457.825979] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 457.830854] ? perf_swevent_event+0x158/0x2e0 [ 457.835380] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 457.840960] ? print_usage_bug+0xc0/0xc0 [ 457.845070] __vmalloc_node_range+0x45e/0x720 [ 457.849604] ? graph_lock+0x170/0x170 [ 457.853442] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 457.858315] __vmalloc_node_flags_caller+0x50/0x60 [ 457.863290] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 457.868160] kvmalloc_node+0xde/0x100 [ 457.871994] kvm_arch_create_memslot+0xa3/0x4e0 [ 457.876710] __kvm_set_memory_region+0x1d1b/0x2e50 [ 457.881698] ? kvm_vcpu_block+0x1050/0x1050 [ 457.886055] ? zap_class+0x720/0x720 [ 457.889797] ? perf_trace_lock+0x495/0x900 [ 457.894070] ? graph_lock+0x170/0x170 [ 457.897899] ? zap_class+0x720/0x720 [ 457.901671] ? find_held_lock+0x36/0x1c0 [ 457.905775] ? lock_downgrade+0x8e0/0x8e0 [ 457.910000] kvm_set_memory_region+0x2e/0x50 [ 457.914442] kvm_vm_ioctl+0x668/0x1d90 [ 457.918352] ? perf_tp_event+0xc30/0xc30 [ 457.922437] ? __perf_event_task_sched_in+0x247/0xb80 [ 457.927650] ? kvm_set_memory_region+0x50/0x50 [ 457.932269] ? memset+0x31/0x40 [ 457.935581] ? perf_trace_lock+0x495/0x900 [ 457.939851] ? zap_class+0x720/0x720 [ 457.943590] ? finish_task_switch+0x182/0x820 [ 457.948114] ? kasan_check_read+0x11/0x20 [ 457.952284] ? graph_lock+0x170/0x170 [ 457.956102] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 457.960705] ? compat_start_thread+0x80/0x80 [ 457.965131] ? _raw_spin_unlock_irq+0x27/0x70 [ 457.969645] ? trace_hardirqs_on+0xd/0x10 [ 457.973814] ? _raw_spin_unlock_irq+0x27/0x70 2018/04/06 06:12:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0xe, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:54 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x48c000, 0x0) connect$ax25(r1, &(0x7f00000000c0)={0x3, {"3b3e7700abad27"}, 0x100}, 0x10) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:12:54 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x8848, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:54 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x8864000000000000]}) [ 457.978341] ? find_held_lock+0x36/0x1c0 [ 457.982446] ? lock_downgrade+0x8e0/0x8e0 [ 457.986626] ? rcu_is_watching+0x85/0x140 [ 457.990796] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 457.996017] ? __fget+0x40c/0x650 [ 457.999505] ? expand_files.part.8+0x9a0/0x9a0 [ 458.004107] ? lock_downgrade+0x8e0/0x8e0 [ 458.008289] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 458.013853] ? kvm_set_memory_region+0x50/0x50 [ 458.018457] do_vfs_ioctl+0x1cf/0x1650 [ 458.022378] ? ioctl_preallocate+0x2e0/0x2e0 [ 458.026802] ? fget_raw+0x20/0x20 [ 458.030297] ? exit_to_usermode_loop+0x87/0x310 [ 458.034995] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 458.040559] ? security_file_ioctl+0x9b/0xd0 [ 458.044998] ksys_ioctl+0xa9/0xd0 [ 458.048480] SyS_ioctl+0x24/0x30 [ 458.051865] ? ksys_ioctl+0xd0/0xd0 [ 458.055512] do_syscall_64+0x29e/0x9d0 [ 458.059427] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 458.064297] ? syscall_return_slowpath+0x5c0/0x5c0 [ 458.069257] ? syscall_return_slowpath+0x30f/0x5c0 [ 458.074219] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 458.079622] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 458.084497] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 458.089699] RIP: 0033:0x4552d9 [ 458.092889] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 458.100597] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 458.107866] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 458.115131] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 458.122409] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 458.129677] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 458.137670] warn_alloc_show_mem: 1 callbacks suppressed [ 458.137676] Mem-Info: [ 458.145673] active_anon:132850 inactive_anon:79 isolated_anon:0 [ 458.145673] active_file:22865 inactive_file:11932 isolated_file:0 [ 458.145673] unevictable:0 dirty:301 writeback:0 unstable:0 [ 458.145673] slab_reclaimable:12508 slab_unreclaimable:101881 [ 458.145673] mapped:73938 shmem:86 pagetables:1074 bounce:0 [ 458.145673] free:1250273 free_pcp:569 free_cma:0 [ 458.179592] Node 0 active_anon:531500kB inactive_anon:316kB active_file:91460kB inactive_file:47728kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295752kB dirty:1204kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 378880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 458.207876] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 458.234106] lowmem_reserve[]: 0 2833 6338 6338 [ 458.238774] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:220kB free_cma:0kB [ 458.266537] lowmem_reserve[]: 0 0 3505 3505 [ 458.270938] Node 0 Normal free:2084160kB min:37284kB low:46604kB high:55924kB active_anon:529256kB inactive_anon:316kB active_file:91460kB inactive_file:47728kB unevictable:0kB writepending:1204kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5440kB pagetables:4296kB bounce:0kB free_pcp:1316kB local_pcp:664kB free_cma:0kB [ 458.300963] lowmem_reserve[]: 0 0 0 0 [ 458.304904] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 458.318656] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 458.334558] Node 0 Normal: 198*4kB (UME) 1096*8kB (UME) 1379*16kB (UME) 1108*32kB (UME) 586*64kB (UME) 224*128kB (UME) 105*256kB (UME) 70*512kB (UM) 32*1024kB (UM) 36*2048kB (UME) 435*4096kB (UM) = 2084232kB [ 458.353462] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 458.362147] 34886 total pagecache pages [ 458.366156] 0 pages in swap cache [ 458.369641] Swap cache stats: add 0, delete 0, find 0/0 [ 458.375049] Free swap = 0kB [ 458.378120] Total swap = 0kB [ 458.381164] 1965969 pages RAM [ 458.384297] 0 pages HighMem/MovableOnly [ 458.388303] 338524 pages reserved [ 458.415496] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 458.427386] syz-executor6 cpuset=syz6 mems_allowed=0 [ 458.432755] CPU: 0 PID: 27257 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 458.439606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.448961] Call Trace: [ 458.451547] dump_stack+0x1b9/0x29f [ 458.455187] ? arch_local_irq_restore+0x52/0x52 [ 458.459883] ? kasan_check_read+0x11/0x20 [ 458.464046] warn_alloc.cold.119+0xb2/0x1b8 [ 458.468389] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 458.473812] ? kasan_check_write+0x14/0x20 [ 458.478088] ? lock_repin_lock+0x410/0x410 [ 458.482356] __vmalloc_node_range+0x45e/0x720 [ 458.486857] ? graph_lock+0x170/0x170 [ 458.490658] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 458.495497] __vmalloc_node_flags_caller+0x50/0x60 [ 458.500422] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 458.505281] kvmalloc_node+0xde/0x100 [ 458.509093] kvm_arch_create_memslot+0xa3/0x4e0 [ 458.513770] __kvm_set_memory_region+0x1d1b/0x2e50 [ 458.518706] ? kvm_vcpu_block+0x1050/0x1050 [ 458.523044] ? zap_class+0x720/0x720 [ 458.526754] ? check_same_owner+0x320/0x320 [ 458.531068] ? rcu_note_context_switch+0x710/0x710 [ 458.535984] ? lock_acquire+0x1dc/0x520 [ 458.539956] ? graph_lock+0x170/0x170 [ 458.543751] ? __might_sleep+0x95/0x190 [ 458.547730] ? refill_pi_state_cache.part.7+0x300/0x300 [ 458.553105] ? find_held_lock+0x36/0x1c0 [ 458.557168] ? lock_downgrade+0x8e0/0x8e0 [ 458.561352] kvm_set_memory_region+0x2e/0x50 [ 458.565752] kvm_vm_ioctl+0x668/0x1d90 [ 458.569627] ? perf_tp_event+0xc30/0xc30 [ 458.573688] ? kasan_check_write+0x14/0x20 [ 458.577926] ? kvm_set_memory_region+0x50/0x50 [ 458.582499] ? memset+0x31/0x40 [ 458.585776] ? perf_trace_lock+0x495/0x900 [ 458.590011] ? zap_class+0x720/0x720 [ 458.593725] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 458.598909] ? graph_lock+0x170/0x170 [ 458.602708] ? exit_robust_list+0x290/0x290 [ 458.607033] ? find_held_lock+0x36/0x1c0 [ 458.611100] ? lock_downgrade+0x8e0/0x8e0 [ 458.615264] ? lock_downgrade+0x8e0/0x8e0 [ 458.619412] ? rcu_is_watching+0x85/0x140 [ 458.623562] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 458.628751] ? __fget+0x40c/0x650 [ 458.632201] ? expand_files.part.8+0x9a0/0x9a0 [ 458.636783] ? lock_downgrade+0x8e0/0x8e0 [ 458.640934] ? lock_release+0xa10/0xa10 [ 458.644904] ? kvm_set_memory_region+0x50/0x50 [ 458.649476] do_vfs_ioctl+0x1cf/0x1650 [ 458.653364] ? ioctl_preallocate+0x2e0/0x2e0 [ 458.657766] ? fget_raw+0x20/0x20 [ 458.661215] ? security_file_mprotect+0x9b/0xd0 [ 458.665876] ? SyS_futex+0x3a4/0x56d [ 458.669596] ? do_futex+0x27d0/0x27d0 [ 458.673386] ? security_file_ioctl+0x9b/0xd0 [ 458.677784] ksys_ioctl+0xa9/0xd0 [ 458.681232] SyS_ioctl+0x24/0x30 [ 458.684583] ? ksys_ioctl+0xd0/0xd0 [ 458.688200] do_syscall_64+0x29e/0x9d0 [ 458.692084] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 458.696935] ? syscall_return_slowpath+0x5c0/0x5c0 [ 458.701868] ? syscall_return_slowpath+0x30f/0x5c0 [ 458.706801] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 458.712172] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 458.717023] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 458.722217] RIP: 0033:0x4552d9 2018/04/06 06:12:55 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x3f02, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:55 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000380)='io.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3ff, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@local, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @multicast2}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) sendmsg$can_raw(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=@canfd={{0x1, 0x70, 0x401, 0x9}, 0x1a, 0x1, 0x0, 0x0, "7308e8620cd3f693cee712c918919b0ad2cac6c9734d8af3870cbd3d46dd999f7fb073d0c6057e0191ff2e01f0dabc71167660ab609071a97209c49672678236"}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 2018/04/06 06:12:55 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x6c00, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:55 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x900000000000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:55 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x8035]}) 2018/04/06 06:12:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0xd002000000000000, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="81081800001d000000010054409d0954", 0x10) r1 = accept(r0, 0x0, &(0x7f0000000180)) sendmsg$nl_crypto(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@get={0xe8, 0x13, 0x0, 0x0, 0x0, {{'ecb(des3_ede)\x00'}}, [{0x8, 0x1}]}, 0xe8}, 0x1}, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 2018/04/06 06:12:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) read(r0, &(0x7f0000000040)=""/25, 0x19) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x200000}, 0x0) signalfd4(r0, &(0x7f0000000080)={0x8}, 0x8, 0x80800) [ 458.725405] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 458.733106] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 458.740361] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 458.747617] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 458.754873] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 458.762129] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:12:55 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x608]}) 2018/04/06 06:12:55 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffff7f, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:55 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x0, 0x802) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000180)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}]}) bind$vsock_dgram(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @host=0x2}, 0x10) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000300)) write$cgroup_type(r2, &(0x7f0000000000)='Ehreaded\x00', 0x1) timer_create(0x6, &(0x7f0000000240)={0x0, 0x12, 0x2, @thr={&(0x7f00000001c0)="54ab78fd193e01ea31f65573e609338fa488954bcbd9c8f7aff482e94f6eef674a0fd99abbbd5333cedc93a8bb620071a5", &(0x7f0000000200)="5590673b8a4c2c5d56db9fa8acc09d0046c9d758ee0faa397881c57bfb1ccd5d8b111abeaee39e3bda093f665026b63b270dd4b931fe9f56a5167b135434"}}, &(0x7f0000000280)) 2018/04/06 06:12:55 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x6c00000000000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:55 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000180)={0x6, &(0x7f0000000100)=[0x3, 0x1000, 0xfffffffffffffe00, 0x1ff, 0x101, 0x5]}) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000080)={0x9, [0x0, 0x6, 0x3, 0x45a0000000000, 0x4, 0x0, 0x20, 0x2df, 0x1]}) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000140)={'bridge0\x00', @ifru_data=&(0x7f0000000000)="f183719f2a313010d92b9c4135a8c4a912ed6d525ad5dd633a18061c381d4051"}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x200000, 0x0) accept$netrom(r2, &(0x7f0000000240)=@full, &(0x7f00000002c0)=0x48) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) [ 458.940285] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 458.952164] syz-executor6 cpuset=syz6 mems_allowed=0 [ 458.957421] CPU: 0 PID: 27341 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 458.964285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.973663] Call Trace: [ 458.976283] dump_stack+0x1b9/0x29f [ 458.979942] ? arch_local_irq_restore+0x52/0x52 [ 458.984653] warn_alloc.cold.119+0xb2/0x1b8 [ 458.989011] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 458.993898] ? perf_swevent_event+0x158/0x2e0 [ 458.998424] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 459.004000] ? print_usage_bug+0xc0/0xc0 [ 459.008108] __vmalloc_node_range+0x45e/0x720 [ 459.012640] ? graph_lock+0x170/0x170 [ 459.016474] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 459.021344] __vmalloc_node_flags_caller+0x50/0x60 [ 459.026302] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 459.031173] kvmalloc_node+0xde/0x100 [ 459.035012] kvm_arch_create_memslot+0xa3/0x4e0 2018/04/06 06:12:55 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x8]}) 2018/04/06 06:12:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000440)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="a7118230eef5e420406dc6a099da077d", 0x10}], 0x1, &(0x7f0000000040)}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='ns/cgroup\x00') sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x42, 0x300, 0x70bd28, 0x25dfdbfd, {0x1d}, [@typed={0x14, 0x49, @ipv6=@loopback={0x0, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008001}, 0x8040) r4 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x59, 0x40) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x8}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000300)={r5}, &(0x7f0000000340)=0x8) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) [ 459.039732] __kvm_set_memory_region+0x1d1b/0x2e50 [ 459.044717] ? kvm_vcpu_block+0x1050/0x1050 [ 459.049076] ? zap_class+0x720/0x720 [ 459.052812] ? perf_trace_lock+0x495/0x900 [ 459.057088] ? graph_lock+0x170/0x170 [ 459.060916] ? zap_class+0x720/0x720 [ 459.064805] ? find_held_lock+0x36/0x1c0 [ 459.068910] ? lock_downgrade+0x8e0/0x8e0 [ 459.073136] kvm_set_memory_region+0x2e/0x50 [ 459.077583] kvm_vm_ioctl+0x668/0x1d90 [ 459.081496] ? perf_tp_event+0xc30/0xc30 [ 459.085582] ? __perf_event_task_sched_in+0x247/0xb80 2018/04/06 06:12:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x44ce3f9d, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) [ 459.090800] ? kvm_set_memory_region+0x50/0x50 [ 459.095415] ? memset+0x31/0x40 [ 459.098731] ? perf_trace_lock+0x495/0x900 [ 459.103004] ? zap_class+0x720/0x720 [ 459.106734] ? finish_task_switch+0x182/0x820 [ 459.111262] ? kasan_check_read+0x11/0x20 [ 459.115431] ? graph_lock+0x170/0x170 [ 459.119249] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 459.123849] ? compat_start_thread+0x80/0x80 [ 459.128283] ? _raw_spin_unlock_irq+0x27/0x70 [ 459.132804] ? trace_hardirqs_on+0xd/0x10 [ 459.136969] ? _raw_spin_unlock_irq+0x27/0x70 [ 459.141490] ? find_held_lock+0x36/0x1c0 [ 459.145588] ? lock_downgrade+0x8e0/0x8e0 [ 459.149763] ? rcu_is_watching+0x85/0x140 [ 459.153935] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 459.159162] ? __fget+0x40c/0x650 [ 459.162651] ? expand_files.part.8+0x9a0/0x9a0 [ 459.167245] ? lock_downgrade+0x8e0/0x8e0 [ 459.171428] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 459.176989] ? kvm_set_memory_region+0x50/0x50 [ 459.181592] do_vfs_ioctl+0x1cf/0x1650 [ 459.185512] ? ioctl_preallocate+0x2e0/0x2e0 [ 459.189936] ? fget_raw+0x20/0x20 [ 459.193425] ? exit_to_usermode_loop+0x87/0x310 [ 459.198125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 459.203686] ? security_file_ioctl+0x9b/0xd0 [ 459.208127] ksys_ioctl+0xa9/0xd0 [ 459.211606] SyS_ioctl+0x24/0x30 [ 459.214997] ? ksys_ioctl+0xd0/0xd0 [ 459.218644] do_syscall_64+0x29e/0x9d0 [ 459.222547] ? vmalloc_sync_all+0x30/0x30 [ 459.226718] ? _raw_spin_unlock_irq+0x27/0x70 [ 459.231232] ? finish_task_switch+0x1ca/0x820 [ 459.235741] ? syscall_return_slowpath+0x5c0/0x5c0 [ 459.240674] ? syscall_return_slowpath+0x30f/0x5c0 [ 459.245616] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 459.250978] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 459.255824] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 459.261013] RIP: 0033:0x4552d9 [ 459.264208] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.271923] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 459.279186] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 459.286455] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 459.293726] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 459.300982] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 459.308422] warn_alloc_show_mem: 1 callbacks suppressed [ 459.308431] Mem-Info: [ 459.316377] active_anon:131825 inactive_anon:79 isolated_anon:0 [ 459.316377] active_file:22868 inactive_file:11944 isolated_file:0 [ 459.316377] unevictable:0 dirty:313 writeback:0 unstable:0 [ 459.316377] slab_reclaimable:12513 slab_unreclaimable:101740 [ 459.316377] mapped:73935 shmem:86 pagetables:1030 bounce:0 [ 459.316377] free:1251496 free_pcp:470 free_cma:0 [ 459.350289] Node 0 active_anon:525164kB inactive_anon:316kB active_file:91472kB inactive_file:47776kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295640kB dirty:1252kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 389120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 459.378597] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 459.404816] lowmem_reserve[]: 0 2833 6338 6338 [ 459.409493] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:220kB free_cma:0kB [ 459.437275] lowmem_reserve[]: 0 0 3505 3505 [ 459.441685] Node 0 Normal free:2089644kB min:37284kB low:46604kB high:55924kB active_anon:525164kB inactive_anon:316kB active_file:91472kB inactive_file:47776kB unevictable:0kB writepending:1252kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5408kB pagetables:4120kB bounce:0kB free_pcp:1088kB local_pcp:412kB free_cma:0kB [ 459.471698] lowmem_reserve[]: 0 0 0 0 [ 459.475589] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 459.489388] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 459.505384] Node 0 Normal: 203*4kB (UM) 1212*8kB (UME) 1392*16kB (UME) 1108*32kB (UME) 587*64kB (UME) 224*128kB (UME) 105*256kB (UME) 70*512kB (UM) 32*1024kB (UM) 36*2048kB (UME) 436*4096kB (UM) = 2089548kB [ 459.524114] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 459.532755] 34896 total pagecache pages [ 459.536782] 0 pages in swap cache [ 459.540288] Swap cache stats: add 0, delete 0, find 0/0 [ 459.545693] Free swap = 0kB [ 459.548746] Total swap = 0kB [ 459.551820] 1965969 pages RAM [ 459.554957] 0 pages HighMem/MovableOnly [ 459.558983] 338524 pages reserved [ 459.584556] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 459.596500] syz-executor6 cpuset=syz6 mems_allowed=0 [ 459.601840] CPU: 0 PID: 27341 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 459.608686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.618044] Call Trace: [ 459.620647] dump_stack+0x1b9/0x29f [ 459.624278] ? arch_local_irq_restore+0x52/0x52 [ 459.628942] ? kasan_check_read+0x11/0x20 [ 459.633088] warn_alloc.cold.119+0xb2/0x1b8 [ 459.637411] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 459.642251] ? kasan_check_write+0x14/0x20 [ 459.646504] ? lock_repin_lock+0x410/0x410 [ 459.650754] __vmalloc_node_range+0x45e/0x720 [ 459.655273] ? graph_lock+0x170/0x170 [ 459.659078] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 459.663921] __vmalloc_node_flags_caller+0x50/0x60 [ 459.668849] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 459.673689] kvmalloc_node+0xde/0x100 [ 459.677488] kvm_arch_create_memslot+0xa3/0x4e0 [ 459.682163] __kvm_set_memory_region+0x1d1b/0x2e50 [ 459.687105] ? kvm_vcpu_block+0x1050/0x1050 [ 459.691427] ? zap_class+0x720/0x720 [ 459.695151] ? check_same_owner+0x320/0x320 [ 459.699484] ? rcu_note_context_switch+0x710/0x710 [ 459.704403] ? lock_acquire+0x1dc/0x520 [ 459.708377] ? graph_lock+0x170/0x170 [ 459.712181] ? __might_sleep+0x95/0x190 [ 459.716159] ? refill_pi_state_cache.part.7+0x300/0x300 [ 459.721544] ? find_held_lock+0x36/0x1c0 [ 459.725642] ? lock_downgrade+0x8e0/0x8e0 [ 459.729822] kvm_set_memory_region+0x2e/0x50 [ 459.734246] kvm_vm_ioctl+0x668/0x1d90 [ 459.738151] ? perf_tp_event+0xc30/0xc30 [ 459.742234] ? kasan_check_write+0x14/0x20 [ 459.746491] ? kvm_set_memory_region+0x50/0x50 [ 459.751100] ? memset+0x31/0x40 [ 459.754410] ? perf_trace_lock+0x495/0x900 [ 459.758684] ? zap_class+0x720/0x720 [ 459.762417] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 459.767624] ? graph_lock+0x170/0x170 [ 459.771431] ? exit_robust_list+0x290/0x290 [ 459.775750] ? find_held_lock+0x36/0x1c0 [ 459.779810] ? lock_downgrade+0x8e0/0x8e0 [ 459.783942] ? lock_downgrade+0x8e0/0x8e0 [ 459.788095] ? rcu_is_watching+0x85/0x140 [ 459.792247] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 459.797446] ? __fget+0x40c/0x650 [ 459.800895] ? expand_files.part.8+0x9a0/0x9a0 [ 459.805464] ? lock_downgrade+0x8e0/0x8e0 [ 459.809605] ? lock_release+0xa10/0xa10 [ 459.813574] ? kvm_set_memory_region+0x50/0x50 [ 459.818149] do_vfs_ioctl+0x1cf/0x1650 [ 459.822047] ? ioctl_preallocate+0x2e0/0x2e0 [ 459.826446] ? fget_raw+0x20/0x20 [ 459.829892] ? security_file_mprotect+0x9b/0xd0 [ 459.834570] ? SyS_futex+0x3a4/0x56d [ 459.838278] ? do_futex+0x27d0/0x27d0 [ 459.842068] ? security_file_ioctl+0x9b/0xd0 [ 459.846471] ksys_ioctl+0xa9/0xd0 [ 459.849917] SyS_ioctl+0x24/0x30 [ 459.853269] ? ksys_ioctl+0xd0/0xd0 [ 459.856888] do_syscall_64+0x29e/0x9d0 [ 459.860764] ? vmalloc_sync_all+0x30/0x30 [ 459.864899] ? _raw_spin_unlock_irq+0x27/0x70 [ 459.869382] ? finish_task_switch+0x1ca/0x820 [ 459.873867] ? syscall_return_slowpath+0x5c0/0x5c0 [ 459.878786] ? syscall_return_slowpath+0x30f/0x5c0 [ 459.883708] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 459.889069] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 459.893907] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 459.899082] RIP: 0033:0x4552d9 [ 459.902256] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.909956] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 459.917211] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 459.924484] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/06 06:12:56 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x28, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:56 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xf0ffff, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:56 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x800) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000100)={'yam0\x00'}) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:12:56 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x2000000]}) 2018/04/06 06:12:56 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x10000000000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:56 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = syz_open_procfs(0x0, &(0x7f000080cff4)='net/rt_acct\x00') lseek(r1, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 2018/04/06 06:12:56 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000200)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8006008}, 0xc, &(0x7f0000000740)={&(0x7f0000000900)=ANY=[@ANYBLOB="d40100001300010027bd7000fedbdf2500000000000000000000000000000000ac1414bb0000000000000000000000004e2400004e2300030a00a0a03a00000045ab2d59ffda0844a3ca8d092567", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="4a540000000000009f0000000000000001000000000000000600000000000000cd00000000000000f40000000000000001000100000000000500000000000000080000000000000003000000000000000400000000000000040000000000000001000000bb6b6e000001030300000000ac000700e0000001000000000000000000000000ff0200000000000000000000000000014e2201004e2300070a0020a0bb000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="fdfffffffffffffff0000000000000000500000000000000000000000100000003000000000000000400000000000000000000000000002008000000000000000300000000000000050000000000000004000000000000000100000000000000040000000100000001000303000000000c001c00", @ANYRES32=r6, @ANYBLOB="0300000008001600010000005c000100766d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000026c95bb9f93f4007aec91e7a1c4f399ea9451658"], 0x1d4}, 0x1, 0x0, 0x0, 0x40}, 0x1deaaffff860489b) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)) r7 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x3) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000240)="20f3429a52bf1a8b0bdec5a9db42fa0478517de29900ba817d1a542000635c82c8102d842bdfd2dc47526080f73096fa9be217c54aceff46fa0e218e875c0a5517da0cadd4fb42334613257c61561539d674d046136082a13bfc7ddf982d1542cd429f2572ae83755c0200b531fcec8d7c3afe921f035abade5aab6fbe1f7d2b9aaefa83ae1298d2f85a4802105435c7e7bbc3e84c43c029768702", 0x9b}], 0x1, 0x81006) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000800)={0x6, &(0x7f00000007c0)=[{0x1, 0x80000000, 0x8, 0xc004}, {0x8, 0x5, 0x800, 0x6}, {0x7, 0x8, 0x22219c42}, {0x5, 0x2, 0x0, 0xff}, {0x3, 0xc, 0xffffffffffffff7f, 0x6}, {0x5, 0x80, 0xffff, 0xffffffffffffffe0}]}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r7) fcntl$addseals(r7, 0x409, 0x9) sendfile(r0, r0, &(0x7f00000ddff8), 0x7) 2018/04/06 06:12:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0xfeffffff, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) [ 459.931744] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 459.939002] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:12:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0xe8030000, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:56 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x806000000000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:56 executing program 7: syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x2001) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x1) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000080)) [ 460.074113] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 460.086093] syz-executor6 cpuset=syz6 mems_allowed=0 [ 460.091330] CPU: 0 PID: 27386 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 460.098195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.107573] Call Trace: [ 460.110192] dump_stack+0x1b9/0x29f [ 460.113854] ? arch_local_irq_restore+0x52/0x52 [ 460.118566] warn_alloc.cold.119+0xb2/0x1b8 2018/04/06 06:12:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffc68) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) getsockopt$sock_buf(r0, 0x1, 0x41, &(0x7f0000000040)=""/104, &(0x7f00000000c0)=0xff95) [ 460.122922] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 460.127796] ? perf_swevent_event+0x158/0x2e0 [ 460.132324] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 460.137903] ? print_usage_bug+0xc0/0xc0 [ 460.142017] __vmalloc_node_range+0x45e/0x720 [ 460.146547] ? graph_lock+0x170/0x170 [ 460.150376] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 460.155240] __vmalloc_node_flags_caller+0x50/0x60 [ 460.160200] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 460.165068] kvmalloc_node+0xde/0x100 [ 460.168901] kvm_arch_create_memslot+0xa3/0x4e0 2018/04/06 06:12:56 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xf000, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:56 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) r2 = gettid() ptrace$poke(0x5, r2, &(0x7f00000000c0), 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net\x00') getsockname$netrom(r0, &(0x7f0000000100), &(0x7f0000000280)=0x10) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000180)=@ioapic={0xf000, 0x400, 0x8, 0x7, 0x0, [{0x1f, 0x7, 0x8001, [], 0x93ea}, {0x6, 0x80000000, 0x6, [], 0x5}, {0x7, 0x80000000, 0x7, [], 0xa2}, {0xd3d1, 0x8, 0xa, [], 0xfffffffffffff801}, {0x8, 0x5, 0x8, [], 0x2}, {0x9, 0x401, 0x6, [], 0x5cc}, {0x80000000, 0x9, 0x8, [], 0x6}, {0x5, 0x0, 0x400, [], 0x5}, {0xd636, 0x800, 0xa0c8, [], 0x1a}, {0x40, 0x2, 0x1, [], 0x2}, {0xfb82, 0xffffffff, 0x1, [], 0x35}, {0x10001, 0x2, 0x0, [], 0x3}, {0x100, 0x4, 0x4, [], 0x1}, {0xc42, 0xd81b, 0x7, [], 0x200}, {0x9, 0xfffffffffffeffff, 0xffffffffffffff01, [], 0xf3d0}, {0x5, 0x8, 0xd34, [], 0x720}, {0x7, 0xffffffffffff1708, 0x800, [], 0x2}, {0x7fff, 0xffffffffffffffff, 0x6, [], 0x5}, {0x4, 0x3, 0x6, [], 0x1}, {0xfffffffffffffc5c, 0x1, 0x0, [], 0x3}, {0x8, 0x7f, 0x5, [], 0x800}, {0x9, 0x6, 0x9, [], 0x7}, {0xb9, 0x10000, 0x100000001, [], 0x9}, {0x4, 0xa3, 0x8, [], 0x9}]}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="11b67f01e1ef72fa22de47e5263ae9fe2120b73cf13f116bdf0bc8cad487f5f07d8134bbaa380d4efd28a842dc6b509c1995a0963fb803a0d13401963bd3d68be87debbf4a5c566aa7cff3f18902720848680c4db319836b7981c3b4c4cb43df2469898d9f7cca9708f7fe65e18bd58a0a71eb6ed8e1307196330130ad33ba45efb2a02b46ba15966ac32aa2180edf1ec663d8855c78bb888053ae349039c16a0f4f1626be51193aff40c5bc9d9a00b6d1b7aa17530b88e75ef6a60ff507197926933bda88c83d84091ceab6215ade31b03776929ce56f96c76f8c0da92d4d464e6b", 0xe2) 2018/04/06 06:12:56 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x88a8ffff]}) 2018/04/06 06:12:56 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x8864000000000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) [ 460.173616] __kvm_set_memory_region+0x1d1b/0x2e50 [ 460.178602] ? kvm_vcpu_block+0x1050/0x1050 [ 460.182957] ? zap_class+0x720/0x720 [ 460.186699] ? perf_trace_lock+0x495/0x900 [ 460.190970] ? graph_lock+0x170/0x170 [ 460.194791] ? zap_class+0x720/0x720 [ 460.198557] ? find_held_lock+0x36/0x1c0 [ 460.202656] ? lock_downgrade+0x8e0/0x8e0 [ 460.206873] kvm_set_memory_region+0x2e/0x50 [ 460.211308] kvm_vm_ioctl+0x668/0x1d90 [ 460.215219] ? perf_tp_event+0xc30/0xc30 [ 460.219307] ? __perf_event_task_sched_in+0x247/0xb80 [ 460.224525] ? kvm_set_memory_region+0x50/0x50 [ 460.229135] ? memset+0x31/0x40 [ 460.232458] ? perf_trace_lock+0x495/0x900 [ 460.236737] ? zap_class+0x720/0x720 [ 460.240467] ? finish_task_switch+0x182/0x820 [ 460.244992] ? kasan_check_read+0x11/0x20 [ 460.249163] ? graph_lock+0x170/0x170 [ 460.252976] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 460.257579] ? compat_start_thread+0x80/0x80 [ 460.262006] ? _raw_spin_unlock_irq+0x27/0x70 [ 460.266527] ? trace_hardirqs_on+0xd/0x10 [ 460.270692] ? _raw_spin_unlock_irq+0x27/0x70 2018/04/06 06:12:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0xfffffffd, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) [ 460.275213] ? find_held_lock+0x36/0x1c0 [ 460.279312] ? lock_downgrade+0x8e0/0x8e0 [ 460.283490] ? rcu_is_watching+0x85/0x140 [ 460.287658] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 460.292885] ? __fget+0x40c/0x650 [ 460.296366] ? expand_files.part.8+0x9a0/0x9a0 [ 460.300957] ? lock_downgrade+0x8e0/0x8e0 [ 460.305136] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 460.310703] ? kvm_set_memory_region+0x50/0x50 [ 460.315310] do_vfs_ioctl+0x1cf/0x1650 [ 460.319224] ? ioctl_preallocate+0x2e0/0x2e0 2018/04/06 06:12:56 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x8864]}) 2018/04/06 06:12:56 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) [ 460.323649] ? fget_raw+0x20/0x20 [ 460.327146] ? exit_to_usermode_loop+0x87/0x310 [ 460.331843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 460.337394] ? security_file_ioctl+0x9b/0xd0 [ 460.341823] ksys_ioctl+0xa9/0xd0 [ 460.345303] SyS_ioctl+0x24/0x30 [ 460.348686] ? ksys_ioctl+0xd0/0xd0 [ 460.352334] do_syscall_64+0x29e/0x9d0 [ 460.356237] ? vmalloc_sync_all+0x30/0x30 [ 460.360403] ? _raw_spin_unlock_irq+0x27/0x70 [ 460.364914] ? finish_task_switch+0x1ca/0x820 [ 460.369427] ? syscall_return_slowpath+0x5c0/0x5c0 2018/04/06 06:12:56 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x3f, 0x800) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = socket(0x10, 0x7, 0x401) setsockopt$inet_buf(r1, 0x0, 0x11, &(0x7f00000000c0)="553cfe86c6f68d1c3c12b059e1180f5fe9f8e143a68705229fd5608b3def79a8c4382e4132358f0110b4c178a34af1573d9dce2f1b06d3bb36e62078d9d99cd35544e8b21bee2ba4bf8ffb013cf40fe5e172575b65b42d04cbe214c7c9", 0x5d) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='Ehreaded\x00', 0x1) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x6, 0x6, 0xd4, 0x80, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}]}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e20, 0xa8e8, @mcast1={0xff, 0x1, [], 0x1}, 0x9}, {0xa, 0x4e22, 0x1000, @mcast2={0xff, 0x2, [], 0x1}, 0xdb}, 0x2, [0x80000000, 0x9, 0x5, 0x8, 0x3f, 0xff, 0x2, 0x1]}, 0x5c) ioctl$sock_ipx_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000480)={'rose0\x00', {0x4, 0x2, 0x1, "75f94f016135", 0x4}}) getsockopt(r2, 0xb34, 0x401, &(0x7f0000000400)=""/45, &(0x7f0000000440)=0x2d) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r2, 0x44dc, 0x4, r2}) 2018/04/06 06:12:56 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x8035000000000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) [ 460.374378] ? syscall_return_slowpath+0x30f/0x5c0 [ 460.379340] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 460.384739] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 460.389620] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 460.394826] RIP: 0033:0x4552d9 [ 460.398032] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.405767] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 460.413055] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 460.420349] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 460.427641] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 460.434936] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 460.442337] warn_alloc_show_mem: 1 callbacks suppressed [ 460.442345] Mem-Info: [ 460.450248] active_anon:131846 inactive_anon:79 isolated_anon:0 [ 460.450248] active_file:22868 inactive_file:11961 isolated_file:0 [ 460.450248] unevictable:0 dirty:330 writeback:0 unstable:0 [ 460.450248] slab_reclaimable:12477 slab_unreclaimable:101779 [ 460.450248] mapped:73938 shmem:86 pagetables:1162 bounce:0 [ 460.450248] free:1251160 free_pcp:585 free_cma:0 [ 460.484970] Node 0 active_anon:529432kB inactive_anon:316kB active_file:91472kB inactive_file:47844kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295752kB dirty:1320kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 380928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 460.513231] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 460.539467] lowmem_reserve[]: 0 2833 6338 6338 [ 460.544164] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:220kB free_cma:0kB [ 460.571973] lowmem_reserve[]: 0 0 3505 3505 [ 460.576436] Node 0 Normal free:2085164kB min:37284kB low:46604kB high:55924kB active_anon:527348kB inactive_anon:316kB active_file:91472kB inactive_file:47844kB unevictable:0kB writepending:1320kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5600kB pagetables:4352kB bounce:0kB free_pcp:1344kB local_pcp:712kB free_cma:0kB [ 460.606490] lowmem_reserve[]: 0 0 0 0 [ 460.610407] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 460.624251] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 460.640256] Node 0 Normal: 257*4kB (UME) 1078*8kB (UME) 1387*16kB (UME) 1109*32kB (UME) 587*64kB (UME) 221*128kB (UME) 105*256kB (UME) 70*512kB (UM) 32*1024kB (UM) 34*2048kB (UME) 437*4096kB (UM) = 2088260kB [ 460.659053] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 460.667666] 34913 total pagecache pages [ 460.671693] 0 pages in swap cache [ 460.675176] Swap cache stats: add 0, delete 0, find 0/0 [ 460.680572] Free swap = 0kB [ 460.683618] Total swap = 0kB [ 460.686668] 1965969 pages RAM [ 460.689797] 0 pages HighMem/MovableOnly [ 460.693820] 338524 pages reserved [ 460.730625] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 460.742510] syz-executor6 cpuset=syz6 mems_allowed=0 [ 460.747757] CPU: 0 PID: 27446 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 460.754600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.763936] Call Trace: [ 460.766515] dump_stack+0x1b9/0x29f [ 460.770137] ? arch_local_irq_restore+0x52/0x52 [ 460.774793] ? kasan_check_read+0x11/0x20 [ 460.778927] warn_alloc.cold.119+0xb2/0x1b8 [ 460.783236] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 460.788088] ? trace_hardirqs_on+0xd/0x10 [ 460.792258] ? _raw_spin_unlock_irq+0x27/0x70 [ 460.796771] ? finish_task_switch+0x1ca/0x820 [ 460.801298] ? lock_repin_lock+0x410/0x410 [ 460.805562] __vmalloc_node_range+0x45e/0x720 [ 460.810081] ? graph_lock+0x170/0x170 [ 460.813876] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 460.818713] __vmalloc_node_flags_caller+0x50/0x60 [ 460.823628] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 460.828457] kvmalloc_node+0xde/0x100 [ 460.832248] kvm_arch_create_memslot+0xa3/0x4e0 [ 460.836909] __kvm_set_memory_region+0x1d1b/0x2e50 [ 460.841830] ? kvm_vcpu_block+0x1050/0x1050 [ 460.846143] ? zap_class+0x720/0x720 [ 460.849841] ? check_same_owner+0x320/0x320 [ 460.854152] ? rcu_note_context_switch+0x710/0x710 [ 460.859064] ? lock_acquire+0x1dc/0x520 [ 460.863036] ? graph_lock+0x170/0x170 [ 460.866825] ? __might_sleep+0x95/0x190 [ 460.870795] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 460.876312] ? futex_wait_queue_me+0x559/0x820 [ 460.880875] ? __unwind_start+0x166/0x330 [ 460.885006] ? refill_pi_state_cache.part.7+0x300/0x300 [ 460.890363] ? find_held_lock+0x36/0x1c0 [ 460.894409] ? lock_downgrade+0x8e0/0x8e0 [ 460.898555] kvm_set_memory_region+0x2e/0x50 [ 460.902947] kvm_vm_ioctl+0x668/0x1d90 [ 460.906814] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 460.911898] ? futex_wake+0x2f6/0x750 [ 460.915678] ? kasan_check_read+0x11/0x20 [ 460.919807] ? kvm_set_memory_region+0x50/0x50 [ 460.924370] ? get_futex_key+0x1e90/0x1e90 [ 460.928587] ? sock_destroy_inode+0x56/0x70 [ 460.932892] ? perf_trace_lock+0xd6/0x900 [ 460.937037] ? zap_class+0x720/0x720 [ 460.940731] ? destroy_inode+0x156/0x1f0 [ 460.944772] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 460.949944] ? do_futex+0x249/0x27d0 [ 460.953638] ? graph_lock+0x170/0x170 [ 460.957430] ? evict+0x5cd/0x960 [ 460.960783] ? exit_robust_list+0x290/0x290 [ 460.965092] ? find_held_lock+0x36/0x1c0 [ 460.969139] ? lock_downgrade+0x8e0/0x8e0 [ 460.973270] ? rcu_is_watching+0x85/0x140 [ 460.977396] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 460.982572] ? __fget+0x40c/0x650 [ 460.986014] ? expand_files.part.8+0x9a0/0x9a0 [ 460.990588] ? inet6_net_init+0x870/0x870 [ 460.994718] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 460.999894] ? kvm_set_memory_region+0x50/0x50 [ 461.004457] do_vfs_ioctl+0x1cf/0x1650 [ 461.008326] ? __sock_create+0x11e/0x920 [ 461.012369] ? ioctl_preallocate+0x2e0/0x2e0 [ 461.016759] ? fget_raw+0x20/0x20 [ 461.020213] ? SyS_futex+0x3a4/0x56d [ 461.023908] ? do_futex+0x27d0/0x27d0 [ 461.027689] ? security_file_ioctl+0x9b/0xd0 [ 461.032082] ksys_ioctl+0xa9/0xd0 [ 461.035521] SyS_ioctl+0x24/0x30 [ 461.038866] ? ksys_ioctl+0xd0/0xd0 [ 461.042476] do_syscall_64+0x29e/0x9d0 [ 461.046343] ? vmalloc_sync_all+0x30/0x30 [ 461.050475] ? _raw_spin_unlock_irq+0x27/0x70 [ 461.054960] ? finish_task_switch+0x1ca/0x820 [ 461.059437] ? syscall_return_slowpath+0x5c0/0x5c0 [ 461.064348] ? syscall_return_slowpath+0x30f/0x5c0 [ 461.069262] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 461.074609] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/04/06 06:12:57 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x40d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f3eff0), 0x0) 2018/04/06 06:12:57 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x100000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:57 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x3a0, 0x145000) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f00000000c0)={0x101000, 0x0, 0x8, 0x4, 0x1}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='com.apple.system.Security\x00', &(0x7f0000000340)='bdevppp0\x00', 0x9, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x3) 2018/04/06 06:12:57 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x543]}) 2018/04/06 06:12:57 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x200000000000000, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x5, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:57 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x840, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000180)={{0x4, 0x2, 0x0, 0x3, "c8fc0cf1784ff9ff24847abda6953192cb6379a5f86a534901c43fe918dd6b4440cd302ca714c0648b1a26ad", 0xc}, 0x0, 0x0, 0x1, r2, 0xf, 0x0, "86986dcb6d62c6068ff6edef6fdb312bee8880ab952368cb4bb1969e8d08278c67c6834111823312e48096a4f81f70672186c1e182244bf019483bfe5ee1c701", &(0x7f0000000100)=',:\x00', 0x3, [], [0x27f7, 0x20000, 0x2, 0x1]}) sched_rr_get_interval(r2, &(0x7f00000002c0)) r3 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000000)='Ehreaded\x00', 0x1) sendfile(r1, r0, &(0x7f0000000300), 0x2) 2018/04/06 06:12:57 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x6c, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) [ 461.079438] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 461.084606] RIP: 0033:0x4552d9 [ 461.087775] RSP: 002b:00007f735423ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.095466] RAX: ffffffffffffffda RBX: 00007f735423f6d4 RCX: 00000000004552d9 [ 461.102714] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 461.109962] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 461.117211] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 461.124460] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000001 2018/04/06 06:12:57 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x2, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000540)) r1 = perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x101000, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0xf7, "686a37c7e018dc0c92b8d82f108a27e7f828bcb11b07437bdc12e4034c701e5b25decfde33389c2dc3f323541d5fae9fa27b472813f1f7994db18b60830951686689bbc250098187a85d77942e7a9dcea1fba9869abd4021b59f1d06b7a05f72ab078a0322e8ba15f17a00690131afb5826ef9727f7ed42e521b8bf44c4242a3e53882b216919c53c692d9620f909ae5e29cce4ba0b12d5b1f05ee5b90c3541665d752ee06b105170ad030f41cd4abd3ac127626ff4e0624c686d8ac53420738bbb92e7acaa40b2386a04990f4f962402a3850b93a9f89dc5e788e8eafba2c0ad34d7e6e700912580a16f9ff881d4127c660b3b2c93417"}, &(0x7f0000000180)=0xff) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000003c0)=ANY=[@ANYRES32=r7, @ANYBLOB="00004a001996ed12c3cb86a1b0a8065173426b88d318250866239cbe421b70cd03eb44a0a7b73d9348b24a597f829ceee8cb4ae07b9f991c49bc8f8562cd4c9f098569fb2ea6e2030000002e47f2"], 0x2) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) socket$inet(0x2, 0x80004, 0x200) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x8001, 0x57, 0x256, 0x73, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x77, 0x0, 0x6}) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000002ff0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0xfffffffffffffffb}]}) ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f0000000280)={0x0, 0x3}) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x46a9, 0x4, 0x4, &(0x7f0000ffc000/0x3000)=nil, 0x1000}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r9) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000100)={0xffffffff000000fd, 0x1000000000000, 0x5, 0x705}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 2018/04/06 06:12:57 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x88caffff00000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) [ 461.271199] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 461.283127] syz-executor6 cpuset=syz6 mems_allowed=0 [ 461.288470] CPU: 0 PID: 27468 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 461.295326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.304696] Call Trace: [ 461.307302] dump_stack+0x1b9/0x29f [ 461.310964] ? arch_local_irq_restore+0x52/0x52 [ 461.315676] warn_alloc.cold.119+0xb2/0x1b8 2018/04/06 06:12:57 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0xf5ffffff00000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) [ 461.320032] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 461.324908] ? perf_swevent_event+0x158/0x2e0 [ 461.329436] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 461.335013] ? print_usage_bug+0xc0/0xc0 [ 461.339125] __vmalloc_node_range+0x45e/0x720 [ 461.343657] ? graph_lock+0x170/0x170 [ 461.347492] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 461.352354] __vmalloc_node_flags_caller+0x50/0x60 [ 461.357337] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 461.357363] kvmalloc_node+0xde/0x100 [ 461.357391] kvm_arch_create_memslot+0xa3/0x4e0 [ 461.357432] __kvm_set_memory_region+0x1d1b/0x2e50 [ 461.357474] ? kvm_vcpu_block+0x1050/0x1050 [ 461.357498] ? zap_class+0x720/0x720 [ 461.383753] ? perf_trace_lock+0x495/0x900 [ 461.388027] ? graph_lock+0x170/0x170 [ 461.391851] ? zap_class+0x720/0x720 [ 461.395636] ? find_held_lock+0x36/0x1c0 [ 461.399733] ? lock_downgrade+0x8e0/0x8e0 [ 461.403951] kvm_set_memory_region+0x2e/0x50 [ 461.408384] kvm_vm_ioctl+0x668/0x1d90 [ 461.412291] ? perf_tp_event+0xc30/0xc30 [ 461.416376] ? __perf_event_task_sched_in+0x247/0xb80 [ 461.421588] ? kvm_set_memory_region+0x50/0x50 [ 461.426194] ? memset+0x31/0x40 [ 461.429503] ? perf_trace_lock+0x495/0x900 [ 461.433770] ? zap_class+0x720/0x720 [ 461.437502] ? finish_task_switch+0x182/0x820 [ 461.442024] ? kasan_check_read+0x11/0x20 [ 461.446197] ? graph_lock+0x170/0x170 [ 461.450015] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 461.454619] ? compat_start_thread+0x80/0x80 [ 461.459043] ? _raw_spin_unlock_irq+0x27/0x70 [ 461.463558] ? trace_hardirqs_on+0xd/0x10 [ 461.467724] ? _raw_spin_unlock_irq+0x27/0x70 [ 461.472243] ? find_held_lock+0x36/0x1c0 [ 461.476341] ? lock_downgrade+0x8e0/0x8e0 [ 461.480517] ? rcu_is_watching+0x85/0x140 [ 461.484680] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 461.489881] ? __fget+0x40c/0x650 [ 461.493328] ? expand_files.part.8+0x9a0/0x9a0 [ 461.497895] ? lock_downgrade+0x8e0/0x8e0 [ 461.502050] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 461.507584] ? kvm_set_memory_region+0x50/0x50 [ 461.512157] do_vfs_ioctl+0x1cf/0x1650 [ 461.516054] ? ioctl_preallocate+0x2e0/0x2e0 [ 461.520470] ? fget_raw+0x20/0x20 [ 461.523963] ? exit_to_usermode_loop+0x87/0x310 [ 461.528660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 461.534217] ? security_file_ioctl+0x9b/0xd0 [ 461.538644] ksys_ioctl+0xa9/0xd0 [ 461.542104] SyS_ioctl+0x24/0x30 [ 461.545453] ? ksys_ioctl+0xd0/0xd0 [ 461.549075] do_syscall_64+0x29e/0x9d0 [ 461.552959] ? vmalloc_sync_all+0x30/0x30 [ 461.557110] ? _raw_spin_unlock_irq+0x27/0x70 [ 461.561594] ? finish_task_switch+0x1ca/0x820 [ 461.566080] ? syscall_return_slowpath+0x5c0/0x5c0 [ 461.571001] ? syscall_return_slowpath+0x30f/0x5c0 [ 461.575931] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 461.581286] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 461.586125] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 461.591311] RIP: 0033:0x4552d9 [ 461.594489] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.602188] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 461.609445] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 461.616698] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 461.623951] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 461.631205] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 461.638735] warn_alloc_show_mem: 1 callbacks suppressed [ 461.638743] Mem-Info: [ 461.646677] active_anon:131806 inactive_anon:79 isolated_anon:0 [ 461.646677] active_file:22868 inactive_file:11974 isolated_file:0 [ 461.646677] unevictable:0 dirty:344 writeback:0 unstable:0 [ 461.646677] slab_reclaimable:12494 slab_unreclaimable:101848 [ 461.646677] mapped:73963 shmem:86 pagetables:1014 bounce:0 [ 461.646677] free:1251448 free_pcp:499 free_cma:0 [ 461.680594] Node 0 active_anon:527224kB inactive_anon:316kB active_file:91472kB inactive_file:47896kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295852kB dirty:1376kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 380928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 461.708861] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 461.735116] lowmem_reserve[]: 0 2833 6338 6338 [ 461.739793] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:220kB free_cma:0kB [ 461.767560] lowmem_reserve[]: 0 0 3505 3505 [ 461.771964] Node 0 Normal free:2086504kB min:37284kB low:46604kB high:55924kB active_anon:527156kB inactive_anon:324kB active_file:91472kB inactive_file:47916kB unevictable:0kB writepending:1400kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5408kB pagetables:4080kB bounce:0kB free_pcp:1236kB local_pcp:580kB free_cma:0kB [ 461.801986] lowmem_reserve[]: 0 0 0 0 [ 461.805922] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 461.819752] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 461.835662] Node 0 Normal: 220*4kB (UM) 1077*8kB (UME) 1425*16kB (UME) 1110*32kB (UME) 587*64kB (UME) 219*128kB (UME) 105*256kB (UME) 70*512kB (UM) 32*1024kB (UM) 35*2048kB (UME) 436*4096kB (UM) = 2086440kB [ 461.854441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 461.863072] 34932 total pagecache pages [ 461.867190] 0 pages in swap cache [ 461.870688] Swap cache stats: add 0, delete 0, find 0/0 [ 461.876084] Free swap = 0kB [ 461.879145] Total swap = 0kB [ 461.883346] 1965969 pages RAM [ 461.886504] 0 pages HighMem/MovableOnly [ 461.890503] 338524 pages reserved [ 461.915691] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 461.927567] syz-executor6 cpuset=syz6 mems_allowed=0 [ 461.932748] CPU: 0 PID: 27468 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 461.939597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.948951] Call Trace: [ 461.951535] dump_stack+0x1b9/0x29f [ 461.955160] ? arch_local_irq_restore+0x52/0x52 [ 461.959825] ? kasan_check_read+0x11/0x20 [ 461.963969] warn_alloc.cold.119+0xb2/0x1b8 [ 461.968291] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 461.973126] ? kasan_check_write+0x14/0x20 [ 461.977389] ? lock_repin_lock+0x410/0x410 [ 461.981641] __vmalloc_node_range+0x45e/0x720 [ 461.986176] ? graph_lock+0x170/0x170 [ 461.989985] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 461.994821] __vmalloc_node_flags_caller+0x50/0x60 [ 461.999741] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 462.004575] kvmalloc_node+0xde/0x100 [ 462.008388] kvm_arch_create_memslot+0xa3/0x4e0 [ 462.013084] __kvm_set_memory_region+0x1d1b/0x2e50 [ 462.018064] ? kvm_vcpu_block+0x1050/0x1050 [ 462.022411] ? zap_class+0x720/0x720 [ 462.026117] ? check_same_owner+0x320/0x320 [ 462.030430] ? rcu_note_context_switch+0x710/0x710 [ 462.035358] ? lock_acquire+0x1dc/0x520 [ 462.039344] ? graph_lock+0x170/0x170 [ 462.043153] ? __might_sleep+0x95/0x190 [ 462.047140] ? refill_pi_state_cache.part.7+0x300/0x300 [ 462.052500] ? find_held_lock+0x36/0x1c0 [ 462.056569] ? lock_downgrade+0x8e0/0x8e0 [ 462.060767] kvm_set_memory_region+0x2e/0x50 [ 462.065176] kvm_vm_ioctl+0x668/0x1d90 [ 462.069059] ? perf_tp_event+0xc30/0xc30 [ 462.073112] ? kasan_check_write+0x14/0x20 [ 462.077335] ? kvm_set_memory_region+0x50/0x50 [ 462.081906] ? memset+0x31/0x40 [ 462.085180] ? perf_trace_lock+0x495/0x900 [ 462.089408] ? zap_class+0x720/0x720 [ 462.093111] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 462.098294] ? graph_lock+0x170/0x170 [ 462.102116] ? exit_robust_list+0x290/0x290 [ 462.106436] ? find_held_lock+0x36/0x1c0 [ 462.110497] ? lock_downgrade+0x8e0/0x8e0 [ 462.114720] ? lock_downgrade+0x8e0/0x8e0 [ 462.118887] ? rcu_is_watching+0x85/0x140 [ 462.123055] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 462.128272] ? __fget+0x40c/0x650 [ 462.131728] ? expand_files.part.8+0x9a0/0x9a0 [ 462.136295] ? lock_downgrade+0x8e0/0x8e0 [ 462.140437] ? lock_release+0xa10/0xa10 [ 462.144408] ? kvm_set_memory_region+0x50/0x50 [ 462.148983] do_vfs_ioctl+0x1cf/0x1650 [ 462.152870] ? ioctl_preallocate+0x2e0/0x2e0 [ 462.157267] ? fget_raw+0x20/0x20 [ 462.160715] ? security_file_mprotect+0x9b/0xd0 [ 462.165376] ? SyS_futex+0x3a4/0x56d [ 462.169083] ? do_futex+0x27d0/0x27d0 [ 462.172873] ? security_file_ioctl+0x9b/0xd0 [ 462.177275] ksys_ioctl+0xa9/0xd0 [ 462.180719] SyS_ioctl+0x24/0x30 [ 462.184081] ? ksys_ioctl+0xd0/0xd0 [ 462.187698] do_syscall_64+0x29e/0x9d0 [ 462.191573] ? vmalloc_sync_all+0x30/0x30 [ 462.195706] ? _raw_spin_unlock_irq+0x27/0x70 [ 462.200190] ? finish_task_switch+0x1ca/0x820 [ 462.204674] ? syscall_return_slowpath+0x5c0/0x5c0 [ 462.209589] ? syscall_return_slowpath+0x30f/0x5c0 [ 462.214511] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 462.219868] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 462.224709] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 462.229886] RIP: 0033:0x4552d9 [ 462.233061] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 462.240761] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 462.248023] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 462.255291] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/06 06:12:58 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='Ehreaded\x00', 0x37a) 2018/04/06 06:12:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x4e20000000000000, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:58 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x8100000000000000, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:58 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0xff00000000000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:58 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0xfeffffff00000000]}) 2018/04/06 06:12:58 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x10000, 0x2000) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0xffff, 0x0, &(0x7f0000000040)="c8d098c91c425a41bb2ffbb0a9283ba6d012ca509a6f46b3144378d014214e9c53c9427e5e03936d68f799edddc9bb578a70234c7e3dd5810bd97148b8d5ebdfd552fc8ea08a9cecb8b95717aa5ce4f1d45cca8c835db4f15db14c50a33ef308efb00295a5379d62d808c9fa885e3cf7b6292a472a4b43d5", 0x7f, 0x2, 0x0, 0x9, 0xffffffff, 0xffff, 0x0, "3e7c57d810ec4dfff9b706ebb2fc07bb61e469f89be9b392f8c1de5b1f5650c792304de47e8592746ad340366e4ba53c9b870f6b5ce3a09500ec8015a528e94cbb01827ffa235b716b54feea3fab9e07c4776e35cd6c978620c7d237c437613249a939d62dc0050a0400501cb6191dfab02f55419177c86d50f25aaaecee17139e42b0cbde99a3526c9bcf7438858dcc39f9"}) dup2(r0, r1) 2018/04/06 06:12:58 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0xea7, 0x480400) flistxattr(r1, &(0x7f0000000080)=""/166, 0xa6) pread64(r1, &(0x7f0000000200)=""/171, 0xab, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r1, 0x7, 0x8000, r1}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000f, 0x13, r1, 0x0) ioctl(r1, 0x20000000005385, &(0x7f0000000000)) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000180)="26c5eedc9dbe9e89795da0b90c263539f84046777953fdf6cbf430a0683d8c93337a9822f05ff14eb671302cdbbe2afa300982cbfcd92fa2cf5c8d435d98379aaae27e0864b57f164f7cf2e65527a38347b48f6e2f853266c85b7933a207cc5d7d3fefaccde1397d0f434ba4d3f106afe92e866b300721fd29858ab793bd3d08") fcntl$getflags(r0, 0x40b) ioctl$KDSETLED(r1, 0x4b32, 0xfff) 2018/04/06 06:12:58 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x20000801, 0x2000, &(0x7f0000008000/0x2000)=nil}) [ 462.262548] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 462.269804] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:12:58 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x86ddffff, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:58 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0x40) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000000c0)) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) [ 462.420877] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 462.432924] syz-executor6 cpuset=syz6 mems_allowed=0 [ 462.438171] CPU: 0 PID: 27506 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 462.445026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.454397] Call Trace: [ 462.457005] dump_stack+0x1b9/0x29f [ 462.460663] ? arch_local_irq_restore+0x52/0x52 [ 462.465356] ? kasan_check_read+0x11/0x20 2018/04/06 06:12:58 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x400300, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:12:58 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x105001) read$eventfd(r1, &(0x7f00000001c0), 0x8) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0), 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_getevents(r3, 0x2, 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000140)={0x77359400}) prctl$setfpexc(0xc, 0x40000) sendmmsg$alg(r2, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0) recvmsg(r2, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) [ 462.470023] warn_alloc.cold.119+0xb2/0x1b8 [ 462.474372] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 462.479246] ? finish_task_switch+0x1ca/0x820 [ 462.483783] ? lock_repin_lock+0x410/0x410 [ 462.488063] __vmalloc_node_range+0x45e/0x720 [ 462.492590] ? graph_lock+0x170/0x170 [ 462.496419] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 462.501282] __vmalloc_node_flags_caller+0x50/0x60 [ 462.506241] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 462.511120] kvmalloc_node+0xde/0x100 [ 462.514955] kvm_arch_create_memslot+0xa3/0x4e0 2018/04/06 06:12:58 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x86ddffff00000000]}) [ 462.519680] __kvm_set_memory_region+0x1d1b/0x2e50 [ 462.524657] ? kvm_vcpu_block+0x1050/0x1050 [ 462.529009] ? zap_class+0x720/0x720 [ 462.532741] ? check_same_owner+0x320/0x320 [ 462.537090] ? rcu_note_context_switch+0x710/0x710 [ 462.542033] ? lock_acquire+0x1dc/0x520 [ 462.546039] ? graph_lock+0x170/0x170 [ 462.549867] ? __might_sleep+0x95/0x190 [ 462.553876] ? refill_pi_state_cache.part.7+0x300/0x300 [ 462.559269] ? find_held_lock+0x36/0x1c0 [ 462.563368] ? lock_downgrade+0x8e0/0x8e0 2018/04/06 06:12:58 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x88a8ffff, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:58 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x3000000]}) 2018/04/06 06:12:58 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) write$cgroup_type(r3, &(0x7f0000000000)='Ehreaded\x00', 0x1) [ 462.567595] kvm_set_memory_region+0x2e/0x50 [ 462.572030] kvm_vm_ioctl+0x668/0x1d90 [ 462.575940] ? perf_tp_event+0xc30/0xc30 [ 462.580029] ? kvm_set_memory_region+0x50/0x50 [ 462.584637] ? memset+0x31/0x40 [ 462.587941] ? perf_trace_lock+0x495/0x900 [ 462.592209] ? zap_class+0x720/0x720 [ 462.595942] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 462.601155] ? native_flush_tlb_others+0x690/0x690 [ 462.606108] ? graph_lock+0x170/0x170 [ 462.609923] ? check_same_owner+0x320/0x320 [ 462.614278] ? exit_robust_list+0x290/0x290 [ 462.618619] ? find_held_lock+0x36/0x1c0 [ 462.622717] ? lock_downgrade+0x8e0/0x8e0 [ 462.626890] ? rcu_is_watching+0x85/0x140 [ 462.631062] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 462.636290] ? __fget+0x40c/0x650 [ 462.639770] ? expand_files.part.8+0x9a0/0x9a0 [ 462.644365] ? lock_downgrade+0x8e0/0x8e0 [ 462.648526] ? __split_vma+0x5ac/0x7f0 [ 462.652433] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 462.657985] ? vma_set_page_prot+0x183/0x260 [ 462.662406] ? kvm_set_memory_region+0x50/0x50 [ 462.666998] do_vfs_ioctl+0x1cf/0x1650 [ 462.670909] ? ioctl_preallocate+0x2e0/0x2e0 [ 462.675332] ? fget_raw+0x20/0x20 [ 462.678816] ? SyS_futex+0x3a4/0x56d [ 462.682545] ? do_futex+0x27d0/0x27d0 [ 462.686362] ? security_file_ioctl+0x9b/0xd0 [ 462.690790] ksys_ioctl+0xa9/0xd0 [ 462.694264] SyS_ioctl+0x24/0x30 [ 462.697642] ? ksys_ioctl+0xd0/0xd0 [ 462.701285] do_syscall_64+0x29e/0x9d0 [ 462.705182] ? vmalloc_sync_all+0x30/0x30 [ 462.709343] ? _raw_spin_unlock_irq+0x27/0x70 [ 462.713855] ? finish_task_switch+0x1ca/0x820 2018/04/06 06:12:59 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x8100, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x6100, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:12:59 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x1100]}) [ 462.718373] ? syscall_return_slowpath+0x5c0/0x5c0 [ 462.723323] ? syscall_return_slowpath+0x30f/0x5c0 [ 462.728272] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 462.733658] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 462.738537] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 462.743741] RIP: 0033:0x4552d9 [ 462.746938] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 462.754665] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 462.761945] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 462.769226] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 462.776508] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 462.783791] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 462.791567] warn_alloc_show_mem: 1 callbacks suppressed [ 462.791576] Mem-Info: [ 462.799466] active_anon:132357 inactive_anon:75 isolated_anon:0 [ 462.799466] active_file:22868 inactive_file:11987 isolated_file:0 [ 462.799466] unevictable:0 dirty:358 writeback:0 unstable:0 [ 462.799466] slab_reclaimable:12505 slab_unreclaimable:101633 [ 462.799466] mapped:73923 shmem:86 pagetables:1144 bounce:0 [ 462.799466] free:1250902 free_pcp:453 free_cma:0 [ 462.833349] Node 0 active_anon:531484kB inactive_anon:300kB active_file:91472kB inactive_file:47948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295692kB dirty:1432kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 389120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 2018/04/06 06:12:59 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x4788, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:59 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x2100000000000000]}) [ 462.861607] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 462.887809] lowmem_reserve[]: 0 2833 6338 6338 [ 462.892484] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:220kB free_cma:0kB [ 462.920260] lowmem_reserve[]: 0 0 3505 3505 [ 462.924695] Node 0 Normal free:2083064kB min:37284kB low:46604kB high:55924kB active_anon:531384kB inactive_anon:300kB active_file:91472kB inactive_file:47948kB unevictable:0kB writepending:1432kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5600kB pagetables:4428kB bounce:0kB free_pcp:1164kB local_pcp:572kB free_cma:0kB [ 462.954728] lowmem_reserve[]: 0 0 0 0 [ 462.958674] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 462.972495] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 462.988565] Node 0 Normal: 50*4kB (UME) 1048*8kB (ME) 1065*16kB (UME) 843*32kB (UME) 687*64kB (UME) 247*128kB (UME) 114*256kB (UME) 74*512kB (UM) 33*1024kB (UM) 35*2048kB (UME) 436*4096kB (UM) = 2086584kB [ 463.007221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 463.015870] 34939 total pagecache pages [ 463.019899] 0 pages in swap cache [ 463.023394] Swap cache stats: add 0, delete 0, find 0/0 [ 463.029236] Free swap = 0kB [ 463.032362] Total swap = 0kB [ 463.035420] 1965969 pages RAM [ 463.038563] 0 pages HighMem/MovableOnly [ 463.042578] 338524 pages reserved 2018/04/06 06:12:59 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x20000000000149}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000830000711000000000000000000000000000009500000000000000000000000000000000007b96bc33ba238e307cdfd6e81903ad62df4edfca06d39e75a5985040009346544e192798da6b6033aaacd0f3ccd289393289ad5a698ed0fefb01b0cc6baaaacaecb813001e665e2725f98564cb93cccdf7f9ecc13dbbaa295dc64c9a756da684af8a90d319579492c7758cdf4c9aa8120000000000000000000000000000000025a5c104db160772837a88f41ab1977324e140c3cbb7c58470569582464e114ab784b2539c60c38ef8ccfc3e49cb5945d225"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_udp(0x400000, 0x2, 0xc, &(0x7f0000000000)) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004080)={{{@in=@local, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000004180)=0xe8) fstatfs(r0, &(0x7f0000000280)=""/183) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000041c0)={@dev={0xfe, 0x80, [], 0xb}, r2}, 0x14) 2018/04/06 06:12:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x100000, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) [ 463.077978] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 463.089798] syz-executor6 cpuset=syz6 mems_allowed=0 [ 463.094990] CPU: 0 PID: 27546 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 463.101839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.111197] Call Trace: [ 463.113800] dump_stack+0x1b9/0x29f [ 463.117443] ? arch_local_irq_restore+0x52/0x52 [ 463.122127] ? kasan_check_read+0x11/0x20 [ 463.126292] warn_alloc.cold.119+0xb2/0x1b8 [ 463.130631] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 463.135487] ? trace_hardirqs_on+0xd/0x10 [ 463.139644] ? _raw_spin_unlock_irq+0x27/0x70 [ 463.144153] ? finish_task_switch+0x1ca/0x820 [ 463.148670] ? lock_repin_lock+0x410/0x410 [ 463.152921] __vmalloc_node_range+0x45e/0x720 [ 463.157432] ? graph_lock+0x170/0x170 [ 463.161247] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 463.162655] IPVS: ftp: loaded support on port[0] = 21 [ 463.166096] __vmalloc_node_flags_caller+0x50/0x60 [ 463.166120] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 463.166139] kvmalloc_node+0xde/0x100 [ 463.184876] kvm_arch_create_memslot+0xa3/0x4e0 [ 463.189572] __kvm_set_memory_region+0x1d1b/0x2e50 [ 463.194533] ? kvm_vcpu_block+0x1050/0x1050 [ 463.198868] ? print_usage_bug+0xc0/0xc0 [ 463.202946] ? zap_class+0x720/0x720 [ 463.206668] ? check_same_owner+0x320/0x320 [ 463.211006] ? rcu_note_context_switch+0x710/0x710 [ 463.215947] ? lock_acquire+0x1dc/0x520 [ 463.219935] ? graph_lock+0x170/0x170 [ 463.223740] ? __might_sleep+0x95/0x190 [ 463.227729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 463.233272] ? futex_wait_queue_me+0x559/0x820 [ 463.237856] ? __lock_acquire+0x7f5/0x5130 [ 463.242098] ? refill_pi_state_cache.part.7+0x300/0x300 [ 463.247475] ? find_held_lock+0x36/0x1c0 [ 463.251551] ? lock_downgrade+0x8e0/0x8e0 [ 463.255736] kvm_set_memory_region+0x2e/0x50 [ 463.260152] kvm_vm_ioctl+0x668/0x1d90 [ 463.264052] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 463.269605] ? __perf_event_task_sched_in+0x247/0xb80 [ 463.274802] ? kvm_set_memory_region+0x50/0x50 [ 463.279399] ? find_held_lock+0x36/0x1c0 [ 463.283470] ? perf_trace_lock+0xd6/0x900 [ 463.287630] ? zap_class+0x720/0x720 [ 463.291348] ? finish_task_switch+0x182/0x820 [ 463.295847] ? retint_kernel+0x10/0x10 [ 463.299742] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 463.304766] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 463.309539] ? retint_kernel+0x10/0x10 [ 463.313443] ? lock_release+0x4d4/0xa10 [ 463.317428] ? lock_downgrade+0x8e0/0x8e0 [ 463.321589] ? rcu_is_watching+0x85/0x140 [ 463.325747] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 463.330950] ? __fget+0x40c/0x650 [ 463.334417] ? expand_files.part.8+0x9a0/0x9a0 [ 463.339002] ? inet6_net_init+0x870/0x870 [ 463.343163] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 463.348361] ? kvm_set_memory_region+0x50/0x50 [ 463.352948] do_vfs_ioctl+0x1cf/0x1650 [ 463.356850] ? ioctl_preallocate+0x2e0/0x2e0 [ 463.361264] ? fget_raw+0x20/0x20 [ 463.364731] ? SyS_futex+0x3a4/0x56d [ 463.368448] ? exit_to_usermode_loop+0x87/0x310 [ 463.373124] ? do_futex+0x27d0/0x27d0 [ 463.376927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 463.382474] ? security_file_ioctl+0x9b/0xd0 [ 463.386890] ksys_ioctl+0xa9/0xd0 [ 463.390355] SyS_ioctl+0x24/0x30 [ 463.393722] ? ksys_ioctl+0xd0/0xd0 [ 463.397354] do_syscall_64+0x29e/0x9d0 [ 463.401243] ? vmalloc_sync_all+0x30/0x30 [ 463.405394] ? _raw_spin_unlock_irq+0x27/0x70 [ 463.409897] ? finish_task_switch+0x1ca/0x820 [ 463.414398] ? syscall_return_slowpath+0x5c0/0x5c0 [ 463.419337] ? syscall_return_slowpath+0x30f/0x5c0 [ 463.424275] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 463.429648] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 463.434503] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 463.439693] RIP: 0033:0x4552d9 [ 463.442881] RSP: 002b:00007f735423ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.450598] RAX: ffffffffffffffda RBX: 00007f735423f6d4 RCX: 00000000004552d9 [ 463.457870] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 463.465139] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 463.472409] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff 2018/04/06 06:12:59 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x4800, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:12:59 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0xffffa888]}) 2018/04/06 06:12:59 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0xfffffff5, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:12:59 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) [ 463.479682] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000001 [ 463.620319] IPVS: stopping master sync thread 16811 ... [ 463.635915] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 463.647781] syz-executor6 cpuset=syz6 mems_allowed=0 [ 463.653063] CPU: 1 PID: 27584 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 463.659912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.669271] Call Trace: [ 463.671875] dump_stack+0x1b9/0x29f [ 463.675525] ? arch_local_irq_restore+0x52/0x52 [ 463.680209] ? graph_lock+0x170/0x170 [ 463.684024] warn_alloc.cold.119+0xb2/0x1b8 [ 463.688361] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 463.693221] ? __update_load_avg_blocked_se.isra.33+0x460/0x460 [ 463.699299] ? print_usage_bug+0xc0/0xc0 [ 463.703372] ? print_usage_bug+0xc0/0xc0 [ 463.707441] ? update_load_avg+0x2d9/0x2540 [ 463.711767] ? graph_lock+0x170/0x170 [ 463.715583] __vmalloc_node_range+0x45e/0x720 [ 463.720087] ? graph_lock+0x170/0x170 [ 463.723897] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 463.728749] __vmalloc_node_flags_caller+0x50/0x60 [ 463.733691] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 463.738550] kvmalloc_node+0xde/0x100 [ 463.742363] kvm_arch_create_memslot+0xa3/0x4e0 [ 463.747053] __kvm_set_memory_region+0x1d1b/0x2e50 [ 463.752008] ? kvm_vcpu_block+0x1050/0x1050 [ 463.756337] ? print_usage_bug+0xc0/0xc0 [ 463.760405] ? zap_class+0x720/0x720 [ 463.764127] ? perf_trace_lock+0xd6/0x900 [ 463.768291] ? graph_lock+0x170/0x170 [ 463.772103] ? zap_class+0x720/0x720 [ 463.775823] ? graph_lock+0x170/0x170 [ 463.779621] ? __lock_acquire+0x7f5/0x5130 [ 463.783841] ? graph_lock+0x170/0x170 [ 463.787638] ? find_held_lock+0x36/0x1c0 [ 463.791689] ? lock_downgrade+0x8e0/0x8e0 [ 463.795835] kvm_set_memory_region+0x2e/0x50 [ 463.800228] kvm_vm_ioctl+0x668/0x1d90 [ 463.804100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 463.809618] ? __perf_event_task_sched_in+0x247/0xb80 [ 463.814793] ? kvm_set_memory_region+0x50/0x50 [ 463.819363] ? find_held_lock+0x36/0x1c0 [ 463.823406] ? perf_trace_lock+0xd6/0x900 [ 463.827537] ? zap_class+0x720/0x720 [ 463.831230] ? finish_task_switch+0x182/0x820 [ 463.835709] ? kasan_check_read+0x11/0x20 [ 463.839838] ? graph_lock+0x170/0x170 [ 463.843618] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 463.848180] ? compat_start_thread+0x80/0x80 [ 463.852569] ? _raw_spin_unlock_irq+0x27/0x70 [ 463.857047] ? trace_hardirqs_on+0xd/0x10 [ 463.861178] ? _raw_spin_unlock_irq+0x27/0x70 [ 463.865659] ? find_held_lock+0x36/0x1c0 [ 463.869711] ? lock_downgrade+0x8e0/0x8e0 [ 463.873841] ? rcu_is_watching+0x85/0x140 [ 463.877970] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 463.883145] ? __fget+0x40c/0x650 [ 463.886581] ? expand_files.part.8+0x9a0/0x9a0 [ 463.891144] ? lock_downgrade+0x8e0/0x8e0 [ 463.895277] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 463.900810] ? kvm_set_memory_region+0x50/0x50 [ 463.905374] do_vfs_ioctl+0x1cf/0x1650 [ 463.909246] ? ioctl_preallocate+0x2e0/0x2e0 [ 463.913635] ? fget_raw+0x20/0x20 [ 463.917076] ? exit_to_usermode_loop+0x87/0x310 [ 463.921730] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 463.927250] ? security_file_ioctl+0x9b/0xd0 [ 463.931642] ksys_ioctl+0xa9/0xd0 [ 463.935077] SyS_ioctl+0x24/0x30 [ 463.938430] ? ksys_ioctl+0xd0/0xd0 [ 463.942043] do_syscall_64+0x29e/0x9d0 [ 463.945914] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 463.950737] ? syscall_return_slowpath+0x5c0/0x5c0 [ 463.955650] ? syscall_return_slowpath+0x30f/0x5c0 [ 463.960562] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 463.965909] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 463.970737] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 463.975905] RIP: 0033:0x4552d9 [ 463.979072] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.986760] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 463.994016] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 464.001276] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 464.008523] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 464.015772] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 464.023131] warn_alloc_show_mem: 1 callbacks suppressed [ 464.023139] Mem-Info: [ 464.030955] active_anon:131253 inactive_anon:75 isolated_anon:0 [ 464.030955] active_file:22868 inactive_file:11987 isolated_file:0 [ 464.030955] unevictable:0 dirty:358 writeback:0 unstable:0 [ 464.030955] slab_reclaimable:12481 slab_unreclaimable:101323 [ 464.030955] mapped:73989 shmem:86 pagetables:1029 bounce:0 [ 464.030955] free:1252602 free_pcp:390 free_cma:0 [ 464.064764] Node 0 active_anon:525012kB inactive_anon:300kB active_file:91472kB inactive_file:47948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295956kB dirty:1432kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 385024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 464.093045] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 464.119210] lowmem_reserve[]: 0 2833 6338 6338 [ 464.123834] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:704kB free_cma:0kB [ 464.151558] lowmem_reserve[]: 0 0 3505 3505 [ 464.155919] Node 0 Normal free:2091356kB min:37284kB low:46604kB high:55924kB active_anon:525112kB inactive_anon:300kB active_file:91472kB inactive_file:47948kB unevictable:0kB writepending:1432kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5408kB pagetables:4116kB bounce:0kB free_pcp:756kB local_pcp:164kB free_cma:0kB [ 464.185812] lowmem_reserve[]: 0 0 0 0 [ 464.189657] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 464.203333] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 464.219185] Node 0 Normal: 140*4kB (UME) 1280*8kB (UME) 1181*16kB (UME) 844*32kB (UME) 664*64kB (UME) 247*128kB (UME) 114*256kB (UME) 74*512kB (UM) 33*1024kB (UM) 34*2048kB (UME) 437*4096kB (UM) = 2091264kB [ 464.237862] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 464.246460] 34939 total pagecache pages [ 464.250459] 0 pages in swap cache [ 464.253930] Swap cache stats: add 0, delete 0, find 0/0 [ 464.259305] Free swap = 0kB [ 464.262331] Total swap = 0kB [ 464.265371] 1965969 pages RAM [ 464.268483] 0 pages HighMem/MovableOnly [ 464.272471] 338524 pages reserved [ 464.303867] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 464.315701] syz-executor6 cpuset=syz6 mems_allowed=0 [ 464.320900] CPU: 1 PID: 27599 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 464.327743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.337095] Call Trace: [ 464.339687] dump_stack+0x1b9/0x29f [ 464.343326] ? arch_local_irq_restore+0x52/0x52 [ 464.348011] ? kasan_check_read+0x11/0x20 [ 464.352176] warn_alloc.cold.119+0xb2/0x1b8 [ 464.356519] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 464.361371] ? trace_hardirqs_on+0xd/0x10 [ 464.365530] ? _raw_spin_unlock_irq+0x27/0x70 [ 464.370032] ? finish_task_switch+0x1ca/0x820 [ 464.374551] ? lock_repin_lock+0x410/0x410 [ 464.378805] __vmalloc_node_range+0x45e/0x720 [ 464.383315] ? graph_lock+0x170/0x170 [ 464.387132] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 464.391986] __vmalloc_node_flags_caller+0x50/0x60 [ 464.396936] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 464.401790] kvmalloc_node+0xde/0x100 [ 464.405605] kvm_arch_create_memslot+0xa3/0x4e0 [ 464.410296] __kvm_set_memory_region+0x1d1b/0x2e50 [ 464.415249] ? kvm_vcpu_block+0x1050/0x1050 [ 464.419582] ? print_usage_bug+0xc0/0xc0 [ 464.423652] ? zap_class+0x720/0x720 [ 464.427370] ? check_same_owner+0x320/0x320 [ 464.431707] ? rcu_note_context_switch+0x710/0x710 [ 464.436643] ? lock_acquire+0x1dc/0x520 [ 464.440632] ? graph_lock+0x170/0x170 [ 464.444439] ? __might_sleep+0x95/0x190 [ 464.448424] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 464.453967] ? futex_wait_queue_me+0x559/0x820 [ 464.458551] ? __lock_acquire+0x7f5/0x5130 [ 464.462798] ? refill_pi_state_cache.part.7+0x300/0x300 [ 464.468177] ? find_held_lock+0x36/0x1c0 [ 464.472256] ? lock_downgrade+0x8e0/0x8e0 [ 464.476445] kvm_set_memory_region+0x2e/0x50 [ 464.480863] kvm_vm_ioctl+0x668/0x1d90 [ 464.484762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 464.490304] ? __perf_event_task_sched_in+0x247/0xb80 [ 464.495508] ? kvm_set_memory_region+0x50/0x50 [ 464.500103] ? find_held_lock+0x36/0x1c0 [ 464.504174] ? perf_trace_lock+0xd6/0x900 [ 464.508329] ? zap_class+0x720/0x720 [ 464.512054] ? finish_task_switch+0x182/0x820 [ 464.516555] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 464.521752] ? do_futex+0x249/0x27d0 [ 464.525470] ? kasan_check_read+0x11/0x20 [ 464.529630] ? graph_lock+0x170/0x170 [ 464.533437] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 464.538027] ? compat_start_thread+0x80/0x80 [ 464.542443] ? _raw_spin_unlock_irq+0x27/0x70 [ 464.546949] ? exit_robust_list+0x290/0x290 [ 464.551288] ? find_held_lock+0x36/0x1c0 [ 464.555362] ? lock_downgrade+0x8e0/0x8e0 [ 464.559522] ? rcu_is_watching+0x85/0x140 [ 464.563670] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 464.568872] ? __fget+0x40c/0x650 [ 464.572340] ? expand_files.part.8+0x9a0/0x9a0 [ 464.576926] ? inet6_net_init+0x870/0x870 [ 464.581085] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 464.586291] ? kvm_set_memory_region+0x50/0x50 [ 464.590877] do_vfs_ioctl+0x1cf/0x1650 [ 464.594771] ? ioctl_preallocate+0x2e0/0x2e0 [ 464.599185] ? fget_raw+0x20/0x20 [ 464.602652] ? SyS_futex+0x3a4/0x56d [ 464.606375] ? exit_to_usermode_loop+0x87/0x310 [ 464.611052] ? do_futex+0x27d0/0x27d0 [ 464.614857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 464.620397] ? security_file_ioctl+0x9b/0xd0 [ 464.624814] ksys_ioctl+0xa9/0xd0 [ 464.628279] SyS_ioctl+0x24/0x30 [ 464.631655] ? ksys_ioctl+0xd0/0xd0 [ 464.635281] do_syscall_64+0x29e/0x9d0 [ 464.639153] ? vmalloc_sync_all+0x30/0x30 [ 464.643284] ? _raw_spin_unlock_irq+0x27/0x70 [ 464.647759] ? finish_task_switch+0x1ca/0x820 [ 464.652234] ? syscall_return_slowpath+0x5c0/0x5c0 [ 464.657159] ? syscall_return_slowpath+0x30f/0x5c0 [ 464.662081] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 464.667425] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 464.672255] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 464.677421] RIP: 0033:0x4552d9 [ 464.680591] RSP: 002b:00007f735423ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 464.688279] RAX: ffffffffffffffda RBX: 00007f735423f6d4 RCX: 00000000004552d9 [ 464.695530] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 464.702780] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 464.710035] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 464.717289] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000001 [ 464.773523] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 464.814435] bond0 (unregistering): Released all slaves [ 465.526877] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 465.533048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.605378] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 465.676644] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 465.682817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 465.690519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/06 06:13:02 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40010, r1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r3, &(0x7f0000011fd2), 0xfffffdaa) read(r2, &(0x7f0000000000)=""/126, 0xfffffeab) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000604ffc)) dup2(r2, r4) 2018/04/06 06:13:02 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x40030000000000, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:02 executing program 5: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) prctl$setmm(0x23, 0x7, &(0x7f000078c000/0x3000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x7, &(0x7f00006fe000/0x1000)=nil) mlock(&(0x7f000095f000/0x1000)=nil, 0x1000) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x101, 0x400000) r1 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000000) inotify_rm_watch(r0, r1) 2018/04/06 06:13:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0xff000000, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:13:02 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x8848000000000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:02 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='io.weight\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:13:02 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x3]}) 2018/04/06 06:13:02 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x4c00000000000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:13:02 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)="c5ae6d05bb4d63f7f0346d7f7800", 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:13:02 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x23f, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:02 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x84ffffff00000000]}) 2018/04/06 06:13:02 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x200000000000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) [ 465.873245] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 465.885347] syz-executor6 cpuset=syz6 mems_allowed=0 [ 465.890572] CPU: 0 PID: 27752 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 465.897424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 465.906789] Call Trace: [ 465.909399] dump_stack+0x1b9/0x29f [ 465.913057] ? arch_local_irq_restore+0x52/0x52 [ 465.917756] ? retint_kernel+0x10/0x10 2018/04/06 06:13:02 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x88470000]}) 2018/04/06 06:13:02 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffff9e, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x2c000000, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) [ 465.921672] warn_alloc.cold.119+0xb2/0x1b8 [ 465.926021] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 465.930898] ? finish_task_switch+0x1ca/0x820 [ 465.935443] ? lock_repin_lock+0x410/0x410 [ 465.939720] __vmalloc_node_range+0x45e/0x720 [ 465.944254] ? graph_lock+0x170/0x170 [ 465.948086] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 465.952957] __vmalloc_node_flags_caller+0x50/0x60 [ 465.957912] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 465.962782] kvmalloc_node+0xde/0x100 [ 465.966615] kvm_arch_create_memslot+0xa3/0x4e0 [ 465.971329] __kvm_set_memory_region+0x1d1b/0x2e50 [ 465.976303] ? kvm_vcpu_block+0x1050/0x1050 [ 465.980654] ? zap_class+0x720/0x720 [ 465.984387] ? check_same_owner+0x320/0x320 [ 465.988730] ? rcu_note_context_switch+0x710/0x710 [ 465.993761] ? lock_acquire+0x1dc/0x520 [ 465.997757] ? graph_lock+0x170/0x170 [ 466.001571] ? __might_sleep+0x95/0x190 [ 466.005577] ? refill_pi_state_cache.part.7+0x300/0x300 [ 466.010976] ? find_held_lock+0x36/0x1c0 [ 466.015073] ? lock_downgrade+0x8e0/0x8e0 [ 466.019299] kvm_set_memory_region+0x2e/0x50 2018/04/06 06:13:02 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0xffffffff00000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) [ 466.023732] kvm_vm_ioctl+0x668/0x1d90 [ 466.027638] ? perf_tp_event+0xc30/0xc30 [ 466.031723] ? kvm_set_memory_region+0x50/0x50 [ 466.036325] ? memset+0x31/0x40 [ 466.039627] ? perf_trace_lock+0x495/0x900 [ 466.043896] ? zap_class+0x720/0x720 [ 466.047631] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 466.052850] ? native_flush_tlb_others+0x690/0x690 [ 466.057797] ? graph_lock+0x170/0x170 [ 466.061610] ? check_same_owner+0x320/0x320 [ 466.065964] ? exit_robust_list+0x290/0x290 [ 466.070304] ? find_held_lock+0x36/0x1c0 [ 466.074396] ? lock_downgrade+0x8e0/0x8e0 [ 466.078572] ? rcu_is_watching+0x85/0x140 [ 466.082736] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 466.087967] ? __fget+0x40c/0x650 [ 466.091446] ? expand_files.part.8+0x9a0/0x9a0 [ 466.096043] ? lock_downgrade+0x8e0/0x8e0 [ 466.100210] ? __split_vma+0x5ac/0x7f0 [ 466.104120] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 466.109672] ? vma_set_page_prot+0x183/0x260 [ 466.114105] ? kvm_set_memory_region+0x50/0x50 [ 466.118704] do_vfs_ioctl+0x1cf/0x1650 [ 466.122619] ? ioctl_preallocate+0x2e0/0x2e0 [ 466.127046] ? fget_raw+0x20/0x20 [ 466.130534] ? SyS_futex+0x3a4/0x56d [ 466.134270] ? do_futex+0x27d0/0x27d0 [ 466.138085] ? security_file_ioctl+0x9b/0xd0 [ 466.142512] ksys_ioctl+0xa9/0xd0 [ 466.145986] SyS_ioctl+0x24/0x30 [ 466.149360] ? ksys_ioctl+0xd0/0xd0 [ 466.153006] do_syscall_64+0x29e/0x9d0 [ 466.156904] ? vmalloc_sync_all+0x30/0x30 [ 466.161073] ? _raw_spin_unlock_irq+0x27/0x70 [ 466.165588] ? finish_task_switch+0x1ca/0x820 [ 466.170105] ? syscall_return_slowpath+0x5c0/0x5c0 [ 466.175057] ? syscall_return_slowpath+0x30f/0x5c0 [ 466.180014] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 466.185401] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 466.190260] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 466.195454] RIP: 0033:0x4552d9 [ 466.198649] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 466.206380] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 466.213650] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 466.220908] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 466.228168] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 466.235424] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 466.242781] warn_alloc_show_mem: 1 callbacks suppressed [ 466.242786] Mem-Info: [ 466.250617] active_anon:133878 inactive_anon:79 isolated_anon:0 [ 466.250617] active_file:22871 inactive_file:12014 isolated_file:0 [ 466.250617] unevictable:0 dirty:393 writeback:0 unstable:0 [ 466.250617] slab_reclaimable:12492 slab_unreclaimable:101911 [ 466.250617] mapped:73963 shmem:86 pagetables:1053 bounce:0 [ 466.250617] free:1249292 free_pcp:478 free_cma:0 [ 466.284449] Node 0 active_anon:535512kB inactive_anon:316kB active_file:91484kB inactive_file:48056kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295852kB dirty:1572kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 380928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 466.312716] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.338907] lowmem_reserve[]: 0 2833 6338 6338 [ 466.343580] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:220kB free_cma:0kB [ 466.371323] lowmem_reserve[]: 0 0 3505 3505 [ 466.375735] Node 0 Normal free:2078116kB min:37284kB low:46604kB high:55924kB active_anon:535512kB inactive_anon:316kB active_file:91484kB inactive_file:48056kB unevictable:0kB writepending:1572kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5440kB pagetables:4212kB bounce:0kB free_pcp:980kB local_pcp:300kB free_cma:0kB [ 466.405652] lowmem_reserve[]: 0 0 0 0 [ 466.409540] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 466.423341] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 466.439345] Node 0 Normal: 209*4kB (UME) 1462*8kB (UME) 1577*16kB (UME) 830*32kB (UME) 484*64kB (UME) 252*128kB (UME) 115*256kB (UME) 74*512kB (UM) 33*1024kB (UM) 35*2048kB (UME) 434*4096kB (UM) = 2078020kB [ 466.458070] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 466.466691] 34969 total pagecache pages [ 466.471141] 0 pages in swap cache [ 466.474658] Swap cache stats: add 0, delete 0, find 0/0 [ 466.480058] Free swap = 0kB [ 466.483132] Total swap = 0kB [ 466.486180] 1965969 pages RAM [ 466.489317] 0 pages HighMem/MovableOnly [ 466.493316] 338524 pages reserved [ 466.520429] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 466.532370] syz-executor6 cpuset=syz6 mems_allowed=0 [ 466.537576] CPU: 0 PID: 27752 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 466.544424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.553775] Call Trace: [ 466.556360] dump_stack+0x1b9/0x29f [ 466.559985] ? arch_local_irq_restore+0x52/0x52 [ 466.564660] ? kasan_check_read+0x11/0x20 [ 466.568832] warn_alloc.cold.119+0xb2/0x1b8 [ 466.573191] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 466.578065] ? kasan_check_write+0x14/0x20 [ 466.582349] ? lock_repin_lock+0x410/0x410 [ 466.586625] __vmalloc_node_range+0x45e/0x720 [ 466.591153] ? graph_lock+0x170/0x170 [ 466.594983] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 466.599848] __vmalloc_node_flags_caller+0x50/0x60 [ 466.604803] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 466.609668] kvmalloc_node+0xde/0x100 [ 466.613495] kvm_arch_create_memslot+0xa3/0x4e0 [ 466.618206] __kvm_set_memory_region+0x1d1b/0x2e50 [ 466.623187] ? kvm_vcpu_block+0x1050/0x1050 [ 466.627545] ? zap_class+0x720/0x720 [ 466.631279] ? check_same_owner+0x320/0x320 [ 466.635631] ? rcu_note_context_switch+0x710/0x710 [ 466.640577] ? lock_acquire+0x1dc/0x520 [ 466.644578] ? graph_lock+0x170/0x170 [ 466.648397] ? __might_sleep+0x95/0x190 [ 466.652408] ? refill_pi_state_cache.part.7+0x300/0x300 [ 466.657813] ? find_held_lock+0x36/0x1c0 [ 466.661920] ? lock_downgrade+0x8e0/0x8e0 [ 466.666148] kvm_set_memory_region+0x2e/0x50 [ 466.670578] kvm_vm_ioctl+0x668/0x1d90 [ 466.674484] ? perf_tp_event+0xc30/0xc30 [ 466.678552] ? kasan_check_write+0x14/0x20 [ 466.682782] ? kvm_set_memory_region+0x50/0x50 [ 466.687365] ? memset+0x31/0x40 [ 466.690640] ? perf_trace_lock+0x495/0x900 [ 466.694872] ? zap_class+0x720/0x720 [ 466.698574] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 466.703760] ? graph_lock+0x170/0x170 [ 466.707588] ? exit_robust_list+0x290/0x290 [ 466.711965] ? find_held_lock+0x36/0x1c0 [ 466.716063] ? lock_downgrade+0x8e0/0x8e0 [ 466.720221] ? lock_downgrade+0x8e0/0x8e0 [ 466.724396] ? rcu_is_watching+0x85/0x140 [ 466.728557] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 466.733786] ? __fget+0x40c/0x650 [ 466.737266] ? expand_files.part.8+0x9a0/0x9a0 [ 466.741861] ? lock_downgrade+0x8e0/0x8e0 [ 466.746032] ? lock_release+0xa10/0xa10 [ 466.750032] ? kvm_set_memory_region+0x50/0x50 [ 466.754631] do_vfs_ioctl+0x1cf/0x1650 [ 466.758543] ? ioctl_preallocate+0x2e0/0x2e0 [ 466.762970] ? fget_raw+0x20/0x20 [ 466.766445] ? security_file_mprotect+0x9b/0xd0 [ 466.771139] ? SyS_futex+0x3a4/0x56d [ 466.774877] ? do_futex+0x27d0/0x27d0 [ 466.778694] ? security_file_ioctl+0x9b/0xd0 [ 466.783124] ksys_ioctl+0xa9/0xd0 [ 466.786599] SyS_ioctl+0x24/0x30 [ 466.789980] ? ksys_ioctl+0xd0/0xd0 [ 466.793618] do_syscall_64+0x29e/0x9d0 [ 466.797517] ? vmalloc_sync_all+0x30/0x30 [ 466.801675] ? _raw_spin_unlock_irq+0x27/0x70 [ 466.806181] ? finish_task_switch+0x1ca/0x820 [ 466.810693] ? syscall_return_slowpath+0x5c0/0x5c0 [ 466.815640] ? syscall_return_slowpath+0x30f/0x5c0 [ 466.820598] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 466.825984] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 466.830859] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 466.836065] RIP: 0033:0x4552d9 [ 466.839258] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 466.846991] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 466.854271] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 466.861555] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 466.868831] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 466.876109] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:13:03 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'vcan0\x00', 0x4}, 0x18) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000280)=ANY=[@ANYBLOB="66696c74657200ebb6b6ca4a15fa297a41c03d8a000000000000000000000000000000000000000000000000000700000004000000580400004e020000180100001801000070"], 0x1) 2018/04/06 06:13:03 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xf0ffffffffffff, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:03 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x2800000000000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:03 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x100, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000000c0)={0x1, 0x0, [{}]}) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:13:03 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x689]}) 2018/04/06 06:13:03 executing program 5: perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000e0000)='stack\x00') readv(r0, &(0x7f000066dff0)=[{&(0x7f00008ad000)=""/178, 0xb2}], 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) 2018/04/06 06:13:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x600, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:13:03 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x40004001, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:13:03 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x100000000000000, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:03 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0xff000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:03 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x11000000]}) 2018/04/06 06:13:03 executing program 5: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) rt_tgsigqueueinfo(r0, r1, 0x23, &(0x7f0000000100)={0x38, 0x955, 0x5586, 0x3ff}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0xf) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000200)=0xc) r4 = getpgrp(r3) rt_tgsigqueueinfo(0x0, r4, 0x0, &(0x7f00000010c0)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000080)=0xc, 0x4) 2018/04/06 06:13:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x1803, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) [ 467.138394] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 467.150389] syz-executor6 cpuset=syz6 mems_allowed=0 [ 467.155577] CPU: 1 PID: 27818 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 467.162416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.171770] Call Trace: [ 467.174373] dump_stack+0x1b9/0x29f [ 467.178023] ? arch_local_irq_restore+0x52/0x52 [ 467.182707] ? kasan_check_read+0x11/0x20 [ 467.186877] warn_alloc.cold.119+0xb2/0x1b8 [ 467.191214] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 467.196072] ? kasan_check_write+0x14/0x20 [ 467.200332] ? lock_repin_lock+0x410/0x410 [ 467.204585] __vmalloc_node_range+0x45e/0x720 [ 467.209094] ? graph_lock+0x170/0x170 [ 467.212908] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 467.217761] __vmalloc_node_flags_caller+0x50/0x60 [ 467.222692] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 467.227535] kvmalloc_node+0xde/0x100 [ 467.231352] kvm_arch_create_memslot+0xa3/0x4e0 [ 467.236049] __kvm_set_memory_region+0x1d1b/0x2e50 [ 467.241009] ? kvm_vcpu_block+0x1050/0x1050 [ 467.245350] ? zap_class+0x720/0x720 [ 467.249077] ? check_same_owner+0x320/0x320 [ 467.253415] ? rcu_note_context_switch+0x710/0x710 [ 467.258342] ? lock_acquire+0x1dc/0x520 [ 467.262304] ? graph_lock+0x170/0x170 [ 467.266087] ? __might_sleep+0x95/0x190 [ 467.270051] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 467.275572] ? futex_wait_queue_me+0x559/0x820 [ 467.280136] ? refill_pi_state_cache.part.7+0x300/0x300 [ 467.285491] ? find_held_lock+0x36/0x1c0 [ 467.289539] ? lock_downgrade+0x8e0/0x8e0 [ 467.293689] kvm_set_memory_region+0x2e/0x50 [ 467.298083] kvm_vm_ioctl+0x668/0x1d90 [ 467.301957] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 467.307051] ? futex_wake+0x2f6/0x750 [ 467.310844] ? kvm_set_memory_region+0x50/0x50 [ 467.315411] ? get_futex_key+0x1e90/0x1e90 [ 467.319631] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 467.324631] ? perf_trace_lock+0xd6/0x900 [ 467.328763] ? zap_class+0x720/0x720 [ 467.332457] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 467.337629] ? do_futex+0x249/0x27d0 [ 467.341326] ? native_flush_tlb_others+0x690/0x690 [ 467.346237] ? graph_lock+0x170/0x170 [ 467.350026] ? check_same_owner+0x320/0x320 [ 467.354340] ? exit_robust_list+0x290/0x290 [ 467.358644] ? find_held_lock+0x36/0x1c0 [ 467.362705] ? lock_downgrade+0x8e0/0x8e0 [ 467.366849] ? rcu_is_watching+0x85/0x140 [ 467.370979] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 467.376155] ? __fget+0x40c/0x650 [ 467.379595] ? expand_files.part.8+0x9a0/0x9a0 [ 467.384155] ? lock_downgrade+0x8e0/0x8e0 [ 467.388286] ? __split_vma+0x5ac/0x7f0 [ 467.392161] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 467.397677] ? vma_set_page_prot+0x183/0x260 [ 467.402068] ? kvm_set_memory_region+0x50/0x50 [ 467.406640] do_vfs_ioctl+0x1cf/0x1650 [ 467.410524] ? ioctl_preallocate+0x2e0/0x2e0 [ 467.414913] ? fget_raw+0x20/0x20 [ 467.418353] ? SyS_futex+0x3a4/0x56d [ 467.422069] ? do_futex+0x27d0/0x27d0 [ 467.425863] ? security_file_ioctl+0x9b/0xd0 [ 467.430255] ksys_ioctl+0xa9/0xd0 [ 467.433693] SyS_ioctl+0x24/0x30 [ 467.437044] ? ksys_ioctl+0xd0/0xd0 [ 467.440654] do_syscall_64+0x29e/0x9d0 [ 467.444521] ? vmalloc_sync_all+0x30/0x30 [ 467.448649] ? _raw_spin_unlock_irq+0x27/0x70 [ 467.453127] ? finish_task_switch+0x1ca/0x820 [ 467.457618] ? syscall_return_slowpath+0x5c0/0x5c0 [ 467.462530] ? syscall_return_slowpath+0x30f/0x5c0 [ 467.467442] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 467.472962] ? retint_user+0x18/0x18 [ 467.476660] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 467.481501] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 467.486676] RIP: 0033:0x4552d9 [ 467.489845] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.497534] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 467.504794] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 467.512063] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 467.519338] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 467.526610] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 467.533931] warn_alloc_show_mem: 1 callbacks suppressed [ 467.533941] Mem-Info: [ 467.541735] active_anon:131266 inactive_anon:79 isolated_anon:0 [ 467.541735] active_file:22871 inactive_file:12022 isolated_file:0 [ 467.541735] unevictable:0 dirty:401 writeback:0 unstable:0 [ 467.541735] slab_reclaimable:12509 slab_unreclaimable:101432 [ 467.541735] mapped:73950 shmem:86 pagetables:1033 bounce:0 [ 467.541735] free:1252368 free_pcp:561 free_cma:0 [ 467.575559] Node 0 active_anon:525064kB inactive_anon:316kB active_file:91484kB inactive_file:48088kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295800kB dirty:1604kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 391168kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 467.603804] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 467.629977] lowmem_reserve[]: 0 2833 6338 6338 [ 467.634647] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:704kB free_cma:0kB [ 467.662370] lowmem_reserve[]: 0 0 3505 3505 [ 467.666740] Node 0 Normal free:2090420kB min:37284kB low:46604kB high:55924kB active_anon:525064kB inactive_anon:316kB active_file:91484kB inactive_file:48088kB unevictable:0kB writepending:1604kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5312kB pagetables:4132kB bounce:0kB free_pcp:1316kB local_pcp:628kB free_cma:0kB [ 467.696715] lowmem_reserve[]: 0 0 0 0 [ 467.700567] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 467.714198] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 467.730087] Node 0 Normal: 211*4kB (UME) 1553*8kB (UME) 1589*16kB (UME) 857*32kB (UME) 484*64kB (UME) 252*128kB (UME) 116*256kB (UME) 74*512kB (UM) 33*1024kB (UM) 34*2048kB (UME) 437*4096kB (UM) = 2090308kB [ 467.748749] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 467.757337] 34984 total pagecache pages [ 467.761336] 0 pages in swap cache [ 467.764804] Swap cache stats: add 0, delete 0, find 0/0 [ 467.770173] Free swap = 0kB [ 467.773198] Total swap = 0kB [ 467.776223] 1965969 pages RAM [ 467.779337] 0 pages HighMem/MovableOnly [ 467.783316] 338524 pages reserved [ 467.805533] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 467.817334] syz-executor6 cpuset=syz6 mems_allowed=0 [ 467.822495] CPU: 1 PID: 27818 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 467.829334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.838673] Call Trace: [ 467.841249] dump_stack+0x1b9/0x29f [ 467.844861] ? arch_local_irq_restore+0x52/0x52 [ 467.849515] ? kasan_check_read+0x11/0x20 [ 467.853655] warn_alloc.cold.119+0xb2/0x1b8 [ 467.857973] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 467.862802] ? kasan_check_write+0x14/0x20 [ 467.867037] ? lock_repin_lock+0x410/0x410 [ 467.871262] __vmalloc_node_range+0x45e/0x720 [ 467.875743] ? graph_lock+0x170/0x170 [ 467.879526] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 467.884359] __vmalloc_node_flags_caller+0x50/0x60 [ 467.889274] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 467.894100] kvmalloc_node+0xde/0x100 [ 467.897891] kvm_arch_create_memslot+0xa3/0x4e0 [ 467.902549] __kvm_set_memory_region+0x1d1b/0x2e50 [ 467.907466] ? kvm_vcpu_block+0x1050/0x1050 [ 467.911772] ? zap_class+0x720/0x720 [ 467.915464] ? check_same_owner+0x320/0x320 [ 467.919768] ? rcu_note_context_switch+0x710/0x710 [ 467.924679] ? lock_acquire+0x1dc/0x520 [ 467.928636] ? graph_lock+0x170/0x170 [ 467.932425] ? __might_sleep+0x95/0x190 [ 467.936394] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 467.941913] ? futex_wait_queue_me+0x559/0x820 [ 467.946477] ? refill_pi_state_cache.part.7+0x300/0x300 [ 467.951824] ? find_held_lock+0x36/0x1c0 [ 467.955873] ? lock_downgrade+0x8e0/0x8e0 [ 467.960034] kvm_set_memory_region+0x2e/0x50 [ 467.964425] kvm_vm_ioctl+0x668/0x1d90 [ 467.968293] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 467.973377] ? futex_wake+0x2f6/0x750 [ 467.977164] ? kasan_check_write+0x14/0x20 [ 467.981383] ? kvm_set_memory_region+0x50/0x50 [ 467.985949] ? graph_lock+0x170/0x170 [ 467.989730] ? get_futex_key+0x1e90/0x1e90 [ 467.993945] ? __lock_acquire+0x7f5/0x5130 [ 467.998161] ? perf_trace_lock+0xd6/0x900 [ 468.002294] ? zap_class+0x720/0x720 [ 468.005990] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 468.011162] ? do_futex+0x249/0x27d0 [ 468.014857] ? graph_lock+0x170/0x170 [ 468.018644] ? exit_robust_list+0x290/0x290 [ 468.022953] ? find_held_lock+0x36/0x1c0 [ 468.026999] ? lock_downgrade+0x8e0/0x8e0 [ 468.031132] ? lock_downgrade+0x8e0/0x8e0 [ 468.035262] ? rcu_is_watching+0x85/0x140 [ 468.039389] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 468.044566] ? __fget+0x40c/0x650 [ 468.048012] ? expand_files.part.8+0x9a0/0x9a0 [ 468.052582] ? lock_downgrade+0x8e0/0x8e0 [ 468.056711] ? lock_release+0xa10/0xa10 [ 468.060677] ? kvm_set_memory_region+0x50/0x50 [ 468.065241] do_vfs_ioctl+0x1cf/0x1650 [ 468.069111] ? ioctl_preallocate+0x2e0/0x2e0 [ 468.073501] ? fget_raw+0x20/0x20 [ 468.076941] ? security_file_mprotect+0x9b/0xd0 [ 468.081593] ? SyS_futex+0x3a4/0x56d [ 468.085287] ? do_futex+0x27d0/0x27d0 [ 468.089067] ? security_file_ioctl+0x9b/0xd0 [ 468.093458] ksys_ioctl+0xa9/0xd0 [ 468.096894] SyS_ioctl+0x24/0x30 [ 468.100241] ? ksys_ioctl+0xd0/0xd0 [ 468.103852] do_syscall_64+0x29e/0x9d0 [ 468.107720] ? vmalloc_sync_all+0x30/0x30 [ 468.111849] ? _raw_spin_unlock_irq+0x27/0x70 [ 468.116323] ? finish_task_switch+0x1ca/0x820 [ 468.120807] ? syscall_return_slowpath+0x5c0/0x5c0 [ 468.125718] ? syscall_return_slowpath+0x30f/0x5c0 [ 468.130631] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 468.135977] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 468.140806] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 468.145977] RIP: 0033:0x4552d9 [ 468.149147] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2018/04/06 06:13:04 executing program 7: kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000003b00)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000003c00)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003c40)={'ip6gretap0\x00', r1}) r2 = socket$kcm(0x29, 0x802, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000040)={r3, 0x1}) sendmmsg(r2, &(0x7f0000000140), 0x4000000000001c4, 0x0) 2018/04/06 06:13:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x600000, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:13:04 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x81000000, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:04 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x88470000]}) 2018/04/06 06:13:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0xfffffff5, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:13:04 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x900, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:13:04 executing program 5: syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000013000/0x2000)=nil, 0x2000}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="1d2f6fae33a738bbe87497cab58ed660209436fba007777b3de9e104a570a98c2ac1f03bea175b0c13b68e2b5b5b95a170e0db2320f840a2ad2ff07745e29d22afa3a229e0caee04a5b3a6431a1052c66d6ad4bfff7fb6c98f379384e04322dc4707210cf5237587c6a5c5a21cec238e3b8c722aa2d845bb035b28a88da3929a3c1c97ba6738cfabd1050346c6555fd72b5cb7541ac749ea5c1d75c36a09fdf0398ad8bb9c0b8816524888ebec84475bf4580272621daefbd83ee2b2ce99faa47628d4055794bf7bbed418ce190d1ab763f021a016e5a2cf4cfb8f24c08b2cc140e3deb980c9", 0xe6) r3 = dup2(r1, r0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000180)={{0x1, 0x5000, 0x8, 0x10000, 0x20, 0x4, 0x4, 0x7, 0x80000000, 0x2, 0x3, 0xb5b}, {0x5000, 0x4002, 0x3, 0x4, 0x3ff, 0x3da, 0x7, 0xffffffffffff0089, 0x0, 0x6, 0x0, 0x1}, {0x100000, 0xd001, 0x8, 0x1, 0x100, 0x7, 0x9, 0x10001, 0x9, 0x5e3, 0x237a, 0x7f}, {0xf000, 0x0, 0x1e525f01e7576b39, 0x9, 0x3f, 0x1, 0x7, 0x0, 0x7, 0xcc, 0x8, 0x3}, {0xd000, 0xf000, 0x3, 0x1, 0x8, 0x3, 0x3, 0x5a00000000000000, 0xfe94, 0x8}, {0x3000, 0x100000, 0x8, 0x95, 0x6, 0x4, 0x101, 0x50, 0x7f, 0x1000, 0x4, 0x2c}, {0x4000, 0x3000, 0xf, 0x8, 0x7, 0x9, 0x10000, 0x7, 0x5c3, 0x9be3, 0x7e3, 0x1f}, {0x2, 0x10000, 0x0, 0x7938, 0x4, 0x200, 0x1, 0x4, 0x2, 0x6, 0x3, 0x8}, {0x3, 0x4000}, {0x6002}, 0x40000006, 0x0, 0xf001, 0x400000, 0x1, 0x1000, 0x1d000, [0x8, 0x0, 0x3ff, 0x7]}) ioctl$sock_proto_private(r1, 0x89ef, &(0x7f0000002040)="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") 2018/04/06 06:13:04 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x88640000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) [ 468.156836] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 468.164095] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 468.171348] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 468.178595] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 468.185843] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:13:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) [ 468.392111] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 468.404008] syz-executor6 cpuset=syz6 mems_allowed=0 [ 468.409263] CPU: 1 PID: 27864 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 468.416111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.425472] Call Trace: [ 468.428074] dump_stack+0x1b9/0x29f [ 468.431721] ? arch_local_irq_restore+0x52/0x52 [ 468.436413] ? graph_lock+0x170/0x170 [ 468.440232] warn_alloc.cold.119+0xb2/0x1b8 [ 468.444573] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 468.449438] ? __update_load_avg_blocked_se.isra.33+0x460/0x460 [ 468.455508] ? print_usage_bug+0xc0/0xc0 [ 468.459554] ? print_usage_bug+0xc0/0xc0 [ 468.463597] ? update_load_avg+0x2d9/0x2540 [ 468.467901] ? __update_load_avg_se.isra.34+0x61e/0x980 [ 468.473258] __vmalloc_node_range+0x45e/0x720 [ 468.477741] ? graph_lock+0x170/0x170 [ 468.481530] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 468.486356] __vmalloc_node_flags_caller+0x50/0x60 [ 468.491268] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 468.496096] kvmalloc_node+0xde/0x100 [ 468.499888] kvm_arch_create_memslot+0xa3/0x4e0 [ 468.504544] __kvm_set_memory_region+0x1d1b/0x2e50 [ 468.509463] ? kvm_vcpu_block+0x1050/0x1050 [ 468.513766] ? print_usage_bug+0xc0/0xc0 [ 468.517811] ? zap_class+0x720/0x720 [ 468.521507] ? perf_trace_lock+0xd6/0x900 [ 468.525641] ? graph_lock+0x170/0x170 [ 468.529423] ? zap_class+0x720/0x720 [ 468.533119] ? graph_lock+0x170/0x170 [ 468.536899] ? __lock_acquire+0x7f5/0x5130 [ 468.541116] ? graph_lock+0x170/0x170 [ 468.544901] ? find_held_lock+0x36/0x1c0 [ 468.548948] ? lock_downgrade+0x8e0/0x8e0 [ 468.553093] kvm_set_memory_region+0x2e/0x50 [ 468.557481] kvm_vm_ioctl+0x668/0x1d90 [ 468.561354] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 468.566871] ? __perf_event_task_sched_in+0x247/0xb80 [ 468.572057] ? kvm_set_memory_region+0x50/0x50 [ 468.576627] ? find_held_lock+0x36/0x1c0 [ 468.580670] ? perf_trace_lock+0xd6/0x900 [ 468.584803] ? zap_class+0x720/0x720 [ 468.588495] ? finish_task_switch+0x182/0x820 [ 468.592973] ? kasan_check_read+0x11/0x20 [ 468.597120] ? graph_lock+0x170/0x170 [ 468.600911] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 468.605476] ? compat_start_thread+0x80/0x80 [ 468.609866] ? _raw_spin_unlock_irq+0x27/0x70 [ 468.614347] ? trace_hardirqs_on+0xd/0x10 [ 468.618474] ? _raw_spin_unlock_irq+0x27/0x70 [ 468.622951] ? find_held_lock+0x36/0x1c0 [ 468.626997] ? lock_downgrade+0x8e0/0x8e0 [ 468.631134] ? rcu_is_watching+0x85/0x140 [ 468.635263] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 468.640447] ? __fget+0x40c/0x650 [ 468.643883] ? expand_files.part.8+0x9a0/0x9a0 [ 468.648442] ? lock_downgrade+0x8e0/0x8e0 [ 468.652575] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 468.658093] ? kvm_set_memory_region+0x50/0x50 [ 468.662658] do_vfs_ioctl+0x1cf/0x1650 [ 468.666529] ? ioctl_preallocate+0x2e0/0x2e0 [ 468.670918] ? fget_raw+0x20/0x20 [ 468.674357] ? exit_to_usermode_loop+0x87/0x310 [ 468.679013] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 468.684538] ? security_file_ioctl+0x9b/0xd0 [ 468.688931] ksys_ioctl+0xa9/0xd0 [ 468.692365] SyS_ioctl+0x24/0x30 [ 468.695711] ? ksys_ioctl+0xd0/0xd0 [ 468.699328] do_syscall_64+0x29e/0x9d0 [ 468.703195] ? vmalloc_sync_all+0x30/0x30 [ 468.707328] ? _raw_spin_unlock_irq+0x27/0x70 [ 468.711805] ? finish_task_switch+0x1ca/0x820 [ 468.716282] ? syscall_return_slowpath+0x5c0/0x5c0 [ 468.721195] ? syscall_return_slowpath+0x30f/0x5c0 [ 468.726106] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 468.731452] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 468.736278] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 468.741446] RIP: 0033:0x4552d9 [ 468.744615] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 468.752305] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 468.759557] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 468.766805] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 468.774054] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 468.781303] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 468.788802] warn_alloc_show_mem: 1 callbacks suppressed [ 468.788810] Mem-Info: [ 468.796631] active_anon:131260 inactive_anon:80 isolated_anon:0 [ 468.796631] active_file:22871 inactive_file:12040 isolated_file:0 [ 468.796631] unevictable:0 dirty:419 writeback:0 unstable:0 [ 468.796631] slab_reclaimable:12459 slab_unreclaimable:101189 [ 468.796631] mapped:73938 shmem:86 pagetables:1004 bounce:0 [ 468.796631] free:1252625 free_pcp:567 free_cma:0 [ 468.830440] Node 0 active_anon:525040kB inactive_anon:320kB active_file:91484kB inactive_file:48160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295752kB dirty:1676kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 380928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 468.858717] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.884883] lowmem_reserve[]: 0 2833 6338 6338 [ 468.889523] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:704kB free_cma:0kB [ 468.917270] lowmem_reserve[]: 0 0 3505 3505 [ 468.921646] Node 0 Normal free:2091448kB min:37284kB low:46604kB high:55924kB active_anon:525040kB inactive_anon:320kB active_file:91484kB inactive_file:48160kB unevictable:0kB writepending:1676kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5344kB pagetables:4016kB bounce:0kB free_pcp:1340kB local_pcp:632kB free_cma:0kB [ 468.951622] lowmem_reserve[]: 0 0 0 0 [ 468.955475] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 468.969110] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 468.984984] Node 0 Normal: 230*4kB (UME) 1562*8kB (UME) 1621*16kB (UME) 862*32kB (UME) 484*64kB (UME) 252*128kB (UME) 117*256kB (UME) 74*512kB (UM) 33*1024kB (UM) 34*2048kB (UME) 437*4096kB (UM) = 2091384kB [ 469.003683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 469.012277] 34995 total pagecache pages [ 469.016280] 0 pages in swap cache [ 469.019751] Swap cache stats: add 0, delete 0, find 0/0 [ 469.025143] Free swap = 0kB [ 469.028179] Total swap = 0kB [ 469.031223] 1965969 pages RAM [ 469.034346] 0 pages HighMem/MovableOnly [ 469.038353] 338524 pages reserved [ 469.058357] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 469.070270] syz-executor6 cpuset=syz6 mems_allowed=0 [ 469.075431] CPU: 1 PID: 27864 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 469.082270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.091604] Call Trace: [ 469.094181] dump_stack+0x1b9/0x29f [ 469.097799] ? arch_local_irq_restore+0x52/0x52 [ 469.102451] ? kasan_check_read+0x11/0x20 [ 469.106583] warn_alloc.cold.119+0xb2/0x1b8 [ 469.110891] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 469.115714] ? kasan_check_write+0x14/0x20 [ 469.119946] ? lock_repin_lock+0x410/0x410 [ 469.124169] __vmalloc_node_range+0x45e/0x720 [ 469.128650] ? graph_lock+0x170/0x170 [ 469.132434] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 469.137262] __vmalloc_node_flags_caller+0x50/0x60 [ 469.142181] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 469.147008] kvmalloc_node+0xde/0x100 [ 469.150802] kvm_arch_create_memslot+0xa3/0x4e0 [ 469.155459] __kvm_set_memory_region+0x1d1b/0x2e50 [ 469.160378] ? kvm_vcpu_block+0x1050/0x1050 [ 469.164685] ? visit_groups_merge+0x539/0x6a0 [ 469.169186] ? zap_class+0x720/0x720 [ 469.172883] ? check_same_owner+0x320/0x320 [ 469.177186] ? rcu_note_context_switch+0x710/0x710 [ 469.182095] ? lock_acquire+0x1dc/0x520 [ 469.186057] ? graph_lock+0x170/0x170 [ 469.189839] ? __might_sleep+0x95/0x190 [ 469.193796] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 469.199325] ? futex_wait_queue_me+0x559/0x820 [ 469.203890] ? refill_pi_state_cache.part.7+0x300/0x300 [ 469.209240] ? find_held_lock+0x36/0x1c0 [ 469.213287] ? lock_downgrade+0x8e0/0x8e0 [ 469.217434] kvm_set_memory_region+0x2e/0x50 [ 469.221824] kvm_vm_ioctl+0x668/0x1d90 [ 469.225690] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 469.230773] ? futex_wake+0x2f6/0x750 [ 469.234552] ? kasan_check_write+0x14/0x20 [ 469.238773] ? kvm_set_memory_region+0x50/0x50 [ 469.243335] ? graph_lock+0x170/0x170 [ 469.247113] ? get_futex_key+0x1e90/0x1e90 [ 469.251326] ? __lock_acquire+0x7f5/0x5130 [ 469.255543] ? perf_trace_lock+0xd6/0x900 [ 469.259675] ? zap_class+0x720/0x720 [ 469.263369] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 469.268540] ? do_futex+0x249/0x27d0 [ 469.272236] ? graph_lock+0x170/0x170 [ 469.276033] ? exit_robust_list+0x290/0x290 [ 469.280354] ? find_held_lock+0x36/0x1c0 [ 469.284410] ? lock_downgrade+0x8e0/0x8e0 [ 469.288538] ? lock_downgrade+0x8e0/0x8e0 [ 469.292669] ? rcu_is_watching+0x85/0x140 [ 469.296800] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 469.301975] ? __fget+0x40c/0x650 [ 469.305411] ? expand_files.part.8+0x9a0/0x9a0 [ 469.309972] ? lock_downgrade+0x8e0/0x8e0 [ 469.314100] ? lock_release+0xa10/0xa10 [ 469.318060] ? kvm_set_memory_region+0x50/0x50 [ 469.322625] do_vfs_ioctl+0x1cf/0x1650 [ 469.326497] ? ioctl_preallocate+0x2e0/0x2e0 [ 469.330888] ? fget_raw+0x20/0x20 [ 469.334324] ? security_file_mprotect+0x9b/0xd0 [ 469.338974] ? SyS_futex+0x3a4/0x56d [ 469.342670] ? do_futex+0x27d0/0x27d0 [ 469.346452] ? security_file_ioctl+0x9b/0xd0 [ 469.350842] ksys_ioctl+0xa9/0xd0 [ 469.354277] SyS_ioctl+0x24/0x30 [ 469.357627] ? ksys_ioctl+0xd0/0xd0 [ 469.361235] do_syscall_64+0x29e/0x9d0 [ 469.365129] ? vmalloc_sync_all+0x30/0x30 [ 469.369266] ? _raw_spin_unlock_irq+0x27/0x70 [ 469.373743] ? finish_task_switch+0x1ca/0x820 [ 469.378231] ? syscall_return_slowpath+0x5c0/0x5c0 [ 469.383144] ? syscall_return_slowpath+0x30f/0x5c0 [ 469.388060] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 469.393408] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 469.398237] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 469.403403] RIP: 0033:0x4552d9 2018/04/06 06:13:05 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x6488]}) 2018/04/06 06:13:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0xf401000000000000, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:13:05 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = syz_open_dev$sndpcmc(&(0x7f000048b000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ca9000/0x1000)=nil, 0x1000, 0x800000300000d, 0x2011, r2, 0x80000000) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0)={0x1000, 0x2}, 0xfffffffffffffe5d) 2018/04/06 06:13:05 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x9effffff, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:05 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x3, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:05 executing program 1: socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xa2) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="1a2f6367726f757000", 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) r4 = getpid() ptrace(0x10, r4) write$cgroup_type(r3, &(0x7f0000000000)='Ehreaded\x00', 0x1) fcntl$setown(r3, 0x8, r4) 2018/04/06 06:13:05 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x500, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:13:05 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="0a07f5b005e381000100200000000000e6e6000000000000000000edffffff0000", 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2100, 0x15) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000100)={0x0, 0xffff, 0x8, &(0x7f00000000c0)}) [ 469.406921] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.414611] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 469.421863] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 469.429122] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 469.436370] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 469.443621] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:13:05 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:05 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x6000000]}) 2018/04/06 06:13:05 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x89060000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:05 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f0000000080)={0x3ffffd, 0x0, 0xea}, &(0x7f0000768000)={0x0, 0x50, 0x0, 0x1}, &(0x7f00007fbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, &(0x7f0000f22000)={0x0, 0x1c9c380}, &(0x7f0000f14000)={&(0x7f00000000c0)={0x3}, 0x8}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100), 0x8) 2018/04/06 06:13:06 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) gettid() r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000080), &(0x7f0000013000)=0x4) mmap(&(0x7f0000dad000/0x3000)=nil, 0x3000, 0x3, 0x18010, 0xffffffffffffffff, 0x8000000) close(r0) [ 469.666937] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 469.678750] syz-executor6 cpuset=syz6 mems_allowed=0 [ 469.683962] CPU: 1 PID: 27907 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 469.690809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.700166] Call Trace: [ 469.702772] dump_stack+0x1b9/0x29f [ 469.706424] ? arch_local_irq_restore+0x52/0x52 [ 469.711118] ? perf_trace_lock_acquire+0xe3/0x980 2018/04/06 06:13:06 executing program 1: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) write$cgroup_type(r0, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:13:06 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0xe80]}) 2018/04/06 06:13:06 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000012c0)='cpuset.effective_cpus\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000001300), &(0x7f0000001340)=0xb) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000000)='Ehreaded\x00', 0x1) [ 469.715983] warn_alloc.cold.119+0xb2/0x1b8 [ 469.720328] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 469.725180] ? trace_hardirqs_on+0xd/0x10 [ 469.729341] ? _raw_spin_unlock_irq+0x27/0x70 [ 469.733850] ? finish_task_switch+0x1ca/0x820 [ 469.738383] __vmalloc_node_range+0x45e/0x720 [ 469.742895] ? graph_lock+0x170/0x170 [ 469.746714] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 469.751565] __vmalloc_node_flags_caller+0x50/0x60 [ 469.756512] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 469.761367] kvmalloc_node+0xde/0x100 [ 469.765186] kvm_arch_create_memslot+0xa3/0x4e0 [ 469.769879] __kvm_set_memory_region+0x1d1b/0x2e50 [ 469.774840] ? kvm_vcpu_block+0x1050/0x1050 [ 469.779184] ? zap_class+0x720/0x720 [ 469.782914] ? perf_trace_lock+0x900/0x900 [ 469.787156] ? lock_acquire+0x1dc/0x520 [ 469.791143] ? graph_lock+0x170/0x170 [ 469.794952] ? __might_sleep+0x95/0x190 [ 469.798944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 469.804492] ? futex_wait_queue_me+0x559/0x820 [ 469.809088] ? refill_pi_state_cache.part.7+0x300/0x300 [ 469.814473] ? find_held_lock+0x36/0x1c0 [ 469.818555] ? lock_downgrade+0x8e0/0x8e0 [ 469.822752] kvm_set_memory_region+0x2e/0x50 [ 469.827175] kvm_vm_ioctl+0x668/0x1d90 [ 469.831076] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 469.836187] ? futex_wake+0x2f6/0x750 [ 469.840004] ? kvm_set_memory_region+0x50/0x50 [ 469.844601] ? get_futex_key+0x1e90/0x1e90 [ 469.848847] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 469.853873] ? perf_trace_lock+0xd6/0x900 [ 469.858028] ? perf_trace_lock_acquire+0xe3/0x980 [ 469.862890] ? zap_class+0x720/0x720 [ 469.866612] ? perf_trace_lock+0x900/0x900 [ 469.870852] ? do_futex+0x249/0x27d0 [ 469.874576] ? native_flush_tlb_others+0x690/0x690 [ 469.879516] ? graph_lock+0x170/0x170 [ 469.883322] ? check_same_owner+0x320/0x320 [ 469.887657] ? exit_robust_list+0x290/0x290 [ 469.891988] ? find_held_lock+0x36/0x1c0 [ 469.896067] ? lock_downgrade+0x8e0/0x8e0 [ 469.900232] ? rcu_is_watching+0x85/0x140 [ 469.904387] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 469.909595] ? __fget+0x40c/0x650 [ 469.913064] ? expand_files.part.8+0x9a0/0x9a0 [ 469.917647] ? lock_downgrade+0x8e0/0x8e0 [ 469.921804] ? __split_vma+0x5ac/0x7f0 [ 469.925705] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 469.931251] ? vma_set_page_prot+0x183/0x260 [ 469.935671] ? kvm_set_memory_region+0x50/0x50 [ 469.940263] do_vfs_ioctl+0x1cf/0x1650 [ 469.944169] ? ioctl_preallocate+0x2e0/0x2e0 [ 469.948588] ? fget_raw+0x20/0x20 [ 469.952057] ? SyS_futex+0x3a4/0x56d [ 469.955779] ? do_futex+0x27d0/0x27d0 [ 469.959571] ? security_file_ioctl+0x9b/0xd0 [ 469.963971] ksys_ioctl+0xa9/0xd0 [ 469.967416] SyS_ioctl+0x24/0x30 [ 469.970770] ? ksys_ioctl+0xd0/0xd0 [ 469.974391] do_syscall_64+0x29e/0x9d0 [ 469.978264] ? vmalloc_sync_all+0x30/0x30 [ 469.982406] ? _raw_spin_unlock_irq+0x27/0x70 [ 469.986889] ? finish_task_switch+0x1ca/0x820 [ 469.991375] ? syscall_return_slowpath+0x5c0/0x5c0 [ 469.996299] ? syscall_return_slowpath+0x30f/0x5c0 [ 470.001223] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 470.006582] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 470.011420] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 470.016597] RIP: 0033:0x4552d9 [ 470.019776] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 470.027477] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 470.034735] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 470.041989] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 470.049255] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 470.056600] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 470.064195] warn_alloc_show_mem: 1 callbacks suppressed [ 470.064198] Mem-Info: [ 470.072068] active_anon:131306 inactive_anon:76 isolated_anon:0 [ 470.072068] active_file:22874 inactive_file:12053 isolated_file:0 [ 470.072068] unevictable:0 dirty:33 writeback:0 unstable:0 [ 470.072068] slab_reclaimable:12457 slab_unreclaimable:102506 [ 470.072068] mapped:73925 shmem:86 pagetables:1051 bounce:0 [ 470.072068] free:1251235 free_pcp:494 free_cma:0 [ 470.105824] Node 0 active_anon:525124kB inactive_anon:304kB active_file:91496kB inactive_file:48212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295700kB dirty:132kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 385024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 470.133984] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 470.160181] lowmem_reserve[]: 0 2833 6338 6338 [ 470.164805] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:704kB free_cma:0kB [ 470.192543] lowmem_reserve[]: 0 0 3505 3505 [ 470.196902] Node 0 Normal free:2085684kB min:37284kB low:46604kB high:55924kB active_anon:525124kB inactive_anon:304kB active_file:91496kB inactive_file:48212kB unevictable:0kB writepending:152kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5440kB pagetables:4204kB bounce:0kB free_pcp:1124kB local_pcp:448kB free_cma:0kB [ 470.226801] lowmem_reserve[]: 0 0 0 0 [ 470.230641] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 470.244339] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 470.260182] Node 0 Normal: 253*4kB (UME) 1012*8kB (UME) 1530*16kB (UME) 861*32kB (UME) 484*64kB (UME) 252*128kB (UME) 117*256kB (UME) 74*512kB (UM) 33*1024kB (UM) 36*2048kB (UME) 436*4096kB (UM) = 2085588kB [ 470.278849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 470.287451] 35011 total pagecache pages [ 470.291442] 0 pages in swap cache [ 470.294917] Swap cache stats: add 0, delete 0, find 0/0 [ 470.300299] Free swap = 0kB [ 470.303672] Total swap = 0kB [ 470.306715] 1965969 pages RAM [ 470.309837] 0 pages HighMem/MovableOnly [ 470.313829] 338524 pages reserved [ 470.349912] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 470.361859] syz-executor6 cpuset=syz6 mems_allowed=0 [ 470.367071] CPU: 0 PID: 27907 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 470.373913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.383251] Call Trace: [ 470.385832] dump_stack+0x1b9/0x29f [ 470.389470] ? arch_local_irq_restore+0x52/0x52 [ 470.394141] ? kasan_check_read+0x11/0x20 [ 470.398293] warn_alloc.cold.119+0xb2/0x1b8 [ 470.402620] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 470.407468] ? kasan_check_write+0x14/0x20 [ 470.411721] ? lock_repin_lock+0x410/0x410 [ 470.415953] __vmalloc_node_range+0x45e/0x720 [ 470.420450] ? graph_lock+0x170/0x170 [ 470.424264] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 470.429103] __vmalloc_node_flags_caller+0x50/0x60 [ 470.434046] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 470.438893] kvmalloc_node+0xde/0x100 [ 470.442688] kvm_arch_create_memslot+0xa3/0x4e0 [ 470.447380] __kvm_set_memory_region+0x1d1b/0x2e50 [ 470.452351] ? kvm_vcpu_block+0x1050/0x1050 [ 470.456683] ? zap_class+0x720/0x720 [ 470.460395] ? check_same_owner+0x320/0x320 [ 470.464723] ? rcu_note_context_switch+0x710/0x710 [ 470.469921] ? lock_acquire+0x1dc/0x520 [ 470.473893] ? graph_lock+0x170/0x170 [ 470.477685] ? __might_sleep+0x95/0x190 [ 470.481660] ? refill_pi_state_cache.part.7+0x300/0x300 [ 470.487037] ? find_held_lock+0x36/0x1c0 [ 470.491104] ? lock_downgrade+0x8e0/0x8e0 [ 470.495289] kvm_set_memory_region+0x2e/0x50 [ 470.499690] kvm_vm_ioctl+0x668/0x1d90 [ 470.503568] ? perf_tp_event+0xc30/0xc30 [ 470.507617] ? __perf_event_task_sched_in+0x247/0xb80 [ 470.512798] ? kvm_set_memory_region+0x50/0x50 [ 470.517368] ? memset+0x31/0x40 [ 470.520639] ? perf_trace_lock+0x495/0x900 [ 470.524869] ? zap_class+0x720/0x720 [ 470.528586] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 470.533802] ? kasan_check_read+0x11/0x20 [ 470.537962] ? graph_lock+0x170/0x170 [ 470.541777] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 470.546393] ? exit_robust_list+0x290/0x290 [ 470.550735] ? find_held_lock+0x36/0x1c0 [ 470.554834] ? lock_downgrade+0x8e0/0x8e0 [ 470.559012] ? rcu_is_watching+0x85/0x140 [ 470.563174] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 470.568383] ? __fget+0x40c/0x650 [ 470.571843] ? expand_files.part.8+0x9a0/0x9a0 [ 470.576416] ? lock_downgrade+0x8e0/0x8e0 [ 470.580560] ? lock_release+0xa10/0xa10 [ 470.584528] ? kvm_set_memory_region+0x50/0x50 [ 470.589101] do_vfs_ioctl+0x1cf/0x1650 [ 470.592980] ? ioctl_preallocate+0x2e0/0x2e0 [ 470.597375] ? fget_raw+0x20/0x20 [ 470.600821] ? security_file_mprotect+0x9b/0xd0 [ 470.605482] ? SyS_futex+0x3a4/0x56d [ 470.609202] ? do_futex+0x27d0/0x27d0 [ 470.612995] ? security_file_ioctl+0x9b/0xd0 [ 470.617400] ksys_ioctl+0xa9/0xd0 [ 470.620856] SyS_ioctl+0x24/0x30 [ 470.624228] ? ksys_ioctl+0xd0/0xd0 [ 470.627844] do_syscall_64+0x29e/0x9d0 [ 470.631718] ? vmalloc_sync_all+0x30/0x30 [ 470.635851] ? _raw_spin_unlock_irq+0x27/0x70 [ 470.640331] ? finish_task_switch+0x1ca/0x820 [ 470.644814] ? syscall_return_slowpath+0x5c0/0x5c0 [ 470.649732] ? syscall_return_slowpath+0x30f/0x5c0 [ 470.654658] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 470.660020] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 470.664869] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 470.670051] RIP: 0033:0x4552d9 [ 470.673228] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 470.680926] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 470.688181] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 2018/04/06 06:13:07 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x80350000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:07 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x9effffff00000000, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x7805000000000000, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:13:07 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x88640000]}) 2018/04/06 06:13:07 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) 2018/04/06 06:13:07 executing program 5: r0 = socket(0x18, 0x0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)) connect(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @rand_addr=0x8}, 0x1, 0x2, 0x1, 0x2}}, 0xff30) setsockopt(r0, 0x8d, 0x2000, &(0x7f00000019c0)="239c950b", 0x4) 2018/04/06 06:13:07 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x4c, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:13:07 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000a00000)={0x73, 0x79, 0x7a}, &(0x7f0000facfff)="01", 0x1, r2) r3 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00003eb000)="b3", 0x1, r2) close(r0) keyctl$update(0x2, r3, &(0x7f000060df0f)="df02754677212dfc3e2acc26fdc3ffa64813da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa023895113293535d1c0066d20e0f275188b4b4c187e18774fc2227cbb60fc6697f5337726164c8fbe11875deb27eafcf7d06438f252510d87bd91d03e7dc2faed85adcd88ca30e75b1e143a72d94defa187e48b89efbbbcc9b9a9a307353df7a21affce4e9149eb122cbc356cb681365afd979e97b57b596e901864a68679f0512cca7341063127aa29672", 0xc0) [ 470.695435] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 470.702692] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 470.709961] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:13:07 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 2018/04/06 06:13:07 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x1c00000000000000]}) 2018/04/06 06:13:07 executing program 1: socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000200)={0x0, r1}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000000)='Ehreaded\x00', 0x1) r4 = semget$private(0x0, 0x7, 0x100) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x2800, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000240)=0x1, &(0x7f0000000280)=0x4) semop(r4, &(0x7f00000001c0)=[{0x1, 0x7, 0x800}, {0x7, 0x4cd4c794, 0x800}, {0x3, 0xffffffffffffff2e, 0x800}], 0x3) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x800, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000180), 0x4) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xe8) setfsuid(r7) 2018/04/06 06:13:07 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xf00000000000000, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:07 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x800e000000000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:07 executing program 7: socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000180)={r1, &(0x7f0000000100)=""/113}) syz_emit_ethernet(0x1e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa000c130000000b02000900000000000000d1"], 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}}}, [0x10000, 0x7, 0x3, 0x1000, 0x6, 0x3, 0x2, 0x5, 0x8000, 0x7f, 0x0, 0x7, 0x4, 0x4, 0x100000000]}, &(0x7f0000000380)=0x100) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000003c0)={r2, 0x4}, &(0x7f0000000400)=0x8) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x2002) 2018/04/06 06:13:07 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x4305000000000000]}) [ 470.906405] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 470.918235] syz-executor6 cpuset=syz6 mems_allowed=0 [ 470.923534] CPU: 1 PID: 27969 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 470.930380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.939734] Call Trace: [ 470.942338] dump_stack+0x1b9/0x29f [ 470.945976] ? arch_local_irq_restore+0x52/0x52 [ 470.950650] ? kasan_check_read+0x11/0x20 [ 470.954809] warn_alloc.cold.119+0xb2/0x1b8 [ 470.959145] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 470.963993] ? trace_hardirqs_on+0xd/0x10 [ 470.968153] ? _raw_spin_unlock_irq+0x27/0x70 [ 470.972656] ? finish_task_switch+0x1ca/0x820 [ 470.977173] ? lock_repin_lock+0x410/0x410 [ 470.981422] __vmalloc_node_range+0x45e/0x720 [ 470.985931] ? graph_lock+0x170/0x170 [ 470.989749] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 470.994603] __vmalloc_node_flags_caller+0x50/0x60 [ 470.999548] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 471.004397] kvmalloc_node+0xde/0x100 [ 471.008213] kvm_arch_create_memslot+0xa3/0x4e0 [ 471.012904] __kvm_set_memory_region+0x1d1b/0x2e50 [ 471.017858] ? kvm_vcpu_block+0x1050/0x1050 [ 471.022194] ? zap_class+0x720/0x720 [ 471.025912] ? check_same_owner+0x320/0x320 [ 471.030249] ? rcu_note_context_switch+0x710/0x710 [ 471.035185] ? lock_acquire+0x1dc/0x520 [ 471.039169] ? graph_lock+0x170/0x170 [ 471.042977] ? __might_sleep+0x95/0x190 [ 471.046964] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 471.052512] ? futex_wait_queue_me+0x559/0x820 [ 471.057103] ? refill_pi_state_cache.part.7+0x300/0x300 [ 471.062480] ? find_held_lock+0x36/0x1c0 [ 471.066560] ? lock_downgrade+0x8e0/0x8e0 [ 471.070756] kvm_set_memory_region+0x2e/0x50 [ 471.075176] kvm_vm_ioctl+0x668/0x1d90 [ 471.079073] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 471.084182] ? futex_wake+0x2f6/0x750 [ 471.087996] ? kvm_set_memory_region+0x50/0x50 [ 471.092587] ? get_futex_key+0x1e90/0x1e90 [ 471.096836] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 471.101864] ? perf_trace_lock+0xd6/0x900 [ 471.106022] ? zap_class+0x720/0x720 [ 471.109745] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 471.114942] ? do_futex+0x249/0x27d0 [ 471.118660] ? native_flush_tlb_others+0x690/0x690 [ 471.123616] ? graph_lock+0x170/0x170 [ 471.123632] ? check_same_owner+0x320/0x320 [ 471.123657] ? exit_robust_list+0x290/0x290 [ 471.123676] ? find_held_lock+0x36/0x1c0 [ 471.123701] ? lock_downgrade+0x8e0/0x8e0 [ 471.123723] ? rcu_is_watching+0x85/0x140 [ 471.123739] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 471.123765] ? __fget+0x40c/0x650 [ 471.123787] ? expand_files.part.8+0x9a0/0x9a0 [ 471.123800] ? lock_downgrade+0x8e0/0x8e0 [ 471.123816] ? __split_vma+0x5ac/0x7f0 [ 471.123837] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 471.123851] ? vma_set_page_prot+0x183/0x260 [ 471.123871] ? kvm_set_memory_region+0x50/0x50 [ 471.123887] do_vfs_ioctl+0x1cf/0x1650 [ 471.123907] ? ioctl_preallocate+0x2e0/0x2e0 [ 471.123924] ? fget_raw+0x20/0x20 [ 471.123947] ? SyS_futex+0x3a4/0x56d [ 471.123965] ? do_futex+0x27d0/0x27d0 [ 471.123982] ? security_file_ioctl+0x9b/0xd0 [ 471.124000] ksys_ioctl+0xa9/0xd0 [ 471.124018] SyS_ioctl+0x24/0x30 [ 471.124032] ? ksys_ioctl+0xd0/0xd0 [ 471.124049] do_syscall_64+0x29e/0x9d0 [ 471.124062] ? vmalloc_sync_all+0x30/0x30 [ 471.124079] ? _raw_spin_unlock_irq+0x27/0x70 [ 471.124095] ? finish_task_switch+0x1ca/0x820 [ 471.124112] ? syscall_return_slowpath+0x5c0/0x5c0 [ 471.124128] ? syscall_return_slowpath+0x30f/0x5c0 [ 471.124150] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 471.124171] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 471.124195] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 471.124205] RIP: 0033:0x4552d9 [ 471.124214] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.124235] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 471.124245] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 471.124253] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 471.124262] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 471.124271] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 471.124455] warn_alloc_show_mem: 1 callbacks suppressed [ 471.124463] Mem-Info: [ 471.124493] active_anon:131793 inactive_anon:78 isolated_anon:0 [ 471.124493] active_file:22874 inactive_file:12066 isolated_file:0 [ 471.124493] unevictable:0 dirty:47 writeback:0 unstable:0 [ 471.124493] slab_reclaimable:12458 slab_unreclaimable:102555 [ 471.124493] mapped:73963 shmem:86 pagetables:1060 bounce:0 [ 471.124493] free:1250649 free_pcp:492 free_cma:0 [ 471.124521] Node 0 active_anon:527172kB inactive_anon:312kB active_file:91496kB inactive_file:48264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295852kB dirty:188kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 380928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 471.124529] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 471.124565] lowmem_reserve[]: 0 2833 6338 6338 [ 471.124612] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:704kB free_cma:0kB [ 471.124649] lowmem_reserve[]: 0 0 3505 3505 [ 471.124696] Node 0 Normal free:2083544kB min:37284kB low:46604kB high:55924kB active_anon:527172kB inactive_anon:312kB active_file:91496kB inactive_file:48264kB unevictable:0kB writepending:188kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5472kB pagetables:4240kB bounce:0kB free_pcp:1044kB local_pcp:496kB free_cma:0kB [ 471.124738] lowmem_reserve[]: 0 0 0 0 [ 471.124784] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 471.124970] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 471.125150] Node 0 Normal: 206*4kB (UME) 1018*8kB (ME) 1489*16kB (UME) 875*32kB (UME) 488*64kB (UME) 252*128kB (UME) 117*256kB (UME) 74*512kB (UM) 33*1024kB (UM) 37*2048kB (UME) 435*4096kB (UM) = 2083448kB [ 471.125280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 471.125285] 35024 total pagecache pages [ 471.125298] 0 pages in swap cache [ 471.125307] Swap cache stats: add 0, delete 0, find 0/0 [ 471.125312] Free swap = 0kB [ 471.125317] Total swap = 0kB [ 471.125323] 1965969 pages RAM [ 471.125328] 0 pages HighMem/MovableOnly [ 471.125333] 338524 pages reserved [ 471.169811] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 471.595976] syz-executor6 cpuset=syz6 mems_allowed=0 [ 471.601178] CPU: 0 PID: 27996 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 471.608023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.617383] Call Trace: [ 471.619986] dump_stack+0x1b9/0x29f [ 471.623630] ? arch_local_irq_restore+0x52/0x52 [ 471.628403] ? kasan_check_read+0x11/0x20 [ 471.632562] warn_alloc.cold.119+0xb2/0x1b8 [ 471.636879] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 471.641720] ? finish_task_switch+0x1ca/0x820 [ 471.646214] ? lock_repin_lock+0x410/0x410 [ 471.650443] __vmalloc_node_range+0x45e/0x720 [ 471.654928] ? graph_lock+0x170/0x170 [ 471.658725] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 471.663554] __vmalloc_node_flags_caller+0x50/0x60 [ 471.668483] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 471.673314] kvmalloc_node+0xde/0x100 [ 471.677105] kvm_arch_create_memslot+0xa3/0x4e0 [ 471.681776] __kvm_set_memory_region+0x1d1b/0x2e50 [ 471.686709] ? kvm_vcpu_block+0x1050/0x1050 [ 471.691037] ? zap_class+0x720/0x720 [ 471.694739] ? check_same_owner+0x320/0x320 [ 471.699055] ? rcu_note_context_switch+0x710/0x710 [ 471.703969] ? lock_acquire+0x1dc/0x520 [ 471.707935] ? graph_lock+0x170/0x170 [ 471.711733] ? __might_sleep+0x95/0x190 [ 471.715704] ? refill_pi_state_cache.part.7+0x300/0x300 [ 471.721067] ? find_held_lock+0x36/0x1c0 [ 471.725123] ? lock_downgrade+0x8e0/0x8e0 [ 471.729286] kvm_set_memory_region+0x2e/0x50 [ 471.733682] kvm_vm_ioctl+0x668/0x1d90 [ 471.737560] ? perf_tp_event+0xc30/0xc30 [ 471.741605] ? kasan_check_write+0x14/0x20 [ 471.745829] ? kvm_set_memory_region+0x50/0x50 [ 471.750398] ? memset+0x31/0x40 [ 471.753671] ? perf_trace_lock+0x495/0x900 [ 471.757898] ? zap_class+0x720/0x720 [ 471.761601] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 471.766785] ? graph_lock+0x170/0x170 [ 471.770597] ? exit_robust_list+0x290/0x290 [ 471.774922] ? find_held_lock+0x36/0x1c0 [ 471.778984] ? lock_downgrade+0x8e0/0x8e0 [ 471.783128] ? lock_downgrade+0x8e0/0x8e0 [ 471.787269] ? rcu_is_watching+0x85/0x140 [ 471.791404] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 471.796590] ? __fget+0x40c/0x650 [ 471.800052] ? expand_files.part.8+0x9a0/0x9a0 [ 471.804619] ? find_held_lock+0x36/0x1c0 [ 471.808680] ? kvm_set_memory_region+0x50/0x50 [ 471.813258] do_vfs_ioctl+0x1cf/0x1650 [ 471.817150] ? ioctl_preallocate+0x2e0/0x2e0 [ 471.821548] ? fget_raw+0x20/0x20 [ 471.824996] ? SyS_futex+0x3a4/0x56d [ 471.828710] ? do_futex+0x27d0/0x27d0 [ 471.832499] ? security_file_ioctl+0x9b/0xd0 [ 471.836899] ksys_ioctl+0xa9/0xd0 [ 471.840342] SyS_ioctl+0x24/0x30 [ 471.843693] ? ksys_ioctl+0xd0/0xd0 [ 471.847309] do_syscall_64+0x29e/0x9d0 [ 471.851268] ? vmalloc_sync_all+0x30/0x30 [ 471.855403] ? _raw_spin_unlock_irq+0x27/0x70 [ 471.859885] ? finish_task_switch+0x1ca/0x820 [ 471.864369] ? syscall_return_slowpath+0x5c0/0x5c0 [ 471.869284] ? syscall_return_slowpath+0x30f/0x5c0 [ 471.874204] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 471.879557] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 471.884391] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 471.889567] RIP: 0033:0x4552d9 [ 471.892742] RSP: 002b:00007f735423ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.900437] RAX: ffffffffffffffda RBX: 00007f735423f6d4 RCX: 00000000004552d9 2018/04/06 06:13:08 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x8864000000000000]}) 2018/04/06 06:13:08 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffff000, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:08 executing program 5: socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{0x8, 0x8}, {0x7}], 0x2) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000f08fc0), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000d0a000)={&(0x7f00001da000), 0x8}) 2018/04/06 06:13:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x9c050000, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:13:08 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x300000000000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:08 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x3, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:13:08 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x311042, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') readlinkat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/74, 0x4a) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x4, 0x5, 0xb4, 0x9, 0x6, 0xffff, 0x5}, 0x1c) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000002c0)={0xfffffffffffffff9, 0x2, 0xffffffffffff8000, 0x7fffffff, 0xfffffffffffff001, 0x1}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000380)={r1, r0, 0xfffffffffffffffd}) write$cgroup_type(r2, &(0x7f00000000c0)='Ehreaded\x00', 0x9) r5 = syz_open_dev$midi(&(0x7f0000000400)='/dev/midi#\x00', 0x1, 0x101000) perf_event_open$cgroup(&(0x7f0000000180)={0x7, 0x70, 0x10001, 0x2, 0x2, 0x0, 0x0, 0x0, 0x40, 0x2, 0x1, 0x1, 0x4, 0x4, 0x0, 0x7, 0x40, 0x3df5, 0xfffffffffffffffa, 0x80, 0x1000, 0x40, 0x80000000, 0x1, 0xffffffff, 0x7239f405, 0xd0, 0x6, 0x5, 0x4, 0xffffffffffffffff, 0x2, 0xffa, 0x9, 0x1, 0x10000, 0x40, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x9, 0x9, 0x0, 0x0, 0x9, 0x1}, r0, 0xe, r5, 0x2) 2018/04/06 06:13:08 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000916000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="d453ecff1b1d4d8be7a03fb40ccc56b591f345f47941b53ad8d9185560b177229d91", 0x22}, {&(0x7f00000000c0)="fa58d4198d872923158479025040ff1941a468f2d34aa42e867d0c88dc67cc2bc74d1fe564be2af0cef3b57eb738efeb34b7856eb7211ddd81f2adc1c02b091f5ef524cbf07682e83330dd79c8bede6b5fe6d05ea200169257452041193d189a70ee2f8570e731b68424d1ec7edcdf7247f9f3e8d4eb", 0x76}, {&(0x7f0000000140)="06adf4b2aae0d6e3bd876b22892fd092eaa18fa09fa92d2bfea70b015027ce2e53cf7b067d48d671ae61af37fda601d0519da3a8d6861f1308fcb1bd22132d75f2f4e834769b9d61c619ee4a8fa12bec67bbaa9ca413d6400ca60c", 0x5b}, {&(0x7f00000001c0)="783cd821e1d6c0c5b08d62354130d1723b3061599fa915614fdd2f668a39bd77c335819e0251542ad2bfc029e20e5a6d06278fe1f95983cb294b5e4317814efdabdbd8c4a6c7b994ac015b39388f1957bb25d3f766e6a7b0fae02d150289076354996025ac037bd2f0a505b447884749772a6ebf7357834035fc6a19fba2e5d7a7745a4594844f6c777ac84fc98f6ace38b0adceb5dd3f502b27b71534fb4a14d7ba93ad13581bddef79b71c2f17b039162e44a1787e81c296fd987b1ec9b02993409caa3d9bcb1237e3b605c0a5612e8e4f", 0xd2}], 0x4, 0x0, 0x0, 0x14}, 0x44) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000001180)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000001080)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000001100)={0x0, @time}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) [ 471.907693] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 471.914952] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 471.922206] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 471.929457] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000001 2018/04/06 06:13:08 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x88480000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:08 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffff7f00000000, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:08 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x80350000]}) 2018/04/06 06:13:08 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x402, 0x70bd29, 0x25dfdbfb, {0x1}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) r3 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) r5 = dup3(r3, r3, 0x80000) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5700104}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r6, 0x100, 0x70bd26, 0x25dfdbfd, {0x6}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$cgroup_type(r5, &(0x7f0000000000)='Ehreaded\x00', 0xffffffffffffff80) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) 2018/04/06 06:13:08 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x180) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000080)={0x9, {{0xa, 0x4e23, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x8}}, {{0xa, 0x4e20, 0x9, @empty, 0x9}}}, 0x108) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x80000001) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000000), 0x4) 2018/04/06 06:13:08 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x3f02000000000000, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0xf5ffffff, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:13:08 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x1c]}) [ 472.209155] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 472.221052] syz-executor6 cpuset=syz6 mems_allowed=0 [ 472.226252] CPU: 1 PID: 28023 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 472.233100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.242459] Call Trace: [ 472.245062] dump_stack+0x1b9/0x29f [ 472.248708] ? arch_local_irq_restore+0x52/0x52 [ 472.253402] ? kasan_check_read+0x11/0x20 [ 472.257576] warn_alloc.cold.119+0xb2/0x1b8 [ 472.261913] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 472.266764] ? trace_hardirqs_on+0xd/0x10 [ 472.270926] ? _raw_spin_unlock_irq+0x27/0x70 [ 472.275431] ? finish_task_switch+0x1ca/0x820 [ 472.279945] ? lock_repin_lock+0x410/0x410 [ 472.284200] __vmalloc_node_range+0x45e/0x720 [ 472.288706] ? graph_lock+0x170/0x170 [ 472.292521] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 472.297370] __vmalloc_node_flags_caller+0x50/0x60 [ 472.302903] ? kvm_arch_create_memslot+0xa3/0x4e0 2018/04/06 06:13:08 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x105}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x3) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x46, 0x40) ioctl$TCFLSH(r2, 0x540b, 0x9) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="87000000dfcc84d06d3aac2c53ef9e11f29e5696caff0371753d82893bcf4b8767955ca388b77f93814105cde649dd46ff988d4d3d2515ce983cc28c813f0bf543c2c06caf9a6c7f58ae79855bebc5ab216219f230a14c0051f5aed974594d031ba621ecf97530e2d522a2b124fb0a3128baa2b1816021f298b6a80740b0598f50b7f266c291690390137f"], &(0x7f0000000000)=0x8f) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e20, 0xefa9, @mcast2={0xff, 0x2, [], 0x1}, 0x3f}}, 0x0, 0x3, 0x800, 0x200, 0x80}, &(0x7f0000000240)=0x98) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000180)=0x14) fcntl$notify(r1, 0x402, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"d202b999cf85000000000088f301e710", 0x1106}) getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000140)=""/30, &(0x7f0000000200)=0x1e) [ 472.307760] kvmalloc_node+0xde/0x100 [ 472.311581] kvm_arch_create_memslot+0xa3/0x4e0 [ 472.316272] __kvm_set_memory_region+0x1d1b/0x2e50 [ 472.321231] ? kvm_vcpu_block+0x1050/0x1050 [ 472.325564] ? zap_class+0x720/0x720 [ 472.329291] ? check_same_owner+0x320/0x320 [ 472.333626] ? rcu_note_context_switch+0x710/0x710 [ 472.338560] ? lock_acquire+0x1dc/0x520 [ 472.342548] ? graph_lock+0x170/0x170 [ 472.346362] ? __might_sleep+0x95/0x190 [ 472.350350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.355895] ? futex_wait_queue_me+0x559/0x820 [ 472.360487] ? refill_pi_state_cache.part.7+0x300/0x300 [ 472.365868] ? find_held_lock+0x36/0x1c0 [ 472.369945] ? lock_downgrade+0x8e0/0x8e0 [ 472.374133] kvm_set_memory_region+0x2e/0x50 [ 472.378552] kvm_vm_ioctl+0x668/0x1d90 [ 472.382453] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 472.387567] ? futex_wake+0x2f6/0x750 [ 472.391381] ? kvm_set_memory_region+0x50/0x50 [ 472.395972] ? get_futex_key+0x1e90/0x1e90 [ 472.400824] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 472.405852] ? perf_trace_lock+0xd6/0x900 [ 472.409997] ? zap_class+0x720/0x720 [ 472.413716] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 472.418899] ? do_futex+0x249/0x27d0 [ 472.422608] ? native_flush_tlb_others+0x690/0x690 [ 472.427532] ? graph_lock+0x170/0x170 [ 472.431314] ? check_same_owner+0x320/0x320 [ 472.435624] ? exit_robust_list+0x290/0x290 [ 472.439930] ? find_held_lock+0x36/0x1c0 [ 472.443979] ? lock_downgrade+0x8e0/0x8e0 [ 472.448126] ? rcu_is_watching+0x85/0x140 [ 472.452264] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 472.457443] ? __fget+0x40c/0x650 [ 472.460881] ? expand_files.part.8+0x9a0/0x9a0 [ 472.465444] ? lock_downgrade+0x8e0/0x8e0 [ 472.469581] ? __split_vma+0x5ac/0x7f0 [ 472.473454] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.478973] ? vma_set_page_prot+0x183/0x260 [ 472.483378] ? kvm_set_memory_region+0x50/0x50 [ 472.487944] do_vfs_ioctl+0x1cf/0x1650 [ 472.491818] ? ioctl_preallocate+0x2e0/0x2e0 [ 472.496210] ? fget_raw+0x20/0x20 [ 472.499651] ? SyS_futex+0x3a4/0x56d [ 472.503348] ? do_futex+0x27d0/0x27d0 [ 472.507144] ? security_file_ioctl+0x9b/0xd0 [ 472.511535] ksys_ioctl+0xa9/0xd0 [ 472.514975] SyS_ioctl+0x24/0x30 [ 472.518324] ? ksys_ioctl+0xd0/0xd0 [ 472.521934] do_syscall_64+0x29e/0x9d0 [ 472.525807] ? vmalloc_sync_all+0x30/0x30 [ 472.529942] ? _raw_spin_unlock_irq+0x27/0x70 [ 472.534422] ? finish_task_switch+0x1ca/0x820 [ 472.538923] ? syscall_return_slowpath+0x5c0/0x5c0 [ 472.543840] ? syscall_return_slowpath+0x30f/0x5c0 [ 472.548756] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 472.554110] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 472.558941] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 472.564111] RIP: 0033:0x4552d9 [ 472.567278] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.574966] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 472.582218] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 472.589469] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 472.596720] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 472.603968] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 472.611348] warn_alloc_show_mem: 1 callbacks suppressed [ 472.611355] Mem-Info: [ 472.619173] active_anon:132313 inactive_anon:78 isolated_anon:0 [ 472.619173] active_file:22874 inactive_file:12074 isolated_file:0 [ 472.619173] unevictable:0 dirty:56 writeback:0 unstable:0 [ 472.619173] slab_reclaimable:12459 slab_unreclaimable:102550 [ 472.619173] mapped:73956 shmem:86 pagetables:1040 bounce:0 [ 472.619173] free:1250180 free_pcp:489 free_cma:0 [ 472.652903] Node 0 active_anon:529252kB inactive_anon:312kB active_file:91496kB inactive_file:48296kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295824kB dirty:224kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 380928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 472.681061] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 472.707222] lowmem_reserve[]: 0 2833 6338 6338 [ 472.711851] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:704kB free_cma:0kB [ 472.739578] lowmem_reserve[]: 0 0 3505 3505 [ 472.743950] Node 0 Normal free:2081660kB min:37284kB low:46604kB high:55924kB active_anon:529232kB inactive_anon:316kB active_file:91496kB inactive_file:48304kB unevictable:0kB writepending:260kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5440kB pagetables:4128kB bounce:0kB free_pcp:1028kB local_pcp:376kB free_cma:0kB [ 472.773840] lowmem_reserve[]: 0 0 0 0 [ 472.777706] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 472.791385] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 472.807268] Node 0 Normal: 261*4kB (UME) 1050*8kB (UME) 1403*16kB (UME) 891*32kB (UME) 497*64kB (UME) 252*128kB (UME) 115*256kB (UME) 73*512kB (UM) 34*1024kB (UM) 33*2048kB (UE) 436*4096kB (UM) = 2079540kB [ 472.825782] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 472.834371] 35039 total pagecache pages [ 472.838369] 0 pages in swap cache [ 472.841840] Swap cache stats: add 0, delete 0, find 0/0 [ 472.847239] Free swap = 0kB [ 472.850274] Total swap = 0kB [ 472.853321] 1965969 pages RAM [ 472.856436] 0 pages HighMem/MovableOnly [ 472.860438] 338524 pages reserved [ 472.898394] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 472.910233] syz-executor6 cpuset=syz6 mems_allowed=0 [ 472.915388] CPU: 1 PID: 28023 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 472.922224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.931560] Call Trace: [ 472.934132] dump_stack+0x1b9/0x29f [ 472.937745] ? arch_local_irq_restore+0x52/0x52 [ 472.942400] ? kasan_check_read+0x11/0x20 [ 472.946531] warn_alloc.cold.119+0xb2/0x1b8 [ 472.950843] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 472.955681] ? kasan_check_write+0x14/0x20 [ 472.959921] ? lock_repin_lock+0x410/0x410 [ 472.964152] __vmalloc_node_range+0x45e/0x720 [ 472.968635] ? graph_lock+0x170/0x170 [ 472.972422] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 472.977247] __vmalloc_node_flags_caller+0x50/0x60 [ 472.982165] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 472.986992] kvmalloc_node+0xde/0x100 [ 472.990780] kvm_arch_create_memslot+0xa3/0x4e0 [ 472.995441] __kvm_set_memory_region+0x1d1b/0x2e50 [ 473.000372] ? kvm_vcpu_block+0x1050/0x1050 [ 473.004712] ? zap_class+0x720/0x720 [ 473.008433] ? check_same_owner+0x320/0x320 [ 473.012760] ? rcu_note_context_switch+0x710/0x710 [ 473.017692] ? lock_acquire+0x1dc/0x520 [ 473.021671] ? graph_lock+0x170/0x170 [ 473.025459] ? __might_sleep+0x95/0x190 [ 473.029421] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 473.034941] ? futex_wait_queue_me+0x559/0x820 [ 473.039507] ? refill_pi_state_cache.part.7+0x300/0x300 [ 473.044862] ? find_held_lock+0x36/0x1c0 [ 473.048912] ? lock_downgrade+0x8e0/0x8e0 [ 473.053066] kvm_set_memory_region+0x2e/0x50 [ 473.057459] kvm_vm_ioctl+0x668/0x1d90 [ 473.061333] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 473.066417] ? futex_wake+0x2f6/0x750 [ 473.070201] ? kasan_check_write+0x14/0x20 [ 473.074424] ? kvm_set_memory_region+0x50/0x50 [ 473.078988] ? graph_lock+0x170/0x170 [ 473.082774] ? get_futex_key+0x1e90/0x1e90 [ 473.086994] ? __lock_acquire+0x7f5/0x5130 [ 473.091218] ? perf_trace_lock+0xd6/0x900 [ 473.095354] ? zap_class+0x720/0x720 [ 473.099053] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 473.104228] ? do_futex+0x249/0x27d0 [ 473.107927] ? graph_lock+0x170/0x170 [ 473.111718] ? exit_robust_list+0x290/0x290 [ 473.116031] ? find_held_lock+0x36/0x1c0 [ 473.120083] ? lock_downgrade+0x8e0/0x8e0 [ 473.124213] ? lock_downgrade+0x8e0/0x8e0 [ 473.128349] ? rcu_is_watching+0x85/0x140 [ 473.132481] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 473.137665] ? __fget+0x40c/0x650 [ 473.141110] ? expand_files.part.8+0x9a0/0x9a0 [ 473.145676] ? lock_downgrade+0x8e0/0x8e0 [ 473.149809] ? lock_release+0xa10/0xa10 [ 473.153774] ? kvm_set_memory_region+0x50/0x50 [ 473.158339] do_vfs_ioctl+0x1cf/0x1650 [ 473.162212] ? ioctl_preallocate+0x2e0/0x2e0 [ 473.166604] ? fget_raw+0x20/0x20 [ 473.170048] ? security_file_mprotect+0x9b/0xd0 [ 473.174702] ? SyS_futex+0x3a4/0x56d [ 473.178399] ? do_futex+0x27d0/0x27d0 [ 473.182183] ? security_file_ioctl+0x9b/0xd0 [ 473.186577] ksys_ioctl+0xa9/0xd0 [ 473.190022] SyS_ioctl+0x24/0x30 [ 473.193372] ? ksys_ioctl+0xd0/0xd0 [ 473.196983] do_syscall_64+0x29e/0x9d0 [ 473.200854] ? vmalloc_sync_all+0x30/0x30 [ 473.204987] ? _raw_spin_unlock_irq+0x27/0x70 [ 473.209467] ? finish_task_switch+0x1ca/0x820 [ 473.213946] ? syscall_return_slowpath+0x5c0/0x5c0 [ 473.218862] ? syscall_return_slowpath+0x30f/0x5c0 [ 473.223779] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 473.229131] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 473.233965] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 473.239139] RIP: 0033:0x4552d9 [ 473.242315] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2018/04/06 06:13:09 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x80000) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:13:09 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x8, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:09 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xf, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:09 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x84ffffff00000000]}) 2018/04/06 06:13:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x80fe, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:13:09 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x4000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:13:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x8a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x20000000004e20, @broadcast=0xffffffff}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x7, 0x400000) ioctl$TIOCNOTTY(r1, 0x5422) accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000440)=0xffffffffffffff65) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000340)=""/131) r3 = socket(0x2, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x0, @broadcast=0xffffffff}}, 0x0, 0x3, 0x0, "6164f5a787fb87b7fc664353e67f4f130350aae0d6d72a7a6b89c5930bd12c0058c4d94cafe792921af85a3b478181558f922ffb851e2f82591dfe02718138e0a07140ae09307d2603bc7522b40bb96a"}, 0xd8) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000010000100000c0900fcff4d00040e05a5", 0x58}], 0x1) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000480)={0x53, 0x6, 0x2b3b, {0x9, 0x3}, {0xffff, 0x1}, @const={0x100, {0x2, 0xffffffff, 0x6, 0x4}}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x2, 0x5, 0x3}) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 2018/04/06 06:13:09 executing program 7: r0 = socket$inet_smc(0x2b, 0x1, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) shutdown(r0, 0x2) recvmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000001740)=@nfc, 0x80, &(0x7f0000002880), 0x0, &(0x7f00000028c0)=""/12, 0xc}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/sockcreate\x00') ioctl$TIOCCONS(r1, 0x541d) [ 473.250008] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 473.257262] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 473.264512] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 473.271764] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 473.279020] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:13:09 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x88ffffff]}) 2018/04/06 06:13:09 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:09 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0xffffca88, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:09 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:13:09 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8a7f2804da18af8d) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x4, 0x401, 0x3f, 0x3e5a, 0x2}, &(0x7f0000000340)=0x14) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)={r2, 0xcd, "dbae6fa19dced257f3af374e393eaccbb65b8e9fe9ba27ab7b74cc88b6638af0a3439dd51e47614420a747bbf7f82d9460ea326dbe99e84017e5e93e340578e5dd4a9e50d357ac1f0947a273e31c82471c7e63247a5e96d011ba4bbec2fe1f86b0e9b3247e02f4cf3739116c1161042051452fbf5fc3d0516503b1f3c802863e1d4b01ad518abfaa2b40fc45d5d5475329792bd1a8b413a2a61a835353c53137b92dcee351f54f1a2d6e481fb2772fafbe40bec4ec384d3b63dc530f78ea09d7cb608684200534dd24a6a87ed0"}, &(0x7f0000000480)=0xd5) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0xfffffffffffffff8}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={r3, 0x4e, "085da15fabb6c8b312e25d247176b9b3c8a8b7201e60792128d75023d7dd554c6649f1b27e225b0a7c931ac5120b0282b4666288bafa9cf9fb4b638e71a7a208a52d7b61946f18e41e476a816121"}, &(0x7f00000002c0)=0x56) chown(&(0x7f00000000c0)='./file0\x00', 0x0, r1) 2018/04/06 06:13:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x6805000000000000, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:13:09 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) r0 = socket(0x1b, 0xf, 0x3) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x20000, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) socketpair$inet(0x2, 0x1, 0x58f, &(0x7f0000000100)) connect$l2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @broadcast=0xffffffff}, 0x0, 0x0, 0x1, 0x2}}, 0x26) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x3, 0x1, 0x3, 0x1ff0000000}}) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x3, 0x4, 0x4, {0xa, 0x4e20, 0x7fff, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, 0x32) [ 473.527676] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 473.539525] syz-executor6 cpuset=syz6 mems_allowed=0 [ 473.544757] CPU: 0 PID: 28083 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 473.551612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.560986] Call Trace: [ 473.563601] dump_stack+0x1b9/0x29f [ 473.567254] ? arch_local_irq_restore+0x52/0x52 [ 473.571950] ? retint_kernel+0x10/0x10 [ 473.575865] warn_alloc.cold.119+0xb2/0x1b8 [ 473.580197] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 473.585056] ? finish_task_switch+0x1ca/0x820 [ 473.589572] ? lock_repin_lock+0x410/0x410 [ 473.593823] __vmalloc_node_range+0x45e/0x720 [ 473.598324] ? graph_lock+0x170/0x170 [ 473.602130] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 473.607056] __vmalloc_node_flags_caller+0x50/0x60 [ 473.611983] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 473.616827] kvmalloc_node+0xde/0x100 [ 473.620630] kvm_arch_create_memslot+0xa3/0x4e0 [ 473.625315] __kvm_set_memory_region+0x1d1b/0x2e50 [ 473.630263] ? kvm_vcpu_block+0x1050/0x1050 [ 473.634587] ? zap_class+0x720/0x720 [ 473.638307] ? check_same_owner+0x320/0x320 [ 473.642635] ? rcu_note_context_switch+0x710/0x710 [ 473.647585] ? lock_acquire+0x1dc/0x520 [ 473.651562] ? graph_lock+0x170/0x170 [ 473.655355] ? __might_sleep+0x95/0x190 [ 473.659335] ? refill_pi_state_cache.part.7+0x300/0x300 [ 473.664706] ? find_held_lock+0x36/0x1c0 [ 473.668777] ? lock_downgrade+0x8e0/0x8e0 [ 473.672969] kvm_set_memory_region+0x2e/0x50 [ 473.677376] kvm_vm_ioctl+0x668/0x1d90 [ 473.681259] ? perf_tp_event+0xc30/0xc30 [ 473.685321] ? kvm_set_memory_region+0x50/0x50 [ 473.689900] ? memset+0x31/0x40 [ 473.693181] ? perf_trace_lock+0x495/0x900 [ 473.697423] ? zap_class+0x720/0x720 [ 473.701136] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 473.706327] ? native_flush_tlb_others+0x690/0x690 [ 473.711254] ? graph_lock+0x170/0x170 [ 473.715052] ? check_same_owner+0x320/0x320 [ 473.719382] ? exit_robust_list+0x290/0x290 [ 473.723703] ? find_held_lock+0x36/0x1c0 [ 473.727775] ? lock_downgrade+0x8e0/0x8e0 [ 473.731926] ? rcu_is_watching+0x85/0x140 [ 473.736078] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 473.741276] ? __fget+0x40c/0x650 [ 473.744734] ? expand_files.part.8+0x9a0/0x9a0 [ 473.749305] ? lock_downgrade+0x8e0/0x8e0 [ 473.753452] ? __split_vma+0x5ac/0x7f0 [ 473.757338] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 473.762869] ? vma_set_page_prot+0x183/0x260 [ 473.767275] ? kvm_set_memory_region+0x50/0x50 [ 473.771853] do_vfs_ioctl+0x1cf/0x1650 [ 473.775743] ? ioctl_preallocate+0x2e0/0x2e0 [ 473.780146] ? fget_raw+0x20/0x20 [ 473.783611] ? SyS_futex+0x3a4/0x56d [ 473.787328] ? do_futex+0x27d0/0x27d0 [ 473.791123] ? security_file_ioctl+0x9b/0xd0 [ 473.795532] ksys_ioctl+0xa9/0xd0 [ 473.798986] SyS_ioctl+0x24/0x30 [ 473.802349] ? ksys_ioctl+0xd0/0xd0 [ 473.805969] do_syscall_64+0x29e/0x9d0 [ 473.809851] ? vmalloc_sync_all+0x30/0x30 [ 473.813994] ? _raw_spin_unlock_irq+0x27/0x70 [ 473.818487] ? finish_task_switch+0x1ca/0x820 [ 473.822981] ? syscall_return_slowpath+0x5c0/0x5c0 [ 473.827910] ? syscall_return_slowpath+0x30f/0x5c0 [ 473.832841] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 473.838206] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 473.843059] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 473.848239] RIP: 0033:0x4552d9 [ 473.851417] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.859124] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 473.866385] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 473.873653] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 473.880913] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 473.888175] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 473.895733] warn_alloc_show_mem: 1 callbacks suppressed [ 473.895738] Mem-Info: [ 473.903647] active_anon:132399 inactive_anon:75 isolated_anon:0 [ 473.903647] active_file:22877 inactive_file:12086 isolated_file:0 [ 473.903647] unevictable:0 dirty:107 writeback:0 unstable:0 [ 473.903647] slab_reclaimable:12437 slab_unreclaimable:101410 [ 473.903647] mapped:74006 shmem:86 pagetables:1186 bounce:0 [ 473.903647] free:1250995 free_pcp:385 free_cma:0 [ 473.937544] Node 0 active_anon:531676kB inactive_anon:300kB active_file:91508kB inactive_file:48344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:296024kB dirty:428kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 391168kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 473.965733] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 473.992088] lowmem_reserve[]: 0 2833 6338 6338 [ 473.996776] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:220kB free_cma:0kB [ 474.024557] lowmem_reserve[]: 0 0 3505 3505 2018/04/06 06:13:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000001580)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000abf000)={0x14, 0x22, 0x109, 0x0, 0x0, {0x5}}, 0x14}, 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000000080)=""/59) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="25fb4724554c761f2db8d271a2d39df8000000002dd5a3f1d76cbcf7e68ad536023db6aa5886ad9144d1d3eff05d8d287e638f7e57c06e253015d14b398fcf6d89e37a36846e4738ff9faa716fe8460f0830e2d00038a733e34cd53ce2c9ac4b", @ANYRES16=r3, @ANYBLOB="02032abd7000ffdbdf2501000000080003003f000000040005000400050008000400030000000800030000000000080004000200000004000500080004000100000004000500"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 2018/04/06 06:13:10 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x8000, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)="68757765746c6a7d3e974ca3e5db866e7400", 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000000c0)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) syz_open_procfs(r4, &(0x7f0000000100)='fdinfo\x00') write$cgroup_type(r3, &(0x7f0000000000)='Ehreaded\x00', 0xfffffffffffffc40) 2018/04/06 06:13:10 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xf0ffffff00000000, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:10 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x88480000]}) [ 474.028988] Node 0 Normal free:2083440kB min:37284kB low:46604kB high:55924kB active_anon:531372kB inactive_anon:300kB active_file:91508kB inactive_file:48344kB unevictable:0kB writepending:428kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5664kB pagetables:4448kB bounce:0kB free_pcp:848kB local_pcp:172kB free_cma:0kB [ 474.058897] lowmem_reserve[]: 0 0 0 0 [ 474.062822] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 474.076676] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 474.092743] Node 0 Normal: 215*4kB (UME) 1090*8kB (UME) 1423*16kB (UME) 890*32kB (UME) 497*64kB (UME) 252*128kB (UME) 115*256kB (UME) 73*512kB (UM) 35*1024kB (UM) 36*2048kB (UME) 436*4096kB (UM) = 2087132kB [ 474.111633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 474.120287] 35049 total pagecache pages [ 474.124324] 0 pages in swap cache [ 474.127843] Swap cache stats: add 0, delete 0, find 0/0 [ 474.133253] Free swap = 0kB [ 474.136343] Total swap = 0kB [ 474.139397] 1965969 pages RAM [ 474.142563] 0 pages HighMem/MovableOnly [ 474.146580] 338524 pages reserved [ 474.245085] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 474.257090] syz-executor6 cpuset=syz6 mems_allowed=0 [ 474.262249] CPU: 0 PID: 28123 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 474.269088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.278423] Call Trace: [ 474.280998] dump_stack+0x1b9/0x29f [ 474.284640] ? arch_local_irq_restore+0x52/0x52 [ 474.289297] ? retint_kernel+0x10/0x10 [ 474.293170] warn_alloc.cold.119+0xb2/0x1b8 [ 474.297478] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 474.302314] ? finish_task_switch+0x1ca/0x820 [ 474.306818] ? lock_repin_lock+0x410/0x410 [ 474.311056] __vmalloc_node_range+0x45e/0x720 [ 474.315548] ? graph_lock+0x170/0x170 [ 474.319336] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 474.324160] __vmalloc_node_flags_caller+0x50/0x60 [ 474.329074] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 474.333914] kvmalloc_node+0xde/0x100 [ 474.337707] kvm_arch_create_memslot+0xa3/0x4e0 [ 474.342365] __kvm_set_memory_region+0x1d1b/0x2e50 [ 474.347286] ? kvm_vcpu_block+0x1050/0x1050 [ 474.351593] ? zap_class+0x720/0x720 [ 474.355290] ? check_same_owner+0x320/0x320 [ 474.359594] ? rcu_note_context_switch+0x710/0x710 [ 474.364507] ? lock_acquire+0x1dc/0x520 [ 474.368475] ? graph_lock+0x170/0x170 [ 474.372264] ? __might_sleep+0x95/0x190 [ 474.376225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 474.381743] ? futex_wait_queue_me+0x559/0x820 [ 474.386326] ? refill_pi_state_cache.part.7+0x300/0x300 [ 474.391677] ? find_held_lock+0x36/0x1c0 [ 474.395727] ? lock_downgrade+0x8e0/0x8e0 [ 474.399887] kvm_set_memory_region+0x2e/0x50 [ 474.404279] kvm_vm_ioctl+0x668/0x1d90 [ 474.408147] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 474.413229] ? futex_wake+0x2f6/0x750 [ 474.417027] ? kvm_set_memory_region+0x50/0x50 [ 474.421599] ? get_futex_key+0x1e90/0x1e90 [ 474.425824] ? sock_destroy_inode+0x56/0x70 [ 474.430133] ? perf_trace_lock+0xd6/0x900 [ 474.434269] ? zap_class+0x720/0x720 [ 474.437968] ? destroy_inode+0x156/0x1f0 [ 474.442021] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 474.447198] ? do_futex+0x249/0x27d0 [ 474.450896] ? graph_lock+0x170/0x170 [ 474.454680] ? evict+0x5cd/0x960 [ 474.458040] ? exit_robust_list+0x290/0x290 [ 474.462351] ? find_held_lock+0x36/0x1c0 [ 474.466400] ? lock_downgrade+0x8e0/0x8e0 [ 474.470995] ? rcu_is_watching+0x85/0x140 [ 474.475132] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 474.480311] ? __fget+0x40c/0x650 [ 474.483752] ? expand_files.part.8+0x9a0/0x9a0 [ 474.488317] ? inet6_net_init+0x870/0x870 [ 474.492450] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 474.497633] ? kvm_set_memory_region+0x50/0x50 [ 474.502202] do_vfs_ioctl+0x1cf/0x1650 [ 474.506075] ? __sock_create+0x11e/0x920 [ 474.510127] ? ioctl_preallocate+0x2e0/0x2e0 [ 474.514521] ? fget_raw+0x20/0x20 [ 474.517963] ? SyS_futex+0x3a4/0x56d [ 474.521662] ? do_futex+0x27d0/0x27d0 [ 474.525451] ? security_file_ioctl+0x9b/0xd0 [ 474.529848] ksys_ioctl+0xa9/0xd0 [ 474.533286] SyS_ioctl+0x24/0x30 [ 474.536637] ? ksys_ioctl+0xd0/0xd0 [ 474.540248] do_syscall_64+0x29e/0x9d0 [ 474.544119] ? vmalloc_sync_all+0x30/0x30 [ 474.548253] ? kasan_check_write+0x14/0x20 [ 474.552472] ? syscall_return_slowpath+0x5c0/0x5c0 [ 474.557387] ? syscall_return_slowpath+0x30f/0x5c0 [ 474.562307] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 474.567657] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 474.572490] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 474.577662] RIP: 0033:0x4552d9 [ 474.580833] RSP: 002b:00007f735423ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.588526] RAX: ffffffffffffffda RBX: 00007f735423f6d4 RCX: 00000000004552d9 2018/04/06 06:13:11 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0xe80, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x9c05, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:13:11 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x10, 0x0, 0x6}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="c16a00012e260f01ca0f300f350f20e06635000100000f22e066b8ef0000000f23c80f21f866350c00e0000f23f80f21976766c7442400a56c05676766c7442402af3f00006766c744240600000000670f011424b8f1008ee80faeaf0100", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x20, 0x0, 0x2, 0x7f, 0x0, 0x215, 0x800, 0x0, 0x7, 0x8, 0x0, 0xeda, 0x3c, 0x5, 0x0, 0xf2], 0x0, 0x200}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x10000, 0x0, 0x4000, 0x2000, &(0x7f0000014000/0x2000)=nil}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000140)={[0x7000, 0x2000, 0xf000], 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80000, 0x0) getpeername$ipx(r3, &(0x7f0000000380), &(0x7f00000003c0)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/06 06:13:11 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0xfeffffff]}) 2018/04/06 06:13:11 executing program 1: ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x7) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, &(0x7f0000000100)=0x80, 0xd4b7e047a088367c) connect$rds(r2, &(0x7f0000000180)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:13:11 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x80ffff00000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:13:11 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000100)=0x0) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x8000) io_submit(r1, 0x2000000000000320, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x9, r2, &(0x7f0000000140)="1a109a66a6961ada4088e93f311c1a6828af2380e2259b878c0e5be4ba0fdd15a18fadc125cb7c8aae8395d07f00e320bc48cc69961f4e7ce4181afa765809491288e4e9b984e72e209ffabe6c60f1c22c25e581a026698f6ac027acc88ff561e7481eca9adfa3647b4452aa398dc011392a5a298a51addfd1a00c9c1784d464608b9bf9f85ea07169db6e3787e7fc4e6d4b3844ad4a14c6d946da8cc9a0e8f2b2ec198fe6e98b22", 0x0, 0x3, 0x0, 0x1, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xf, 0x79b, r2, &(0x7f0000000240)="33fc06f6f62982a522366e6d8b898de01ba80cab8ec648bf8c320301a6c48195d41398df744477f047e7c3e2c71ede71da7c936c8d13dbdbdd4e3494edb96bc852946e57cc91276b359696f7423259544a45cccc1fd0f25c19787de2bc390fd554560e091af18435c04463f04a3921867d56f11a70be65c0523bc10d5da21aa3474010ae3ffb7f3c3a9cbb558cf9cca7fb5735b4247edbaed0a846e42f4c88942bafe835e1e6b64163b0275fe508ee50a6b361960485fdcad12913ae2acb72d249a83a329fbc494998542e548a1dd0241980cd5207ccb621fae4a1483e8b2e0de06fff88c3b40f62", 0x0, 0x7fff, 0x0, 0x1, r0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xf, 0x4, r0, &(0x7f00000005c0)="b2b04f7cd613eaf40a5d5de817b55f7f378a034e356df0a2034f3b3693ee1fb88dcf63e38cb0f0e6923552af64ed7a0a5f636dc6bb0ebe2a237076b666b7e5956619d87de426a191b50f231f2eb01bc71434510e0cbf5c692c7961cbd00422321d02f74b8f40b8a6c6abf974bf75a0bf125d4038f90eda63d627b3f4bdf5e3d0294fe05b16e864e9bf3b37b194543409b2196e335cf04f6055080afbc91243ae45b8b4e2c9d6feab7d90f504576b34bfcd5c0d5d8e47dd590efc68afb3a0f3e9a2f89fffad0b75bd39b0f4b086608fd9a7791a97c2180942026ce31d2e938824c1a9c25075209b75dc2b98911672069c5fe166bca17baa8266e6fec0b36caac6dbfbaba9da3cbcf11c4543c9339af0314c3e79f064c8c5d60d99444673393ec81534c6f4f7e3aa06a113cf7a3e4839f43b59d93ffef2f13728b08adf1bf119019e66aecb9632535cc2b76f579f99b3eb8b5d435a22065d0ffe4098b1ff4a592773a2fb99cd99f15f6ad23ee360a518bb1192476f3cd7287c898ec9d7e699f2332ca0701b14d75c0ef7c4e11fbd0f895127f6e107c64b7efbe0026e9106df9900d6d1ea60907569cc4211421ad11e6952b75faa39178a1b629cc7ca178ad4c126d93e1b731de1829e676c9f8352fae00398e1f31f3ce7a83012c6a9c05882b7c48dccf7f64593c0502732b86bb25942705aa3907891d8d1c3d4c13487e2bd2568326466648672a5be3191b27093fd14e4f97ab7f4f27290eb45a66213ee4c1abd84530b30115fad671f4b24725454a93d51d8e9d5564265ad15e27c61af3a9b7e427326f089f5bedd3d89c2841f065edd2660439c1a3c1654f142d6436d8b0a659bdbda1a6e0dfa676c5c28af675ec990b176f13007be3cf4afa608d2d27f5ea58a7575d31f2cbebab1dc3e2ec560a3519699662b2ad301807f6d7a47d6a2a4f06bff73c52e68dd330a04219d4221a6ae3528e0f61feddf9546a4dc121ff4508654afab397ad031e10d953c898c2a94d4831a771581f74459c61b605c7836cb0953783c0a07a1d1686c4a773e148c8c69defcff54e794f31558312e827ef50887290f85594f90844e54cac68bf2177cf3c43fc2f5ab63cbb3ba9940651086e6b6dc997a65006730ca9b3a57e9747e26c2369feace481aa1b0d402695206dc786ae713285ef6f2b742d9ad7493d4b6d6fb5fa830c76c337824c43b4976f1c9cc3ad8d2091dd8d72e339a340c0ade5dbc56a415cb3fe334e30800b1a29ce9a527dec5776be913b2c4dd077e20471b0c7399ff63b474c61163e66b3bbb591fde6142b74564fc5e7e2fc437efc41ae18a8d304eae5a96cc8b77db74a3b521e79b481a5130c1ad90104c4a6884883db837af61199c1ee710a24cbb70d76d22237e5dc074f4358becdd063c1da73b1e6c0288f300347f0356869cb16bdbdb7e1eae8d623bc85d90ca506136269a4bffa0e747c0e7d3489de46af221161ee15060b43d5631e0b2dfd62e02331f5a1c9360f0897e98d0b8b74da998429145fbb06b2b42b48e2d953062086ac9e38c6e1bac484dd30e778cba37c8b68c040d355651f91f085fc50db73911f1a9b676abdd7305adc6b590c7fc8f69c274dafd48fa57f81b41aab045dc9e909c03532424f7f093e379b7ae4dc22b795fd9c084e0d081b68ab60d25543e6a84eea16f2ec0da5f7ebb88a2fbe17f3975d321070e3232a5ecf0290b28c9c9a3c7f2e4389c531c80b02cf9914361c96bcc05fcf070575abd16dc3ad68f6f3d13ce5dfd97ae053282c7d0f459db20605fed5e86a998ef12c011f3f3f373faae6b33baa7b58d781d9fc55dc38a1bbf7d7da9e6a8db03ad6af4f06e9c6f920dc36d154c00b652a86e7bf488c170a9f534d71b87c84e80b695c92bfadcf7d4dbc0581e12058d0983103cf79521b08e827dc4561dc3fa110fed11b5cf77e293d1db4bbc170a57ca98276dceece44821bab81b05c4ac43f7dbbb635abc8a5f30f5c764c0345eaf31e7bc797dbb51e0957f8df740417005bd772ad369fdca8ddf0d44b4e3bc39873418b48758b1e95f3dedc071e3a9b2dcb9a4b1a42cb8945aac18ba5668a86e56131811906243953ed768acfe87cff295da393cc2a78ff171fc2c747b30aa0d7a11b8726731afdc9d8b04354e77b5c83852072511e409883abdd87edf8eb195756eb2d19c4e4141a24e09c639e20f2e4a6bae60b9e7dfaef34cc9508ecaf34f2d634165a2a35188388d791e66b9d1bcd72474cbedd9b4fcb5a635e111de57a470899e2397511efa1177d83146f5d07de16987a2bfca5ad1ea0e1e4cce268d445e4611afd55875b64b2b31b5463ddd2d29391bf9dcab241ec4fb0191e61d39e406608a3bacecd9545b18e74371fc02c5a3aae152e8bb32497f76c5e296620925fd74d92472213c0b42199a450c6b70c046bc8b69aea76011af6cf427d1638d5f29889617b752f26e2421a8a82419dc836b9e0e6f0aaba4ed4583b4063d9a8a2317bad129cfa62146a0bfbf57eedb0a6a925ae13928f1e8bc02f1c96fba3d1824f6f92d66a3cc6cac831b3c11f3b2b0b8a4a8a158be8c784d6a6b17ad8d2bc747cb9d882e11e6e170f15416351c93c6e3bf84befe7b7edd2817a8cb8decc3b7686add57f792bdce0dd8d50694ce6f64013c609c5f348b44126e0b254365019d860a598626671c8de4edaa8b9cf5b4cf68480bb1059f44f5e44858ee9ecb923d947fd1a797ed646c94c8b92fd9ac6ee68865bdf55367a7c9d02936d84062840290cf27ba1e4a7ddde2d701f48a38b32504360c61ead942981e9f13f5e5012475c78bdfe4f8389a8ba9336a250f2d9610d0560444fa7173dc529e1ae90c6859788cb5525b87edc5fd8483c511ab477e0b8fe18ee4a592cd70ae26ad03743baa14919faa0f6991dadb48faefb23b5263f0f5de9aaad1935c61c6599cd6937a9c2006ccbdb931ba0121b624d21716345d1e5c2204da4ad6a0d7526d1dc99166c6a041f478f6252f2b5b7bb31bde1a04a18befba720269db9c4608cab054e6238005da70ef3238ad75cce76077d15e267430e7f1b9ba400d46ca8131b6fa1966e803fccc897053a9f1cc2d72c27654589c4e15b8f49d9570a161223bfd9b41b70312571204e08da485a2da4702681f363201e3f956c97ae9a44ec7f1f64dc2b1c6f8834a47bc36434ff9e34ad0c93b23de519e00a6d8c0a45cb950a434fb0c2d667a1631e03ff0e74bc8386a865d5a096b1f1b3697a543431f0e7cfb48a7a70d50a30804bab357c7cfd9b3c8c1f210dfab6b5b4e2a14bd10f2ec8ab5ef16839fdfc3197d75b2612386ca85e70144fbad57208ca5da2dc3dd5eef673ad8d954b1be813516f42eaaf0f8e778112c75b86d7031339cd6b11f1718e85d6d7c8a98581dc682e8e7d9a6364849c92407c24898d339aa821147f0c525c3375278245f89edbcfb857ae8cb26efb7bcd647ec16ac2dccc3808a88ecd28719e3d63e4f63180f05b9f310eb30533faf3af841916ab11c054fb8ae631418e99710e66c46cd20d3b90c3d807c309677893b717c924377802e408efc4d5c7b3934413c386f94ce6072d170a83ec62511f18109d40ea77a14eee0d42634a698b01bf26f42c6c0de0bfbee42f1b6efc12002e67eefd2e05b3354da1565a58d995fee79c6bea7f4345472f63b32234c589b9c1ff5daff4419afb0191ec17024d500d8699fd10ead5425e3d5df01621a88dae3722d4b8421d3bc4e62c4fb9ac07861a60e2615a0b0628101d0ddab3f43faf260e24c1fb7dcfc4813a51d93b96c03970ea265fa9b3ce4b9da06673b4202f1e6dce70a6a8e59bda84adf005fc4bf6cfe4124daa0d952dd4d6ec13b77b0b8182d02cdffb4585305a4ffbf2bf679c7cc99477aea4c27b4ebb7f6753eeae6118ae5d1f888b7cb6d4250bbaac6f7c08a7761f8baf26b95f92c7b7cfacaff50f64d4766a603b28dc8311c762bc50d3eaf6887332c7fa515c6ab8d6c00e4b4b4d82c3a8b63f5d761fdf2e0eef5440c6b9f9410e8f3dcccb283a653b79f22d19ce9dc9243384a8ff9cad286f3739d14f2c7a911eb4154f0e62caa94c5e1fa5db2576f9e3842effd2c171973411a6c8545a53a9757dfbad4f3927177c5521d7752619051146fcf19257f5bcddd50faf1684f36e67d15d263a356bcbf62901bcff5dcf2ce1cf6a4aaf6499305467fe194ff2061e14e16bfe4bf3f173edd61d32e0ab5b7537652504f5846c20e800a97ed97c7d0008b7049894cb071cc26e8a7049caf0f16626b82ac94c0872461798685daab374d1c2370ad17555afe4c4124aec2e7792e1dcf02de824226f83efd8552ec237d672a3de55316a5d836d6693bb13d92ee17c12c6e100fc6e2b0dc24ae47c9cdc2c44b71cf3ba482d1aced2c75c03d01171d4c59706f0f2903d594469c6f2d172210d47f70ba24c72b4457641cdbda18d99b93f5156297614199759a082e044a088a91a785b6bd0b231562840b227406c63d7dd6cf8db54ec5c552dbb7c205ebc17ecadb2d770d5ad4cec418821d3ec0ebd20672efd1a8bc066cd980528bf3cbddca37bbc7b2574a6f77da268043af87fb45537b62430592fc65a0a25c6def82175e629d67f100bbc8c4de5eb6d73191b930e3d88f016649f98471437b6171a0461eb8c8661de9797a612bc9b4c988cc921335268efe06d5fda5dd4ca1e96e2ee5ba53f86fdb305f9094ba7a74350a0551803429f13da61b4ad7f6025fb4790a2b3591ab7896c4fa7dd9251b0f955954b393bcd3299aa8e7d38d56b423364bb46310d83ec506683ba480d05e45ec667b5e89b7d832fe8255e4a26f1d715b8a429f0dc7139a2a2942eead9a594ebc07318593ed867fe7b3b0eb120aa69077c10916ae305aa381115ca27c6574ad54ace17d04b6146a2741dfe0c842612c74e5e7d2d7135a62d6fd5251cc4dd3de04e36269160d26b8f3ca70beb09146abc5e9e91e53240e5055d6760ac1b7be1aaecf7fd32ccd31b68d715c89a514d9501e2767783746b53b325822085c158d13713e636e63155c725c677d7ec0e10c5db4e9e9ade02af50a4d3e1d13db06b17aab9f25825c0da448c822f36d119f52680cfcdb05dcf07eb33eee18e770c09e07fc6489208ea013580d574c1fdf52aba1e94190a2d0b72d8041f003e61fce7b62e51dc4e381dfdb1d48488e34e37d55b1320fe3e389c69c2b49a45a8cbb0babcfafed785960393623aaf10bf3cbd248a1188acaf5d005bdc22469845cd93e7f67cd79d9276308a1c9b2ab143136c201e4db6ccff1528427ce8fef6d24372c5f3c078dbe8266cd29bdfa373fecc6665502e24febedfbbe93dd76feed8521349d6820ccb0279c29f49c05a49b3c5c9d6f801f9a90fd9e07faa8c3e7452b4dbe96f68edf133a7ea93586e3ef5f8fe1dc6719063c1b2ea51edd0fc9a7d6f458e762500d3be42e015c8d390fe03a82b47d631f692db783e4f975954883eab84c705529999eb60ce9b47f801987e89c59b43bff789caba8d95607314287d1ae4aa8077429b6d3a4d7f6452b8716eda8c46b6f65d114027f36794fb64ea7d923ee5ef18abb37616318b3b8dad264ee3282bd6b6048ba19aeeb0cb2cde8a46fe518e6e1defa6c3e5db2a42e586a0b3d11b38d61b5b282dce9ffa2cea731ee4f94019408ee4a57cb58a92ab72651e4d40f93549dbbc7492ccb4a7a6853e63d26ec8620b4120a14d57eda823d7a9026ea008fc7c4142a29e35f57f6cc76ad614618a1d04ac42d001795b4b37222eaa3c70d6daeea0bdc75b2ea4ed90c", 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x4, 0x5, r0, &(0x7f00000003c0)="5a37530face30f86eafc3a729711eee801e35016af0206a40c8fcc25c074510116ed529ff0b2d93c9044b2e7c7ac3ddc0a0ebd35c86398bf0592905606bb5e1263b4cfcc019369a52ac8af75e51b05f6965f8ddac217d84115ebc241c6fe86973d3d539666f6c9ea4c5ff220c568c4d2dba74ffe65bf2435c34e38c488cb1f8b0e0e15df2570486ef15ce02ff047d277665dc8dabf17efbf23321256463bfe2e3a541f455500caac708f1b3e244da840a38d04809d1245f230f1bfcfc1cc9dd40aa684984461e41582c43e0f2f928d03504667f8bf7f21c2937cdaa3b52530fcf26a1adb82011157c7ff39cdebf1989af719b777970743", 0x0, 0x377, 0x0, 0x1, r2}]) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000000000)='ramfs\x00', 0x0, &(0x7f00008a7000)) umount2(&(0x7f0000000040)='.', 0x4) umount2(&(0x7f0000000580)='.', 0x4) [ 474.595777] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 474.603033] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 474.610284] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 474.617537] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000001 2018/04/06 06:13:11 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x608, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:11 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x608]}) 2018/04/06 06:13:11 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:11 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) getegid() readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/200, 0xc8) 2018/04/06 06:13:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x3f00, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) [ 474.829398] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 474.841257] syz-executor6 cpuset=syz6 mems_allowed=0 [ 474.846523] CPU: 1 PID: 28149 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 474.853365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.862722] Call Trace: [ 474.865321] dump_stack+0x1b9/0x29f [ 474.868956] ? arch_local_irq_restore+0x52/0x52 [ 474.873635] ? kasan_check_read+0x11/0x20 [ 474.877799] warn_alloc.cold.119+0xb2/0x1b8 [ 474.882136] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 474.886986] ? trace_hardirqs_on+0xd/0x10 [ 474.891148] ? _raw_spin_unlock_irq+0x27/0x70 [ 474.895653] ? finish_task_switch+0x1ca/0x820 [ 474.900168] ? lock_repin_lock+0x410/0x410 [ 474.904424] __vmalloc_node_range+0x45e/0x720 [ 474.908936] ? graph_lock+0x170/0x170 [ 474.912759] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 474.917619] __vmalloc_node_flags_caller+0x50/0x60 [ 474.922554] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 474.927389] kvmalloc_node+0xde/0x100 [ 474.931177] kvm_arch_create_memslot+0xa3/0x4e0 [ 474.935842] __kvm_set_memory_region+0x1d1b/0x2e50 [ 474.940766] ? kvm_vcpu_block+0x1050/0x1050 [ 474.945077] ? zap_class+0x720/0x720 [ 474.948781] ? check_same_owner+0x320/0x320 [ 474.953093] ? rcu_note_context_switch+0x710/0x710 [ 474.958011] ? lock_acquire+0x1dc/0x520 [ 474.961975] ? graph_lock+0x170/0x170 [ 474.965760] ? __might_sleep+0x95/0x190 [ 474.969721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 474.975243] ? futex_wait_queue_me+0x559/0x820 [ 474.979809] ? refill_pi_state_cache.part.7+0x300/0x300 [ 474.985162] ? find_held_lock+0x36/0x1c0 [ 474.989214] ? lock_downgrade+0x8e0/0x8e0 [ 474.993366] kvm_set_memory_region+0x2e/0x50 [ 474.997764] kvm_vm_ioctl+0x668/0x1d90 [ 475.001641] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 475.006729] ? futex_wake+0x2f6/0x750 [ 475.010520] ? kvm_set_memory_region+0x50/0x50 [ 475.015092] ? get_futex_key+0x1e90/0x1e90 [ 475.019312] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 475.024314] ? perf_trace_lock+0xd6/0x900 [ 475.028449] ? zap_class+0x720/0x720 [ 475.032147] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 475.037320] ? do_futex+0x249/0x27d0 [ 475.041026] ? native_flush_tlb_others+0x690/0x690 [ 475.045940] ? graph_lock+0x170/0x170 [ 475.049725] ? check_same_owner+0x320/0x320 [ 475.054037] ? exit_robust_list+0x290/0x290 [ 475.058346] ? find_held_lock+0x36/0x1c0 [ 475.062397] ? lock_downgrade+0x8e0/0x8e0 [ 475.066532] ? rcu_is_watching+0x85/0x140 [ 475.070668] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 475.075849] ? __fget+0x40c/0x650 [ 475.079293] ? expand_files.part.8+0x9a0/0x9a0 [ 475.083856] ? lock_downgrade+0x8e0/0x8e0 [ 475.087988] ? __split_vma+0x5ac/0x7f0 [ 475.091876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 475.097404] ? vma_set_page_prot+0x183/0x260 [ 475.101803] ? kvm_set_memory_region+0x50/0x50 [ 475.106373] do_vfs_ioctl+0x1cf/0x1650 [ 475.110251] ? ioctl_preallocate+0x2e0/0x2e0 [ 475.114644] ? fget_raw+0x20/0x20 [ 475.118093] ? SyS_futex+0x3a4/0x56d [ 475.121793] ? do_futex+0x27d0/0x27d0 [ 475.125582] ? security_file_ioctl+0x9b/0xd0 [ 475.129979] ksys_ioctl+0xa9/0xd0 [ 475.133416] SyS_ioctl+0x24/0x30 [ 475.136765] ? ksys_ioctl+0xd0/0xd0 [ 475.140378] do_syscall_64+0x29e/0x9d0 [ 475.144247] ? vmalloc_sync_all+0x30/0x30 [ 475.148381] ? _raw_spin_unlock_irq+0x27/0x70 [ 475.152862] ? finish_task_switch+0x1ca/0x820 [ 475.157341] ? syscall_return_slowpath+0x5c0/0x5c0 [ 475.162257] ? syscall_return_slowpath+0x30f/0x5c0 [ 475.167177] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 475.172528] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 475.177359] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 475.182535] RIP: 0033:0x4552d9 [ 475.185706] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.193400] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 475.200656] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 475.207913] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 475.215165] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 475.222417] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 475.229901] warn_alloc_show_mem: 1 callbacks suppressed [ 475.229909] Mem-Info: [ 475.231125] unregister_netdevice: waiting for lo to become free. Usage count = 3 [ 475.235341] active_anon:131295 inactive_anon:76 isolated_anon:0 [ 475.235341] active_file:22877 inactive_file:12106 isolated_file:0 [ 475.235341] unevictable:0 dirty:127 writeback:0 unstable:0 [ 475.235341] slab_reclaimable:12440 slab_unreclaimable:101732 [ 475.235341] mapped:73939 shmem:86 pagetables:1034 bounce:0 [ 475.235341] free:1251931 free_pcp:513 free_cma:0 [ 475.235379] Node 0 active_anon:525180kB inactive_anon:304kB active_file:91508kB inactive_file:48424kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295756kB dirty:508kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 393216kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 475.307623] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 475.333811] lowmem_reserve[]: 0 2833 6338 6338 [ 475.338471] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:704kB free_cma:0kB [ 475.366257] lowmem_reserve[]: 0 0 3505 3505 [ 475.370652] Node 0 Normal free:2088548kB min:37284kB low:46604kB high:55924kB active_anon:525280kB inactive_anon:304kB active_file:91508kB inactive_file:48424kB unevictable:0kB writepending:508kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5504kB pagetables:4284kB bounce:0kB free_pcp:1128kB local_pcp:508kB free_cma:0kB [ 475.400574] lowmem_reserve[]: 0 0 0 0 [ 475.404442] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 475.418163] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 475.434101] Node 0 Normal: 195*4kB (UME) 1187*8kB (UME) 1481*16kB (UME) 894*32kB (UME) 497*64kB (UME) 230*128kB (UME) 115*256kB (UME) 73*512kB (UM) 35*1024kB (UM) 36*2048kB (UME) 436*4096kB (UM) = 2086068kB [ 475.452796] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 475.461415] 35067 total pagecache pages [ 475.465438] 0 pages in swap cache [ 475.468924] Swap cache stats: add 0, delete 0, find 0/0 [ 475.474327] Free swap = 0kB [ 475.477384] Total swap = 0kB [ 475.480428] 1965969 pages RAM [ 475.483563] 0 pages HighMem/MovableOnly [ 475.487567] 338524 pages reserved [ 475.525348] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 475.537350] syz-executor6 cpuset=syz6 mems_allowed=0 [ 475.542506] CPU: 1 PID: 28149 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 475.549345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.558684] Call Trace: [ 475.561259] dump_stack+0x1b9/0x29f [ 475.564882] ? arch_local_irq_restore+0x52/0x52 [ 475.569547] ? kasan_check_read+0x11/0x20 [ 475.573689] warn_alloc.cold.119+0xb2/0x1b8 [ 475.577996] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 475.582828] ? kasan_check_write+0x14/0x20 [ 475.587062] ? lock_repin_lock+0x410/0x410 [ 475.591299] __vmalloc_node_range+0x45e/0x720 [ 475.595783] ? graph_lock+0x170/0x170 [ 475.599571] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 475.604409] __vmalloc_node_flags_caller+0x50/0x60 [ 475.609323] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 475.614146] kvmalloc_node+0xde/0x100 [ 475.617932] kvm_arch_create_memslot+0xa3/0x4e0 [ 475.622589] __kvm_set_memory_region+0x1d1b/0x2e50 [ 475.627508] ? kvm_vcpu_block+0x1050/0x1050 [ 475.631812] ? visit_groups_merge+0x539/0x6a0 [ 475.636303] ? zap_class+0x720/0x720 [ 475.640000] ? check_same_owner+0x320/0x320 [ 475.644314] ? rcu_note_context_switch+0x710/0x710 [ 475.649220] ? lock_acquire+0x1dc/0x520 [ 475.653186] ? graph_lock+0x170/0x170 [ 475.656969] ? __might_sleep+0x95/0x190 [ 475.660929] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 475.666456] ? futex_wait_queue_me+0x559/0x820 [ 475.671033] ? refill_pi_state_cache.part.7+0x300/0x300 [ 475.676393] ? find_held_lock+0x36/0x1c0 [ 475.680440] ? lock_downgrade+0x8e0/0x8e0 [ 475.684588] kvm_set_memory_region+0x2e/0x50 [ 475.688981] kvm_vm_ioctl+0x668/0x1d90 [ 475.692859] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 475.697948] ? futex_wake+0x2f6/0x750 [ 475.701730] ? kasan_check_write+0x14/0x20 [ 475.705958] ? kvm_set_memory_region+0x50/0x50 [ 475.710523] ? graph_lock+0x170/0x170 [ 475.714303] ? get_futex_key+0x1e90/0x1e90 [ 475.718516] ? __lock_acquire+0x7f5/0x5130 [ 475.722733] ? perf_trace_lock+0xd6/0x900 [ 475.726866] ? zap_class+0x720/0x720 [ 475.730562] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 475.735733] ? do_futex+0x249/0x27d0 [ 475.739428] ? graph_lock+0x170/0x170 [ 475.743213] ? exit_robust_list+0x290/0x290 [ 475.747518] ? find_held_lock+0x36/0x1c0 [ 475.751565] ? lock_downgrade+0x8e0/0x8e0 [ 475.755692] ? lock_downgrade+0x8e0/0x8e0 [ 475.759823] ? rcu_is_watching+0x85/0x140 [ 475.763953] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 475.769130] ? __fget+0x40c/0x650 [ 475.772568] ? expand_files.part.8+0x9a0/0x9a0 [ 475.777128] ? lock_downgrade+0x8e0/0x8e0 [ 475.781258] ? lock_release+0xa10/0xa10 [ 475.785215] ? kvm_set_memory_region+0x50/0x50 [ 475.789779] do_vfs_ioctl+0x1cf/0x1650 [ 475.793649] ? ioctl_preallocate+0x2e0/0x2e0 [ 475.798040] ? fget_raw+0x20/0x20 [ 475.801480] ? security_file_mprotect+0x9b/0xd0 [ 475.806140] ? SyS_futex+0x3a4/0x56d [ 475.809835] ? do_futex+0x27d0/0x27d0 [ 475.813618] ? security_file_ioctl+0x9b/0xd0 [ 475.818013] ksys_ioctl+0xa9/0xd0 [ 475.821458] SyS_ioctl+0x24/0x30 [ 475.824804] ? ksys_ioctl+0xd0/0xd0 [ 475.828416] do_syscall_64+0x29e/0x9d0 [ 475.832284] ? vmalloc_sync_all+0x30/0x30 [ 475.836413] ? _raw_spin_unlock_irq+0x27/0x70 [ 475.840889] ? finish_task_switch+0x1ca/0x820 [ 475.845366] ? syscall_return_slowpath+0x5c0/0x5c0 [ 475.850279] ? syscall_return_slowpath+0x30f/0x5c0 [ 475.855192] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 475.860539] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 475.865366] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 475.870535] RIP: 0033:0x4552d9 2018/04/06 06:13:12 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x3, 0x20100) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x5, 0x7, 0x0, 0x7, "051173a428df4512954e49bc7a7b5802700a9ac3f9615b176a609c3da327f1d317807eb187a6132e203d056f", 0xde5a}, 0x2, [0x5, 0x1f, 0x1ff, 0xff, 0x2, 0xffff, 0x10000, 0xde1, 0x1, 0x0, 0x5db4, 0x3, 0x6, 0xffffffff, 0x6, 0x5, 0x10000, 0xffffffff, 0x6, 0x7, 0x73e, 0x7c, 0x3dec, 0x8, 0xc87c, 0x6, 0x1, 0x6, 0xe64, 0x2, 0x4846, 0x4, 0x6, 0xfffffffffffffffc, 0xb3, 0x6, 0x8, 0x9, 0x8000000000000, 0x1, 0x4, 0x100, 0xfffffffffffffffd, 0xffffffff80000001, 0x6, 0x7, 0xbb1, 0x3, 0x1000000, 0x7, 0x4, 0xb9, 0x0, 0xc8a, 0x401, 0x2, 0xeae5, 0x401, 0x80000001, 0xffffffff00000000, 0x83, 0xfffffffffffffbdd, 0x1, 0xfffffffffffffffa, 0x0, 0xffffffff, 0x6, 0x1, 0x5, 0xffffffffffffff81, 0x3f, 0xfffffffffffffffd, 0x0, 0x80000001, 0x839, 0x40, 0x0, 0x3, 0xdc3, 0x7, 0x100000001, 0x1ff, 0x20a91272, 0x4, 0x6, 0x0, 0x7, 0x5, 0x6, 0x1, 0x1, 0x4, 0x2, 0x80000000, 0x4, 0x90d, 0xfffffffffffff801, 0xdd, 0x80000000, 0x9, 0x7f, 0x5, 0x100000001, 0x4, 0x1400000000000000, 0x100, 0x8, 0x0, 0x401, 0x1, 0xfff, 0x7fffffff, 0x40, 0x9, 0x2, 0x4, 0xa200, 0xffffffff80000000, 0x8, 0x8, 0x1, 0x3, 0x2a49, 0x9, 0x10000, 0x1952, 0x4, 0xffff], {0x0, 0x1c9c380}}) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl(r1, 0x400000040081271, &(0x7f0000000100)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x402, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000080)) 2018/04/06 06:13:12 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:12 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x800e0000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:12 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80800, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x100, 0x36974aa8, 0x2d, 0x101, 0x3, 0x401, 0x5}, 0x1c) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 2018/04/06 06:13:12 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x21000000]}) 2018/04/06 06:13:12 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x4000000000000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:13:12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x4e200000, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:13:12 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000a9d000)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x8000000}}) [ 475.873704] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.881392] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 475.888656] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 475.895906] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 475.903155] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 475.910402] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:13:12 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0xfeffffff00000000]}) 2018/04/06 06:13:12 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:12 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80, 0x46) ioctl$sock_netrom_TIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000180)={{0x3, 0x7, 0x7fffffff, 0x7fffffff, "dfce279afeaee5654a41c03835d7191d1405555852c3913b96e0c4684a72cdd1a666718b51e4ee91276503c1", 0x4}, 0xc60, [0x4, 0x6, 0x4, 0x0, 0x1, 0x7, 0xffffffffffffffc1, 0x1000, 0xe48, 0x6, 0x5b, 0x0, 0xfffffffffffff000, 0x1, 0x80000000, 0xff, 0x67dd, 0x8000, 0x7, 0x1, 0x2, 0x40, 0x4, 0x1f, 0x100000000, 0x100, 0x4000000000000, 0x7fff, 0x62d, 0xffffffffffffffbf, 0x10001, 0x0, 0x2, 0x699, 0x9, 0xffffffffffff0000, 0x200, 0x5, 0x63, 0x5d, 0x4, 0x6, 0xdc, 0xff, 0x9, 0x7, 0x1e, 0x7, 0xffffffffffffffff, 0x80, 0x5, 0x8, 0x58a16212, 0xf9, 0x0, 0x6, 0xffffffff, 0x5, 0x4, 0x400, 0x6, 0x2, 0x0, 0x101, 0x0, 0x20, 0x2, 0x3, 0x9, 0xffffffff, 0x19613ce, 0x0, 0x20, 0x2, 0x9, 0x101, 0xd22, 0x8000, 0x5, 0x10000, 0x9, 0x8001, 0x20, 0x7ff, 0x9, 0x8001, 0x0, 0x9, 0x2, 0x1, 0x81, 0xd4, 0x0, 0x6, 0x3, 0x677, 0x1, 0xffffffff, 0x10000, 0x7, 0x400, 0xfffffffffffffffe, 0x1, 0x0, 0x4, 0x101, 0x9, 0x4, 0x8e57, 0x82, 0x100000001, 0x200, 0x9, 0xffffffff, 0x5, 0x8, 0x100, 0x362a06fa, 0x6475801c, 0x2, 0x9, 0x100000001, 0x1, 0x4, 0x3, 0x5, 0xffff, 0xbb3a]}) write$cgroup_type(r2, &(0x7f0000000000)='Ehreaded\x00', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) 2018/04/06 06:13:12 executing program 7: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x220}, 0x255) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x35, &(0x7f00000000c0)}, 0x10) socketpair$inet_udp(0xb, 0x730002, 0x705000, &(0x7f0000000080)) 2018/04/06 06:13:12 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x806, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:12 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r1, 0x43) r2 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x8000, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000540)=0x14, 0x0) sendto$packet(r3, &(0x7f0000000380)="985465aa804886991ad97f4faf701dde7d26a0bd921e167b39dda0ce96b03ee024a371da3a3dedba3c9bf31d417414dec0b1b5f8a23aae60a80dfe17f1c555f277b6e1746854717cc9a0f027b0f619eb6d6be6214da61590c7dda87cb1f6a76c9ac24820b9faf7739ad106e79cc0a820e40d91f152c991bd0e9da7beedc813d9f0104ae12ef37b83399d94a24857de5189ce479c2c89bd7ef2a2c7a54bc8e20a649df148f8fb0af59058a61e11ac3853564f9185573dfb4dc1b10c3a8e2885660318a3ea62c4849e8fcd024f", 0xcc, 0x408d0, &(0x7f0000000580)={0x11, 0x17, r4, 0x1, 0x400, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) shutdown(r1, 0x100000000000001) r5 = accept4(r1, 0x0, &(0x7f0000da8ffc), 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101001, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000005c0)=""/195) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x400000000e) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000240)=0x8000) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x3f, @loopback={0x0, 0x1}, 0x20}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000000c0)) fsetxattr(0xffffffffffffffff, &(0x7f0000000100)=@known='security.selinux\x00', &(0x7f0000000080)='\x00', 0x1, 0x0) close(r1) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x80000001, 0x80000001, 0x9}, &(0x7f0000000180)=0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x10000, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYBLOB="0082538f8cc38f0500d7dcd5a2a430613f16b52820c2441f9eea28602a190004d6d1c2d4f450bcd871d55e002a7cc268999d89870e342a8ea94661e6c720c5f206194bcda647f60d6797e1f517d5d5dcb6f40839a42c4338637901319562de0850c683a8606d0ab3645169b3b6a9ff18a49f55cd7c714623844e6c0e0a8fdd0b63f81be6396f3054c188516006ec325fc0938f27766e48378a3cb1c5f687dc0d0f2577f806a292aa417bfe373b5a1bf528c49199"], 0x2) ioctl$TUNSETVNETLE(r6, 0x400454dc, &(0x7f00000001c0)=0x1) [ 476.093246] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 476.105117] syz-executor6 cpuset=syz6 mems_allowed=0 [ 476.110315] CPU: 1 PID: 28197 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 476.117165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.126526] Call Trace: [ 476.129127] dump_stack+0x1b9/0x29f [ 476.132769] ? arch_local_irq_restore+0x52/0x52 [ 476.137448] ? kasan_check_read+0x11/0x20 2018/04/06 06:13:12 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x1000000]}) [ 476.141607] warn_alloc.cold.119+0xb2/0x1b8 [ 476.145944] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 476.150799] ? trace_hardirqs_on+0xd/0x10 [ 476.154966] ? _raw_spin_unlock_irq+0x27/0x70 [ 476.159471] ? finish_task_switch+0x1ca/0x820 [ 476.163984] ? lock_repin_lock+0x410/0x410 [ 476.168237] __vmalloc_node_range+0x45e/0x720 [ 476.172745] ? graph_lock+0x170/0x170 [ 476.176561] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 476.181411] __vmalloc_node_flags_caller+0x50/0x60 [ 476.186353] ? kvm_arch_create_memslot+0xa3/0x4e0 2018/04/06 06:13:12 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x2800, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:12 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x600]}) [ 476.191202] kvmalloc_node+0xde/0x100 [ 476.195019] kvm_arch_create_memslot+0xa3/0x4e0 [ 476.199715] __kvm_set_memory_region+0x1d1b/0x2e50 [ 476.204671] ? kvm_vcpu_block+0x1050/0x1050 [ 476.209008] ? zap_class+0x720/0x720 [ 476.212734] ? check_same_owner+0x320/0x320 [ 476.217067] ? rcu_note_context_switch+0x710/0x710 [ 476.222000] ? lock_acquire+0x1dc/0x520 [ 476.225989] ? graph_lock+0x170/0x170 [ 476.229798] ? __might_sleep+0x95/0x190 [ 476.233790] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 476.239338] ? futex_wait_queue_me+0x559/0x820 2018/04/06 06:13:12 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x600, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:12 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x8847]}) [ 476.243933] ? refill_pi_state_cache.part.7+0x300/0x300 [ 476.249313] ? find_held_lock+0x36/0x1c0 [ 476.253396] ? lock_downgrade+0x8e0/0x8e0 [ 476.257584] kvm_set_memory_region+0x2e/0x50 [ 476.262004] kvm_vm_ioctl+0x668/0x1d90 [ 476.265904] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 476.271019] ? futex_wake+0x2f6/0x750 [ 476.274846] ? kvm_set_memory_region+0x50/0x50 [ 476.279427] ? get_futex_key+0x1e90/0x1e90 [ 476.283664] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 476.288692] ? perf_trace_lock+0xd6/0x900 2018/04/06 06:13:12 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x689, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:12 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x21]}) [ 476.292851] ? zap_class+0x720/0x720 [ 476.296570] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 476.302623] ? do_futex+0x249/0x27d0 [ 476.306344] ? native_flush_tlb_others+0x690/0x690 [ 476.311279] ? graph_lock+0x170/0x170 [ 476.315083] ? check_same_owner+0x320/0x320 [ 476.319420] ? exit_robust_list+0x290/0x290 [ 476.323754] ? find_held_lock+0x36/0x1c0 [ 476.327840] ? lock_downgrade+0x8e0/0x8e0 [ 476.331999] ? rcu_is_watching+0x85/0x140 [ 476.336157] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 476.341362] ? __fget+0x40c/0x650 [ 476.344827] ? expand_files.part.8+0x9a0/0x9a0 [ 476.349413] ? lock_downgrade+0x8e0/0x8e0 [ 476.353563] ? __split_vma+0x5ac/0x7f0 [ 476.357461] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 476.363004] ? vma_set_page_prot+0x183/0x260 [ 476.367428] ? kvm_set_memory_region+0x50/0x50 [ 476.372013] do_vfs_ioctl+0x1cf/0x1650 [ 476.375920] ? ioctl_preallocate+0x2e0/0x2e0 [ 476.380332] ? fget_raw+0x20/0x20 [ 476.383796] ? SyS_futex+0x3a4/0x56d [ 476.387525] ? do_futex+0x27d0/0x27d0 [ 476.391334] ? security_file_ioctl+0x9b/0xd0 [ 476.395754] ksys_ioctl+0xa9/0xd0 [ 476.399214] SyS_ioctl+0x24/0x30 [ 476.402590] ? ksys_ioctl+0xd0/0xd0 [ 476.406225] do_syscall_64+0x29e/0x9d0 [ 476.410119] ? vmalloc_sync_all+0x30/0x30 [ 476.414272] ? _raw_spin_unlock_irq+0x27/0x70 [ 476.418771] ? finish_task_switch+0x1ca/0x820 [ 476.423276] ? syscall_return_slowpath+0x5c0/0x5c0 [ 476.428208] ? syscall_return_slowpath+0x30f/0x5c0 [ 476.433135] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 476.438492] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 476.443330] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 476.448507] RIP: 0033:0x4552d9 [ 476.451682] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.459376] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 476.466630] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 476.473888] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 476.481141] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 476.488394] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 476.495899] warn_alloc_show_mem: 1 callbacks suppressed [ 476.495906] Mem-Info: [ 476.503791] active_anon:135407 inactive_anon:79 isolated_anon:0 [ 476.503791] active_file:22877 inactive_file:12112 isolated_file:0 [ 476.503791] unevictable:0 dirty:136 writeback:0 unstable:0 [ 476.503791] slab_reclaimable:12462 slab_unreclaimable:101586 [ 476.503791] mapped:73950 shmem:86 pagetables:1114 bounce:0 [ 476.503791] free:1247974 free_pcp:400 free_cma:0 [ 476.537660] Node 0 active_anon:541628kB inactive_anon:316kB active_file:91508kB inactive_file:48448kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295800kB dirty:544kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 382976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 476.565828] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 476.592053] lowmem_reserve[]: 0 2833 6338 6338 [ 476.596718] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:704kB free_cma:0kB [ 476.624501] lowmem_reserve[]: 0 0 3505 3505 [ 476.628900] Node 0 Normal free:2081952kB min:37284kB low:46604kB high:55924kB active_anon:533320kB inactive_anon:316kB active_file:91508kB inactive_file:48448kB unevictable:0kB writepending:544kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5408kB pagetables:4160kB bounce:0kB free_pcp:828kB local_pcp:100kB free_cma:0kB [ 476.658748] lowmem_reserve[]: 0 0 0 0 [ 476.662617] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 476.676258] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 476.692148] Node 0 Normal: 260*4kB (UME) 1208*8kB (UME) 1533*16kB (UME) 909*32kB (UME) 497*64kB (UME) 229*128kB (UME) 115*256kB (UME) 73*512kB (UM) 35*1024kB (UM) 35*2048kB (UME) 435*4096kB (UM) = 2081536kB [ 476.710756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 476.719401] 35074 total pagecache pages [ 476.723413] 0 pages in swap cache [ 476.726899] Swap cache stats: add 0, delete 0, find 0/0 [ 476.732282] Free swap = 0kB [ 476.735312] Total swap = 0kB [ 476.738361] 1965969 pages RAM [ 476.741479] 0 pages HighMem/MovableOnly [ 476.745463] 338524 pages reserved [ 476.774113] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 476.785911] syz-executor6 cpuset=syz6 mems_allowed=0 [ 476.791078] CPU: 1 PID: 28197 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 476.797920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.807260] Call Trace: [ 476.809837] dump_stack+0x1b9/0x29f [ 476.813463] ? arch_local_irq_restore+0x52/0x52 [ 476.818128] ? kasan_check_read+0x11/0x20 [ 476.822274] warn_alloc.cold.119+0xb2/0x1b8 [ 476.826582] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 476.831408] ? kasan_check_write+0x14/0x20 [ 476.835631] ? lock_repin_lock+0x410/0x410 [ 476.839856] __vmalloc_node_range+0x45e/0x720 [ 476.844338] ? graph_lock+0x170/0x170 [ 476.848127] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 476.852953] __vmalloc_node_flags_caller+0x50/0x60 [ 476.857868] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 476.862699] kvmalloc_node+0xde/0x100 [ 476.866499] kvm_arch_create_memslot+0xa3/0x4e0 [ 476.871182] __kvm_set_memory_region+0x1d1b/0x2e50 [ 476.876108] ? kvm_vcpu_block+0x1050/0x1050 [ 476.880414] ? visit_groups_merge+0x539/0x6a0 [ 476.884894] ? zap_class+0x720/0x720 [ 476.888601] ? check_same_owner+0x320/0x320 [ 476.892946] ? rcu_note_context_switch+0x710/0x710 [ 476.897864] ? lock_acquire+0x1dc/0x520 [ 476.901830] ? graph_lock+0x170/0x170 [ 476.905616] ? __might_sleep+0x95/0x190 [ 476.909586] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 476.915105] ? futex_wait_queue_me+0x559/0x820 [ 476.919674] ? refill_pi_state_cache.part.7+0x300/0x300 [ 476.925038] ? find_held_lock+0x36/0x1c0 [ 476.929098] ? lock_downgrade+0x8e0/0x8e0 [ 476.933243] kvm_set_memory_region+0x2e/0x50 [ 476.937635] kvm_vm_ioctl+0x668/0x1d90 [ 476.941507] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 476.946594] ? futex_wake+0x2f6/0x750 [ 476.950377] ? kasan_check_write+0x14/0x20 [ 476.954601] ? kvm_set_memory_region+0x50/0x50 [ 476.959177] ? graph_lock+0x170/0x170 [ 476.962969] ? get_futex_key+0x1e90/0x1e90 [ 476.967186] ? __lock_acquire+0x7f5/0x5130 [ 476.971403] ? perf_trace_lock+0xd6/0x900 [ 476.975540] ? zap_class+0x720/0x720 [ 476.979244] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 476.984432] ? do_futex+0x249/0x27d0 [ 476.988147] ? graph_lock+0x170/0x170 [ 476.991951] ? exit_robust_list+0x290/0x290 [ 476.996273] ? find_held_lock+0x36/0x1c0 [ 477.000339] ? lock_downgrade+0x8e0/0x8e0 [ 477.004473] ? lock_downgrade+0x8e0/0x8e0 [ 477.008616] ? rcu_is_watching+0x85/0x140 [ 477.012755] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 477.017943] ? __fget+0x40c/0x650 [ 477.021393] ? expand_files.part.8+0x9a0/0x9a0 [ 477.025960] ? lock_downgrade+0x8e0/0x8e0 [ 477.030099] ? lock_release+0xa10/0xa10 [ 477.034072] ? kvm_set_memory_region+0x50/0x50 [ 477.038643] do_vfs_ioctl+0x1cf/0x1650 [ 477.042524] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 477.047876] ? ioctl_preallocate+0x2e0/0x2e0 [ 477.052281] ? retint_kernel+0x10/0x10 [ 477.056170] ? security_file_ioctl+0x20/0xd0 [ 477.060576] ? security_file_ioctl+0x20/0xd0 [ 477.064973] ? security_file_ioctl+0x9b/0xd0 [ 477.069372] ksys_ioctl+0xa9/0xd0 [ 477.072819] SyS_ioctl+0x24/0x30 [ 477.076172] ? ksys_ioctl+0xd0/0xd0 [ 477.079790] do_syscall_64+0x29e/0x9d0 [ 477.083663] ? vmalloc_sync_all+0x30/0x30 [ 477.087799] ? _raw_spin_unlock_irq+0x27/0x70 [ 477.092281] ? finish_task_switch+0x1ca/0x820 [ 477.096765] ? syscall_return_slowpath+0x5c0/0x5c0 [ 477.101683] ? syscall_return_slowpath+0x30f/0x5c0 [ 477.106606] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 477.111963] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 477.116804] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 477.121980] RIP: 0033:0x4552d9 [ 477.125158] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.132855] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 477.140110] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 477.147382] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 477.154639] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 477.161895] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:13:13 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x66, "5af4fa2364879ddde8ce7d3d90cfba59f4309e8c237271e62b0bef637c9b92dca7476406e811c764c4a9f52bb74c673d8afc52086a3e993bf3b0cdbce3fdc436ead2966673a71f586f0e31c5aa3970cd2eb2cede66725222e02905dab0535854e4e817f4bd86"}, &(0x7f0000000200)=0x6e) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240)={r3, 0x1, 0x7}, &(0x7f0000000280)=0x8) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f00000000c0)=""/98) write$cgroup_type(r1, &(0x7f0000000080)='Ehreaded\x00', 0xffffffffffffff1c) 2018/04/06 06:13:13 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000130021000000000000000000891450ef", @ANYRES32=r1, @ANYBLOB="000000000000000004001a00"], 0x24}, 0x1}, 0x0) 2018/04/06 06:13:13 executing program 5: syz_emit_ethernet(0x62, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="ae75aee01a85", [], {@generic={0x8863, "47f1d9d9eae68afda812d139097af9cb7a6016cd15ed7b7bfbf9956bc90118b532db9bb75b33f7b9272a594c6620852dbf546b8a3e9fec3f1e7265aa7863cf006445d23862b6001af7c0f77052ff34b88b927749"}}}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x80) fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x1) 2018/04/06 06:13:13 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x68000000, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:13:13 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x1100000000000000]}) 2018/04/06 06:13:13 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x8906, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:13 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:13 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x578, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:13:14 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x9) 2018/04/06 06:13:14 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x8906000000000000]}) [ 477.676842] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 477.688735] syz-executor6 cpuset=syz6 mems_allowed=0 [ 477.693936] CPU: 1 PID: 28245 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 477.700791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.710154] Call Trace: [ 477.712754] dump_stack+0x1b9/0x29f [ 477.716398] ? arch_local_irq_restore+0x52/0x52 [ 477.721084] ? graph_lock+0x170/0x170 [ 477.724902] warn_alloc.cold.119+0xb2/0x1b8 [ 477.729237] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 477.734100] ? __update_load_avg_blocked_se.isra.33+0x460/0x460 [ 477.740180] ? print_usage_bug+0xc0/0xc0 [ 477.744252] ? print_usage_bug+0xc0/0xc0 [ 477.748321] ? update_load_avg+0x2d9/0x2540 [ 477.752655] ? graph_lock+0x170/0x170 [ 477.756476] __vmalloc_node_range+0x45e/0x720 [ 477.760990] ? graph_lock+0x170/0x170 [ 477.764804] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 477.769659] __vmalloc_node_flags_caller+0x50/0x60 [ 477.774600] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 477.779452] kvmalloc_node+0xde/0x100 [ 477.783270] kvm_arch_create_memslot+0xa3/0x4e0 [ 477.787959] __kvm_set_memory_region+0x1d1b/0x2e50 [ 477.792919] ? kvm_vcpu_block+0x1050/0x1050 [ 477.797254] ? print_usage_bug+0xc0/0xc0 [ 477.801318] ? zap_class+0x720/0x720 [ 477.805035] ? perf_trace_lock+0xd6/0x900 [ 477.809191] ? graph_lock+0x170/0x170 [ 477.812998] ? zap_class+0x720/0x720 [ 477.816717] ? graph_lock+0x170/0x170 [ 477.820528] ? __lock_acquire+0x7f5/0x5130 [ 477.824778] ? graph_lock+0x170/0x170 [ 477.828594] ? find_held_lock+0x36/0x1c0 [ 477.832674] ? lock_downgrade+0x8e0/0x8e0 [ 477.836839] kvm_set_memory_region+0x2e/0x50 [ 477.841232] kvm_vm_ioctl+0x668/0x1d90 [ 477.845104] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 477.850623] ? __perf_event_task_sched_in+0x247/0xb80 [ 477.855797] ? kvm_set_memory_region+0x50/0x50 [ 477.860367] ? find_held_lock+0x36/0x1c0 [ 477.864412] ? perf_trace_lock+0xd6/0x900 [ 477.868546] ? zap_class+0x720/0x720 [ 477.872238] ? finish_task_switch+0x182/0x820 [ 477.876718] ? kasan_check_read+0x11/0x20 [ 477.880849] ? graph_lock+0x170/0x170 [ 477.884630] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 477.889197] ? compat_start_thread+0x80/0x80 [ 477.893586] ? _raw_spin_unlock_irq+0x27/0x70 [ 477.898064] ? trace_hardirqs_on+0xd/0x10 [ 477.902192] ? _raw_spin_unlock_irq+0x27/0x70 [ 477.906669] ? find_held_lock+0x36/0x1c0 [ 477.910715] ? lock_downgrade+0x8e0/0x8e0 [ 477.914846] ? rcu_is_watching+0x85/0x140 [ 477.918979] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 477.924156] ? __fget+0x40c/0x650 [ 477.927594] ? expand_files.part.8+0x9a0/0x9a0 [ 477.932155] ? lock_downgrade+0x8e0/0x8e0 [ 477.936290] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 477.941813] ? kvm_set_memory_region+0x50/0x50 [ 477.946379] do_vfs_ioctl+0x1cf/0x1650 [ 477.950263] ? ioctl_preallocate+0x2e0/0x2e0 [ 477.954658] ? fget_raw+0x20/0x20 [ 477.958111] ? exit_to_usermode_loop+0x87/0x310 [ 477.962768] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 477.968289] ? security_file_ioctl+0x9b/0xd0 [ 477.972681] ksys_ioctl+0xa9/0xd0 [ 477.976118] SyS_ioctl+0x24/0x30 [ 477.979465] ? ksys_ioctl+0xd0/0xd0 [ 477.983076] do_syscall_64+0x29e/0x9d0 [ 477.986944] ? vmalloc_sync_all+0x30/0x30 [ 477.991075] ? _raw_spin_unlock_irq+0x27/0x70 [ 477.995549] ? finish_task_switch+0x1ca/0x820 [ 478.000034] ? syscall_return_slowpath+0x5c0/0x5c0 [ 478.004948] ? syscall_return_slowpath+0x30f/0x5c0 [ 478.009863] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 478.015211] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 478.020049] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 478.025218] RIP: 0033:0x4552d9 [ 478.028388] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 478.036076] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 478.043325] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 478.050574] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 478.057824] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 478.065077] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 478.072589] warn_alloc_show_mem: 1 callbacks suppressed [ 478.072596] Mem-Info: [ 478.080518] active_anon:131270 inactive_anon:79 isolated_anon:0 [ 478.080518] active_file:22877 inactive_file:12132 isolated_file:0 [ 478.080518] unevictable:0 dirty:156 writeback:0 unstable:0 [ 478.080518] slab_reclaimable:12464 slab_unreclaimable:101239 [ 478.080518] mapped:73922 shmem:86 pagetables:1007 bounce:0 [ 478.080518] free:1252539 free_pcp:499 free_cma:0 [ 478.114373] Node 0 active_anon:525080kB inactive_anon:316kB active_file:91508kB inactive_file:48528kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295688kB dirty:624kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 378880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 478.142546] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 478.168709] lowmem_reserve[]: 0 2833 6338 6338 [ 478.173351] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:704kB free_cma:0kB [ 478.201080] lowmem_reserve[]: 0 0 3505 3505 [ 478.205462] Node 0 Normal free:2091004kB min:37284kB low:46604kB high:55924kB active_anon:525080kB inactive_anon:316kB active_file:91508kB inactive_file:48528kB unevictable:0kB writepending:624kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5344kB pagetables:4028kB bounce:0kB free_pcp:1164kB local_pcp:512kB free_cma:0kB [ 478.235376] lowmem_reserve[]: 0 0 0 0 [ 478.239236] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 478.252890] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 478.268814] Node 0 Normal: 291*4kB (UME) 1241*8kB (UME) 1574*16kB (UME) 914*32kB (UME) 497*64kB (UME) 229*128kB (UME) 115*256kB (UME) 73*512kB (UM) 35*1024kB (UM) 35*2048kB (UME) 437*4096kB (UM) = 2090932kB [ 478.287438] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 478.296062] 35093 total pagecache pages [ 478.300085] 0 pages in swap cache [ 478.304213] Swap cache stats: add 0, delete 0, find 0/0 [ 478.309633] Free swap = 0kB [ 478.312680] Total swap = 0kB [ 478.315721] 1965969 pages RAM [ 478.318847] 0 pages HighMem/MovableOnly [ 478.322857] 338524 pages reserved [ 478.345928] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 478.357827] syz-executor6 cpuset=syz6 mems_allowed=0 [ 478.363009] CPU: 1 PID: 28245 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 478.369854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.379208] Call Trace: [ 478.381798] dump_stack+0x1b9/0x29f [ 478.385415] ? arch_local_irq_restore+0x52/0x52 [ 478.390067] ? kasan_check_read+0x11/0x20 [ 478.394203] warn_alloc.cold.119+0xb2/0x1b8 [ 478.398509] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 478.403337] ? kasan_check_write+0x14/0x20 [ 478.407572] ? lock_repin_lock+0x410/0x410 [ 478.411805] __vmalloc_node_range+0x45e/0x720 [ 478.416289] ? graph_lock+0x170/0x170 [ 478.420086] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 478.424911] __vmalloc_node_flags_caller+0x50/0x60 [ 478.429827] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 478.434657] kvmalloc_node+0xde/0x100 [ 478.438450] kvm_arch_create_memslot+0xa3/0x4e0 [ 478.443120] __kvm_set_memory_region+0x1d1b/0x2e50 [ 478.448052] ? kvm_vcpu_block+0x1050/0x1050 [ 478.452364] ? print_usage_bug+0xc0/0xc0 [ 478.456412] ? zap_class+0x720/0x720 [ 478.460114] ? check_same_owner+0x320/0x320 [ 478.464431] ? rcu_note_context_switch+0x710/0x710 [ 478.469353] ? lock_acquire+0x1dc/0x520 [ 478.473321] ? graph_lock+0x170/0x170 [ 478.477107] ? __might_sleep+0x95/0x190 [ 478.481076] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 478.486594] ? futex_wait_queue_me+0x559/0x820 [ 478.491153] ? __lock_acquire+0x7f5/0x5130 [ 478.495371] ? refill_pi_state_cache.part.7+0x300/0x300 [ 478.500717] ? find_held_lock+0x36/0x1c0 [ 478.504765] ? lock_downgrade+0x8e0/0x8e0 [ 478.508911] kvm_set_memory_region+0x2e/0x50 [ 478.513300] kvm_vm_ioctl+0x668/0x1d90 [ 478.517168] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 478.522249] ? futex_wake+0x2f6/0x750 [ 478.526037] ? __perf_event_task_sched_in+0x247/0xb80 [ 478.531209] ? kvm_set_memory_region+0x50/0x50 [ 478.535774] ? get_futex_key+0x1e90/0x1e90 [ 478.539988] ? __lock_acquire+0x7f5/0x5130 [ 478.544206] ? find_held_lock+0x36/0x1c0 [ 478.548251] ? perf_trace_lock+0xd6/0x900 [ 478.552398] ? zap_class+0x720/0x720 [ 478.556099] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 478.561273] ? do_futex+0x249/0x27d0 [ 478.564966] ? kasan_check_read+0x11/0x20 [ 478.569094] ? graph_lock+0x170/0x170 [ 478.572875] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 478.577439] ? compat_start_thread+0x80/0x80 [ 478.581844] ? _raw_spin_unlock_irq+0x27/0x70 [ 478.586334] ? exit_robust_list+0x290/0x290 [ 478.590636] ? find_held_lock+0x36/0x1c0 [ 478.594683] ? lock_downgrade+0x8e0/0x8e0 [ 478.598815] ? rcu_is_watching+0x85/0x140 [ 478.602945] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 478.608120] ? __fget+0x40c/0x650 [ 478.611558] ? expand_files.part.8+0x9a0/0x9a0 [ 478.616118] ? lock_downgrade+0x8e0/0x8e0 [ 478.620246] ? lock_release+0xa10/0xa10 [ 478.624207] ? kvm_set_memory_region+0x50/0x50 [ 478.628774] do_vfs_ioctl+0x1cf/0x1650 [ 478.632647] ? ioctl_preallocate+0x2e0/0x2e0 [ 478.637039] ? fget_raw+0x20/0x20 [ 478.640476] ? security_file_mprotect+0x9b/0xd0 [ 478.645138] ? SyS_futex+0x3a4/0x56d [ 478.648840] ? do_futex+0x27d0/0x27d0 [ 478.652623] ? security_file_ioctl+0x9b/0xd0 [ 478.657017] ksys_ioctl+0xa9/0xd0 [ 478.660463] SyS_ioctl+0x24/0x30 [ 478.663807] ? ksys_ioctl+0xd0/0xd0 [ 478.667413] do_syscall_64+0x29e/0x9d0 [ 478.671289] ? vmalloc_sync_all+0x30/0x30 [ 478.675429] ? _raw_spin_unlock_irq+0x27/0x70 [ 478.679905] ? finish_task_switch+0x1ca/0x820 [ 478.684396] ? syscall_return_slowpath+0x5c0/0x5c0 [ 478.689314] ? syscall_return_slowpath+0x30f/0x5c0 [ 478.694239] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 478.699601] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 478.704431] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 478.709603] RIP: 0033:0x4552d9 [ 478.712773] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 478.720466] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 478.727714] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 478.734961] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/06 06:13:15 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x400000000000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:15 executing program 7: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x135) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x1000}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000140)="e784fa93a21dbd0ad9999b2de66e28b7661298c00a8c31a6f4d88ae153436b3daf3e4e26362e55a90f82ec1b465698be769dcdb0c0b9dce321fd4432fff6fd", &(0x7f0000000180)=""/150}, 0x18) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xc056, 0x400) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) 2018/04/06 06:13:15 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:15 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x3e8, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:13:15 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0xa4}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="ffff00ddffffffffffffff0000000000711000000000000000000000000000009500000000000000911527b24be15ef809228aaaa405bf779cf75e5e7c7be1ce8eef74ba34d64ce6e6f0878d29ca599ebb9bffc2c733643738212107d1cd3c4c"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_udp(0x730000, 0x2, 0xa, &(0x7f00000001c0)) 2018/04/06 06:13:15 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x2100000000000000]}) 2018/04/06 06:13:15 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x4c00, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:13:15 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={"776c616e300000020084000000000899", &(0x7f0000000180)=@ethtool_regs={0x4, 0x0, 0x1, 'O'}}) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x5}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000280)={r4, 0x5, 0x7, 0xfff}, &(0x7f00000002c0)=0x10) socket$packet(0x11, 0x3, 0x300) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe1, 0xa, 0x19, 0x4, "d4e647f4d5459da476cb6a41c8017dfd5331dc2848af3dacbf44a48a129b61baad90e6b1262f178df3d1f7ab4b1954682773074852743b84dd17f0a209ea8538", "8300450624ff3ce11c673a19453f49ff755bb59656beb4402e714db646967496", [0xe2c9, 0x2]}) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000300)=""/4096) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00004e3000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x80) write$cgroup_type(r2, &(0x7f0000000000)='Ehreaded\x00', 0x1) [ 478.742220] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 478.749475] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:13:15 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x8847000000000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:15 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x86ddffff00000000]}) 2018/04/06 06:13:15 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:15 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x2001001000000000, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:13:15 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) r7 = memfd_create(&(0x7f0000000240)="64657620acc2b320fd785e18fa9cae1266786f034b4b9cc76317f2a743bddf8cb99605b8d9540fc70cb93475bcce4f7a2f28c2236a68e3dcd5197da7e00b9f3ff57853643cf928e70f87becdd144532926edafc7b5a241a0a294b5895bfa980b280c7df3ac3ca2422c7d5355d900796193b469597d7a2e221e3ea5bde9e6f5bf83421dc524fb03af370a325eaacd40b91b6799f300e9efbcb5b0a9557594a891", 0x0) sendfile(r7, r7, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r7, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="66b99a0000400f32b890008ee80fecb31fa36766c7442400c20000006766c7442402020000006766c744240600000000670f01142466b9630b000066b80400000066ba000000000f30ba420066edf30f10f88fe95801260f000f890d00b87c008ed0", 0x62}], 0x1, 0x0, &(0x7f00000002c0), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000540)={0x0, 0xc3, "169325d30b2490f1c1d028f40240a25de127d9b8f7f37d3a22e3a28a45db7dc6d164b505991fd108cde24cd0a28a6b24061947b4b62dff74a1613a0c4e10e4f168ba4371eaa889cc179badfa1d560fa56898f1691c6f962f6412777f92380896aea97c57e81de10f7f6deabde0bcd180bce08fee42854fe99ddc5e3017eaec24424e7dd9ac243fae8f8aa79ef4d23968ccb818090b2c5f85f8edb894a5717787e495cb3b54a2592f808df2adf686ea91d9308da9377b13f322a33741ac9d481772f25b"}, &(0x7f0000000640)=0xcb) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1, 0x1, 0x100000000, 0x3, 0x3}, &(0x7f0000000740)=0x98) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000780)={0x0, 0x0, 0x7, 0xdf, 0x5, 0x9}, &(0x7f00000007c0)=0x14) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000001040)={0x0, 0xee, "438dd4556305229496f03600d668257fc265fb3bd9d8260b44efd8344eced80d13354688918c3d1236b54f08c73c25d5e1c08721057e6166cb596c00005242b8465ea212baa9f5a9a986808b6befc63e82f5056fcaef112621b49d4181e367798b688a490b7a99968dd1e1de78a72f5e8d00f6b84095db35bacb8d5be10e4c0b8bf6ebbb84bf9f0f72295aa2a117340d163887421878959d59bfecb38478da340cbe67d8878e4709b3069fa59b698488073defe1a18081b528f7a9be1241c9f573326c42502c0c152b24d0176414f981118fe4e18f15e0afbf892e52736c3d739b596a06135f2e65cefed5f9e254"}, &(0x7f0000000f40)=0xf6) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000f80)={0x0, 0x20, 0x10}, &(0x7f0000000fc0)=0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000001140)={0x0, 0x1}, &(0x7f0000001180)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000011c0)=@assoc_id=0x0, &(0x7f0000001200)=0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000001240)={0x0, 0x1}, &(0x7f0000001280)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000012c0)=@assoc_id=0x0, &(0x7f0000001300)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000001340)={0x0, 0x4, 0xdd}, &(0x7f0000001380)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x8}}, 0x9, 0x9}, &(0x7f0000001480)=0x90) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000001a40)={0x0, 0x8}, &(0x7f0000001a80)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000001ac0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001b00)=0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000001b40)={0x0, @in6={{0xa, 0x4e23, 0x100, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x81}}, 0x6, 0x1, 0x3, 0x80000001, 0x35}, &(0x7f0000001c00)=0x98) sendmmsg$inet_sctp(r4, &(0x7f0000001d00)=[{&(0x7f00000000c0)=@in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000300)="42f1c293bb36a2d59039fc2605e10e38f68c6f36f3428ba6f3c81bea25e89e305ed5f79c240f5d1ffbec97847363c759cc957bf5f094a61115f2c0f4345dce7f91128ebcbba3f6d9a7af359e4eacf3da29b3a027fa3debe625acd1442b9bd9e9d37e90c699442063c0e458dcf5659e9051fe4e0138e90a3489bc3b8fb1be74b33cc5435970c606c30ee4b8789329df20c588261883f4c1452e164504fc7154b1c9fe04a12de9057529be12ea07eff5810b856f1a6e6f84bf8264027a34b22edfb3afce91b644913374dee5658d0a65f3e829b4cd4750eb801451127c23d47221396095289ab79993b08b26661b35dba92772b29f498fc5fcc5b188", 0xfb}, {&(0x7f0000000180)="29b4f67bf90841bada1b24d7980df436e8ecb1d403ed76eaeea4305c78dec5534f181ef5b4440ddb2f19195ff4b76885bf40cb309225ec70dea7c5b4b99454ee13ecc1aa14a768b869c294b4bd0f6a63697313d78b16d12a0cbc96a6636542f8e1502847f60c3116bb46443326bf09c98ae59cf20c64bdba7bb10d85d19c41a13e24d3a079a69abd01628dd244d339df29ea455a60266b8894420daa1d82d4c905663aa15d54acb2f5388345a6c1896864aa5a1c5ea5696f26e6b99bf54302", 0xbf}, {&(0x7f0000000400)="c70abc2b279bedb82fd86ae2c5c970e18f751048e86879c9e3c83e0d5667fa0fc82110638fff605e", 0x28}], 0x3, &(0x7f0000000480)=[@init={0x18, 0x84, 0x0, {0x10000, 0xf5, 0x401, 0xffffffffffffff9e}}], 0x30, 0x4c004}, {&(0x7f00000004c0)=@in={0x2, 0x4e21}, 0x10, &(0x7f0000000500), 0x0, &(0x7f0000000800)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x2, 0x1, 0x2, r8}}, @init={0x18, 0x84, 0x0, {0x38a4f220, 0x0, 0x8, 0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x0, 0x4, 0x1, 0xf20, 0x3, 0xffffffffffff8000, 0x0, r9}}, @sndrcv={0x30, 0x84, 0x1, {0x43a, 0x3bd2, 0x1, 0x5, 0x8001, 0xaee, 0x1, 0x1000, r10}}], 0xc0, 0x800}, {&(0x7f00000008c0)=@in6={0xa, 0x4e20, 0xb5, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c, &(0x7f0000000e80)=[{&(0x7f0000000900)="a5ea60e785c0fc67df51a07229ef2c62c02bed718e380f30ca4feff714d1ebfee32e082ca5e9de033606acc1cc0eba2069e35092cd19ff530fda549d70e69d2fa80723324fb6602c77ee15f1eede7cf53d08654ce182f50ee7d402903bf3118887ffee798cc898427e833b9926f06b33a274d1f64839d5679675aaff205dba93199efa1bba6999d92c60ee4c6fdfa0b8e4c0bfcc30e22fa156ee022c825609011286eaab52c3279ce09fb218136e4c", 0xaf}, {&(0x7f00000009c0)="22b59245445f16277aac375707f6fa27c8da399cd252a731cf264a6be23bf88ec04ae394830c100cc36dd5c0c619263fc215d018e6b7d78d46bbcc189adeb3fbe83d6c6bee5e95d3121c314d512a32c737f6550d982c", 0x56}, {&(0x7f0000000a40)="dbdc107d08750146d54e725f0553356f76ff4aee81d74944d0ab5b5c4b18cb024b0ccf870214714ecdcce58ad600c9ef5a49fb3ea6bbde5f1773da396b0dd18c77a70cb579f1c98e2d00", 0x4a}, {&(0x7f0000000ac0)="e35cd2a3ffd3abbc2a331e4e6c89f23e8f797bf878ae321ee52b8d9c7b2192b1ce75358b95f52df5a2f0df5c4f884fff584682936cdbd4722869d5fe1c1547992118170d8ed9bc7f7bb32f544dd903b4e86209941f08e5da7bdea89082e74baa489c8c96e749a7b14a4eb2f36c19f4a489f36418c1186cf1ee8da169477f98ce764f68a7fee1ffed3ea374a6e716919ed01b45227376f10d79b92a30ff70120edc941fb54783dfdb1492a2bc2a75f82e9ab2152b7744501c23e8014b2fabd3a574279e136d6d07548319fa2846c74739959350d1e080c1caf6ee9191329bc16fa96e3a80b41df1f70efe88", 0xeb}, {&(0x7f0000000bc0)="feaef40fc5217d6664283bc8e425bd1a7710eab2a6434505044664472997b4ee1585d1e74b3b244471fd9ae88df34a3cde172a4ec044cae870c2040ae30fbba5a7c77b8fd1ac3c3857c23cafc259c3ace15669feab565de709", 0x59}, {&(0x7f0000000c40)="0f5712dc224f65fef94d8f05237fc89bfc71f038ba99bb86a9f64add97b044d9ec0465a87ffb7314438b1b0fd2816f981d7df026c462622e79f08ad9c3c039c9ac82a64063623a0168507cc9964a51de8df6883465b34674cd717234249ff947177acbb01aaac2d5367875bf6760964e273ee9c471bdbb3c8db1d98fd8ae9b57131e10ca256848a5f71b596e3ab8d8ea8f7ba8ba722a5bcb45a5a0143fb64088e41c2e54a602b4a82781fc813b81358bd5c1f9704ac6699c52a5", 0xba}, {&(0x7f0000000d00)="9a98b27966fbab5db36f85a91681f01e2216824fda496f6c0261748a241dbbb1238e607e7232d1c3f5973a634319c28fd7b7f8", 0x33}, {&(0x7f0000000d40)="7b32dc888a329d7c58c10785339668f88d227136871bc177", 0x18}, {&(0x7f0000000d80)="cd04f4bfc5acd9e540dd333a485accf18ed8ce3cf2ce1abf5dc1add84bff24efc38ccace290479a0e0ca11ad418a7917b104ff761288fdda", 0x38}, {&(0x7f0000000dc0)="1462ba75fc84f6b4973261338180c355abfb5b19805d0ba353cacc91bd4bd50e69672fd6d606913d097a7426c00b4d9765550b72c20f5d080f12e19cda3156de66614430f1c99aa7449f89e4b587584abd37bef560c3575039a6168d03228fd104c82be78bc8138a30c3ba410e4c2dc4b811903d463744041b5c491e787e24e643f4044e67d10f77eab5d6626746da088614f9d1b5955e8b296a0569d471b6344a9b0a1e75ee9c32e459566d04c4", 0xae}], 0xa, &(0x7f00000014c0)=[@sndinfo={0x20, 0x84, 0x2, {0x48000, 0x8004, 0x5, 0xa, r11}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x8001, 0x7fffffff, 0x8000, r12}}, @sndrcv={0x30, 0x84, 0x1, {0x3f, 0x3ff, 0x8003, 0xd5, 0x1, 0x74, 0x7, 0x66b40930, r13}}, @init={0x18, 0x84, 0x0, {0x4, 0x7}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x206, 0x200, 0x6, r14}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0xa, 0x9, 0x5, r15}}, @sndrcv={0x30, 0x84, 0x1, {0x6605, 0x2, 0xbb316309c807cdae, 0xa0, 0x7, 0x0, 0x100000001, 0x1, r16}}, @init={0x18, 0x84, 0x0, {0x5, 0x1f, 0x67, 0xac}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x8, 0x0, 0xfffffffffffffff8, 0x1, 0x8, 0x7c, 0x5, r17}}, @sndrcv={0x30, 0x84, 0x1, {0xfffffffffffffffd, 0x5, 0x6, 0x8, 0x7f, 0xe3c0, 0x400, 0x0, r18}}], 0x1e0, 0xc0}, {&(0x7f00000016c0)=@in6={0xa, 0x4e24, 0x400, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001700)="1c6b3f0c1e80fcaaa7b275688701ea191e949533251721f289b8352be478", 0x1e}, {&(0x7f0000001740)="59562b648698d7f061ba0b26a2a4b15fad4f7b3cb89f59dab47a3b35c29996c7fe493062c95a9c3fe9fd6f0d14d3b1cd7ded63b6cfca76b8db1696a7f574f0", 0x3f}, {&(0x7f0000001780)="cb285c3eed655c2a5e38875bf971c8bfdd97af3e63e4c4fa9599b01d10c621e68d76dcbdc810c75873cefbe0aa2e085c878b8030c044ec1812f33aa9a78c05aee7e2c596998993452e06a18c90cda6aff007ec7e45a31e3df9ecd431b1f330c933790380e7ce522d5765e3ce2c7b7fadff708f86724675ed990e6705af0a436e24bc053c", 0x84}, {&(0x7f0000001840)="5c15aa0b9d11a328cff1835561a93c2ac1778c9736669aae4bdad6cdb2dc4411871413600fbb3256f5f6d61dbf30adc23e773302c0ff3ee0c43a8b1262e19285cae3e2a47d1c8ebfb0abfd41285bb591768ba21561f3d036b269c6608aeb6f1b5f396ed8568b057f473b7d0cd05027f6c3be66c9ec378ee2d3395670d8c08d4518b57eb7f68f9f30ed1dfd9e3dbb531b13a9e92756aa", 0x96}, {&(0x7f0000001900)="0e3d5cf09ba0948f57c1417690c76359e75b9f99be3733bc9a04f9455180a212f047423ff1e3ee1a49f4da27d8157a7c99a5dcd35dbeb5504b736183ecb327eadb3e8936887cbd777ca71ac5b8c880af85d6352f22ec72e54aa52a8ba1204e38aa31f5dcdc38403afbb7970cea06e11ea2dd20f5f53af5be73dc5ba4262e9c114a0217716df0e026e4bd8eec8cfb8ece0d86a3d41550fabf719901d34f", 0x9d}], 0x5, &(0x7f0000001c40)=[@sndrcv={0x30, 0x84, 0x1, {0x7, 0x7, 0x8000, 0x9, 0xfffffffffffffff7, 0xff, 0xaffa, 0x0, r19}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x820b, 0xc2, 0x401, r20}}, @sndrcv={0x30, 0x84, 0x1, {0x3ff, 0x4, 0x204, 0x1, 0x8001, 0xffffffff, 0x1ff, 0x2, r21}}, @init={0x18, 0x84, 0x0, {0xd9d, 0x9, 0x4, 0x1000}}], 0xc0, 0x880}], 0x4, 0x4) [ 478.943306] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 478.955139] syz-executor6 cpuset=syz6 mems_allowed=0 [ 478.960335] CPU: 1 PID: 28285 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 478.967180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.976536] Call Trace: [ 478.979132] dump_stack+0x1b9/0x29f [ 478.982770] ? arch_local_irq_restore+0x52/0x52 [ 478.987450] ? kasan_check_read+0x11/0x20 2018/04/06 06:13:15 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x8848000000000000]}) 2018/04/06 06:13:15 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:15 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x2000000, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) [ 478.991609] warn_alloc.cold.119+0xb2/0x1b8 [ 478.995948] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 479.000795] ? trace_hardirqs_on+0xd/0x10 [ 479.004956] ? _raw_spin_unlock_irq+0x27/0x70 [ 479.009460] ? finish_task_switch+0x1ca/0x820 [ 479.013982] ? lock_repin_lock+0x410/0x410 [ 479.018237] __vmalloc_node_range+0x45e/0x720 [ 479.022751] ? graph_lock+0x170/0x170 [ 479.026567] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 479.031420] __vmalloc_node_flags_caller+0x50/0x60 [ 479.036361] ? kvm_arch_create_memslot+0xa3/0x4e0 2018/04/06 06:13:15 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x88caffff00000000]}) 2018/04/06 06:13:15 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:15 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x300, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) [ 479.041216] kvmalloc_node+0xde/0x100 [ 479.045033] kvm_arch_create_memslot+0xa3/0x4e0 [ 479.049721] __kvm_set_memory_region+0x1d1b/0x2e50 [ 479.054674] ? kvm_vcpu_block+0x1050/0x1050 [ 479.059009] ? zap_class+0x720/0x720 [ 479.062726] ? check_same_owner+0x320/0x320 [ 479.067056] ? rcu_note_context_switch+0x710/0x710 [ 479.071984] ? lock_acquire+0x1dc/0x520 [ 479.075967] ? graph_lock+0x170/0x170 [ 479.079773] ? __might_sleep+0x95/0x190 [ 479.083758] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 479.089306] ? futex_wait_queue_me+0x559/0x820 [ 479.093898] ? refill_pi_state_cache.part.7+0x300/0x300 [ 479.099277] ? find_held_lock+0x36/0x1c0 [ 479.103359] ? lock_downgrade+0x8e0/0x8e0 [ 479.107550] kvm_set_memory_region+0x2e/0x50 [ 479.111968] kvm_vm_ioctl+0x668/0x1d90 [ 479.115866] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 479.120974] ? futex_wake+0x2f6/0x750 [ 479.124784] ? kvm_set_memory_region+0x50/0x50 [ 479.129376] ? get_futex_key+0x1e90/0x1e90 [ 479.133626] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 479.138652] ? perf_trace_lock+0xd6/0x900 [ 479.142808] ? zap_class+0x720/0x720 [ 479.146522] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 479.151713] ? do_futex+0x249/0x27d0 [ 479.155434] ? native_flush_tlb_others+0x690/0x690 [ 479.160370] ? graph_lock+0x170/0x170 [ 479.164175] ? check_same_owner+0x320/0x320 [ 479.168508] ? exit_robust_list+0x290/0x290 [ 479.172834] ? find_held_lock+0x36/0x1c0 [ 479.176913] ? lock_downgrade+0x8e0/0x8e0 [ 479.181082] ? rcu_is_watching+0x85/0x140 [ 479.185239] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 479.190441] ? __fget+0x40c/0x650 [ 479.193906] ? expand_files.part.8+0x9a0/0x9a0 [ 479.198496] ? lock_downgrade+0x8e0/0x8e0 [ 479.202652] ? __split_vma+0x5ac/0x7f0 [ 479.206554] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 479.212098] ? vma_set_page_prot+0x183/0x260 [ 479.216518] ? kvm_set_memory_region+0x50/0x50 [ 479.221106] do_vfs_ioctl+0x1cf/0x1650 [ 479.225004] ? ioctl_preallocate+0x2e0/0x2e0 [ 479.229420] ? fget_raw+0x20/0x20 [ 479.232890] ? SyS_futex+0x3a4/0x56d [ 479.236611] ? do_futex+0x27d0/0x27d0 [ 479.240403] ? security_file_ioctl+0x9b/0xd0 [ 479.244800] ksys_ioctl+0xa9/0xd0 [ 479.248246] SyS_ioctl+0x24/0x30 [ 479.251598] ? ksys_ioctl+0xd0/0xd0 [ 479.255212] do_syscall_64+0x29e/0x9d0 [ 479.259082] ? vmalloc_sync_all+0x30/0x30 [ 479.263214] ? _raw_spin_unlock_irq+0x27/0x70 [ 479.267692] ? finish_task_switch+0x1ca/0x820 [ 479.272173] ? syscall_return_slowpath+0x5c0/0x5c0 [ 479.277087] ? syscall_return_slowpath+0x30f/0x5c0 [ 479.282007] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 479.287362] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 479.292193] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 479.297367] RIP: 0033:0x4552d9 [ 479.300541] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 479.308233] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 479.315484] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 479.322734] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 479.329985] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 479.337236] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 479.344693] warn_alloc_show_mem: 1 callbacks suppressed [ 479.344701] Mem-Info: [ 479.352581] active_anon:133371 inactive_anon:78 isolated_anon:0 [ 479.352581] active_file:22877 inactive_file:12132 isolated_file:0 [ 479.352581] unevictable:0 dirty:181 writeback:0 unstable:0 [ 479.352581] slab_reclaimable:12421 slab_unreclaimable:100716 [ 479.352581] mapped:73963 shmem:86 pagetables:1064 bounce:0 [ 479.352581] free:1250903 free_pcp:461 free_cma:0 [ 479.386434] Node 0 active_anon:529208kB inactive_anon:312kB active_file:91508kB inactive_file:48528kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295752kB dirty:724kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 380928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 479.414600] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 479.440777] lowmem_reserve[]: 0 2833 6338 6338 [ 479.445422] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:920kB local_pcp:704kB free_cma:0kB [ 479.473182] lowmem_reserve[]: 0 0 3505 3505 [ 479.477587] Node 0 Normal free:2088296kB min:37284kB low:46604kB high:55924kB active_anon:529208kB inactive_anon:312kB active_file:91508kB inactive_file:48528kB unevictable:0kB writepending:772kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5440kB pagetables:4108kB bounce:0kB free_pcp:1092kB local_pcp:416kB free_cma:0kB [ 479.507496] lowmem_reserve[]: 0 0 0 0 [ 479.511357] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 479.525065] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 479.540971] Node 0 Normal: 272*4kB (UME) 986*8kB (UME) 1628*16kB (UME) 918*32kB (UME) 497*64kB (UME) 224*128kB (UME) 115*256kB (UME) 73*512kB (UM) 36*1024kB (UM) 36*2048kB (UME) 436*4096kB (UM) = 2088144kB [ 479.559619] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 479.568239] 35093 total pagecache pages [ 479.572260] 0 pages in swap cache [ 479.575733] Swap cache stats: add 0, delete 0, find 0/0 [ 479.581148] Free swap = 0kB [ 479.584185] Total swap = 0kB [ 479.587253] 1965969 pages RAM [ 479.590379] 0 pages HighMem/MovableOnly [ 479.594388] 338524 pages reserved [ 479.645894] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 479.657735] syz-executor6 cpuset=syz6 mems_allowed=0 [ 479.662953] CPU: 0 PID: 28285 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 479.669808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.679170] Call Trace: [ 479.681782] dump_stack+0x1b9/0x29f [ 479.685441] ? arch_local_irq_restore+0x52/0x52 [ 479.690139] ? __free_pages+0x13e/0x180 [ 479.694148] warn_alloc.cold.119+0xb2/0x1b8 [ 479.698490] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 479.703335] ? kasan_check_write+0x14/0x20 [ 479.707579] ? lock_repin_lock+0x410/0x410 [ 479.711815] __vmalloc_node_range+0x45e/0x720 [ 479.716307] ? graph_lock+0x170/0x170 [ 479.720103] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 479.724936] __vmalloc_node_flags_caller+0x50/0x60 [ 479.729856] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 479.734696] kvmalloc_node+0xde/0x100 [ 479.738492] kvm_arch_create_memslot+0xa3/0x4e0 [ 479.743167] __kvm_set_memory_region+0x1d1b/0x2e50 [ 479.748104] ? kvm_vcpu_block+0x1050/0x1050 [ 479.752426] ? zap_class+0x720/0x720 [ 479.756130] ? check_same_owner+0x320/0x320 [ 479.760444] ? rcu_note_context_switch+0x710/0x710 [ 479.765363] ? lock_acquire+0x1dc/0x520 [ 479.769334] ? graph_lock+0x170/0x170 [ 479.773127] ? __might_sleep+0x95/0x190 [ 479.777107] ? refill_pi_state_cache.part.7+0x300/0x300 [ 479.782468] ? find_held_lock+0x36/0x1c0 [ 479.786532] ? lock_downgrade+0x8e0/0x8e0 [ 479.790708] kvm_set_memory_region+0x2e/0x50 [ 479.795112] kvm_vm_ioctl+0x668/0x1d90 [ 479.798991] ? perf_tp_event+0xc30/0xc30 [ 479.803048] ? __perf_event_task_sched_in+0x247/0xb80 [ 479.808228] ? kvm_set_memory_region+0x50/0x50 [ 479.812807] ? memset+0x31/0x40 [ 479.816081] ? perf_trace_lock+0x495/0x900 [ 479.820314] ? zap_class+0x720/0x720 [ 479.824026] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 479.829215] ? kasan_check_read+0x11/0x20 [ 479.833357] ? graph_lock+0x170/0x170 [ 479.837148] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 479.841730] ? exit_robust_list+0x290/0x290 [ 479.846049] ? find_held_lock+0x36/0x1c0 [ 479.850113] ? lock_downgrade+0x8e0/0x8e0 [ 479.854260] ? rcu_is_watching+0x85/0x140 [ 479.858404] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 479.863596] ? __fget+0x40c/0x650 [ 479.867050] ? expand_files.part.8+0x9a0/0x9a0 [ 479.871620] ? lock_downgrade+0x8e0/0x8e0 [ 479.875761] ? lock_release+0xa10/0xa10 [ 479.879727] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 479.885261] ? kvm_set_memory_region+0x50/0x50 [ 479.889832] do_vfs_ioctl+0x1cf/0x1650 [ 479.893715] ? ioctl_preallocate+0x2e0/0x2e0 [ 479.898115] ? fget_raw+0x20/0x20 [ 479.901567] ? security_file_mprotect+0x9b/0xd0 [ 479.906228] ? SyS_futex+0x3a4/0x56d [ 479.909939] ? do_futex+0x27d0/0x27d0 [ 479.913728] ? security_file_ioctl+0x9b/0xd0 [ 479.918128] ksys_ioctl+0xa9/0xd0 [ 479.921578] SyS_ioctl+0x24/0x30 [ 479.924932] ? ksys_ioctl+0xd0/0xd0 [ 479.928552] do_syscall_64+0x29e/0x9d0 [ 479.932428] ? vmalloc_sync_all+0x30/0x30 [ 479.936567] ? _raw_spin_unlock_irq+0x27/0x70 [ 479.941055] ? finish_task_switch+0x1ca/0x820 [ 479.945544] ? syscall_return_slowpath+0x5c0/0x5c0 [ 479.950465] ? syscall_return_slowpath+0x30f/0x5c0 [ 479.955389] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 479.960752] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 479.965593] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 479.970770] RIP: 0033:0x4552d9 [ 479.973946] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 479.981646] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 479.988904] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 479.996163] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 480.003421] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 480.010677] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 2018/04/06 06:13:16 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x6000000000000000, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:13:16 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x1c000000]}) 2018/04/06 06:13:16 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:16 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x8847, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x41, 0x0, "babba0ee85f0580bae4a2c66e156052135c4ee5284a754727cb451ac5ba0ede91b9972b754238c3666b751d229b3ad88fe66143faa6a88b027"}, &(0x7f0000000240), 0x1400) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)=""/136) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000180), 0xffffffffffffff9f, 0x0, &(0x7f0000000200)}) 2018/04/06 06:13:16 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000005fec)={0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) pkey_mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000005fe0)={0x0, 0x0, 0x1080020, 0x2000, &(0x7f0000008000/0x2000)=nil}) 2018/04/06 06:13:16 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) r2 = accept$inet(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, @remote}, &(0x7f0000000200)=0x10) r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x8) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x3, 0x2, 0x10000}}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x200, 0x40) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x200000, 0x40) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x3000, 0xc000}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x2, r4}) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000000c0)=0x670, 0x4) 2018/04/06 06:13:16 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0xfffffffffffffffe) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001940)='/dev/ppp\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001980)={0x0, 0x86, "8671bddb6709cf1fe316049b320f3b11bf4285185658a9b2aa54023ea9a566d43e5c538b0e97310c62603ee90805a9e74e82b89c02735c75168111bc7df249fd040af4656637bc64d102935284332d06a972d9097ab743b387d191452277fd35ad0a4920a7973e3804c6a70e5f3f9ed672ae5afbb7c6212d3583e7300e2c8ca85e1ea342df10"}, &(0x7f0000001a40)=0x8e) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001a80)={r1, 0xffffffff, 0xfffffffffffffffa, 0x5, 0x6, 0x2}, 0x14) futex(&(0x7f000000cffc), 0xa, 0x0, &(0x7f00006f7000)={0xfffffffffffffffc, 0x100000000000000}, &(0x7f0000000080), 0x20) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x80800) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) [ 480.147481] binder: 28354:28355 unknown command 39 2018/04/06 06:13:16 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0xff00, 0x6, "ecd103", 0x44, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f00000000c0)) 2018/04/06 06:13:16 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:16 executing program 1: r0 = accept$ax25(0xffffffffffffff9c, &(0x7f0000000140), &(0x7f0000000180)=0x10) getsockopt$ax25_buf(r0, 0x101, 0x19, &(0x7f0000000300)=""/17, &(0x7f0000000340)=0x11) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x101000, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) write$cgroup_type(r3, &(0x7f0000000000)='Ehreaded\x00', 0x1) set_robust_list(&(0x7f0000000200)={&(0x7f0000000080), 0x3ff, &(0x7f0000000100)={&(0x7f00000000c0)}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000240)={0x800, 0x8, 0x5, 'queue1\x00', 0x5}) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000440), 0x4) 2018/04/06 06:13:16 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0xfffffffd]}) [ 480.172116] binder: 28354:28355 ioctl c0306201 200002c0 returned -22 [ 480.233799] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 480.245721] syz-executor6 cpuset=syz6 mems_allowed=0 [ 480.250964] CPU: 0 PID: 28358 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 480.257824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.267190] Call Trace: [ 480.269799] dump_stack+0x1b9/0x29f [ 480.273459] ? arch_local_irq_restore+0x52/0x52 [ 480.278160] ? kasan_check_read+0x11/0x20 [ 480.282338] warn_alloc.cold.119+0xb2/0x1b8 [ 480.286682] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 480.291551] ? finish_task_switch+0x1ca/0x820 [ 480.296085] ? lock_repin_lock+0x410/0x410 [ 480.300352] __vmalloc_node_range+0x45e/0x720 [ 480.304879] ? graph_lock+0x170/0x170 [ 480.308716] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 480.313582] __vmalloc_node_flags_caller+0x50/0x60 [ 480.318539] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 480.323414] kvmalloc_node+0xde/0x100 [ 480.327241] kvm_arch_create_memslot+0xa3/0x4e0 [ 480.331953] __kvm_set_memory_region+0x1d1b/0x2e50 [ 480.336924] ? kvm_vcpu_block+0x1050/0x1050 [ 480.341271] ? zap_class+0x720/0x720 [ 480.345003] ? check_same_owner+0x320/0x320 [ 480.349352] ? rcu_note_context_switch+0x710/0x710 [ 480.354298] ? lock_acquire+0x1dc/0x520 [ 480.358297] ? graph_lock+0x170/0x170 [ 480.362113] ? __might_sleep+0x95/0x190 [ 480.366121] ? refill_pi_state_cache.part.7+0x300/0x300 [ 480.371511] ? find_held_lock+0x36/0x1c0 [ 480.375602] ? lock_downgrade+0x8e0/0x8e0 [ 480.379822] kvm_set_memory_region+0x2e/0x50 2018/04/06 06:13:16 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/06 06:13:16 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) socketpair$inet(0x2, 0x806, 0x10001, &(0x7f0000000100)) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x900, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000080)={@local, @loopback, @multicast1}, &(0x7f00000000c0)=0xc) write$cgroup_type(r2, &(0x7f0000000240)='Ehreaded\x00', 0x9) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x0, 0xffffffff80000001, 0x3, 0xff, 0x0, 0xdd6, 0x1, 0xffffffffffffffff, 0x0}, &(0x7f0000000280)=0x20) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000180)={r3, 0x7}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000380)=0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r4, 0x1}, 0x8) 2018/04/06 06:13:16 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0xfdffffff00000000]}) 2018/04/06 06:13:16 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) [ 480.384252] kvm_vm_ioctl+0x668/0x1d90 [ 480.388156] ? perf_tp_event+0xc30/0xc30 [ 480.392240] ? kvm_set_memory_region+0x50/0x50 [ 480.396843] ? memset+0x31/0x40 [ 480.400148] ? perf_trace_lock+0x495/0x900 [ 480.404422] ? zap_class+0x720/0x720 [ 480.408153] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 480.413366] ? native_flush_tlb_others+0x690/0x690 [ 480.418315] ? graph_lock+0x170/0x170 [ 480.422133] ? check_same_owner+0x320/0x320 [ 480.426485] ? exit_robust_list+0x290/0x290 [ 480.430826] ? find_held_lock+0x36/0x1c0 2018/04/06 06:13:16 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x1803000000000000, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000001c0)=0x10) 2018/04/06 06:13:16 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x1100]}) 2018/04/06 06:13:16 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="feff00000059ba1a00", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000000)) write$cgroup_type(r1, &(0x7f0000000080)='Ehreaded\x00', 0x9) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) 2018/04/06 06:13:16 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) bind$can_raw(r0, &(0x7f0000000ff0)={0x1d}, 0x10) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000040)) close(r0) 2018/04/06 06:13:16 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d0000360000000002dd0700020000001f5f08c908000100020273730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) [ 480.434916] ? lock_downgrade+0x8e0/0x8e0 [ 480.439094] ? rcu_is_watching+0x85/0x140 [ 480.443260] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 480.448484] ? __fget+0x40c/0x650 [ 480.451967] ? expand_files.part.8+0x9a0/0x9a0 [ 480.456557] ? lock_downgrade+0x8e0/0x8e0 [ 480.460728] ? __split_vma+0x5ac/0x7f0 [ 480.464638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 480.470713] ? vma_set_page_prot+0x183/0x260 [ 480.475142] ? kvm_set_memory_region+0x50/0x50 [ 480.479745] do_vfs_ioctl+0x1cf/0x1650 [ 480.483661] ? ioctl_preallocate+0x2e0/0x2e0 [ 480.488085] ? fget_raw+0x20/0x20 [ 480.491562] ? SyS_futex+0x3a4/0x56d [ 480.495294] ? do_futex+0x27d0/0x27d0 [ 480.499113] ? security_file_ioctl+0x9b/0xd0 [ 480.503546] ksys_ioctl+0xa9/0xd0 [ 480.507018] SyS_ioctl+0x24/0x30 [ 480.510403] ? ksys_ioctl+0xd0/0xd0 [ 480.514049] do_syscall_64+0x29e/0x9d0 [ 480.517945] ? vmalloc_sync_all+0x30/0x30 [ 480.522107] ? _raw_spin_unlock_irq+0x27/0x70 [ 480.526616] ? finish_task_switch+0x1ca/0x820 [ 480.531128] ? syscall_return_slowpath+0x5c0/0x5c0 [ 480.536074] ? syscall_return_slowpath+0x30f/0x5c0 [ 480.541028] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 480.546424] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 480.551300] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 480.556500] RIP: 0033:0x4552d9 [ 480.559696] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.567420] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 480.574700] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000014 [ 480.581974] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 480.589252] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 480.596534] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 480.604195] warn_alloc_show_mem: 1 callbacks suppressed [ 480.604201] Mem-Info: [ 480.612115] active_anon:102275 inactive_anon:78 isolated_anon:0 [ 480.612115] active_file:22880 inactive_file:12153 isolated_file:0 [ 480.612115] unevictable:0 dirty:193 writeback:0 unstable:0 [ 480.612115] slab_reclaimable:12442 slab_unreclaimable:100857 [ 480.612115] mapped:73963 shmem:86 pagetables:1150 bounce:0 [ 480.612115] free:1281643 free_pcp:473 free_cma:0 [ 480.646005] Node 0 active_anon:407000kB inactive_anon:312kB active_file:91520kB inactive_file:48612kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:295852kB dirty:772kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 141312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 480.674215] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 480.700441] lowmem_reserve[]: 0 2833 6338 6338 [ 480.705154] Node 0 DMA32 free:2903144kB min:30132kB low:37664kB high:45196kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2904068kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:924kB local_pcp:216kB free_cma:0kB [ 480.732940] lowmem_reserve[]: 0 0 3505 3505 [ 480.737414] Node 0 Normal free:2212460kB min:37284kB low:46604kB high:55924kB active_anon:404880kB inactive_anon:312kB active_file:91520kB inactive_file:48612kB unevictable:0kB writepending:772kB present:4718592kB managed:3589804kB mlocked:0kB kernel_stack:5504kB pagetables:4304kB bounce:0kB free_pcp:1044kB local_pcp:456kB free_cma:0kB [ 480.767368] lowmem_reserve[]: 0 0 0 0 [ 480.771269] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 480.785079] Node 0 DMA32: 4*4kB (UM) 5*8kB (UM) 1*16kB (M) 5*32kB (UM) 2*64kB (M) 4*128kB (M) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 706*4096kB (M) = 2903144kB [ 480.801004] Node 0 Normal: 2663*4kB (UME) 2663*8kB (UME) 2986*16kB (UME) 1795*32kB (UME) 821*64kB (UME) 252*128kB (UME) 117*256kB (UME) 74*512kB (UM) 36*1024kB (UM) 37*2048kB (UME) 442*4096kB (UM) = 2212884kB [ 480.819985] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 480.828605] 35117 total pagecache pages [ 480.832648] 0 pages in swap cache [ 480.836141] Swap cache stats: add 0, delete 0, find 0/0 [ 480.841529] Free swap = 0kB [ 480.844599] Total swap = 0kB [ 480.847640] 1965969 pages RAM [ 480.850771] 0 pages HighMem/MovableOnly [ 480.854770] 338524 pages reserved [ 480.881600] syz-executor6: vmalloc: allocation failure: 8589934592 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 480.893473] syz-executor6 cpuset=syz6 mems_allowed=0 [ 480.898657] CPU: 0 PID: 28358 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 480.905503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.914845] Call Trace: [ 480.917426] dump_stack+0x1b9/0x29f [ 480.921064] ? arch_local_irq_restore+0x52/0x52 [ 480.925746] ? kasan_check_read+0x11/0x20 [ 480.929920] warn_alloc.cold.119+0xb2/0x1b8 [ 480.934252] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 480.939095] ? kasan_check_write+0x14/0x20 [ 480.943370] ? lock_repin_lock+0x410/0x410 [ 480.947628] __vmalloc_node_range+0x45e/0x720 [ 480.952122] ? graph_lock+0x170/0x170 [ 480.955940] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 480.960781] __vmalloc_node_flags_caller+0x50/0x60 [ 480.965718] ? kvm_arch_create_memslot+0xa3/0x4e0 [ 480.970572] kvmalloc_node+0xde/0x100 [ 480.974409] kvm_arch_create_memslot+0xa3/0x4e0 [ 480.979122] __kvm_set_memory_region+0x1d1b/0x2e50 [ 480.984096] ? kvm_vcpu_block+0x1050/0x1050 [ 480.988440] ? zap_class+0x720/0x720 [ 480.992171] ? check_same_owner+0x320/0x320 [ 480.996519] ? rcu_note_context_switch+0x710/0x710 [ 481.001468] ? lock_acquire+0x1dc/0x520 [ 481.005471] ? graph_lock+0x170/0x170 [ 481.009289] ? __might_sleep+0x95/0x190 [ 481.013300] ? refill_pi_state_cache.part.7+0x300/0x300 [ 481.018681] ? find_held_lock+0x36/0x1c0 [ 481.022747] ? lock_downgrade+0x8e0/0x8e0 [ 481.026923] kvm_set_memory_region+0x2e/0x50 [ 481.031321] kvm_vm_ioctl+0x668/0x1d90 [ 481.035195] ? perf_tp_event+0xc30/0xc30 [ 481.039244] ? __perf_event_task_sched_in+0x247/0xb80 [ 481.044423] ? kvm_set_memory_region+0x50/0x50 [ 481.048994] ? memset+0x31/0x40 [ 481.052270] ? perf_trace_lock+0x495/0x900 [ 481.056502] ? zap_class+0x720/0x720 [ 481.060206] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 481.065387] ? kasan_check_read+0x11/0x20 [ 481.069525] ? graph_lock+0x170/0x170 [ 481.073314] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 481.077894] ? exit_robust_list+0x290/0x290 [ 481.082204] ? find_held_lock+0x36/0x1c0 [ 481.086259] ? lock_downgrade+0x8e0/0x8e0 [ 481.090400] ? rcu_is_watching+0x85/0x140 [ 481.094536] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 481.099731] ? __fget+0x40c/0x650 [ 481.103176] ? expand_files.part.8+0x9a0/0x9a0 [ 481.107742] ? lock_downgrade+0x8e0/0x8e0 [ 481.111878] ? lock_release+0xa10/0xa10 [ 481.115846] ? kvm_set_memory_region+0x50/0x50 [ 481.120417] do_vfs_ioctl+0x1cf/0x1650 [ 481.124295] ? ioctl_preallocate+0x2e0/0x2e0 [ 481.128692] ? fget_raw+0x20/0x20 [ 481.132153] ? security_file_mprotect+0x9b/0xd0 [ 481.136837] ? SyS_futex+0x3a4/0x56d [ 481.140543] ? do_futex+0x27d0/0x27d0 [ 481.144335] ? security_file_ioctl+0x9b/0xd0 [ 481.148736] ksys_ioctl+0xa9/0xd0 [ 481.152177] SyS_ioctl+0x24/0x30 [ 481.155531] ? ksys_ioctl+0xd0/0xd0 [ 481.159148] do_syscall_64+0x29e/0x9d0 [ 481.163030] ? vmalloc_sync_all+0x30/0x30 [ 481.167172] ? _raw_spin_unlock_irq+0x27/0x70 [ 481.171656] ? finish_task_switch+0x1ca/0x820 [ 481.176154] ? syscall_return_slowpath+0x5c0/0x5c0 [ 481.181100] ? syscall_return_slowpath+0x30f/0x5c0 [ 481.186043] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 481.191410] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 481.196247] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 481.201426] RIP: 0033:0x4552d9 [ 481.204603] RSP: 002b:00007f735425fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 481.212302] RAX: ffffffffffffffda RBX: 00007f73542606d4 RCX: 00000000004552d9 [ 481.219557] RDX: 0000000020005fe0 RSI: 000000004020ae46 RDI: 0000000000000017 [ 481.226815] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 481.234079] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 481.241335] R13: 000000000000026d R14: 00000000006f6ad8 R15: 0000000000000000 [ 485.471154] unregister_netdevice: waiting for lo to become free. Usage count = 3 [ 495.719088] unregister_netdevice: waiting for lo to become free. Usage count = 3 [ 505.967145] unregister_netdevice: waiting for lo to become free. Usage count = 3 [ 516.215142] unregister_netdevice: waiting for lo to become free. Usage count = 3 [ 526.463135] unregister_netdevice: waiting for lo to become free. Usage count = 3 [ 536.711153] unregister_netdevice: waiting for lo to become free. Usage count = 3 [ 546.959139] unregister_netdevice: waiting for lo to become free. Usage count = 3 [ 557.207149] unregister_netdevice: waiting for lo to become free. Usage count = 3 [ 567.463126] unregister_netdevice: waiting for lo to become free. Usage count = 3 [ 577.711126] unregister_netdevice: waiting for lo to become free. Usage count = 3 [ 587.959130] unregister_netdevice: waiting for lo to become free. Usage count = 3 [ 598.207154] unregister_netdevice: waiting for lo to become free. Usage count = 3 [ 608.455164] unregister_netdevice: waiting for lo to become free. Usage count = 3 [ 615.391240] INFO: task syz-executor5:28396 blocked for more than 120 seconds. [ 615.398606] Not tainted 4.16.0+ #2 [ 615.402723] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 615.410739] syz-executor5 D25272 28396 4548 0x00000004 [ 615.416452] Call Trace: [ 615.419097] __schedule+0x807/0x1e40 [ 615.422873] ? unlock_page_memcg+0x2c/0x40 [ 615.427162] ? __sched_text_start+0x8/0x8 [ 615.431373] ? print_usage_bug+0xc0/0xc0 [ 615.435483] ? graph_lock+0x170/0x170 [ 615.439351] ? graph_lock+0x170/0x170 [ 615.443177] ? zap_class+0x720/0x720 [ 615.446912] ? __lock_acquire+0x7f5/0x5130 [ 615.451160] ? print_usage_bug+0xc0/0xc0 [ 615.455246] schedule+0xef/0x430 [ 615.458642] ? lock_downgrade+0x8e0/0x8e0 [ 615.462814] ? __schedule+0x1e40/0x1e40 [ 615.466813] ? mark_held_locks+0xc9/0x160 [ 615.470981] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 615.475580] ? _raw_spin_unlock_irq+0x27/0x70 [ 615.480092] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 615.485117] __rwsem_down_write_failed_common+0x919/0x15d0 [ 615.490757] ? lock_release+0xa10/0xa10 [ 615.494753] ? rwsem_spin_on_owner+0x7b0/0x7b0 [ 615.499371] ? zap_class+0x720/0x720 [ 615.503091] ? debug_check_no_locks_freed+0x310/0x310 [ 615.508301] ? kasan_check_write+0x14/0x20 [ 615.512572] ? debug_check_no_locks_freed+0x310/0x310 [ 615.517784] ? zap_class+0x720/0x720 [ 615.521513] ? mutex_trylock+0x2a0/0x2a0 [ 615.525601] ? find_held_lock+0x36/0x1c0 [ 615.529699] ? find_held_lock+0x36/0x1c0 [ 615.533804] ? lock_downgrade+0x8e0/0x8e0 [ 615.537966] ? graph_lock+0x170/0x170 [ 615.541783] ? find_next_bit+0x104/0x130 [ 615.545861] ? pcpu_next_unpop+0x83/0xf0 [ 615.549938] ? kasan_check_write+0x14/0x20 [ 615.554204] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 615.559155] ? wait_for_completion+0x870/0x870 [ 615.563768] ? lock_downgrade+0x8e0/0x8e0 [ 615.567929] ? register_netdevice_notifier+0xb4/0x8f0 [ 615.573305] ? rcu_is_watching+0x85/0x140 [ 615.577482] ? lock_release+0xa10/0xa10 [ 615.581475] ? check_same_owner+0x320/0x320 [ 615.585818] rwsem_down_write_failed+0xe/0x10 [ 615.590336] ? rwsem_down_write_failed+0xe/0x10 [ 615.595028] call_rwsem_down_write_failed+0x17/0x30 [ 615.600055] down_write+0xa2/0x120 [ 615.603600] ? register_netdevice_notifier+0xb4/0x8f0 [ 615.608797] ? down_read+0x1b0/0x1b0 [ 615.612514] ? pcpu_balance_workfn+0x16d0/0x16d0 [ 615.617279] ? lockdep_init_map+0x9/0x10 [ 615.621362] register_netdevice_notifier+0xb4/0x8f0 [ 615.626387] ? __rwlock_init+0x1c/0x140 [ 615.630377] ? __dev_close_many+0x360/0x360 [ 615.634717] ? __lockdep_init_map+0x105/0x590 [ 615.639215] ? __lockdep_init_map+0x105/0x590 [ 615.643734] ? kasan_check_write+0x14/0x20 [ 615.647979] ? sock_init_data+0x983/0xd70 [ 615.652154] ? sk_stop_timer+0x50/0x50 [ 615.656049] ? can_get_proto+0x245/0x380 [ 615.660123] raw_init+0x2a3/0x330 [ 615.663586] ? can_init_proc.cold.5+0x19/0x19 [ 615.668095] can_create+0x28a/0x4b0 [ 615.671742] __sock_create+0x526/0x920 [ 615.675650] ? kernel_sock_ip_overhead+0x570/0x570 [ 615.680596] ? fget_raw+0x20/0x20 [ 615.684066] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 615.689620] __sys_socket+0x100/0x250 [ 615.693433] ? move_addr_to_kernel+0x70/0x70 [ 615.697848] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 615.703411] ? fput+0x130/0x1a0 [ 615.706700] ? ksys_ioctl+0x81/0xd0 [ 615.710344] SyS_socket+0x24/0x30 [ 615.713857] ? __sys_socket+0x250/0x250 [ 615.717844] do_syscall_64+0x29e/0x9d0 [ 615.721739] ? vmalloc_sync_all+0x30/0x30 [ 615.725900] ? _raw_spin_unlock_irq+0x27/0x70 [ 615.730397] ? finish_task_switch+0x1ca/0x820 [ 615.734902] ? syscall_return_slowpath+0x5c0/0x5c0 [ 615.739835] ? syscall_return_slowpath+0x30f/0x5c0 [ 615.744775] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 615.750152] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 615.755028] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 615.760220] RIP: 0033:0x4552d9 [ 615.763425] RSP: 002b:00007f5d16d39c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 615.771135] RAX: ffffffffffffffda RBX: 00007f5d16d3a6d4 RCX: 00000000004552d9 [ 615.778429] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 615.785708] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 615.792989] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 615.800272] R13: 000000000000060f R14: 00000000006fc208 R15: 0000000000000000 [ 615.807565] [ 615.807565] Showing all locks held in the system: [ 615.813914] 2 locks held by khungtaskd/881: [ 615.818488] #0: 000000003f137e9c (rcu_read_lock){....}, at: watchdog+0x1ff/0xf60 [ 615.826146] #1: 0000000047679c5c (tasklist_lock){.+.+}, at: debug_show_all_locks+0xde/0x34a [ 615.834788] 2 locks held by getty/4470: [ 615.838758] #0: 00000000fb471b4f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 615.847033] #1: 00000000e91d2bc9 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 615.855905] 2 locks held by getty/4471: [ 615.859885] #0: 000000004950c298 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 615.868144] #1: 0000000040be5ea7 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 615.877027] 2 locks held by getty/4472: [ 615.880997] #0: 0000000096155d0f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 615.889265] #1: 000000003d4784db (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 615.898135] 2 locks held by getty/4473: [ 615.902106] #0: 0000000039676b26 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 615.910374] #1: 000000000b67b226 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 615.919250] 2 locks held by getty/4474: [ 615.923238] #0: 000000000fa192c0 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 615.931503] #1: 00000000f7b541ee (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 615.940400] 2 locks held by getty/4475: [ 615.944396] #0: 0000000022ccc16b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 615.952689] #1: 00000000a8ade1b1 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 615.961586] 3 locks held by kworker/u4:6/10070: [ 615.966269] #0: 00000000cb9bac71 ((wq_completion)"%s""netns"){+.+.}, at: process_one_work+0xaef/0x1b50 [ 615.975848] #1: 00000000bc27a154 (net_cleanup_work){+.+.}, at: process_one_work+0xb46/0x1b50 [ 615.984550] #2: 000000000d61dd5e (pernet_ops_rwsem){++++}, at: cleanup_net+0x11a/0xb20 [ 615.992858] 2 locks held by getty/11520: [ 615.996951] #0: 00000000341e47d5 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 616.005323] #1: 0000000069715773 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 616.014339] 1 lock held by syz-executor5/28396: [ 616.019022] #0: 000000000d61dd5e (pernet_ops_rwsem){++++}, at: register_netdevice_notifier+0xb4/0x8f0 [ 616.028507] 1 lock held by syz-executor5/28416: [ 616.033204] #0: 000000000d61dd5e (pernet_ops_rwsem){++++}, at: register_netdevice_notifier+0xb4/0x8f0 [ 616.042679] [ 616.044308] ============================================= [ 616.044308] [ 616.051360] NMI backtrace for cpu 0 [ 616.055012] CPU: 0 PID: 881 Comm: khungtaskd Not tainted 4.16.0+ #2 [ 616.061394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.070726] Call Trace: [ 616.073302] dump_stack+0x1b9/0x29f [ 616.076910] ? arch_local_irq_restore+0x52/0x52 [ 616.081562] nmi_cpu_backtrace.cold.4+0x19/0xce [ 616.086211] ? lapic_can_unplug_cpu.cold.26+0x3f/0x3f [ 616.091386] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 616.096645] arch_trigger_cpumask_backtrace+0x14/0x20 [ 616.101819] watchdog+0xc10/0xf60 [ 616.105254] ? reset_hung_task_detector+0xb0/0xb0 [ 616.110080] ? __schedule+0x1e40/0x1e40 [ 616.114033] ? do_raw_spin_unlock+0x9e/0x2e0 [ 616.118422] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 616.122985] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 616.128073] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 616.133074] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 616.138601] ? __kthread_parkme+0x1b7/0x280 [ 616.142903] kthread+0x345/0x410 [ 616.146249] ? reset_hung_task_detector+0xb0/0xb0 [ 616.151066] ? kthread_bind+0x40/0x40 [ 616.154858] ret_from_fork+0x3a/0x50 [ 616.158621] Sending NMI from CPU 0 to CPUs 1: [ 616.163142] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0x6/0x10 [ 616.164129] Kernel panic - not syncing: hung_task: blocked tasks [ 616.177693] CPU: 0 PID: 881 Comm: khungtaskd Not tainted 4.16.0+ #2 [ 616.184075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.193408] Call Trace: [ 616.195979] dump_stack+0x1b9/0x29f [ 616.199587] ? arch_local_irq_restore+0x52/0x52 [ 616.204239] ? printk_safe_log_store+0x260/0x260 [ 616.208983] panic+0x22f/0x4de [ 616.212244] ? add_taint.cold.5+0x16/0x16 [ 616.216373] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 616.221891] ? nmi_trigger_cpumask_backtrace+0x13a/0x192 [ 616.227319] ? printk_safe_flush+0xd7/0x130 [ 616.231621] watchdog+0xc21/0xf60 [ 616.235061] ? reset_hung_task_detector+0xb0/0xb0 [ 616.239888] ? __schedule+0x1e40/0x1e40 [ 616.243845] ? do_raw_spin_unlock+0x9e/0x2e0 [ 616.248235] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 616.252800] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 616.257919] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 616.263023] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 616.268536] ? __kthread_parkme+0x1b7/0x280 [ 616.272834] kthread+0x345/0x410 [ 616.276179] ? reset_hung_task_detector+0xb0/0xb0 [ 616.281000] ? kthread_bind+0x40/0x40 [ 616.284779] ret_from_fork+0x3a/0x50 [ 616.288847] Dumping ftrace buffer: [ 616.292568] (ftrace buffer empty) [ 616.296259] Kernel Offset: disabled [ 616.299865] Rebooting in 86400 seconds..